Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.cer
File:                     6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.cer (raw, json)
Hash identifier:          iONt4cS0ZFU89XFBLRIUwzsXthuzq0SvgLLOhy2G9/M=
Subject key identifier:   6E:28:1E:13:B9:B4:E1:B6:E2:C7:5C:82:B6:D4:7A:A8:7E:9F:03:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0AB48717CA3AF153DF9C9E4A255D2F24C8BEB376
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Jan 2025 23:15:48 +0000
Certificate not after:    Mon 05 Jan 2026 23:20:48 +0000
Subordinate resources:    AS: 271296
                          IP: 192.145.220.0/22
                          IP: 2804:7948::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b4:87:17:ca:3a:f1:53:df:9c:9e:4a:25:5d:2f:24:c8:be:b3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 23:15:48 2025 GMT
            Not After : Jan  5 23:20:48 2026 GMT
        Subject: CN=6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:cd:8a:ec:d1:97:9a:6d:46:d8:d7:d0:57:
                    22:6d:2f:16:8a:81:dd:a5:4f:5c:c0:07:21:11:39:
                    8d:0a:9e:3e:cd:7e:9d:50:df:50:2a:22:51:e0:06:
                    e5:f2:cb:d2:cd:76:e6:ef:01:e2:32:12:39:d6:df:
                    02:da:e6:fe:d4:36:41:f2:6c:0c:bc:69:b1:96:0a:
                    e8:9e:6e:81:12:c8:4e:e6:52:36:54:49:76:9b:72:
                    a4:c6:29:aa:d6:53:f6:de:0a:c8:76:37:d1:14:99:
                    29:0a:2f:cf:d6:66:04:68:d2:82:e9:e2:78:53:d6:
                    14:7e:14:f1:a0:dd:6e:01:94:35:54:5b:7b:a3:68:
                    82:70:24:a5:f1:04:0b:72:62:cc:07:6c:53:de:25:
                    7e:32:15:b1:08:8d:46:fc:d7:46:57:be:17:2d:4b:
                    00:e7:31:83:a3:04:d8:71:35:76:f6:bf:4d:3c:ba:
                    b1:23:f7:d5:37:62:0c:a8:63:78:72:7b:bb:a7:f3:
                    4b:3c:d4:c7:c3:4d:29:0f:a8:91:3b:06:e6:58:8a:
                    50:16:34:69:45:20:a8:6a:f3:fc:60:fa:b2:6a:6f:
                    31:70:86:c3:a8:31:cb:30:92:02:0b:ad:66:c7:7f:
                    c5:89:1e:66:e0:a1:1a:65:73:27:d4:a2:a9:11:b9:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:28:1E:13:B9:B4:E1:B6:E2:C7:5C:82:B6:D4:7A:A8:7E:9F:03:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.220.0/22
                IPv6:
                  2804:7948::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271296

    Signature Algorithm: sha256WithRSAEncryption
         54:98:8a:66:c0:61:b0:15:5f:d4:56:4b:15:ff:7b:0d:46:21:
         77:f3:5c:65:41:ff:82:81:52:00:9d:b6:91:b4:a1:de:c4:a1:
         95:0b:e4:17:d2:3b:19:af:0c:bd:4e:d5:a0:d1:ea:fa:06:05:
         3f:ec:59:c3:73:73:68:25:1e:66:35:c6:e1:0d:da:dc:ba:80:
         b7:5a:84:9a:6c:1c:e5:30:32:40:15:0a:c2:9f:c4:88:69:af:
         e3:1f:f8:0c:a1:95:b6:7f:6b:c8:e0:a3:a4:fc:8f:71:70:9f:
         40:7f:97:91:ed:dc:52:1d:84:9d:42:a1:7a:2e:43:60:46:e1:
         aa:53:d8:8c:43:3d:4e:47:5b:4c:ec:92:f2:0f:19:65:2c:8b:
         63:63:b5:4f:c5:8a:e8:64:74:23:5c:67:40:8d:5e:b7:a4:d7:
         07:c6:d5:03:84:5b:f7:58:31:39:76:87:aa:46:d7:a1:04:7e:
         42:ff:72:9a:f9:65:b7:f2:ab:c4:ba:30:61:0a:76:46:e0:70:
         17:5a:e6:5d:17:2e:d3:92:24:ad:22:c5:17:71:1f:8c:84:ff:
         a9:22:a9:cb:19:44:56:5e:8e:6b:e9:8e:1c:9e:92:da:b9:4f:
         9f:7c:3f:3e:ae:40:c9:20:c6:11:16:7f:f7:09:1c:90:67:5b:
         e6:68:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:28:25 2025 by rpki-client