Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer
File:                     6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer (raw, json)
Hash identifier:          +MAg9XB6/SzujTPeCh7IE7LiPa6KHqE4q7cxVzVg5zY=
Subject key identifier:   6D:B7:07:2D:8B:61:7C:D7:C0:66:95:1C:21:53:EC:8D:11:74:2E:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04B5E6FFBCFAA2B97D0871D21F57B94084442592
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 17:00:05 +0000
Certificate not after:    Thu 05 Mar 2026 17:05:05 +0000
Subordinate resources:    AS: 266599
                          IP: 45.7.180.0/22
                          IP: 2804:3e7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:e6:ff:bc:fa:a2:b9:7d:08:71:d2:1f:57:b9:40:84:44:25:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 17:00:05 2025 GMT
            Not After : Mar  5 17:05:05 2026 GMT
        Subject: CN=6DB7072D8B617CD7C066951C2153EC8D11742ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:d8:16:cb:e5:93:eb:5d:63:bb:47:0b:86:
                    5f:76:b7:83:60:6f:c1:f1:bc:43:45:d1:fe:24:65:
                    da:55:33:c9:aa:e0:59:30:38:98:8a:bf:4a:f6:40:
                    8c:5e:01:e5:88:32:20:9b:51:04:b5:0e:0e:ff:f0:
                    9d:ab:92:4a:8e:28:7b:b4:f8:be:ba:c2:09:5c:92:
                    cf:9c:6e:14:77:e7:0c:3a:42:9c:c4:a1:ea:33:fc:
                    80:83:66:c0:b2:4f:40:bd:d7:b3:76:56:0d:65:20:
                    ee:b1:2b:6f:b5:6b:e3:ea:ce:3e:14:a9:07:06:a5:
                    f1:1a:6c:f0:6a:9b:06:e5:6e:8d:15:c4:f4:b8:d5:
                    74:85:e5:43:1a:88:15:e7:94:22:27:83:35:92:37:
                    f8:86:9a:f1:5b:3b:a3:9b:7e:dd:37:10:73:e5:74:
                    cd:02:78:ca:57:16:6d:99:a8:16:f2:2c:86:af:d4:
                    9e:82:a3:b8:39:fc:d3:ae:5c:b6:c9:5d:1a:16:62:
                    62:a1:46:b9:73:32:2b:be:11:4d:7f:b0:a6:5b:97:
                    be:bb:45:29:a2:0d:dc:8d:ba:64:e6:39:f7:06:ff:
                    80:11:15:28:b1:f8:74:37:c5:26:7a:fc:27:00:5e:
                    a6:6d:d9:2f:96:36:a4:d7:a6:38:6a:7b:34:c0:e9:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:B7:07:2D:8B:61:7C:D7:C0:66:95:1C:21:53:EC:8D:11:74:2E:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.180.0/22
                IPv6:
                  2804:3e7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266599

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:ec:cc:ce:8d:c0:2c:9d:ac:68:80:9c:10:04:a2:50:5a:
         96:19:be:88:4a:5e:0f:66:b0:7a:c7:fb:6c:da:8f:35:25:6e:
         1c:97:66:af:9b:8b:79:49:ad:28:d8:94:45:48:9e:56:26:46:
         a1:8e:c3:e4:ab:51:12:91:0d:0d:f1:4e:cb:a7:e7:53:29:f9:
         d6:ae:54:45:43:52:91:6d:b3:63:41:af:bb:b4:73:13:85:86:
         d9:0a:a0:3e:5b:57:fa:09:7d:38:7e:c6:8b:6a:3b:51:85:1f:
         bb:d4:05:ec:a8:f8:49:83:10:c4:a4:6e:86:9a:ec:0d:ca:cc:
         1c:04:fe:e5:47:65:fb:b6:0b:6e:fc:b1:ff:47:2b:0e:93:48:
         ad:f9:be:79:f6:db:83:1b:d2:06:ff:e9:6b:63:5b:8e:ee:be:
         62:ce:08:ff:da:b8:a8:dc:63:5e:b5:3d:30:2c:ac:37:8e:dd:
         39:19:1c:51:d7:39:57:70:b8:f7:28:f8:0f:be:f6:94:3e:76:
         b6:a1:60:b5:d2:c8:36:9d:28:4a:a7:7a:5d:eb:89:93:2d:86:
         47:32:67:78:71:7e:44:55:0e:eb:b3:95:30:be:99:48:16:b8:
         04:0f:70:df:28:b2:2b:4d:9a:4f:0b:3d:e8:f8:2e:92:99:d7:
         57:9a:89:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:21:31 2025 by rpki-client