Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer
File:                     6F5278DB8F876783903A082AEFA62867B10AC72E.cer (raw, json)
Hash identifier:          UHyL1Od+KfW8jZPCVdBzAvkpGp1/nrwXRupXDcSnQLc=
Subject key identifier:   6F:52:78:DB:8F:87:67:83:90:3A:08:2A:EF:A6:28:67:B1:0A:C7:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71DB8D43E12D2E32744195960DAFE00357814EB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 08:31:58 +0000
Certificate not after:    Fri 06 Mar 2026 08:36:58 +0000
Subordinate resources:    AS: 265896
                          IP: 128.201.188.0/22
                          IP: 2804:3f7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:db:8d:43:e1:2d:2e:32:74:41:95:96:0d:af:e0:03:57:81:4e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 08:31:58 2025 GMT
            Not After : Mar  6 08:36:58 2026 GMT
        Subject: CN=6F5278DB8F876783903A082AEFA62867B10AC72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:5c:f7:67:9d:8a:f1:e0:84:ee:d9:2f:e2:
                    7b:5f:71:9d:5e:b7:c0:e2:d8:4c:90:48:67:4e:e6:
                    61:33:08:75:4b:65:7a:63:2a:9d:63:d2:3a:79:4f:
                    97:eb:06:4a:0f:84:92:b6:8d:9e:f9:e1:cc:c9:c7:
                    69:3c:81:2f:0c:3f:74:99:a8:11:3a:db:78:c0:35:
                    50:c7:45:bf:f1:36:14:34:38:2c:45:33:9a:3e:07:
                    30:f6:01:c3:82:3a:cb:1f:36:ac:df:5a:68:9c:b3:
                    5d:63:92:99:0a:b0:8a:1a:86:f8:7c:4c:28:68:47:
                    ad:cd:64:22:a6:1f:91:a9:a0:39:e5:5a:26:36:68:
                    ab:0c:58:56:35:0f:77:1a:21:97:6b:1a:19:b8:a8:
                    f1:a3:4f:44:c0:8e:a8:0d:ad:ee:37:74:83:fa:4c:
                    d8:e5:d5:15:1f:e2:1b:85:8f:d1:75:03:d5:54:1b:
                    0a:53:96:e1:ec:2e:25:3b:e5:1f:95:38:c5:c0:d1:
                    70:e9:01:20:ae:da:41:0f:c7:30:02:e5:13:ce:7f:
                    d3:db:38:89:74:20:c7:e2:c7:61:20:dc:1b:76:a7:
                    59:38:0d:d6:68:99:82:89:9b:a7:eb:3a:68:90:a3:
                    4e:4e:00:b6:f9:e2:89:99:de:ee:09:3f:a8:94:1f:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:52:78:DB:8F:87:67:83:90:3A:08:2A:EF:A6:28:67:B1:0A:C7:2E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.188.0/22
                IPv6:
                  2804:3f7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265896

    Signature Algorithm: sha256WithRSAEncryption
         aa:51:4a:cf:72:0f:25:44:1b:08:8d:a6:4c:41:bc:1b:3a:37:
         b3:80:7f:fe:bb:d4:c4:c4:35:14:69:a3:c3:96:2c:d7:c7:ab:
         17:7c:77:f3:2b:f9:56:9d:b0:85:8a:a0:dc:fb:79:53:ca:a8:
         72:94:9c:ed:e8:42:77:40:ea:a1:5e:1b:bb:b1:f6:86:1a:ef:
         15:df:16:8d:78:a9:f4:1d:4a:b7:1b:d2:bc:33:79:7a:37:79:
         35:b9:23:d6:2d:53:bf:65:9b:54:0f:3c:7b:67:46:cc:c6:7f:
         ed:83:eb:40:46:b0:5b:61:51:79:48:5d:e7:1a:5e:bd:31:88:
         24:c3:c0:fa:3e:ad:90:38:94:3e:e2:67:3c:7f:df:c7:c2:a6:
         9e:94:42:04:ce:08:f8:58:9d:54:77:ae:3c:30:96:78:4a:3e:
         a4:48:fb:f8:8b:f8:e5:4c:69:51:92:93:3e:3d:b9:af:ac:e1:
         45:66:30:3f:fd:d4:a3:0d:6f:40:0e:08:75:4a:ff:a2:df:09:
         1c:e3:31:41:76:0e:7b:cc:6d:a8:ae:c5:e8:9b:ef:6e:9c:d6:
         93:32:3e:cc:23:00:12:b3:1b:cb:90:df:b2:fb:98:18:51:27:
         ae:bf:b6:22:d9:3a:4b:0f:2d:20:75:2f:6f:07:d4:1b:c8:f6:
         48:4a:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:55 2025 by rpki-client