Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
File:                     68EC60223DF10BE63B7A84464ACF2A9697173D75.cer (raw, json)
Hash identifier:          3I97tGcog7SLSBobfe/d+Zz/Muh7vLDucFvGMJ+aJ6k=
Subject key identifier:   68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       03CA1A811458C630E78754F40FEFBF909763A879
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Mar 2025 15:08:54 +0000
Certificate not after:    Fri 20 Mar 2026 15:13:54 +0000
Subordinate resources:    AS: 265140
                          IP: 143.255.0.0/22
                          IP: 2804:2b34::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ca:1a:81:14:58:c6:30:e7:87:54:f4:0f:ef:bf:90:97:63:a8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 21 15:08:54 2025 GMT
            Not After : Mar 20 15:13:54 2026 GMT
        Subject: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:10:7d:90:d9:91:3d:ed:84:78:c0:1c:45:
                    74:a2:dc:c1:79:a6:ef:11:63:cc:fa:d5:74:a1:00:
                    20:3e:47:2a:c5:9d:42:e1:30:84:19:da:46:47:9b:
                    ea:e2:97:82:93:56:a7:ba:8a:3e:11:83:f9:a8:45:
                    52:d2:4d:51:1e:3d:fb:e4:f9:c2:3e:8f:72:ab:d9:
                    ff:e1:3e:c8:20:e8:3f:ab:9b:f3:d6:06:cd:3e:ce:
                    dc:81:10:be:20:06:0c:49:c4:28:6c:8e:44:67:fe:
                    24:7a:3c:51:38:18:25:ed:a5:0f:06:c8:c9:cb:80:
                    d5:d2:60:89:72:97:b8:13:cb:56:f9:dd:54:fb:9e:
                    b0:c6:d1:f7:48:be:b8:7f:c9:6e:76:c0:fb:fb:c9:
                    bc:02:6e:3c:bc:41:d4:be:6a:87:c2:d1:c2:8a:e5:
                    b7:f4:1e:a5:cf:b1:24:a3:88:5f:fd:28:06:15:0d:
                    2a:57:35:06:39:55:fd:a7:f2:38:8b:8f:ef:4a:e9:
                    f6:74:69:a6:7a:3d:3b:2f:5b:87:e2:00:3a:e7:2f:
                    c6:df:ef:32:3d:b7:71:ed:75:74:51:92:66:d7:77:
                    29:23:28:bd:45:04:57:f4:77:f9:57:be:f9:a0:b6:
                    18:0e:8a:c2:b6:80:cc:0c:88:5c:10:d5:ef:2c:e5:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/22
                IPv6:
                  2804:2b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265140

    Signature Algorithm: sha256WithRSAEncryption
         77:13:97:e3:ad:80:1f:dd:5a:3e:d4:6a:50:8f:3c:94:e4:e0:
         d4:53:1d:f5:fe:3e:f6:7b:19:57:61:20:66:87:f2:53:4a:29:
         0f:44:fd:ac:45:e1:c5:cb:8f:51:57:c8:2f:e1:35:98:22:0f:
         5e:06:8f:69:ef:55:37:7c:f2:95:fc:5f:11:e1:97:88:fb:42:
         bf:09:15:e7:ec:29:1f:1c:e2:54:da:e1:3d:c9:cf:3e:dc:2e:
         c3:78:1c:6f:32:a7:f7:4d:25:c1:82:34:55:0e:cc:6d:42:6c:
         dc:7b:07:19:21:3a:bd:3a:f9:76:dc:cd:2d:80:d7:bc:45:63:
         5b:1e:8b:4c:77:d6:74:df:de:f7:33:77:23:6c:09:5a:52:c6:
         3f:c8:98:25:29:4f:d7:45:2b:32:61:93:a5:f0:d0:b4:47:b8:
         98:d8:14:52:57:44:bf:26:52:7b:87:a5:16:0e:0d:9e:61:51:
         c1:41:05:f8:69:49:81:69:c2:1c:fe:71:82:60:95:34:42:27:
         16:bb:3a:f3:b1:27:dc:ab:9d:57:48:2c:ad:ec:ce:2d:06:84:
         cd:00:0c:7b:77:61:7e:bd:3f:3f:90:5f:8e:5d:f3:9e:52:da:
         b3:93:ae:83:53:44:92:a3:89:34:11:5f:93:11:c0:c9:ce:46:
         95:fc:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:38 2025 by rpki-client