Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
File:                     805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer (raw, json)
Hash identifier:          3cnptV/XpnAdaRtwWEMAORDL1qvm640cBCactLwVdYc=
Subject key identifier:   80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2EF1C2EAAA45540B56E609930DE41FEAFAD63D1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 01:45:58 +0000
Certificate not after:    Fri 06 Mar 2026 01:50:58 +0000
Subordinate resources:    AS: 266029
                          IP: 170.246.60.0/22
                          IP: 2804:3968::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f1:c2:ea:aa:45:54:0b:56:e6:09:93:0d:e4:1f:ea:fa:d6:3d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 01:45:58 2025 GMT
            Not After : Mar  6 01:50:58 2026 GMT
        Subject: CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:88:02:cc:32:4f:d8:74:15:60:20:3a:1c:
                    77:de:24:a8:df:69:ff:7d:b7:f3:3a:ee:a5:98:52:
                    ef:87:58:a6:10:2a:80:98:fa:35:53:5c:86:49:82:
                    b8:aa:eb:cb:07:20:5d:e4:13:c5:50:14:9e:79:38:
                    60:9c:12:4d:34:92:71:50:ce:c3:de:be:67:fb:83:
                    51:b8:a9:3b:46:99:20:fa:5a:49:78:c0:26:5d:27:
                    36:d8:77:1c:fe:01:65:4a:fa:2e:76:54:a8:3c:2e:
                    fc:ed:c1:f1:a5:6e:7f:c9:e4:5c:76:3f:18:d1:2b:
                    2d:60:81:a6:31:93:4f:a7:30:1e:25:e7:ae:da:7e:
                    cd:1e:38:5c:17:47:36:c9:50:2c:6e:71:8f:00:df:
                    ad:d4:bd:72:5e:72:90:f2:49:d3:ce:18:bd:f8:23:
                    21:db:9e:26:c1:5d:8b:eb:c0:4c:80:08:43:63:02:
                    46:5e:cd:a8:76:61:24:f9:34:ef:83:61:7b:ab:70:
                    eb:41:8c:3e:4c:e6:5e:43:ab:6d:c2:d3:6d:5b:62:
                    37:ee:b8:33:db:2f:ca:a4:d4:8f:64:f1:c4:64:a7:
                    2b:e8:67:1a:47:bb:d4:7c:f8:e4:05:9a:bf:83:a1:
                    7b:d3:f2:12:f6:b2:ba:60:da:a0:39:43:07:94:c9:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.60.0/22
                IPv6:
                  2804:3968::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266029

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:43:6e:c7:d5:59:e6:0c:8d:ee:8d:75:84:12:55:46:56:
         5a:1b:c5:36:d8:8f:97:57:fa:93:c7:9b:f7:e5:e9:a6:df:8e:
         4d:17:b7:2e:b2:3e:27:d6:61:56:e7:bf:ec:38:4a:db:18:7e:
         42:17:6d:d4:28:0c:70:73:51:de:41:ea:3b:a1:e7:29:22:e1:
         2b:57:f9:f1:32:97:8d:7c:f5:33:35:5b:21:de:54:5d:5d:23:
         af:f9:f9:98:6e:e6:8c:76:96:a6:19:33:36:8a:97:d5:14:08:
         40:10:b4:ab:3b:bb:c6:db:eb:ce:a0:ff:e7:0f:8c:62:dd:35:
         63:f3:69:e8:5c:44:4b:01:a7:42:c5:61:4b:a4:66:3f:1f:48:
         c6:c1:44:32:c1:f5:ce:f4:bb:e6:b3:db:b4:5f:9b:1a:99:db:
         aa:12:98:4b:d3:23:e4:26:d4:96:e2:40:e6:7f:7e:45:07:3a:
         ab:53:6d:70:6e:21:be:6e:43:3a:ba:4d:5c:92:bb:bb:aa:3f:
         25:24:a2:9f:dd:43:47:74:c7:55:6d:d2:6a:fb:a9:2c:2d:c0:
         c2:97:01:82:82:94:91:82:56:4e:33:3b:00:f6:5e:cc:7b:4b:
         1a:48:fd:58:51:e4:84:ee:00:3a:01:26:4c:f0:ef:f0:fb:40:
         d2:6d:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:24 2025 by rpki-client