Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
File:                     6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer (raw, json)
Hash identifier:          f3UwD15o/pMK8YOJJER2FkNixCvq0HKp1poyMFgRnko=
Subject key identifier:   65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       31679177D31086676ECC01B2A28BC7A3602AB40F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 16:32:16 +0000
Certificate not after:    Thu 08 Jan 2026 16:37:16 +0000
Subordinate resources:    AS: 28202
                          IP: 177.44.0.0/17
                          IP: 177.130.128.0/18
                          IP: 179.189.160.0/19
                          IP: 186.216.64.0/18
                          IP: 187.44.0.0/18
                          IP: 187.120.64.0/18
                          IP: 189.91.0.0/19
                          IP: 191.53.0.0/16
                          IP: 191.240.0.0/17
                          IP: 2804:87c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:67:91:77:d3:10:86:67:6e:cc:01:b2:a2:8b:c7:a3:60:2a:b4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 16:32:16 2025 GMT
            Not After : Jan  8 16:37:16 2026 GMT
        Subject: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:27:18:ec:04:3c:3c:ef:fa:68:35:51:25:
                    70:83:ed:49:49:ca:fa:2b:81:27:9b:21:44:4f:14:
                    bd:4b:75:03:f9:98:1f:d1:28:89:7b:75:de:9d:44:
                    49:d2:d4:25:88:75:6c:f4:b8:92:53:9d:a0:1e:c3:
                    86:b5:0d:0d:f3:aa:a6:dc:30:07:af:ec:95:ce:3d:
                    5f:5e:f0:a5:34:87:35:39:de:91:02:e4:0a:fa:44:
                    64:38:5e:13:9b:01:2f:a6:23:3d:40:a8:ad:a1:c0:
                    fb:e8:4b:ce:57:4e:ed:32:a5:31:07:f1:31:b0:11:
                    af:28:b1:56:56:10:12:9f:22:02:28:65:44:ed:d3:
                    c2:28:7c:2c:b8:6e:27:fd:8e:d8:b6:6f:35:7f:ca:
                    46:f3:bc:75:cf:80:63:b6:cd:65:90:bd:f3:6f:ba:
                    e4:b0:9c:42:5c:38:ba:7d:6c:cc:dd:90:79:f9:c6:
                    d4:db:a2:d2:fa:ab:c4:51:f5:ad:ba:c0:d5:e0:74:
                    bd:a4:52:3a:03:3a:7d:05:42:74:a1:32:e6:06:d2:
                    e7:ca:e2:88:cc:b6:c0:9f:51:96:e7:5f:ac:dd:ae:
                    71:3f:dc:67:22:8f:4c:b6:fa:5d:87:5b:e3:dc:3e:
                    36:29:dc:7e:36:a9:ea:96:2c:b8:e3:da:f4:45:6c:
                    76:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17
                  177.130.128.0/18
                  179.189.160.0/19
                  186.216.64.0/18
                  187.44.0.0/18
                  187.120.64.0/18
                  189.91.0.0/19
                  191.53.0.0/16
                  191.240.0.0/17
                IPv6:
                  2804:87c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28202

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:3b:49:9f:48:9a:c3:59:bd:43:60:34:12:0f:43:01:af:
         74:04:9c:db:42:89:7d:cd:89:40:5e:c7:d3:d1:ad:7b:63:19:
         5e:a7:fd:66:04:99:47:b7:56:76:a6:88:71:19:d5:74:67:90:
         5d:26:19:bb:b2:83:d9:a9:b6:d0:79:27:9b:f3:1f:a0:31:40:
         fb:23:a0:51:67:20:87:01:a3:e5:b5:e0:98:05:14:91:66:a5:
         33:72:42:fd:b3:91:8e:5c:ad:37:45:af:25:e9:5f:2d:9d:13:
         97:d0:e2:94:4b:27:92:5e:c0:c7:5a:e5:84:1b:39:32:c4:4e:
         97:d4:1f:f0:7b:01:29:3c:1d:51:86:4d:f6:c0:85:aa:79:7c:
         eb:ca:3c:6e:cd:9e:24:6a:88:ad:bd:7c:f9:f2:c5:73:2a:4e:
         0b:d1:15:9e:51:e7:cd:f7:f4:07:32:06:6d:f9:3c:05:fd:7e:
         a9:05:bb:c7:ab:cb:9b:4e:71:1a:5f:3b:e0:ce:67:5b:b4:a2:
         a1:d5:0a:80:57:a6:1d:6e:72:ab:e3:90:9b:87:07:60:2e:4f:
         0e:38:15:5c:a5:9e:cc:fd:2b:5b:f6:91:b0:fc:aa:4a:ca:4c:
         52:9a:92:90:92:9b:7d:1f:b0:41:0c:0b:f8:53:f1:60:1c:b7:
         15:5d:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:27 2025 by rpki-client