Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60533AB931656B07AD29D3D8F831806ABC87474A.cer
File:                     60533AB931656B07AD29D3D8F831806ABC87474A.cer (raw, json)
Hash identifier:          eoYffAjhaKB43Vn6pjnDKjC/cj6AgkWAvo2SZq+/bBY=
Subject key identifier:   60:53:3A:B9:31:65:6B:07:AD:29:D3:D8:F8:31:80:6A:BC:87:47:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B2211E6A4AD03162F8085998AF480F60C512D33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/0/60533AB931656B07AD29D3D8F831806ABC87474A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jan 2025 23:16:47 +0000
Certificate not after:    Tue 27 Jan 2026 23:21:47 +0000
Subordinate resources:    AS: 272631
                          IP: 2804:8640::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:22:11:e6:a4:ad:03:16:2f:80:85:99:8a:f4:80:f6:0c:51:2d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 28 23:16:47 2025 GMT
            Not After : Jan 27 23:21:47 2026 GMT
        Subject: CN=60533AB931656B07AD29D3D8F831806ABC87474A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:41:c8:9a:0c:6b:27:5d:b3:67:aa:5e:bf:2d:
                    ad:2d:87:dd:7b:1c:31:df:96:8c:3b:6f:71:0b:4c:
                    f0:4b:20:4c:2e:76:c2:6d:25:c2:e4:70:a3:45:2b:
                    a4:65:8c:ca:04:34:c3:56:a0:25:da:9b:8f:fb:3e:
                    ed:43:96:61:f2:5d:1d:ed:24:a6:ea:3c:33:e7:82:
                    2b:23:6b:fb:89:2a:58:4a:58:03:07:61:92:36:f1:
                    9f:e8:11:5c:5b:07:7c:bb:d7:a5:d7:c1:74:ba:2b:
                    eb:3c:47:8b:9f:80:4d:fc:b1:81:82:5d:b6:38:84:
                    77:0a:7b:77:9b:57:f4:28:1f:23:3c:22:01:9b:07:
                    bb:bc:fd:9b:c5:20:7a:52:9e:11:77:ef:0a:fe:79:
                    a7:6a:86:e3:5b:49:82:d0:42:b6:04:3f:f5:82:be:
                    fd:9e:8b:34:e9:ea:fe:a7:6a:40:9f:b3:3c:8e:38:
                    fe:27:a7:0f:08:09:bb:5a:e1:0e:1d:49:95:c9:f2:
                    01:e8:93:cb:fe:a2:87:4a:f0:d6:4c:3e:3a:6c:b5:
                    21:57:e0:24:a0:b0:8e:e3:7e:d2:34:c1:90:07:ee:
                    1f:58:ab:c0:43:6c:b2:fa:22:f3:57:21:e8:fe:fe:
                    35:eb:15:27:6a:38:61:42:fb:8b:73:c2:25:56:d9:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:53:3A:B9:31:65:6B:07:AD:29:D3:D8:F8:31:80:6A:BC:87:47:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/0/60533AB931656B07AD29D3D8F831806ABC87474A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272631

    Signature Algorithm: sha256WithRSAEncryption
         51:b6:7d:32:1e:88:7f:cc:fb:ba:da:56:ea:44:1d:21:1f:01:
         48:43:1c:20:8c:4f:88:ca:7f:1a:bd:38:b3:35:bc:45:16:ee:
         06:28:6d:42:a3:0a:ef:6b:a0:b6:04:2d:85:1b:9f:fb:d8:77:
         06:58:21:2b:96:5b:fd:87:e6:e7:db:c9:18:d7:78:7b:d0:10:
         d3:72:ee:9f:f9:76:76:82:97:0e:49:1a:12:5f:c7:55:4f:ac:
         6a:67:57:1d:99:7f:0f:a3:fb:5a:e0:91:5c:c2:9d:2c:bc:b5:
         8c:82:c1:69:45:7a:f3:b5:49:86:81:4e:02:6a:d9:ff:03:53:
         79:2b:1e:ef:f4:89:bd:0c:e2:aa:63:03:3d:37:4a:e8:67:12:
         98:9f:f7:3e:fc:cc:b6:db:20:21:c1:e2:77:7d:97:1a:eb:02:
         05:8b:69:98:f2:fc:fd:db:f4:08:4f:00:94:d6:eb:69:0f:14:
         91:d4:51:d0:f6:9a:7d:47:10:06:67:7a:64:15:1e:01:e4:71:
         70:48:c8:b3:3c:6f:fc:71:95:5b:3b:52:b4:cb:73:46:12:8f:
         a4:0a:5b:75:7e:3c:d6:98:d0:c4:67:15:c0:17:78:1e:4b:a7:
         82:3e:d4:61:5a:4a:f0:40:e3:f4:53:4b:4e:40:02:c8:d4:0a:
         aa:bc:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:14 2025 by rpki-client