Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.cer
File:                     DF6BC07304FD9D446EC22F36A506BE9E3428FE34.cer (raw, json)
Hash identifier:          GuVDvcbrSrR7YZRNXV9Fk6OgK+o6bZ+MCdkhb1MnnWQ=
Subject key identifier:   DF:6B:C0:73:04:FD:9D:44:6E:C2:2F:36:A5:06:BE:9E:34:28:FE:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0787844835E920FB706DE5F82C444E023CDFBB94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Mar 2025 11:49:18 +0000
Certificate not after:    Fri 13 Mar 2026 11:54:18 +0000
Subordinate resources:    AS: 271294
                          IP: 201.221.116.0/22
                          IP: 2804:7940::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:87:84:48:35:e9:20:fb:70:6d:e5:f8:2c:44:4e:02:3c:df:bb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 14 11:49:18 2025 GMT
            Not After : Mar 13 11:54:18 2026 GMT
        Subject: CN=DF6BC07304FD9D446EC22F36A506BE9E3428FE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:43:69:ee:d7:7b:98:11:c5:3d:f1:cf:c3:
                    e2:da:d1:5d:58:cb:3e:e5:9e:ad:ce:de:5e:07:8e:
                    c0:b6:05:e7:0a:ca:c3:bc:34:2f:89:5e:88:58:1c:
                    c8:d4:0c:66:fe:97:b4:4e:39:ff:21:b4:30:d7:e6:
                    14:08:6a:68:d1:0e:42:c0:64:f1:33:22:ff:11:34:
                    d1:05:0e:b3:b2:33:18:74:48:83:d5:b4:fb:8d:ae:
                    12:a7:82:62:db:51:65:74:09:d4:4c:08:6c:e0:70:
                    c4:56:e2:54:4e:fc:05:4c:44:60:c3:b9:a8:51:3e:
                    8e:da:7e:50:f3:67:96:19:34:f9:50:38:65:f6:46:
                    6b:6e:70:1a:c1:0d:a3:a8:2e:44:8b:63:20:01:01:
                    2e:23:52:e4:e2:4b:20:ad:0a:ba:e3:b2:19:98:c5:
                    ab:94:ea:c3:d0:e3:7d:c3:db:b8:1f:6c:c9:c4:dc:
                    ab:c0:65:fb:ac:9f:8e:fd:0f:ca:9d:eb:bb:5e:9c:
                    70:51:d6:51:9f:a3:ce:f4:62:d2:22:84:11:e1:21:
                    0e:c2:3e:c7:8f:e9:2c:64:28:08:ff:81:7e:89:10:
                    68:49:38:8e:18:e3:dd:cf:56:28:d3:80:0c:42:11:
                    eb:a6:c5:62:a6:5f:b8:00:5d:12:96:8d:71:92:68:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:6B:C0:73:04:FD:9D:44:6E:C2:2F:36:A5:06:BE:9E:34:28:FE:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.116.0/22
                IPv6:
                  2804:7940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271294

    Signature Algorithm: sha256WithRSAEncryption
         22:49:20:e0:c3:af:39:33:71:b8:2b:bf:77:f0:59:c9:bc:6a:
         76:aa:b8:f4:ae:97:aa:36:a9:56:80:db:cc:3f:59:be:a2:7a:
         63:34:0f:2b:60:15:0a:23:8c:cb:84:83:25:83:e8:67:7c:65:
         0c:39:5b:b3:01:3f:65:5b:a7:9d:46:f1:6d:a8:b5:50:9c:bb:
         e3:5f:ce:08:37:42:13:cc:44:4c:e7:74:31:89:17:80:d1:1c:
         6d:fb:1b:f5:02:ee:79:cb:ad:f9:42:df:87:36:3e:2d:a5:fe:
         43:0e:1c:a6:48:8e:62:9a:14:f2:05:04:cf:65:bf:af:f7:2a:
         14:00:eb:a2:a8:5a:31:9b:60:c3:c6:97:a5:37:74:ce:1c:23:
         07:6c:c4:14:e0:79:a0:c4:ca:54:ab:ec:82:55:b1:24:0d:ac:
         6b:e4:bd:dc:73:14:2b:17:62:03:99:e8:d5:2f:8f:08:62:69:
         03:fa:9e:62:43:34:42:7c:e4:1a:ea:23:fb:bb:58:ed:7e:e2:
         02:d8:7d:1e:97:be:1b:0d:aa:21:0e:2c:2b:2e:c2:cf:1c:03:
         2a:13:62:77:06:6a:90:6b:5d:9a:35:d0:2d:83:b0:5d:47:4f:
         2b:3c:14:a3:76:9e:f5:d9:24:62:cf:b7:ca:ca:af:05:54:2e:
         61:13:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:41 2025 by rpki-client