Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.cer
File:                     D6DC68A6023AA2D9CE6A0F13893738F3846790E6.cer (raw, json)
Hash identifier:          l/bq3ou/GnHmNSisK+ia599e6kc4afgFiFDsK5d4doY=
Subject key identifier:   D6:DC:68:A6:02:3A:A2:D9:CE:6A:0F:13:89:37:38:F3:84:67:90:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6CC04A4B063A4F54698993A76ADB578307D4314C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Mar 2025 12:41:24 +0000
Certificate not after:    Fri 27 Mar 2026 12:46:24 +0000
Subordinate resources:    AS: 270601
                          IP: 189.36.140.0/22
                          IP: 2804:6e80::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c0:4a:4b:06:3a:4f:54:69:89:93:a7:6a:db:57:83:07:d4:31:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 28 12:41:24 2025 GMT
            Not After : Mar 27 12:46:24 2026 GMT
        Subject: CN=D6DC68A6023AA2D9CE6A0F13893738F3846790E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:65:66:04:0f:fd:93:88:69:bf:03:4b:14:
                    5d:4e:b5:5b:97:29:b5:55:81:3e:97:ed:c6:a2:ac:
                    46:e6:58:67:d7:e2:ea:42:9f:41:ff:8c:a3:ce:9c:
                    32:45:a4:3f:71:d2:88:67:a6:b1:c5:f4:36:db:fa:
                    13:86:a5:02:99:9a:c8:a0:f4:00:8f:51:be:35:bf:
                    93:d9:a9:35:60:1a:29:75:91:82:21:f1:eb:5a:db:
                    a8:b0:fd:c7:8b:e2:d7:6c:d8:ff:72:fc:40:57:c8:
                    6c:96:83:bc:1e:b7:e4:f2:dc:f9:10:75:48:ce:83:
                    cd:c5:d2:17:a7:d6:6f:d0:ff:1c:2a:82:88:89:20:
                    1c:96:4b:12:89:ad:28:73:25:fc:a9:2e:c0:10:2c:
                    d0:5b:a2:c5:80:b6:18:a2:10:f3:b3:6d:64:cf:47:
                    79:eb:19:8b:ea:6e:7b:ef:35:1d:6e:b8:b7:9e:5a:
                    80:07:95:83:72:5b:2e:b9:51:47:5d:c5:40:aa:84:
                    f6:9b:85:fe:d1:d5:75:f1:c5:07:c4:27:79:72:82:
                    95:45:7e:74:1f:ac:b2:c6:ff:80:d7:94:cd:c3:2c:
                    ab:d0:ad:8e:d5:4b:20:2c:5e:26:17:ee:a8:69:78:
                    d5:4a:d5:b7:16:56:a3:e4:2a:eb:f6:0c:06:d8:db:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:DC:68:A6:02:3A:A2:D9:CE:6A:0F:13:89:37:38:F3:84:67:90:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.140.0/22
                IPv6:
                  2804:6e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270601

    Signature Algorithm: sha256WithRSAEncryption
         d2:81:79:02:b4:a0:85:31:ed:ad:c9:6f:64:8c:90:c6:dd:f1:
         72:38:6d:a1:1a:2a:8e:6b:8d:81:b2:fb:62:5f:89:e4:6f:b8:
         05:50:57:ce:70:e3:ef:53:df:fc:ac:25:75:51:59:f3:43:ae:
         7f:32:96:a2:34:c3:bd:55:dc:6b:fc:d6:d0:70:39:56:5b:9f:
         7e:54:b8:73:67:4f:20:02:e1:70:72:c7:40:c5:de:67:eb:d8:
         51:53:5c:7a:74:36:29:e2:43:c0:8a:76:4a:f4:c6:30:25:50:
         99:61:5f:65:7a:2b:ef:da:0b:6b:1e:2c:45:80:a4:c5:9d:e1:
         ff:b4:7c:43:53:04:0a:61:14:38:30:5e:3d:26:7c:76:12:12:
         92:0e:87:d4:c0:17:db:b1:7a:6e:c5:bb:8a:50:45:b4:62:bc:
         de:43:a8:c3:e7:ab:e9:6e:fe:29:c6:da:e1:ab:d1:09:dd:72:
         ef:63:d2:3c:4b:31:f6:cd:82:6e:54:0b:a2:c1:f8:bd:86:c6:
         a8:ff:ef:0f:76:3e:de:50:8a:b1:fd:8b:a1:23:fa:a4:26:b6:
         90:b1:27:8d:1c:fc:53:ec:4a:04:f5:5c:be:96:c6:35:72:d5:
         cd:d6:b6:41:e2:e1:e6:9f:4b:2f:e8:a9:2b:8c:69:3a:e3:93:
         20:43:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:51 2025 by rpki-client