Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6138CF2D30FCFED4F7762B658471A5318D10A574.cer
File:                     6138CF2D30FCFED4F7762B658471A5318D10A574.cer (raw, json)
Hash identifier:          xCSTTjvCiXfi6n4KNUxXBosFBR/R/cim/Cvak/FAw2s=
Subject key identifier:   61:38:CF:2D:30:FC:FE:D4:F7:76:2B:65:84:71:A5:31:8D:10:A5:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07C9F3D14DD16AEB5E4B2376FAF85062E0643ACE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/6138CF2D30FCFED4F7762B658471A5318D10A574.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Mar 2025 20:00:16 +0000
Certificate not after:    Tue 17 Mar 2026 20:05:16 +0000
Subordinate resources:    AS: 268795
                          IP: 45.172.196.0/22
                          IP: 2804:5ac4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c9:f3:d1:4d:d1:6a:eb:5e:4b:23:76:fa:f8:50:62:e0:64:3a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 18 20:00:16 2025 GMT
            Not After : Mar 17 20:05:16 2026 GMT
        Subject: CN=6138CF2D30FCFED4F7762B658471A5318D10A574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:a4:ba:97:a3:e7:c1:0d:cb:8d:e4:e1:c5:
                    e2:13:51:40:a8:16:ff:c9:34:2f:bd:8f:1b:de:11:
                    08:b1:a6:5a:5a:36:68:e9:4d:42:70:a5:c5:b5:b9:
                    b0:0c:7b:ef:9b:86:af:b7:3c:d0:1b:15:99:83:41:
                    73:c1:09:9d:84:05:c1:44:82:fe:66:94:03:80:e1:
                    5b:7e:8c:54:f4:4c:18:f2:b7:48:81:96:95:b4:fd:
                    a4:64:38:51:35:32:ee:40:52:39:8f:5f:bd:07:f3:
                    e2:d1:da:80:17:76:9a:71:8b:99:a2:53:a2:15:be:
                    3e:ca:3a:2e:6c:03:c1:17:2a:ef:37:c1:64:ce:4e:
                    7c:c8:a8:98:2e:9a:1f:05:e1:c7:5a:4e:5f:c2:8d:
                    63:a1:b6:2b:4e:7f:1f:11:68:2c:d5:46:4c:46:98:
                    8d:70:ac:75:84:fb:e5:ae:f6:43:56:e2:d5:d2:65:
                    35:62:7c:fa:4c:f6:9d:c3:fd:51:29:c2:ee:be:eb:
                    a3:a7:7e:e4:df:4e:dd:8e:86:c2:d0:ba:79:97:ec:
                    d6:63:45:b9:60:90:22:b8:c3:aa:4c:12:bb:3c:cb:
                    b1:19:79:dc:20:09:79:2e:4a:3e:ca:fe:66:57:24:
                    63:64:14:ed:49:b8:81:c8:25:3c:3d:4c:8e:aa:ff:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:38:CF:2D:30:FC:FE:D4:F7:76:2B:65:84:71:A5:31:8D:10:A5:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/6138CF2D30FCFED4F7762B658471A5318D10A574.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.196.0/22
                IPv6:
                  2804:5ac4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268795

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:42:a1:87:5e:00:56:8b:eb:0a:f4:14:d3:08:eb:91:e2:
         18:6e:52:90:58:14:9b:49:68:0e:78:9a:0b:18:23:f9:72:d1:
         9a:68:11:0a:06:c7:d9:b9:e5:18:59:f0:4e:3f:14:c0:57:30:
         77:e2:56:db:c3:ab:9c:88:ae:78:a5:80:57:e7:ef:d4:c6:c3:
         b0:4c:38:69:aa:fc:db:02:fa:86:75:2f:36:a2:45:dd:08:86:
         ec:9b:a5:87:b2:61:65:7c:ed:16:49:5f:3e:73:ff:79:6d:19:
         61:15:7f:90:52:67:08:1e:3e:5e:1c:39:b0:f5:6d:34:9c:6b:
         b4:14:a1:13:39:d0:8c:ec:7b:0b:00:5f:42:41:61:b7:65:e8:
         f5:22:46:fd:32:74:34:ce:55:0d:b2:d6:d5:40:c9:5a:04:cf:
         6c:fe:62:61:55:2e:bb:f8:a9:7e:80:9e:82:3e:09:63:e7:5c:
         7d:1c:9d:ae:f4:d3:cb:7b:07:5a:d4:25:b5:90:68:66:11:ae:
         03:35:1d:82:46:2a:ea:05:b9:07:3c:d4:e8:0e:63:c3:d3:90:
         23:50:62:c9:10:e8:bb:37:71:99:4d:7c:4c:87:7d:ac:16:48:
         b9:a8:9b:db:26:29:54:5d:fd:3f:5f:9c:8b:0a:4c:27:b8:72:
         b9:d2:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:07 2025 by rpki-client