Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer
File:                     68444A333B7333B9388B8EEAF41EBF4CE7435184.cer (raw, json)
Hash identifier:          U7ZmvbQh/fPzl5ZtbN0pmc/UiAkftqRcJvb0Jzmfseo=
Subject key identifier:   68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AEE23D3B3C5B41D100B3FCC02623565B83E2774
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Dec 2024 12:21:00 +0000
Certificate not after:    Wed 10 Dec 2025 12:26:00 +0000
Subordinate resources:    AS: 273564
                          IP: 2804:90a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ee:23:d3:b3:c5:b4:1d:10:0b:3f:cc:02:62:35:65:b8:3e:27:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 11 12:21:00 2024 GMT
            Not After : Dec 10 12:26:00 2025 GMT
        Subject: CN=68444A333B7333B9388B8EEAF41EBF4CE7435184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:0a:76:2f:93:42:1f:6a:2f:f0:a9:d4:48:
                    14:5a:db:da:7f:ce:47:8e:4f:c8:2a:f1:27:08:73:
                    0f:3c:29:87:4e:f3:98:ca:53:3d:16:c0:ad:e4:e8:
                    a6:26:29:95:f3:51:cf:55:b1:22:ac:e9:da:e0:4a:
                    a6:9c:0f:53:37:71:27:2b:1f:69:ae:6f:a9:87:3e:
                    e3:fd:7d:13:04:37:e4:b3:2e:06:b4:83:4f:06:f8:
                    da:6f:f6:b5:4d:62:f0:36:85:ce:07:8b:0a:47:71:
                    37:7d:53:2b:f6:b3:91:28:52:11:57:1b:2b:c2:01:
                    70:14:f9:98:64:08:48:51:b8:f9:e8:6e:ce:57:10:
                    52:b5:33:ee:47:8d:92:04:1d:e0:3f:57:ca:77:82:
                    30:70:04:4a:eb:d0:eb:7f:dd:80:38:70:0a:2b:65:
                    8c:06:78:5f:69:f7:c6:cb:eb:68:fb:1a:c5:1f:44:
                    7c:a8:3a:b7:cf:a9:5b:03:a8:21:d9:d0:ad:c4:5f:
                    54:8d:fa:9d:4c:36:77:ec:ca:89:46:3f:c9:85:e6:
                    11:00:43:15:f9:85:70:6b:bc:8f:18:2e:3f:ae:42:
                    37:5a:36:06:c2:71:83:f4:9f:72:27:54:51:48:06:
                    9d:7c:5d:cf:f1:1a:8a:cf:79:95:91:1b:c3:5f:97:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273564

    Signature Algorithm: sha256WithRSAEncryption
         54:82:71:09:d2:52:9e:8d:30:9c:26:86:a9:6c:7c:1d:cc:46:
         d0:f3:89:4e:3d:9f:8d:2a:ed:a8:71:03:3a:2c:2d:95:66:52:
         54:cc:0d:e3:84:40:b8:b2:16:11:6e:6b:33:2f:bd:e7:20:c6:
         6e:14:67:05:6a:e9:5f:cb:3e:6d:f8:4d:20:49:2c:88:c3:d1:
         0a:6b:f1:74:70:ec:81:19:6c:32:26:f6:88:58:7c:b3:cb:13:
         b8:dd:bc:bc:49:10:68:d0:4f:4e:6d:66:16:49:d9:91:32:53:
         fc:6d:c6:bb:6d:75:aa:2f:74:c1:d3:1a:6f:49:36:c3:8d:ba:
         46:2c:99:4b:30:64:fe:35:11:44:9e:64:e3:4b:96:4f:c9:ac:
         b4:2a:ae:2e:2e:1d:d8:62:f7:4a:5e:8e:6b:19:a9:47:80:cc:
         12:eb:30:33:00:34:f0:bc:fa:63:ad:70:45:f9:4e:12:be:19:
         d7:88:bc:87:f7:e9:a6:83:c0:d0:40:37:75:1b:31:76:ba:3a:
         26:cb:75:1e:fd:3a:00:50:90:d0:7a:a9:ba:02:e5:1f:30:c0:
         6d:41:cf:9b:70:ff:44:83:98:d6:10:8f:b2:38:b7:6e:d9:d6:
         e4:68:b4:2d:e8:a3:df:ab:5f:74:60:65:be:4b:1b:42:e0:7a:
         aa:9a:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:33:13 2025 by rpki-client