Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63D91D63AA405003A381126D88C9CFAAA8693918.cer
File:                     63D91D63AA405003A381126D88C9CFAAA8693918.cer (raw, json)
Hash identifier:          I+pYyi/mfXFz+XKWl6cT0gmHEuHD6Nss1tpoZXrqEY8=
Subject key identifier:   63:D9:1D:63:AA:40:50:03:A3:81:12:6D:88:C9:CF:AA:A8:69:39:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4267881E52CDEFF6947DBC006FB832584F7B81CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/63D91D63AA405003A381126D88C9CFAAA8693918.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 13:23:19 +0000
Certificate not after:    Wed 04 Mar 2026 13:28:19 +0000
Subordinate resources:    AS: 268670
                          IP: 45.163.132.0/22
                          IP: 2804:54cc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:67:88:1e:52:cd:ef:f6:94:7d:bc:00:6f:b8:32:58:4f:7b:81:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 13:23:19 2025 GMT
            Not After : Mar  4 13:28:19 2026 GMT
        Subject: CN=63D91D63AA405003A381126D88C9CFAAA8693918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:d7:7b:ef:8a:a4:a8:4b:45:b0:c6:ac:de:
                    0e:23:cd:74:e6:69:6f:c5:6e:b2:63:52:fb:e3:c3:
                    e8:52:85:82:5e:18:7a:6d:9b:33:20:35:03:3b:af:
                    c6:8d:54:63:ad:a5:e9:b1:2e:c1:55:b1:7f:4d:79:
                    31:60:70:3d:ac:45:61:16:91:da:25:24:a3:43:26:
                    d0:0a:b9:e6:55:ee:da:04:33:50:46:e5:ef:d5:b9:
                    77:e4:60:c9:ac:ad:e9:1a:0e:20:b7:d1:09:7d:6e:
                    ed:41:af:ed:4d:37:83:0d:fe:4a:a9:77:ef:03:b4:
                    dd:f3:70:d0:34:89:84:f6:c7:7c:28:bb:00:a1:71:
                    50:2f:58:97:17:3e:88:35:84:91:92:1e:cf:52:76:
                    af:07:79:dd:19:16:da:74:e4:40:2c:4d:62:55:83:
                    4a:ac:2b:ab:5b:80:76:d5:b2:7d:e6:87:eb:42:d2:
                    09:a9:10:23:06:1b:95:fd:c4:1a:35:f0:cf:28:9d:
                    41:4a:5c:e0:3c:f6:30:ad:d2:75:cc:bc:56:e4:5a:
                    37:87:3e:6b:af:5c:35:b7:c4:3a:fc:db:e3:1c:17:
                    57:29:d6:38:8b:6a:a3:24:5f:8f:cd:39:01:3b:b6:
                    e7:af:5c:26:a1:02:05:dc:f2:8e:28:3e:54:e2:98:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:D9:1D:63:AA:40:50:03:A3:81:12:6D:88:C9:CF:AA:A8:69:39:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/63D91D63AA405003A381126D88C9CFAAA8693918.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.132.0/22
                IPv6:
                  2804:54cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268670

    Signature Algorithm: sha256WithRSAEncryption
         c5:5e:82:38:e4:16:f2:68:18:19:f9:78:32:9e:28:cf:95:1b:
         d3:f9:ee:24:44:3d:59:62:3f:f0:f7:62:a8:a9:4a:a7:6d:d6:
         89:97:52:86:76:29:be:0a:38:82:8d:a7:2c:e1:49:7e:28:7a:
         f0:61:19:3a:11:07:71:d1:ce:43:fc:8b:ad:6c:5a:6b:97:59:
         ff:d4:24:90:42:5b:df:1b:46:4e:bd:1c:18:a3:a8:e4:a6:39:
         82:cc:6b:d2:ff:19:ac:1c:04:8a:44:dd:23:76:f6:dd:98:d2:
         d9:84:11:33:77:ca:f2:65:06:ef:76:b8:41:f4:48:0a:99:74:
         25:47:30:9e:d5:3c:aa:b4:96:ee:62:0c:42:3b:22:ed:c5:f1:
         27:6c:96:33:e1:29:83:9e:ce:3e:90:05:f7:bf:dd:83:a1:c0:
         28:87:4a:e4:90:84:57:59:d2:06:98:d3:f9:19:9c:92:b1:94:
         05:46:1a:cf:59:a0:c0:d4:a6:d3:f6:92:53:70:7b:de:54:c1:
         c1:e8:84:73:ba:3c:d3:7e:e3:e0:c9:38:0f:b3:bc:73:86:3c:
         87:cc:d9:b8:d8:ea:7e:25:9e:65:18:8f:04:68:22:42:cf:67:
         41:61:1e:4c:14:0b:11:7b:32:a0:f9:76:1b:c3:47:59:e8:53:
         2b:cc:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:32 2025 by rpki-client