Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C11AD8CBC2072D08E34E2ECA6D16A5F911244732.cer
File:                     C11AD8CBC2072D08E34E2ECA6D16A5F911244732.cer (raw, json)
Hash identifier:          RB9ODqgjxltD6IWU1TjlVN0pTf7wMRvcCQnQxE4BxqE=
Subject key identifier:   C1:1A:D8:CB:C2:07:2D:08:E3:4E:2E:CA:6D:16:A5:F9:11:24:47:32
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6EA818CC9491C13AB37731EAE793E1D043B43386
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/C11AD8CBC2072D08E34E2ECA6D16A5F911244732.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Feb 2025 16:26:41 +0000
Certificate not after:    Mon 02 Feb 2026 16:31:41 +0000
Subordinate resources:    AS: 270601
                          IP: 189.36.140.0/22
                          IP: 2804:6e80::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a8:18:cc:94:91:c1:3a:b3:77:31:ea:e7:93:e1:d0:43:b4:33:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  3 16:26:41 2025 GMT
            Not After : Feb  2 16:31:41 2026 GMT
        Subject: CN=C11AD8CBC2072D08E34E2ECA6D16A5F911244732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:bf:2d:db:3b:99:89:92:71:e4:6d:7d:41:
                    c4:a8:97:6d:7c:04:b6:8e:0e:a1:77:d1:c4:eb:b6:
                    d5:93:a2:55:0e:88:bb:41:0b:7a:1d:5e:72:04:83:
                    7a:98:f6:68:f8:e8:6e:7f:50:d3:1f:e9:a5:91:a7:
                    17:ae:4b:e5:aa:67:14:20:96:f3:fb:b0:63:cb:a8:
                    ba:8b:67:37:63:67:f6:f7:34:a1:06:ee:ea:9c:9b:
                    82:03:44:e8:9e:1a:57:86:12:e2:ef:6c:a2:fd:c2:
                    2d:9e:1c:b3:6c:b6:7d:dd:d4:4f:db:c2:57:c0:ce:
                    ec:d3:3d:0b:ef:c8:d6:b5:7c:ea:3b:2f:ec:e0:b8:
                    74:4d:86:00:87:61:78:65:96:6e:2c:01:ad:26:33:
                    e3:a6:6d:5f:6e:ee:e4:3b:70:86:07:cc:86:45:bd:
                    14:78:05:a4:9e:94:9a:84:50:2e:c1:81:07:04:f1:
                    2f:b7:0c:70:7d:9e:42:66:fb:72:6c:3e:f6:b9:25:
                    89:48:05:6c:cd:45:31:84:67:28:ae:be:03:c2:af:
                    ed:f2:4c:35:af:7d:04:1d:6a:1b:65:f4:af:45:04:
                    91:ee:5a:98:4b:05:1d:4e:e4:0a:fb:fa:ce:8d:a3:
                    a7:2d:5c:30:f8:6f:39:d4:97:dc:d7:1a:fb:03:f3:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:1A:D8:CB:C2:07:2D:08:E3:4E:2E:CA:6D:16:A5:F9:11:24:47:32
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/C11AD8CBC2072D08E34E2ECA6D16A5F911244732.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.140.0/22
                IPv6:
                  2804:6e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270601

    Signature Algorithm: sha256WithRSAEncryption
         a6:b1:c5:8c:8c:b4:b0:be:cc:49:fa:44:64:4b:14:e9:de:49:
         a0:78:65:bf:bc:4b:74:92:5e:7b:ef:e1:44:ef:4b:9a:a6:b7:
         69:f4:cf:e3:2f:47:ce:6e:7f:75:b1:b7:91:c4:76:56:7e:07:
         f2:7e:f5:e4:f4:0a:b8:5f:cc:4a:60:1f:dd:78:76:ef:0a:fa:
         5a:1e:cf:c2:bc:ea:f3:35:eb:ad:55:18:61:04:e4:4b:dc:ed:
         4b:27:1d:53:da:39:e3:36:41:5f:af:d3:16:16:e1:b3:2c:63:
         68:ea:be:96:4f:f8:46:1f:d0:d8:82:74:96:ad:14:89:c2:48:
         6e:d6:e9:fe:3c:de:f1:b7:96:12:71:62:07:69:9a:64:b8:1b:
         00:a2:82:d7:61:84:89:a9:50:17:5b:95:6f:0a:71:a1:7e:07:
         b7:3e:aa:13:d4:7c:dc:cf:01:46:a8:64:fe:a8:d4:53:33:1d:
         24:4e:29:0c:f2:79:a6:34:8a:e5:f3:e2:e6:09:16:0d:af:15:
         a9:0d:58:a1:c0:f0:d6:30:0f:1d:6f:d2:38:61:68:06:98:62:
         ef:a3:e8:52:20:b3:4f:12:32:5f:bd:d0:13:30:2f:a1:a8:a9:
         94:fe:3c:cd:fb:3c:7f:6e:a8:d4:c7:c4:f8:1e:0c:32:1c:2b:
         2a:93:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:47 2025 by rpki-client