Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EFCA001487167C1DEB4618A143333F6D08C3710.cer
File:                     6EFCA001487167C1DEB4618A143333F6D08C3710.cer (raw, json)
Hash identifier:          kHwQc1QQm86W9JrUrC1485DrVEA+WIIlHz6lYQGGACE=
Subject key identifier:   6E:FC:A0:01:48:71:67:C1:DE:B4:61:8A:14:33:33:F6:D0:8C:37:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3849CB05E1D47AF54068F349C2147BA907AB8ECF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/6EFCA001487167C1DEB4618A143333F6D08C3710.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Jan 2025 16:46:18 +0000
Certificate not after:    Mon 12 Jan 2026 16:51:18 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 168.194.248.0/22
                          IP: 2804:6368::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:cb:05:e1:d4:7a:f5:40:68:f3:49:c2:14:7b:a9:07:ab:8e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 16:46:18 2025 GMT
            Not After : Jan 12 16:51:18 2026 GMT
        Subject: CN=6EFCA001487167C1DEB4618A143333F6D08C3710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:bc:f1:2b:89:a5:b6:c6:1b:4c:f1:ce:da:
                    0d:2b:bc:27:e2:da:63:e0:a1:69:48:c2:23:0e:a9:
                    29:4e:43:91:e7:55:52:04:e1:5c:50:16:6c:ca:a1:
                    36:92:3a:e4:81:51:31:bf:dc:88:8c:7a:01:1f:f4:
                    63:0b:29:f7:7a:06:57:6d:0b:99:09:8b:d2:3d:83:
                    ed:7e:55:39:e7:69:61:31:52:22:1f:21:af:05:31:
                    6e:6f:d7:28:10:65:81:87:ca:f3:84:02:32:64:6e:
                    63:11:c6:32:28:a0:6f:47:d4:dd:c4:8e:a8:db:68:
                    6c:55:10:b7:38:b5:93:c7:22:d9:cd:10:f2:9d:d5:
                    36:7c:68:c6:fe:09:3f:e8:84:d0:1e:ea:31:02:73:
                    35:92:96:65:ed:cb:e8:3f:1a:c2:54:ad:a4:fd:cc:
                    fa:7a:95:99:d9:15:e8:02:b4:36:76:57:5f:c2:34:
                    fe:e3:ac:d4:30:83:33:b0:bf:5e:45:47:45:5f:bf:
                    fd:4f:31:08:92:2d:c3:96:1e:93:ac:02:24:69:db:
                    84:70:28:62:a1:46:85:6e:37:32:49:75:d5:75:78:
                    26:c7:80:bb:21:67:00:03:1b:f5:13:3d:dc:b7:79:
                    8c:e3:16:f9:95:fb:9e:ca:a7:e3:7f:60:59:18:01:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:FC:A0:01:48:71:67:C1:DE:B4:61:8A:14:33:33:F6:D0:8C:37:10
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/6EFCA001487167C1DEB4618A143333F6D08C3710.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                  168.194.248.0/22
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:e0:32:bb:af:20:0b:d5:24:8a:eb:ab:6e:60:e9:6b:fb:
         28:70:27:d2:77:c8:7e:1c:57:50:fa:4c:5b:0c:e0:c4:bb:76:
         7d:d6:64:33:77:cd:b5:1c:c5:af:f5:4f:dd:7c:63:9b:fa:2e:
         eb:a6:9c:a1:b7:c8:6c:da:61:7a:78:7e:35:ea:69:93:df:b4:
         6e:bd:ce:58:dc:65:df:39:79:59:90:1f:a3:84:90:4a:7d:2f:
         ad:c6:82:1e:2f:6f:9f:5c:a7:c6:f5:a5:00:8d:9e:4b:d9:76:
         05:a7:d9:16:eb:23:c7:ca:80:71:75:12:7e:5f:9a:fa:ce:82:
         da:83:de:31:40:67:0c:b3:43:62:28:d4:26:09:03:11:c7:37:
         b3:bc:0f:c8:03:b7:aa:de:29:63:ae:cb:80:6d:74:d9:e0:35:
         8e:ed:45:97:a2:40:cc:1a:2a:9a:33:97:41:50:8f:33:70:3b:
         af:e8:3d:df:57:c3:24:ba:cd:87:dd:6f:20:a2:cd:f0:b4:ad:
         dd:2f:81:a9:a7:6d:4b:38:ab:07:88:63:84:21:50:3b:8a:bb:
         e3:6a:10:e0:6f:1f:27:fa:40:75:5d:4c:b5:5e:cc:ee:3e:4d:
         78:c8:92:56:3c:59:b2:e6:61:ce:96:d5:e0:b4:84:5b:3c:5a:
         64:00:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:37 2025 by rpki-client