Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
File:                     66335F04863CA1159D16D18E655231764F6FB821.cer (raw, json)
Hash identifier:          j9PxqQc53Z++xrBl9kGffyybnwXxLSf+yDtbTEPQBT8=
Subject key identifier:   66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6DFFD6B43E7512AA3C38E939F5DFD562015405BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Mar 2025 02:46:55 +0000
Certificate not after:    Sat 07 Mar 2026 02:51:55 +0000
Subordinate resources:    AS: 28642
                          IP: 168.228.180.0/22
                          IP: 170.246.128.0/22
                          IP: 179.108.160.0/20
                          IP: 201.76.0.0/20
                          IP: 2804:ef4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ff:d6:b4:3e:75:12:aa:3c:38:e9:39:f5:df:d5:62:01:54:05:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  8 02:46:55 2025 GMT
            Not After : Mar  7 02:51:55 2026 GMT
        Subject: CN=66335F04863CA1159D16D18E655231764F6FB821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:fc:72:e1:de:7b:f9:de:a1:c5:a2:e9:a4:
                    9b:f4:d2:f0:fd:1f:23:1c:4e:dc:f8:d5:63:28:00:
                    34:1a:3e:35:4d:31:74:33:8a:82:ca:ac:6b:34:7d:
                    80:e8:f6:a9:f9:1b:96:5c:7f:4e:b5:54:ac:f8:b2:
                    33:43:c5:21:8d:64:c2:45:ef:8e:d6:30:28:fd:7c:
                    74:07:12:7f:06:37:72:22:9d:28:3d:54:0b:2c:5f:
                    51:48:e6:1d:70:de:74:d0:6b:a0:56:30:c4:4c:8b:
                    bb:e1:51:f4:2c:2b:42:3a:62:a8:46:6d:13:b1:1e:
                    8a:28:ab:43:7f:6f:ba:ad:15:64:78:ef:33:00:9c:
                    d8:b7:64:62:f6:24:97:28:93:65:7f:e1:8a:f0:60:
                    b4:a0:74:c2:02:1c:d6:4f:64:04:e4:d7:25:3f:a9:
                    5d:93:53:93:de:85:ea:21:16:62:57:e3:7d:e3:d4:
                    bf:f9:b1:56:39:f6:e3:7c:8c:3e:88:ac:be:f4:5e:
                    2a:c8:0b:92:19:5d:62:89:92:d2:77:91:95:ed:95:
                    dd:19:5a:cc:b7:d8:ef:f9:be:ef:61:94:6d:1a:21:
                    a1:5d:fd:75:6a:4a:d2:6f:5e:e0:2b:e3:b7:66:3e:
                    b5:7a:76:dd:7e:ed:be:47:9f:78:b2:2a:34:0a:36:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.180.0/22
                  170.246.128.0/22
                  179.108.160.0/20
                  201.76.0.0/20
                IPv6:
                  2804:ef4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28642

    Signature Algorithm: sha256WithRSAEncryption
         2b:97:0a:09:a4:08:1d:31:2d:d0:4e:4f:d4:e8:c8:de:e5:98:
         b9:32:b8:1d:4e:4c:6e:4a:d0:2b:ca:c8:4e:32:c4:3d:7e:a7:
         aa:03:71:b9:92:aa:99:78:7f:37:0b:4d:a6:18:40:15:97:3b:
         61:75:b8:37:66:db:ab:99:55:dc:c9:11:03:7c:56:a2:92:87:
         a9:ab:8d:17:fe:c0:33:36:21:b2:b2:9f:7d:fe:f3:ce:dd:84:
         47:d6:85:a8:87:fa:f6:5c:2c:e1:1d:20:fc:7e:d5:f0:b5:81:
         b9:09:7d:9d:27:ef:4d:3e:a1:33:2e:42:11:39:8d:ed:a1:09:
         8d:b2:6f:40:89:22:d9:80:71:4f:55:7e:81:86:f2:f5:19:4a:
         c7:a8:48:23:ca:7c:d8:21:95:18:09:2f:cf:b6:5e:9c:2e:32:
         ad:64:ae:3b:4e:18:2f:e8:28:25:cc:ee:7f:b2:44:e9:07:8b:
         1b:bd:5d:33:d3:26:c0:24:2a:9e:f5:b9:19:2b:f1:44:14:43:
         15:4b:67:24:a3:df:d5:02:9b:31:c1:70:c5:77:6f:b9:4b:d5:
         e7:b1:c7:da:88:be:9d:55:c5:1b:91:05:56:9a:97:b0:09:14:
         75:38:fd:73:04:48:78:e2:83:8d:58:33:07:de:68:2c:08:44:
         51:c9:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:54 2025 by rpki-client