Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.cer
File:                     6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.cer (raw, json)
Hash identifier:          CizZsvQzTW0RBrRpsG6DlwR4eQA0aONRAPNBSZzwi1o=
Subject key identifier:   6D:ED:74:9A:D5:16:1F:BE:93:6E:32:78:FD:D4:EF:C0:6A:5D:5E:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       173995CB6B3207439BAE3B568A0D1A955CFC411F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 20:52:43 +0000
Certificate not after:    Thu 08 Jan 2026 20:57:43 +0000
Subordinate resources:    AS: 264577
                          IP: 138.36.116.0/22
                          IP: 2804:21d8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:39:95:cb:6b:32:07:43:9b:ae:3b:56:8a:0d:1a:95:5c:fc:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 20:52:43 2025 GMT
            Not After : Jan  8 20:57:43 2026 GMT
        Subject: CN=6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:be:34:3e:14:27:59:62:b7:01:bb:16:73:
                    0a:7d:ec:eb:3c:73:b7:27:db:b0:83:b9:c1:96:73:
                    63:40:7b:1e:70:f4:a9:17:ab:e5:99:a4:f2:0b:e7:
                    71:5d:a8:c6:16:df:27:62:a1:0a:68:e7:ac:0c:49:
                    39:54:83:50:c4:15:00:c6:c6:6d:97:92:db:7b:e3:
                    6d:86:66:33:84:a5:eb:3c:12:e6:99:8d:ef:08:c2:
                    5e:34:f7:1f:dd:20:85:ff:a9:ad:ee:94:bf:09:cd:
                    ec:5e:ac:72:c1:39:56:64:46:45:9b:b2:a4:68:c8:
                    3d:d5:c3:dc:a8:9f:c2:08:ed:f3:8d:d7:c5:49:61:
                    b1:73:b5:e6:e5:50:68:b2:c8:66:c7:54:b6:94:f9:
                    ca:65:43:97:51:29:a3:1e:d3:28:cf:01:8b:4b:21:
                    56:c8:2f:c1:08:06:f7:41:75:8a:44:4e:66:af:f0:
                    25:58:db:47:da:1b:b0:95:f6:f8:71:96:74:84:a7:
                    37:3d:80:87:6c:fe:eb:5a:ce:d5:a6:a9:2b:68:91:
                    ed:cb:f8:c2:21:d5:34:a7:7f:4f:ce:7e:20:d9:60:
                    6a:12:77:1b:c0:1c:4b:00:c5:57:70:60:dd:64:af:
                    76:3a:9a:29:a8:42:f6:0a:c0:b1:a1:97:83:d0:3c:
                    18:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:ED:74:9A:D5:16:1F:BE:93:6E:32:78:FD:D4:EF:C0:6A:5D:5E:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.116.0/22
                IPv6:
                  2804:21d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264577

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:49:81:a4:cb:b8:3d:41:24:95:d9:08:c0:b5:0f:f0:14:
         89:36:44:f3:f8:62:4d:67:03:f0:36:13:9c:4e:6f:67:08:91:
         06:5b:2f:c9:ac:71:fa:bf:56:3f:ca:fc:bd:5e:b4:b9:02:c1:
         70:98:29:fb:65:67:ac:ec:26:45:cc:1a:c5:2e:45:bc:c9:0e:
         a6:d4:16:23:eb:cc:43:fe:23:30:1a:6c:3c:f4:b1:6c:1e:95:
         b2:02:71:87:98:d6:57:31:0c:67:a2:33:04:1e:11:89:35:b0:
         2e:cb:f9:b6:29:98:4f:f4:83:f6:09:16:50:e8:1a:44:f6:c4:
         2d:30:3b:13:c6:8d:56:64:5d:8e:90:80:b2:55:c8:3c:f9:f6:
         78:71:5c:ed:f5:35:79:82:9b:de:44:1b:d8:87:80:f2:5c:f2:
         4c:01:b3:c2:46:c4:dd:05:cc:97:40:d7:22:0a:b5:2a:d8:8c:
         fd:45:81:73:6c:9b:31:9c:aa:75:ac:24:55:64:fc:36:54:b4:
         d5:97:3b:92:61:9b:f9:05:fc:92:de:1d:c7:a9:16:f4:c5:1c:
         92:8f:f5:70:cf:6c:1b:19:f0:75:80:dc:84:26:79:0e:f6:49:
         05:82:d4:83:eb:56:8e:a2:fb:b6:cc:ec:8f:7d:24:2c:fd:dd:
         91:28:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:41:05 2025 by rpki-client