Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer
File:                     62504691574999BE3FC471A877B8D5C052A750B8.cer (raw, json)
Hash identifier:          q714odWEuF1mMK5GAzRcRUCPF3Uxp9WmltsvAvJBc/M=
Subject key identifier:   62:50:46:91:57:49:99:BE:3F:C4:71:A8:77:B8:D5:C0:52:A7:50:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3867BD4088F7A55D54B48699892F4EC093240299
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 08:15:07 +0000
Certificate not after:    Fri 06 Mar 2026 08:20:07 +0000
Subordinate resources:    AS: 267604
                          IP: 45.71.104.0/23
                          IP: 2804:4420::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:67:bd:40:88:f7:a5:5d:54:b4:86:99:89:2f:4e:c0:93:24:02:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 08:15:07 2025 GMT
            Not After : Mar  6 08:20:07 2026 GMT
        Subject: CN=62504691574999BE3FC471A877B8D5C052A750B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:f3:aa:83:7d:65:18:47:89:98:06:8f:88:
                    0b:78:3f:de:52:df:38:28:af:aa:98:91:f9:9f:e2:
                    a1:e6:2b:27:32:22:ab:33:d8:f8:6f:f8:e9:ac:11:
                    52:dc:81:5f:d8:8a:01:1f:39:c1:35:ef:c8:34:f2:
                    23:0f:6f:12:d8:c5:b5:a7:bd:c8:be:6c:2e:cb:4c:
                    00:61:59:21:03:25:b0:9f:cf:c0:80:30:6b:9c:57:
                    d0:f5:72:fc:db:6f:38:f4:e9:80:8e:87:f4:c9:d2:
                    c0:22:c3:e9:f4:ee:fc:21:15:76:39:04:b0:59:a8:
                    09:42:be:7e:0d:d2:27:5d:29:ee:36:66:21:1f:07:
                    10:7c:19:65:ef:fe:0e:1f:e1:2d:7b:8f:d4:07:ea:
                    f8:f0:98:97:6b:f9:07:45:aa:4c:5b:ec:3d:b2:d4:
                    f5:47:5a:ae:70:34:42:3d:ea:51:ec:d4:14:ea:4f:
                    d1:91:a9:e4:a5:17:8c:bd:af:07:df:90:96:24:1b:
                    bf:55:ac:48:0f:39:00:de:f1:2a:00:26:22:f4:cc:
                    74:38:65:a9:cd:2d:b6:e2:53:bc:6d:11:9f:d4:be:
                    f7:ad:72:f8:07:9c:f2:b4:af:63:c6:e6:25:79:0b:
                    06:f8:e7:d3:45:21:ce:12:2b:32:62:13:11:6e:69:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:50:46:91:57:49:99:BE:3F:C4:71:A8:77:B8:D5:C0:52:A7:50:B8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.104.0/23
                IPv6:
                  2804:4420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267604

    Signature Algorithm: sha256WithRSAEncryption
         46:53:11:91:5d:eb:47:15:a6:0b:a2:dc:40:55:87:87:4b:a6:
         58:42:50:7e:d7:25:ae:af:91:a1:84:00:b2:e5:bf:ff:b1:bb:
         3b:c3:a3:bf:f2:ef:66:82:65:c4:00:ff:cc:ba:e8:1b:e1:f7:
         6e:49:78:f3:1e:25:6a:0f:ed:7a:12:b2:36:c6:a4:56:86:80:
         a8:1e:ae:6f:82:b8:fa:bd:0b:bf:d5:20:df:5a:67:d6:ef:8f:
         aa:a3:f9:78:84:53:f8:10:59:f6:32:96:c2:43:20:10:11:08:
         4f:b1:fb:6f:dc:d5:0d:62:36:88:b7:3e:0f:1a:49:bd:97:7b:
         e9:ca:3a:1d:ae:ba:f0:4d:59:fb:a0:35:22:ef:2d:5b:1a:66:
         54:33:77:d2:9c:c5:d7:23:b4:bc:97:59:c8:b4:6f:93:6d:cc:
         27:71:e1:b9:e8:c4:e2:46:3b:2a:e2:51:4e:d5:a9:a8:62:81:
         84:da:bf:ae:04:f4:96:4c:88:81:78:37:61:26:4b:69:d5:0e:
         7e:2b:21:57:ab:ac:c6:0f:98:4e:04:90:f0:cd:53:ae:07:fe:
         4d:01:8a:89:54:ab:70:d8:e0:63:a6:7c:72:2f:35:26:63:c3:
         58:24:03:e7:cc:67:e7:9b:cc:47:f6:2a:e8:02:e9:b1:b8:f8:
         5d:04:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:42 2025 by rpki-client