Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A6C451C3D9CBEE78C109FBA26AD480C438F82042.cer
File:                     A6C451C3D9CBEE78C109FBA26AD480C438F82042.cer (raw, json)
Hash identifier:          OgaSt+l9qFpD5lPqU7F1fl8kFC6jS9DoSBfP061oXek=
Subject key identifier:   A6:C4:51:C3:D9:CB:EE:78:C1:09:FB:A2:6A:D4:80:C4:38:F8:20:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A33E26C677E42CC1136501D1E7AA7E92226E92F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/A6C451C3D9CBEE78C109FBA26AD480C438F82042.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 19:38:53 +0000
Certificate not after:    Mon 21 Jul 2025 19:43:53 +0000
Subordinate resources:    AS: 262438
                          IP: 177.52.64.0/21
                          IP: 2804:31c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:33:e2:6c:67:7e:42:cc:11:36:50:1d:1e:7a:a7:e9:22:26:e9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 19:38:53 2024 GMT
            Not After : Jul 21 19:43:53 2025 GMT
        Subject: CN=A6C451C3D9CBEE78C109FBA26AD480C438F82042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:bb:f4:e3:23:80:06:89:51:cf:61:6f:fa:
                    3a:c7:25:34:72:51:d4:e2:ec:fe:bf:aa:57:00:9b:
                    37:48:10:96:91:6e:d8:94:fd:10:a8:a1:31:8f:fa:
                    20:97:31:7b:8e:01:28:4c:ec:8b:39:b4:5f:b8:2e:
                    61:8e:06:8f:34:59:bd:40:2d:eb:21:74:2d:e5:c3:
                    4e:4d:81:bf:6f:d1:50:f4:b9:ef:00:65:6a:5e:8a:
                    7b:68:d4:43:ae:9a:b5:10:69:71:3a:9a:db:77:17:
                    a0:d1:50:3a:c6:8b:67:8d:d4:af:aa:99:25:1f:b6:
                    6a:a2:3d:4a:a7:38:a3:03:19:1e:2b:af:4e:d3:0d:
                    7b:59:08:3d:21:10:66:fd:e5:d2:72:7d:b8:6b:13:
                    fa:68:7b:3e:93:d8:e1:16:01:bb:99:e0:0a:c2:49:
                    ed:90:79:d7:4a:78:1e:07:e9:e8:6f:10:ed:b5:df:
                    dd:68:bb:06:60:90:c5:bf:fb:07:28:06:c0:1f:05:
                    38:63:0f:c6:fc:40:6b:64:7f:7c:4d:8c:00:e2:28:
                    6f:57:06:a2:f5:f6:43:36:a1:4d:27:2a:e1:8f:79:
                    49:1a:e3:9b:ff:8e:d3:88:10:a3:3f:b0:0d:33:6e:
                    1f:b9:14:96:10:58:d5:50:58:99:7a:40:b3:7f:89:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:C4:51:C3:D9:CB:EE:78:C1:09:FB:A2:6A:D4:80:C4:38:F8:20:42
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/A6C451C3D9CBEE78C109FBA26AD480C438F82042.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.64.0/21
                IPv6:
                  2804:31c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262438

    Signature Algorithm: sha256WithRSAEncryption
         77:c1:64:49:27:43:3e:4c:b0:2e:8d:56:7e:f5:1f:b5:0c:4e:
         67:53:78:2c:bf:50:a5:32:d9:b0:50:86:cf:85:bc:a9:9c:7c:
         3e:7a:e5:68:a2:32:04:8b:f2:b5:69:9b:69:3d:22:49:f4:fc:
         cc:2a:06:53:ee:f8:21:5a:cb:6e:dd:14:8a:bd:29:80:a5:8d:
         38:f2:ab:73:d5:b6:4d:ad:52:e2:ee:9c:4b:14:df:a9:1f:74:
         df:7d:d3:4b:a5:a1:25:18:89:82:3d:ff:95:b7:bb:ad:6f:69:
         4c:ff:56:4e:33:e5:c8:23:51:36:47:40:2a:17:a7:d1:3d:64:
         77:d1:65:46:4c:78:b2:1a:39:f0:45:a0:dc:54:48:69:45:69:
         ed:77:fc:4a:a9:f1:c9:b2:31:e6:f7:84:e9:df:29:fc:55:1c:
         0b:1b:da:b2:1f:8b:b0:ee:18:5d:00:76:2e:a4:d1:cb:0b:59:
         f1:d7:fa:64:4e:0e:20:af:f0:e8:2c:bb:38:ce:0a:2c:48:19:
         5f:e1:42:cf:69:65:df:7a:68:f9:71:41:c8:34:03:7a:34:4d:
         fb:0a:96:f2:52:71:be:65:9e:0e:8d:ed:51:d6:ab:d6:b5:cd:
         54:ae:31:64:04:85:f5:b7:09:58:f6:0c:6e:f1:c3:da:57:81:
         9c:66:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:47 2025 by rpki-client