Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.cer
File:                     6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.cer (raw, json)
Hash identifier:          UrS6JdYoeyMxlro2nSZdL+HhIgIL41VMuTOzBWCeoxo=
Subject key identifier:   6B:2E:EB:1D:41:16:F5:E9:C2:00:9B:49:AF:67:42:F0:97:01:CD:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CB0C88703906C1F35C7AC0C239CA7910055E82A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 10:02:53 +0000
Certificate not after:    Fri 06 Mar 2026 10:07:53 +0000
Subordinate resources:    AS: 271057
                          IP: 179.48.228.0/22
                          IP: 2804:7598::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b0:c8:87:03:90:6c:1f:35:c7:ac:0c:23:9c:a7:91:00:55:e8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 10:02:53 2025 GMT
            Not After : Mar  6 10:07:53 2026 GMT
        Subject: CN=6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:7d:2c:68:40:cc:3b:69:07:dc:96:1b:89:
                    73:e7:31:e4:a6:21:49:1a:c0:da:7e:79:1f:31:20:
                    42:a0:fa:eb:c1:7f:d1:67:6d:da:43:f3:a6:f8:b6:
                    29:12:a7:4c:77:eb:7e:13:d3:bc:41:1b:c1:5f:4d:
                    3d:1b:90:ce:5c:59:42:82:e0:1b:6d:f8:59:aa:2b:
                    ad:4f:8f:89:68:c9:90:43:27:70:15:02:06:df:dc:
                    a6:a0:cf:92:24:0e:9c:67:c8:fd:63:ef:b7:f1:00:
                    8c:31:5e:c1:7e:c6:79:f5:a7:15:1c:30:dc:2c:8e:
                    25:47:3c:8d:35:c3:95:44:48:48:38:c6:d9:d0:6d:
                    a1:9e:9a:ed:51:b9:32:ba:9c:18:8d:52:41:5c:cc:
                    23:a3:7b:c0:f5:81:8e:f2:46:94:91:1b:4a:66:91:
                    55:88:1c:9e:1d:58:15:6e:b1:74:7b:80:45:5b:88:
                    83:41:62:09:01:76:8f:6d:bc:98:fb:41:fc:e5:cd:
                    9b:3c:cb:5e:27:91:67:61:f1:df:f9:c0:ed:2d:7e:
                    0f:b2:3b:04:bc:5e:db:53:f7:d5:fc:18:5b:7b:d5:
                    fe:51:59:b8:d1:6b:f1:9e:02:25:ad:28:e3:34:3b:
                    db:2d:4d:91:f8:6b:4a:bb:7b:85:bc:f4:39:45:3a:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:2E:EB:1D:41:16:F5:E9:C2:00:9B:49:AF:67:42:F0:97:01:CD:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.228.0/22
                IPv6:
                  2804:7598::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271057

    Signature Algorithm: sha256WithRSAEncryption
         92:77:85:ac:01:c5:1a:d2:2c:33:9c:d5:88:e1:2a:01:29:3a:
         38:c2:70:88:64:fb:04:12:39:c2:73:27:4b:57:ae:fd:61:f0:
         88:33:d9:4c:d1:29:78:7e:4d:10:0c:71:8b:e8:c7:bd:ca:98:
         a5:0d:23:a0:64:7b:ea:fc:05:75:e0:0a:f2:81:7a:b8:3c:15:
         4b:d9:67:c7:62:20:a2:7d:fa:83:9a:13:e6:c2:9e:05:ba:88:
         11:b1:a3:5f:60:a7:cc:fb:50:3f:6c:e2:63:92:53:f4:a3:12:
         2b:05:40:ee:8e:ae:5d:b0:91:76:79:dd:f6:17:ef:02:3f:23:
         a7:c6:f2:df:06:36:3b:83:cb:9d:b3:dc:8b:6a:d3:e2:5f:07:
         c6:95:c8:89:9b:e2:2f:5f:be:f1:1f:56:e3:33:13:7c:cc:df:
         58:15:56:32:ab:61:e3:7e:b5:95:bd:90:29:a2:8f:d0:d0:2b:
         e5:b7:3d:61:12:82:5f:a9:6f:b5:8b:37:04:b6:17:e0:ac:25:
         02:cc:3e:52:1b:d4:7d:74:e8:fd:8a:0b:5f:0f:12:aa:b2:74:
         03:40:0b:e4:ce:62:37:58:8f:42:2f:5e:b7:21:53:df:ce:71:
         96:31:85:e1:54:71:d3:f3:ca:f8:4d:d9:ae:d4:78:f9:57:ee:
         ca:37:ea:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:20 2025 by rpki-client