Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91.cer
File:                     6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91.cer (raw, json)
Hash identifier:          Ix9so+EMuUBorq5A4F8eKJ+Q5w3GJBaYXvllhAS78u4=
Subject key identifier:   6D:EE:E8:EF:6C:7A:1C:B9:1C:E4:CE:2B:3C:8A:25:07:C8:F9:1A:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FF7F092D5B05DF5F597350270D17B220B245DFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CcLWByRETn7csFpYwVkidtrNV8JyT8UhuXh6rtfWDepi/0/6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CcLWByRETn7csFpYwVkidtrNV8JyT8UhuXh6rtfWDepi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2024 16:08:03 +0000
Certificate not after:    Mon 22 Dec 2025 16:13:03 +0000
Subordinate resources:    AS: 267416
                          IP: 45.235.108.0/22
                          IP: 2804:4d2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f7:f0:92:d5:b0:5d:f5:f5:97:35:02:70:d1:7b:22:0b:24:5d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 16:08:03 2024 GMT
            Not After : Dec 22 16:13:03 2025 GMT
        Subject: CN=6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:83:bb:85:5b:0b:3b:ff:8c:d5:43:e3:7d:
                    8f:9a:bf:c0:b3:40:af:22:7e:f2:dd:08:31:cc:de:
                    ab:d8:de:4f:e1:54:ee:8a:0e:4b:43:53:f6:5c:25:
                    a6:fc:ce:04:82:90:2d:4a:26:2e:32:fa:90:a2:60:
                    2d:90:cf:59:12:7b:e2:af:f0:68:a0:af:ab:c3:cf:
                    6b:31:99:4f:43:3c:e3:7d:90:2e:6a:5c:bd:19:68:
                    32:e5:db:50:d3:f5:7b:fb:ad:ef:7d:a8:2e:8d:fd:
                    84:60:f1:8e:7a:0b:f3:3b:1b:3b:7b:3f:d5:57:dd:
                    e9:c5:4e:3f:27:2a:7a:13:97:e1:cb:41:93:97:51:
                    7a:49:de:15:e3:65:0e:a2:fd:02:cb:d1:a8:fb:7c:
                    fe:ba:5e:f4:f1:7d:e1:8f:fa:c6:4c:10:71:78:a0:
                    ac:35:55:9a:68:9e:6c:14:9a:13:bc:3e:c9:39:fc:
                    46:bf:50:b8:07:ca:3f:da:2d:d3:2d:83:96:99:bd:
                    d0:de:4b:06:80:ed:bb:07:ec:98:ea:ce:fc:13:16:
                    25:16:79:32:77:d4:16:08:b5:cc:41:0e:c1:b3:ae:
                    a6:b2:c7:a0:f4:e7:df:14:f6:4f:c4:8f:e6:54:44:
                    6e:ed:a4:4d:11:42:9f:28:e8:de:43:93:fd:7e:d5:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:EE:E8:EF:6C:7A:1C:B9:1C:E4:CE:2B:3C:8A:25:07:C8:F9:1A:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CcLWByRETn7csFpYwVkidtrNV8JyT8UhuXh6rtfWDepi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CcLWByRETn7csFpYwVkidtrNV8JyT8UhuXh6rtfWDepi/0/6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.108.0/22
                IPv6:
                  2804:4d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267416

    Signature Algorithm: sha256WithRSAEncryption
         cc:2c:6f:be:82:98:9a:a8:77:14:b6:16:ef:39:ec:63:70:c7:
         ed:ed:81:56:98:8e:43:fa:6a:e8:74:f8:70:e7:87:20:b4:a7:
         b8:30:a5:56:7f:c1:9c:c2:be:02:cd:a1:90:17:bc:38:05:9b:
         5d:64:22:c0:90:28:e4:4c:0e:4b:5b:25:47:09:6d:08:66:85:
         f1:2f:1e:80:da:66:7e:34:56:68:e1:2c:62:4e:f4:cb:f5:fa:
         08:5a:4d:02:0c:a3:5e:dc:fc:e9:c6:ff:15:6f:08:de:37:67:
         9a:89:b0:7b:b0:59:ad:37:2d:00:d5:4a:61:00:59:09:b1:4d:
         a8:e2:8c:2b:7a:3d:5c:ae:bc:04:ca:f3:93:a0:1c:ae:0f:55:
         11:9c:d7:28:ca:3b:40:22:a1:b0:28:d7:9d:92:b4:ee:a7:18:
         8c:9a:b0:3a:04:b8:31:d8:6d:35:31:6b:20:3c:50:dc:0b:c5:
         13:fb:d0:0d:67:37:1d:3f:8c:2a:e6:15:04:8a:38:13:7b:d9:
         c7:1a:e5:d9:aa:6f:fd:b9:9f:75:9c:c8:57:13:89:f0:f3:f6:
         ab:19:22:9e:c8:f2:19:a0:c8:d1:f8:6e:22:99:36:bd:ef:55:
         ae:9a:d6:08:75:cd:7a:00:ba:cf:8e:f2:ff:7f:ee:31:99:ef:
         87:d1:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:26 2025 by rpki-client