Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer
File:                     2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer (raw, json)
Hash identifier:          AS0NX2yCvQ3WzZPbYRVQEDtm3VEpRexVIPS4SeH68jc=
Subject key identifier:   2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       617815D4A17DEAD76620E5C2BCE90E3D58921651
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 08:01:38 +0000
Certificate not after:    Thu 05 Mar 2026 08:06:38 +0000
Subordinate resources:    AS: 61767
                          IP: 200.77.180.0/22
                          IP: 2804:18fc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:78:15:d4:a1:7d:ea:d7:66:20:e5:c2:bc:e9:0e:3d:58:92:16:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 08:01:38 2025 GMT
            Not After : Mar  5 08:06:38 2026 GMT
        Subject: CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:2b:4b:cc:27:60:95:77:d0:ca:20:ae:26:
                    b8:dd:af:1a:35:83:c6:32:95:a1:f6:01:b0:f6:26:
                    77:51:f5:97:b1:1d:82:83:ab:39:a0:98:ec:6c:29:
                    72:8d:53:c9:2e:cf:1f:a5:6e:1a:7c:c1:4f:e4:a3:
                    67:03:f8:75:15:85:3b:b8:f8:88:bd:66:a8:24:69:
                    28:f8:e0:9f:2b:0a:31:6d:3d:b5:9d:54:a1:67:25:
                    2b:e3:0f:b9:fd:f9:7a:81:81:0a:32:08:a6:8f:1c:
                    7a:4b:e1:8a:66:f6:b7:e3:91:d4:09:a9:03:32:6d:
                    93:c5:b7:c4:9d:0f:c1:fc:d7:0d:34:24:e9:ae:40:
                    e3:35:43:49:57:0c:32:44:62:db:f9:39:26:40:30:
                    77:cf:23:02:c8:5c:05:8e:3f:80:cd:07:8f:03:e3:
                    22:5c:57:5c:ed:9a:38:68:c5:14:dd:ee:6a:1e:cc:
                    53:cf:90:dd:22:69:b3:ff:e3:ef:00:2e:1d:9e:32:
                    89:76:63:09:50:4e:10:9f:3c:01:42:fc:90:33:d4:
                    e6:b7:31:77:2d:64:65:e8:5e:67:37:63:b2:d0:7c:
                    65:c3:04:5a:a2:fb:a4:d7:e5:9a:10:01:76:f9:5f:
                    5b:be:a2:ce:68:8b:2a:02:7a:c9:96:84:df:ac:1f:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.180.0/22
                IPv6:
                  2804:18fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61767

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:0a:71:8c:d4:f5:fc:37:5d:ce:d8:b8:c5:5f:6c:23:ab:
         1f:d9:5e:2a:8a:63:5b:cf:95:a7:80:2d:9f:53:f2:cd:d4:52:
         20:3d:0f:a8:fb:a1:e2:30:77:04:4a:4c:8f:ba:34:e0:a0:b5:
         01:7f:90:17:36:55:22:23:50:f8:e0:e4:06:86:77:1b:1c:b8:
         ac:b3:76:57:0f:c0:a3:81:f7:b8:3c:d0:69:3f:f5:03:cc:4b:
         ba:5c:64:cb:fa:f5:b6:6a:8a:30:ca:39:e6:79:10:84:77:e3:
         12:be:5d:8d:3a:a3:7c:f4:19:9b:b4:69:84:58:7d:6b:28:e6:
         eb:0a:04:ca:88:c4:2d:42:fa:05:68:9c:47:8c:80:da:63:a3:
         1c:50:af:6b:4f:ae:40:8e:8b:30:95:44:f2:f5:7b:20:31:54:
         29:4f:98:78:33:e9:c1:8c:b6:54:86:17:64:b5:d0:4e:c0:29:
         0a:ed:c8:5e:59:ff:b0:65:a5:d4:de:bb:93:0f:04:95:6c:a2:
         f7:f7:cc:96:84:7e:55:9d:19:7a:22:9b:32:5b:72:91:55:e0:
         f4:16:df:96:cc:10:c0:a6:e7:44:0f:0d:ed:95:ba:28:ba:ee:
         0f:78:c8:37:e1:12:e3:aa:ac:74:5b:e3:9c:d8:93:38:06:f8:
         9f:ec:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:37 2025 by rpki-client