Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
File:                     68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer (raw, json)
Hash identifier:          GUpYOLwAJvoFUr3SAY8SzkqLarCeZExsj3xyv5/Lpps=
Subject key identifier:   68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       449FF855A3D4686D1A08B75B67761CCE3A5BAE17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jan 2025 12:43:50 +0000
Certificate not after:    Thu 22 Jan 2026 12:48:50 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9f:f8:55:a3:d4:68:6d:1a:08:b7:5b:67:76:1c:ce:3a:5b:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 12:43:50 2025 GMT
            Not After : Jan 22 12:48:50 2026 GMT
        Subject: CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:72:bb:83:6f:85:b8:6e:74:39:31:64:f2:
                    41:59:b9:12:48:e1:6e:45:0c:ba:2f:f2:fd:52:0f:
                    3a:43:bb:a0:35:8d:aa:dd:39:04:ea:b8:83:b0:2c:
                    94:c2:71:dc:db:10:38:42:38:94:61:9a:50:c7:c0:
                    20:4a:0c:7a:31:70:2d:70:18:26:9f:cd:6b:4e:5b:
                    16:54:9b:bc:4d:09:bd:96:e1:e1:a9:f3:1d:ed:73:
                    77:e8:15:50:28:02:49:a9:c3:88:f9:94:c9:3f:99:
                    82:00:9c:bd:66:ba:a6:d9:28:49:6d:98:57:a2:f8:
                    ab:2f:31:71:10:96:36:85:1b:98:43:77:21:5e:87:
                    e0:76:a9:78:ab:ad:b4:a2:30:39:c6:a3:f2:0d:f7:
                    0d:b0:50:5e:63:b5:54:93:47:f5:b0:e4:60:bf:a7:
                    21:18:af:ae:e1:49:2a:e2:56:49:46:05:01:bd:02:
                    11:19:b4:f7:24:09:c7:11:c8:ca:f4:b9:1f:3d:24:
                    2d:ce:ac:5c:bb:0c:3a:1e:cc:87:77:98:74:c4:62:
                    a7:76:29:a9:b5:a6:a3:52:7a:0c:b5:43:3e:a1:28:
                    80:a6:6d:59:5b:6a:c4:ca:bd:ac:94:79:29:c4:5a:
                    19:c1:b3:89:5d:6d:4f:5a:a8:81:ae:04:35:1b:6c:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:25:5f:0c:e0:02:b6:58:ac:8a:c8:23:36:a6:69:b6:f5:
         37:98:e4:23:74:3f:16:3a:64:b6:ad:e1:ef:c9:74:62:49:14:
         fb:b6:18:8b:83:78:3f:0b:ba:bc:6d:65:f0:0a:82:bb:f0:ba:
         62:2e:53:b3:8b:d4:91:05:a1:0b:c6:e9:77:66:1d:79:8d:6d:
         b4:6c:8b:ec:8c:40:17:bb:f9:86:32:34:cc:55:61:0a:54:cd:
         38:19:39:f0:f6:b4:8f:62:a4:b8:56:23:71:8a:6f:a3:ab:1a:
         5d:ee:5d:02:74:31:0e:22:88:a6:dd:e6:0c:95:8e:99:81:95:
         7b:f6:8f:0b:e6:6a:dc:29:70:d0:69:31:2f:c7:b2:83:53:f6:
         c6:ff:8d:e7:ba:9c:df:93:78:97:ef:8c:b6:4e:f3:10:da:ab:
         ff:c2:28:62:17:5d:f7:2e:64:15:d8:b0:74:35:bc:71:d2:29:
         88:71:ec:d7:6b:56:45:a7:be:35:73:dc:ac:10:d3:a3:5b:c5:
         3f:95:98:52:b0:43:38:3b:9c:ad:61:cf:0d:57:16:35:7f:2f:
         1f:72:ec:84:99:ec:30:23:51:49:e2:5b:0e:58:d5:2e:42:b4:
         12:24:6d:0c:ef:0a:9d:4a:9f:76:1d:77:ad:32:96:77:93:22:
         af:a8:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:49:56 2025 by rpki-client