Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
File:                     C67FC27679C5C58D1A1904874E35000B74C71E78.cer (raw, json)
Hash identifier:          EqsopMS+Y8R04w4RYFgyUbh0CDfFzjoUTVDnvLrOmS8=
Subject key identifier:   C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62241467D2B4BE39BFA463A8CFD0B0A78E44D487
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:47 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:47 +0000
Subordinate resources:    AS: 264509
                          IP: 132.255.168.0/22
                          IP: 2804:20b4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:24:14:67:d2:b4:be:39:bf:a4:63:a8:cf:d0:b0:a7:8e:44:d4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:47 2025 GMT
            Not After : Mar  4 18:40:47 2026 GMT
        Subject: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:ec:eb:a7:f6:27:91:cb:1f:fb:63:a2:91:
                    4c:67:ca:87:69:49:d2:dd:05:d8:4c:48:55:4b:07:
                    68:26:25:e8:a5:c7:22:dc:04:71:0b:b0:a7:55:56:
                    bc:1a:6b:5c:ae:ac:89:ef:8f:64:e1:01:d9:e6:55:
                    a9:92:a1:da:e6:b2:cc:53:65:38:bd:23:80:83:6e:
                    a3:ca:1a:11:2f:29:8e:b1:b5:c4:81:b6:11:c2:52:
                    d2:34:09:5b:96:4d:39:57:34:7e:a9:b7:04:1b:4d:
                    92:17:71:df:c6:98:81:58:f7:f2:8e:39:0b:95:ce:
                    c4:81:10:fc:f5:da:86:a6:6b:cf:6d:0f:12:cc:80:
                    ed:50:11:75:91:7f:59:87:b3:36:f5:58:bd:ab:66:
                    ac:e6:47:54:8f:a2:5d:93:7b:6e:7a:ab:1a:03:7f:
                    05:46:5c:5d:21:c8:f8:e5:2d:79:27:fe:ea:92:3d:
                    38:cb:8a:07:1a:fd:bc:0d:51:fd:be:47:93:9e:b1:
                    25:f0:9b:82:a0:48:9f:d6:8e:bc:a5:63:67:fc:7f:
                    76:b5:c0:ee:42:36:98:31:ce:ab:8e:44:ab:10:88:
                    36:e7:27:14:91:bb:64:f7:03:dc:aa:20:69:6f:4a:
                    cb:83:8b:75:23:fd:82:0e:53:cb:a5:23:99:6c:65:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.168.0/22
                IPv6:
                  2804:20b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264509

    Signature Algorithm: sha256WithRSAEncryption
         a3:53:c2:66:25:ad:10:38:e2:8c:77:92:4a:c6:5b:26:90:f6:
         1e:4d:c0:d8:e7:ad:e1:41:d1:8d:45:b8:5f:05:eb:15:33:db:
         13:81:dd:25:ca:97:2b:ce:0b:84:5d:fa:d1:78:d9:cb:6c:d6:
         ed:cd:ce:cd:aa:d3:15:c1:1f:48:92:bf:23:e9:f8:96:ed:37:
         99:04:fe:f6:a1:2c:fe:a7:82:6e:cd:af:62:ae:d8:64:7a:28:
         fb:f1:17:04:3a:39:ec:8f:da:b3:94:ad:f1:a7:ad:f7:d2:bc:
         b2:50:37:e5:05:17:ab:93:37:9a:46:17:c8:1b:f8:1e:20:09:
         9e:f6:1a:a2:00:d8:38:4d:50:5f:e7:5b:9d:a3:58:80:75:da:
         a5:22:67:b5:53:53:01:77:db:7f:94:bd:dd:4a:dd:2c:76:bb:
         b2:e4:33:49:24:98:21:e1:a4:03:af:6d:94:6c:49:6e:54:24:
         27:c9:c9:b0:10:b2:5b:f5:3c:56:c1:9f:57:41:a2:c1:56:1b:
         f8:85:12:87:b4:12:c5:28:b7:d3:ff:04:3d:d2:fa:f3:86:a6:
         e1:07:66:61:77:a5:78:d8:d8:2a:8e:3d:73:a8:2b:e4:1f:b3:
         f0:e6:a2:94:bf:ab:92:14:ff:e1:22:5f:6e:bc:08:70:d5:47:
         90:e1:ea:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:51:36 2025 by rpki-client