Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
File:                     663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer (raw, json)
Hash identifier:          GnwIA/RbnRI2Se4aW4G5VF87/6Qwg/2D5fzrh3bgBIk=
Subject key identifier:   66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0DD8AB7163A3947EA4791CE15DCF8EE2C24510F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 09:27:14 +0000
Certificate not after:    Fri 06 Mar 2026 09:32:14 +0000
Subordinate resources:    AS: 264972
                          IP: 170.0.128.0/22
                          IP: 170.247.180.0/22
                          IP: 2804:30c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d8:ab:71:63:a3:94:7e:a4:79:1c:e1:5d:cf:8e:e2:c2:45:10:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 09:27:14 2025 GMT
            Not After : Mar  6 09:32:14 2026 GMT
        Subject: CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:6d:98:96:15:9d:fd:a5:92:7e:3a:45:e6:
                    5b:39:81:83:70:5a:e7:68:39:37:a6:52:cb:70:cb:
                    56:96:31:f4:3a:bf:6a:d9:10:40:6d:bd:af:2c:24:
                    62:08:20:cd:1f:f9:43:1f:b9:09:16:5b:8b:b0:6f:
                    7f:36:04:16:93:53:d2:3d:e9:45:14:58:5a:25:63:
                    68:07:b1:38:42:7f:58:62:6e:3b:75:e1:03:34:fe:
                    55:31:6b:0f:d3:96:2b:11:73:09:33:2c:1a:9f:6e:
                    5c:cd:32:1b:d4:a7:5a:e9:c1:23:4a:81:e3:ca:34:
                    39:95:c2:57:d2:78:96:27:23:71:ca:a9:16:f5:dc:
                    fc:e6:31:62:7e:a1:26:d8:0e:3e:15:e3:35:81:15:
                    cd:d9:9b:88:95:f9:a9:aa:b6:26:43:bd:84:8d:82:
                    66:03:cf:71:16:6c:a0:6d:10:2e:21:27:25:a1:7f:
                    ee:fe:f6:a2:d1:1f:b0:57:27:c0:f2:0d:d4:a1:f9:
                    60:59:89:6f:47:0b:1a:16:51:6f:21:35:79:79:0f:
                    3e:b5:dc:f1:96:06:fc:92:c6:5b:9e:aa:6f:14:5f:
                    61:f6:e7:32:c0:ad:b6:a2:b9:fb:fa:8a:24:d0:08:
                    a0:81:d8:06:37:8e:cd:07:39:8e:95:68:f2:d8:e8:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.128.0/22
                  170.247.180.0/22
                IPv6:
                  2804:30c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264972

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:3c:ff:0d:c7:8a:04:f2:69:b4:fe:95:cd:5f:c5:d2:b1:
         86:20:0e:ae:0d:9d:03:cc:ea:70:a8:63:f7:e2:85:f5:d4:0c:
         a3:a7:e5:b8:c9:0a:a6:71:80:06:ea:9b:db:bb:24:53:75:5e:
         29:f8:28:2c:b3:e0:67:03:8f:c9:e0:ed:c0:97:97:74:e3:f1:
         1e:15:c4:90:f6:90:7b:7d:83:76:a8:70:cd:35:10:d9:7c:ea:
         2f:50:67:33:87:6a:a1:a0:2a:a6:15:8a:48:4e:c6:32:2d:d4:
         aa:8b:c0:8f:1d:13:80:66:c0:f0:0f:33:df:eb:8f:fc:dc:85:
         5b:18:7e:29:c8:d8:64:63:5b:f6:71:5c:07:1d:49:fd:55:f3:
         85:2f:38:19:07:9f:cc:8b:e4:c4:b5:09:ac:27:14:55:61:01:
         e2:e0:38:54:9e:6e:17:0a:62:f3:e0:f5:09:dc:0c:d4:ce:3e:
         32:b4:26:94:4c:a6:ce:fb:0c:a1:72:fc:cf:2c:7c:a4:d5:f3:
         28:d6:e1:00:ee:a0:0b:19:b7:ca:90:c1:76:4c:ee:16:86:12:
         0b:61:c9:e6:db:8d:48:60:50:f9:f1:66:c4:42:ed:c5:4f:fc:
         15:e1:f7:5a:4a:56:f5:42:e3:1d:8f:73:dc:c8:24:36:b3:99:
         d7:6c:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:47 2025 by rpki-client