Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer
File:                     64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer (raw, json)
Hash identifier:          wuuepbEEXBRCZF7BtfqMmJD/dOAiRSvgBAKgYo/hJgo=
Subject key identifier:   64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42E8D6D74F0F09BEC9D77984910B74CF83EBE324
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jan 2025 11:13:30 +0000
Certificate not after:    Fri 16 Jan 2026 11:18:30 +0000
Subordinate resources:    AS: 61876
                          IP: 201.150.124.0/22
                          IP: 2804:1ab0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e8:d6:d7:4f:0f:09:be:c9:d7:79:84:91:0b:74:cf:83:eb:e3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 17 11:13:30 2025 GMT
            Not After : Jan 16 11:18:30 2026 GMT
        Subject: CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:72:ab:1d:d5:54:ba:c1:e3:ef:6c:60:da:
                    69:2e:2f:24:7f:3a:e0:16:8d:02:6a:00:ba:9e:41:
                    94:74:3c:4b:6a:48:1d:9d:ac:68:b9:d5:4c:a7:19:
                    59:f3:ea:b7:12:56:cb:ad:a9:5d:6e:c5:7a:06:8d:
                    21:0e:8a:42:2d:f1:bf:69:45:5a:79:b7:0c:b9:bf:
                    84:0f:ca:22:22:68:6f:7e:77:ea:e4:cd:19:57:04:
                    30:15:49:b7:48:93:22:fa:24:03:55:db:11:c6:14:
                    bc:9a:6d:6b:94:e4:b5:5b:a4:7f:af:52:d9:79:02:
                    d3:47:2a:7f:03:5c:db:4f:4f:b0:37:bf:df:e5:7d:
                    0b:7b:cf:9d:25:b9:bc:67:7f:38:f7:8b:12:54:4b:
                    cd:07:62:00:20:70:c4:dc:39:1b:15:28:ff:95:72:
                    de:e8:b8:8e:4c:94:49:86:e6:84:ef:52:be:f4:ea:
                    f8:44:69:f9:53:4f:41:91:11:54:b9:e7:74:0e:ba:
                    50:bd:86:5c:77:86:53:8c:95:18:60:a7:09:93:03:
                    f9:64:94:3c:ce:7d:e5:53:c8:9e:70:ca:26:ef:a5:
                    d5:98:2e:ea:ef:7a:58:4e:64:19:19:ee:8f:29:4c:
                    d7:bf:26:98:54:df:89:a4:ee:2e:0e:04:c9:26:2e:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/22
                IPv6:
                  2804:1ab0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61876

    Signature Algorithm: sha256WithRSAEncryption
         62:7b:fd:ef:ac:5b:f7:27:52:0e:d7:60:6e:8f:c4:ef:25:a2:
         64:6f:b8:29:6f:66:44:a4:35:bd:cf:02:73:ce:6c:b4:3e:5b:
         57:50:79:e9:6a:4a:40:e4:64:cf:92:f5:fd:a9:a4:a6:b0:67:
         91:86:6e:6b:58:78:58:b0:2e:13:d0:ca:0d:4d:56:fc:e5:26:
         ad:36:ce:53:3c:c7:bd:a5:4e:3e:1b:7a:3d:40:a2:22:d5:5a:
         72:f5:08:25:f4:cb:7f:1f:07:54:3f:05:56:41:85:37:61:bb:
         60:b1:6c:45:f7:93:2d:78:1c:a9:08:0b:7b:0f:11:de:67:55:
         5e:71:27:10:2d:43:f6:85:0a:35:6f:ac:de:fe:8a:bf:4f:ff:
         be:84:9d:02:00:ce:1e:a3:90:71:5f:76:b2:0b:3b:50:6b:cf:
         cc:a5:62:b9:a0:18:fa:8d:e3:76:12:16:7e:b6:2e:5d:9d:e8:
         2e:f1:7e:eb:1b:3d:8a:c8:b8:0f:18:58:95:42:c4:3e:77:41:
         b0:82:fb:4b:7f:20:b5:70:63:92:62:fb:7b:58:2d:b4:82:ae:
         b5:7d:3e:1d:bf:32:c9:2d:4b:63:92:76:d5:52:57:64:c4:33:
         7a:66:ac:11:76:6d:b4:4d:0a:13:9c:c7:c4:4c:6d:23:4d:37:
         73:44:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:26 2025 by rpki-client