Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer
File:                     B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer (raw, json)
Hash identifier:          lauW7xUJdOO8yqJP6jpyBbtV7UFHixtcN+Qz8kx91Fs=
Subject key identifier:   B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BED05120B1791DF724B96B21760A2597945EF13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:37:31 +0000
Certificate not after:    Fri 06 Mar 2026 14:42:31 +0000
Subordinate resources:    AS: 268138
                          IP: 45.168.64.0/22
                          IP: 2804:5898::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ed:05:12:0b:17:91:df:72:4b:96:b2:17:60:a2:59:79:45:ef:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:37:31 2025 GMT
            Not After : Mar  6 14:42:31 2026 GMT
        Subject: CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:d6:69:b8:75:1c:0f:be:a6:03:0a:b7:f1:
                    e1:6f:c2:da:db:40:e4:60:8c:f0:b1:8f:81:aa:b0:
                    fe:6e:a7:7a:08:df:bc:9c:13:66:03:9d:e8:ec:dc:
                    4d:cf:61:04:8b:4f:db:da:11:ec:3e:19:c7:67:7c:
                    13:e2:93:b7:66:d9:32:bd:a1:ae:b9:fb:28:05:73:
                    b2:1a:0f:34:4a:92:d0:32:ba:fd:9b:a2:d2:f9:de:
                    8a:74:59:d7:e6:a2:f3:cd:0e:bc:b5:3a:a1:3f:fb:
                    95:d3:00:33:7d:e7:22:b4:00:52:e3:37:ad:1d:e5:
                    bd:d0:2a:3e:90:ec:bb:6b:c6:ac:24:62:91:1d:c1:
                    4a:fb:48:b0:a7:b6:0f:98:13:66:ff:39:c1:f3:d1:
                    a1:39:50:0c:63:9c:26:ef:fe:33:93:60:25:b2:69:
                    b0:d8:d4:66:48:96:c4:3f:f1:c7:64:1a:01:86:47:
                    2b:c5:6f:37:88:e5:9b:e2:f3:7a:81:03:14:d8:54:
                    7e:b4:2f:bc:54:32:49:d9:62:34:8a:8c:be:f5:f6:
                    bf:03:0e:4c:fb:7b:f1:d4:9f:b4:04:12:74:e9:7e:
                    88:a7:4b:32:d1:3a:30:93:f8:11:51:3b:a7:ed:7f:
                    f3:eb:c9:e1:7f:55:bc:3c:39:0a:cf:33:31:e9:f8:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.64.0/22
                IPv6:
                  2804:5898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268138

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:4b:7c:46:7e:0c:37:cc:8c:77:a1:e7:5d:e9:ca:30:c8:
         7f:3e:42:27:f1:44:b4:0e:6d:d3:ee:75:16:0e:9f:7b:d9:1c:
         a8:3b:1b:28:5f:eb:a9:2a:e9:d5:f8:f8:3f:ff:cf:6a:12:20:
         26:d3:83:6e:40:63:af:47:79:5b:62:be:82:16:bf:95:d1:dc:
         2c:33:42:e3:ce:84:99:11:7f:f8:1d:37:c2:f6:73:97:b9:83:
         c7:b8:f5:89:5a:5e:1e:2d:46:af:a0:9c:cc:04:83:8d:3d:7b:
         8d:92:4b:dd:9e:42:75:5a:3a:b3:2e:8f:a3:53:97:f5:22:ea:
         b6:da:0f:f4:fa:ab:0b:da:4d:7b:af:12:c9:7f:e3:4e:48:90:
         79:36:1d:a1:27:e3:6d:ba:fa:e6:1b:87:1c:98:99:2f:46:39:
         7e:18:b6:70:53:62:ac:b5:8d:6b:57:24:7d:d2:5a:ed:29:71:
         62:09:7b:dd:6b:09:d4:9e:1e:b4:f4:25:ec:9d:82:38:cf:e6:
         2b:ce:1e:5e:f5:b1:a7:d7:aa:ac:a8:7b:36:aa:69:aa:57:eb:
         17:8f:b4:c2:56:91:de:71:44:b1:ba:96:f2:92:29:1b:10:38:
         22:fa:f8:88:4b:71:d6:2b:2d:d7:05:eb:5e:75:4a:50:aa:03:
         e2:55:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:31 2025 by rpki-client