Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.cer
File:                     6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.cer (raw, json)
Hash identifier:          jkGoYwl+Ylh4+t2pjErXb0P2snKGOU+0L3VjfoLV2P8=
Subject key identifier:   6A:23:CA:B2:BE:FE:4D:19:6A:27:73:07:FF:D8:F5:BF:1D:E7:2C:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       153F180519BB2D5E8AB5D58E9D756E2CB45964D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Feb 2025 23:04:57 +0000
Certificate not after:    Thu 26 Feb 2026 23:09:57 +0000
Subordinate resources:    AS: 28654
                          IP: 187.73.160.0/20
                          IP: 201.77.128.0/20
                          IP: 2804:95c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3f:18:05:19:bb:2d:5e:8a:b5:d5:8e:9d:75:6e:2c:b4:59:64:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 27 23:04:57 2025 GMT
            Not After : Feb 26 23:09:57 2026 GMT
        Subject: CN=6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:b2:c0:6b:6d:33:bf:02:e1:2d:4c:e9:c9:
                    5f:46:88:64:5b:6d:ad:e6:82:c4:d5:8a:76:df:2e:
                    ad:a5:be:cc:c7:9e:09:2e:49:7f:7d:b1:73:44:9c:
                    e7:11:f6:49:67:50:90:ef:97:c5:4a:c7:49:99:17:
                    e5:10:74:cc:d9:b4:43:ed:1f:8e:51:16:ed:8b:a7:
                    6a:bd:23:f4:87:ef:5a:27:9d:38:a3:af:4d:54:4f:
                    15:d3:ee:24:d5:e7:7d:84:ac:0c:54:ce:94:5b:93:
                    3d:da:a8:15:cd:d8:ae:63:f7:22:48:bd:27:60:a6:
                    3c:83:03:cf:02:1f:91:63:2d:62:c4:c9:9b:ad:36:
                    36:e5:05:4f:04:73:61:0a:73:e3:60:26:d0:4f:95:
                    60:35:1e:8f:cf:09:bb:13:21:fd:75:40:ca:c1:b1:
                    83:40:39:6e:d0:58:a3:8e:00:e5:e8:aa:92:fd:39:
                    d0:84:c3:3f:be:ac:2a:b9:ad:5e:76:b1:d7:74:27:
                    57:79:e3:7e:e6:a5:a9:3e:cf:be:17:14:4d:32:6f:
                    22:bc:56:d3:7e:e7:6b:d7:9e:aa:22:34:0f:d4:a4:
                    bc:eb:00:5c:e0:88:66:f4:e7:bc:b1:5f:24:44:c5:
                    40:b5:d8:66:cf:0a:04:57:72:fd:82:b6:6a:cc:72:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:23:CA:B2:BE:FE:4D:19:6A:27:73:07:FF:D8:F5:BF:1D:E7:2C:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.160.0/20
                  201.77.128.0/20
                IPv6:
                  2804:95c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28654

    Signature Algorithm: sha256WithRSAEncryption
         b5:5b:5c:52:a7:2a:9d:2c:e7:0e:c2:a0:29:38:91:8e:68:90:
         a7:fd:f3:fb:27:d4:44:25:76:eb:d1:6b:e3:37:05:a7:e1:7c:
         00:50:0e:1f:4f:4e:5a:ff:5a:2c:6c:e8:be:0d:4a:95:19:a0:
         aa:15:a4:7b:7d:f2:62:b8:20:74:13:6d:db:1f:31:63:fe:9c:
         dd:81:e9:1c:41:a6:ec:71:f8:72:86:cd:b4:0d:08:6c:77:b3:
         f7:83:42:3a:b0:cc:35:31:20:46:9a:ca:7f:33:ca:89:0c:60:
         e4:f8:1d:33:1d:08:5e:85:06:b1:ca:7e:3b:9b:dd:19:90:d5:
         33:bc:06:10:6d:c2:9b:c7:a0:de:5f:49:0e:7c:87:84:2c:da:
         ec:3d:df:b0:41:f4:cc:1f:22:54:e8:05:df:14:0f:30:76:6a:
         21:81:1b:78:35:ad:0b:c5:af:68:da:d2:74:64:1e:f4:c7:6b:
         bb:b5:d5:c2:9d:72:39:ca:0f:03:ed:d1:f9:79:cd:57:5f:c3:
         1e:f3:8e:90:31:5f:69:95:25:b3:97:a0:7d:36:21:19:f1:f0:
         df:9b:c9:90:4a:c0:06:46:46:58:42:ca:b2:a9:27:c0:b3:88:
         72:da:3f:8c:b4:21:94:6d:14:b2:8f:7b:cb:ce:5b:09:b7:1a:
         8c:bb:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:54:58 2025 by rpki-client