Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.cer
File:                     AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.cer (raw, json)
Hash identifier:          XeSK4rrnEgKaiw9MoTz3QcbSpPB4sckOvnwADZI6xIU=
Subject key identifier:   AF:AB:10:CE:6D:C6:17:64:DC:EE:9F:8E:1B:C6:7B:5B:D8:A6:19:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       64490E7925797AB0A00F334987962808E99ECF53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Mar 2025 18:46:37 +0000
Certificate not after:    Thu 19 Mar 2026 18:51:37 +0000
Subordinate resources:    AS: 267369
                          IP: 45.234.176.0/22
                          IP: 2804:4c68::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:49:0e:79:25:79:7a:b0:a0:0f:33:49:87:96:28:08:e9:9e:cf:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 20 18:46:37 2025 GMT
            Not After : Mar 19 18:51:37 2026 GMT
        Subject: CN=AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:89:3d:14:90:8e:15:e2:bc:cb:e9:71:6e:
                    28:3f:1f:3b:29:c3:df:e1:55:8a:7f:01:2e:70:5f:
                    e5:5d:0e:60:19:20:62:db:c7:0f:41:0b:46:a7:39:
                    be:02:bc:92:d8:7e:2e:5b:ee:cf:87:ba:ed:94:7e:
                    73:92:fd:cc:e8:f3:4d:68:e8:f6:02:1c:5e:84:08:
                    39:7e:43:2b:40:38:a1:8e:e7:ce:47:11:c2:fd:cf:
                    e3:5a:f6:d2:f2:0a:00:7b:94:79:ac:34:b3:c3:b3:
                    a2:5e:ef:59:02:88:23:1f:b7:e9:ee:c9:a4:0b:d7:
                    9e:9d:d3:63:b5:3d:48:81:cd:25:65:eb:c9:d9:94:
                    38:f5:a3:3d:e2:8f:10:8d:06:6c:26:01:71:07:02:
                    a8:10:a1:61:36:df:c3:d0:ab:82:85:a5:c3:11:48:
                    96:7e:b2:04:7d:42:6f:70:d5:54:2c:be:a8:36:2a:
                    96:aa:a7:82:c3:32:e0:c6:e3:26:f3:1d:7b:ec:08:
                    cd:e1:ef:b6:0d:25:d5:13:e7:7a:1e:4c:be:e3:83:
                    52:0c:17:14:e0:b8:24:22:6b:2e:60:54:89:82:15:
                    46:ab:46:eb:20:10:2a:a4:cd:2c:a5:4b:ef:89:00:
                    fe:aa:97:db:e8:a9:4a:8b:44:05:e8:90:ec:fe:69:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:AB:10:CE:6D:C6:17:64:DC:EE:9F:8E:1B:C6:7B:5B:D8:A6:19:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.176.0/22
                IPv6:
                  2804:4c68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267369

    Signature Algorithm: sha256WithRSAEncryption
         21:05:2d:73:25:64:66:86:2e:86:b1:7f:be:f3:af:d3:1d:ec:
         82:4c:a4:9c:00:71:64:04:5a:02:85:98:f5:0f:6d:6d:38:68:
         62:39:80:c7:ad:c8:dc:1b:42:b2:cf:5e:9e:49:33:92:a2:1b:
         ae:3b:fa:e1:b9:7f:bc:84:1a:4f:be:34:79:14:62:08:6a:11:
         be:84:70:d4:39:48:d0:1b:93:3a:72:d5:b5:7a:b9:c7:7b:7d:
         ab:4b:b9:5a:84:50:2d:0d:79:7c:03:1a:4d:91:80:fe:33:d3:
         07:dd:92:68:41:f2:b2:f5:b8:23:07:5a:1b:76:90:13:b3:46:
         40:5f:35:56:a2:75:48:36:38:88:9a:4c:6e:84:2f:85:cc:66:
         c5:9f:9e:6f:e6:21:28:57:61:a3:af:0b:95:c1:d1:3e:d2:56:
         dc:e8:cc:1f:6b:58:8b:4a:e9:fb:0c:b4:81:85:e6:81:65:7d:
         9f:c7:9b:27:60:b1:63:3c:ea:ba:86:67:c1:d2:52:39:dc:44:
         45:f7:f4:91:fa:83:36:f2:4d:bc:65:61:4f:92:91:ad:1a:30:
         9d:e1:a5:c9:50:d4:e6:a8:3f:73:de:0c:58:f2:cc:98:61:49:
         3b:5e:1d:a5:d1:ee:0e:55:15:b0:ba:ce:87:9f:be:e5:c7:1f:
         0e:aa:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:05 2025 by rpki-client