Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/64DD83F92699F1FE6E92049BB0290C52C8B04D15.cer
File:                     64DD83F92699F1FE6E92049BB0290C52C8B04D15.cer (raw, json)
Hash identifier:          zY7hxMzVhFQHCG4KE2XS/vcz8PEWwq55sX/mQkK1hys=
Subject key identifier:   64:DD:83:F9:26:99:F1:FE:6E:92:04:9B:B0:29:0C:52:C8:B0:4D:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C25911EFF9C9BD629D385320646D2B7894133F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/64DD83F92699F1FE6E92049BB0290C52C8B04D15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 22:52:39 +0000
Certificate not after:    Tue 16 Dec 2025 22:57:39 +0000
Subordinate resources:    AS: 264460
                          AS: 267224
                          IP: 45.231.192.0/22
                          IP: 132.255.100.0/22
                          IP: 168.197.0.0/22
                          IP: 2804:2004::/32
                          IP: 2804:4a34::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:25:91:1e:ff:9c:9b:d6:29:d3:85:32:06:46:d2:b7:89:41:33:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 22:52:39 2024 GMT
            Not After : Dec 16 22:57:39 2025 GMT
        Subject: CN=64DD83F92699F1FE6E92049BB0290C52C8B04D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:03:b2:6b:68:ac:a1:1b:1f:62:1f:81:1d:
                    46:2a:9b:36:e4:85:20:1f:4c:14:d8:84:f8:aa:ec:
                    1c:8d:c4:f3:2b:27:b2:5d:11:cf:c0:ad:0e:80:ab:
                    b1:9c:cb:02:a2:20:4f:1d:74:2f:03:b5:0d:26:a2:
                    91:b5:ca:83:2f:60:44:0e:a2:cc:b3:c6:b5:4d:0a:
                    36:f2:d7:7f:89:97:26:f2:02:e6:14:c8:d5:8d:5a:
                    c5:ea:49:0d:52:4f:fd:43:85:2c:cb:53:6d:b8:8d:
                    f5:16:4d:07:5e:2b:f9:f4:15:2a:e8:51:47:e9:69:
                    f3:77:b9:56:2b:49:7c:a5:d4:b5:46:09:21:d0:c8:
                    73:64:75:57:f7:54:90:bb:df:27:f1:5c:25:35:c6:
                    d2:e9:4a:26:24:73:f5:b9:08:60:cc:91:2d:5e:15:
                    12:20:91:c5:ff:c8:d0:0a:4c:42:e6:62:44:77:76:
                    05:fa:c9:17:00:a5:d6:7b:d0:4e:d9:4b:8a:5d:20:
                    a9:03:b2:90:12:5a:11:c2:3f:9d:50:a5:b5:4b:1f:
                    25:8b:9f:2f:bc:28:48:bb:05:b6:8c:07:f2:b6:5d:
                    d5:8f:5a:a3:f0:1f:93:19:be:0f:4b:8c:bc:60:36:
                    99:fa:08:8e:7c:52:fa:42:8b:11:50:52:65:8a:cf:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:DD:83:F9:26:99:F1:FE:6E:92:04:9B:B0:29:0C:52:C8:B0:4D:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/64DD83F92699F1FE6E92049BB0290C52C8B04D15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.192.0/22
                  132.255.100.0/22
                  168.197.0.0/22
                IPv6:
                  2804:2004::/32
                  2804:4a34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264460
                  267224

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:fc:d4:99:b4:b3:0e:f5:5b:a7:cf:aa:4b:03:1c:d9:16:
         0e:ad:8b:91:5b:ea:3a:13:7a:c9:6b:20:60:4d:56:a9:d3:f0:
         d8:f9:23:d7:13:1a:d9:fe:7c:ff:d8:f9:ef:88:6f:9b:af:10:
         84:13:c3:4e:eb:d3:b3:be:c8:a0:09:ec:cb:60:b8:17:8c:75:
         c8:40:c7:d0:1e:c3:95:4d:73:f7:af:da:18:4f:6c:46:1c:83:
         7b:ed:85:cb:57:ee:aa:b7:79:2e:85:52:42:01:da:c3:41:42:
         c9:24:97:18:a3:25:cd:d3:8f:48:e1:ec:21:4a:eb:bc:a9:8d:
         6b:43:f5:9e:d9:7a:e8:6d:fc:ff:cb:b0:02:98:81:2f:cf:42:
         55:77:1c:9b:ae:f2:0c:9b:50:70:38:17:da:ee:ed:d6:4d:95:
         42:0e:ba:d0:1f:99:85:84:b8:d8:28:81:11:10:49:8a:08:66:
         58:34:ad:35:83:68:1b:53:0e:18:0e:c7:fa:d5:a5:9e:9e:19:
         74:cc:48:a8:20:64:d5:e3:69:ec:f5:2d:f9:79:ff:d2:fd:d6:
         bc:a5:b7:7e:cc:aa:e4:7a:32:a2:36:5a:50:ce:a8:00:bc:91:
         bd:dc:dd:9a:50:5b:2f:09:7c:0f:6f:ae:09:82:d7:5e:8b:ce:
         0b:a5:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:58 2025 by rpki-client