Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
File:                     6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer (raw, json)
Hash identifier:          1afXxS64m1cxbTijRkKm3sCb6ToxFJHWSKqbBr/FVsg=
Subject key identifier:   6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D200ADE614F26FCD6D11E2E687BA06268E0E386
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 06:26:33 +0000
Certificate not after:    Thu 05 Mar 2026 06:31:33 +0000
Subordinate resources:    AS: 16685
                          AS: 18836
                          IP: 200.185.0.0 -- 200.185.191.255
                          IP: 200.188.192.0/20
                          IP: 2001:1280::/32
                          IP: 2804:3a10::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:20:0a:de:61:4f:26:fc:d6:d1:1e:2e:68:7b:a0:62:68:e0:e3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 06:26:33 2025 GMT
            Not After : Mar  5 06:31:33 2026 GMT
        Subject: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:8b:76:c1:e7:ce:20:f5:c2:a5:92:6e:52:
                    46:17:78:96:09:a0:c4:bc:78:e0:5a:b6:30:7c:de:
                    69:56:f0:78:2b:50:0c:3d:ed:e2:67:0f:5f:b9:83:
                    f6:51:67:7f:e5:e2:cf:3b:79:b3:79:fb:22:40:55:
                    f8:43:80:14:2b:1f:31:98:a9:56:18:0a:cc:f8:52:
                    e1:cd:4d:73:09:69:c8:64:41:0e:f5:9d:8f:d2:e6:
                    83:c4:6f:d1:04:cf:07:0a:51:96:c9:a9:55:e8:ae:
                    b2:47:ef:83:23:4c:c5:c9:56:70:b2:1c:3e:b6:b6:
                    da:f8:89:57:f2:8e:1e:67:0d:40:cc:94:d4:d9:6d:
                    ed:a9:e9:44:2b:10:32:ef:ef:e5:bd:b9:b3:03:29:
                    6f:d2:81:4f:bc:9c:0c:82:2f:9f:6c:a8:ce:83:c3:
                    1c:8f:e2:1d:be:0a:9e:4b:cd:b8:1f:7e:b8:89:fe:
                    43:6d:1b:25:a2:e7:7a:c5:e9:64:e7:85:c1:16:c8:
                    d3:4d:0b:98:6c:99:c4:be:62:89:af:da:dd:4e:63:
                    d7:91:65:01:1e:97:c6:9f:84:c7:83:15:9d:01:f1:
                    fe:1b:a5:a3:73:7b:6c:49:5f:66:09:82:bf:89:85:
                    5d:76:e9:7f:22:cc:7e:9c:63:ec:07:fc:dd:4e:ea:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.0.0-200.185.191.255
                  200.188.192.0/20
                IPv6:
                  2001:1280::/32
                  2804:3a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16685
                  18836

    Signature Algorithm: sha256WithRSAEncryption
         8e:7f:98:db:9e:67:e1:b6:db:04:b1:b6:2d:81:a5:fb:29:19:
         35:37:14:3c:65:79:1a:c1:e8:c6:27:41:74:a4:94:50:ce:1a:
         b1:91:87:c4:06:b1:96:b0:6a:ea:0b:98:15:37:31:11:db:58:
         f6:f1:6d:d0:2a:f7:3a:4a:b2:35:9a:8d:85:a5:eb:ca:5e:b1:
         11:29:f9:0a:77:6e:5e:8b:9c:19:2e:e0:e9:d6:61:ee:54:00:
         e4:3f:d4:e5:ca:0f:a1:40:fc:77:76:59:5e:25:6c:0d:7b:c4:
         3d:dd:f4:23:54:e5:ec:b5:ef:f2:35:14:18:22:9f:09:c2:67:
         67:18:c8:e9:26:c7:3e:5d:d3:a1:10:bd:9a:29:c7:90:f8:14:
         69:07:bf:2d:ef:67:a4:89:75:5f:7e:db:be:22:2d:3a:5e:38:
         65:6f:d1:86:6b:62:be:ff:c7:1f:6a:b2:62:18:d0:b7:29:d9:
         12:c3:7c:7b:2b:c9:8b:69:05:a6:ca:39:41:e6:4f:ab:6c:82:
         2a:be:3f:47:89:12:fb:69:c8:94:2c:37:f7:ce:84:96:0d:e9:
         69:f7:0d:1d:bc:3e:8c:80:10:3d:b0:3d:19:11:79:c2:a5:10:
         32:c8:9a:b8:63:17:5f:2d:37:ea:45:90:13:20:fe:54:a4:c9:
         e1:b3:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:45 2025 by rpki-client