Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer
File:                     D6816262B9EC51281AB7A20B7EE9D1462396264F.cer (raw, json)
Hash identifier:          Ws0BhdulECLm/Ty8Cw9rv8htF6sG3wd2kr1Qu8BzFyw=
Subject key identifier:   D6:81:62:62:B9:EC:51:28:1A:B7:A2:0B:7E:E9:D1:46:23:96:26:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A904AFEE2DBF9907DF0BE2A9C78F4678A73F2CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 23:18:51 +0000
Certificate not after:    Thu 03 Apr 2025 23:23:51 +0000
Subordinate resources:    AS: 266040
                          IP: 45.4.52.0/22
                          IP: 2804:39a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:90:4a:fe:e2:db:f9:90:7d:f0:be:2a:9c:78:f4:67:8a:73:f2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 23:18:51 2024 GMT
            Not After : Apr  3 23:23:51 2025 GMT
        Subject: CN=D6816262B9EC51281AB7A20B7EE9D1462396264F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:00:39:cd:1b:a9:f6:81:b3:ea:a5:30:fd:
                    6e:73:a8:0e:2f:06:1a:62:95:ad:d7:44:64:f8:c8:
                    19:48:34:aa:e3:bc:36:f3:3d:4c:2c:7e:24:ab:9e:
                    d6:86:ec:6b:ce:dd:11:e7:e9:46:e8:5e:80:aa:ac:
                    04:1d:bb:0b:9e:cf:c7:b2:3b:1e:9a:ff:6c:88:33:
                    f1:92:6f:c0:1f:b8:aa:ae:15:11:8a:5a:28:78:9a:
                    9b:1a:ab:aa:25:c2:56:f6:d4:30:a7:4e:d7:6d:4d:
                    92:46:b1:e9:c7:e9:3c:5c:de:f3:b8:a0:7e:ce:03:
                    fa:6a:71:4f:e6:99:ce:6e:b1:aa:1a:65:01:bf:77:
                    0f:ff:ed:9b:53:de:ac:e5:9a:10:60:3e:d6:df:f9:
                    8b:7a:84:9d:e3:86:1b:77:fb:55:72:f3:dd:35:c2:
                    2c:d7:7a:31:6f:5b:3b:b8:c2:bb:45:ee:fa:47:32:
                    8a:a5:1e:83:a5:f9:3a:25:43:3c:50:a6:47:f5:4b:
                    d3:16:c8:6d:13:ba:05:03:eb:d4:2b:86:c0:c4:25:
                    90:c0:0b:3d:e7:48:4e:8b:8c:b8:08:82:6d:98:e8:
                    e4:b1:19:1f:40:23:9d:88:02:73:49:72:ec:6c:4c:
                    ee:f0:f9:94:a7:57:9e:87:19:40:7c:87:cd:fb:0b:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:81:62:62:B9:EC:51:28:1A:B7:A2:0B:7E:E9:D1:46:23:96:26:4F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.52.0/22
                IPv6:
                  2804:39a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266040

    Signature Algorithm: sha256WithRSAEncryption
         70:86:6a:8f:88:e7:7a:04:07:1c:c8:b7:c9:ff:b0:9b:01:da:
         78:1b:3e:1a:4a:68:4b:47:87:af:f2:8c:be:e6:70:44:7b:f1:
         45:96:2b:38:92:f9:da:06:a0:8d:fd:2e:28:70:6f:c8:38:93:
         43:16:6f:93:88:96:8c:d2:05:09:fb:d9:ec:48:d4:4c:d6:d3:
         a6:de:93:a5:dd:52:5d:c6:96:3a:9f:c2:0a:c8:17:c1:23:0c:
         73:ac:3a:5f:f5:30:ec:d9:2f:3d:ed:01:9f:dc:62:2c:72:bc:
         65:b0:fd:80:f6:6c:d4:54:14:b7:da:ad:aa:e4:89:54:b5:ff:
         55:92:35:a2:e1:c8:a1:79:80:d2:89:27:90:e4:1a:3d:a0:a8:
         3c:4f:0e:d3:58:60:c9:fd:46:01:1f:cc:f3:73:c5:b9:41:80:
         b6:8d:c2:b8:0c:d7:03:dc:33:5c:d1:ea:40:6a:a5:0b:0a:1e:
         8f:07:6a:bc:ca:45:8d:64:60:94:f7:ff:13:6d:72:af:4e:9b:
         55:71:d7:23:9b:35:16:b6:89:1d:13:37:32:c3:80:7d:9b:e1:
         32:b4:05:43:56:d0:6a:f2:f5:6f:6c:40:dd:eb:12:51:32:0a:
         39:92:39:61:63:e2:2a:e2:82:bd:87:b3:29:e8:c0:fe:ad:14:
         47:b2:f4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:52:25 2025 by rpki-client