Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F62F4F249754DDD7706E8918C1AF5039A9405FB7.cer
File:                     F62F4F249754DDD7706E8918C1AF5039A9405FB7.cer (raw, json)
Hash identifier:          /ibWb/62MsI97GYEqI0/PHy0MB6sD00g1rYS/R8FKW8=
Subject key identifier:   F6:2F:4F:24:97:54:DD:D7:70:6E:89:18:C1:AF:50:39:A9:40:5F:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4297FD69160E96B3FAA9D464A8085B3CF9DAADDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/F62F4F249754DDD7706E8918C1AF5039A9405FB7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Dec 2024 16:46:48 +0000
Certificate not after:    Tue 30 Dec 2025 16:51:48 +0000
Subordinate resources:    AS: 269702
                          IP: 45.190.72.0/22
                          IP: 2804:6894::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:97:fd:69:16:0e:96:b3:fa:a9:d4:64:a8:08:5b:3c:f9:da:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 31 16:46:48 2024 GMT
            Not After : Dec 30 16:51:48 2025 GMT
        Subject: CN=F62F4F249754DDD7706E8918C1AF5039A9405FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:da:7d:38:4a:7e:64:0a:01:02:66:d4:37:
                    bc:62:63:bf:e5:86:b8:e3:2d:25:00:84:d1:09:73:
                    cc:70:77:f0:ca:3b:a3:45:1a:1a:f7:75:c3:da:68:
                    3a:2a:b8:41:5b:54:04:8d:e0:30:fd:47:59:74:5a:
                    5f:21:b7:eb:6c:b9:91:b1:ce:bb:34:74:03:65:d2:
                    59:37:59:f5:32:4d:8f:67:63:5b:d2:5d:3a:b7:e1:
                    3c:e0:95:ef:46:d1:48:91:02:44:b5:97:6e:9c:86:
                    c8:ff:51:73:ad:07:39:e2:da:6b:49:de:a6:d8:17:
                    5d:2d:e7:52:40:e1:08:30:43:5b:f4:c0:be:90:1e:
                    6c:cc:0b:a5:b7:fa:42:53:a2:90:d6:f2:e6:4b:78:
                    52:1e:51:3a:0c:0f:71:e1:0c:43:7f:98:04:09:1f:
                    a7:a7:77:c2:f7:1c:2a:52:e3:98:2c:89:b9:fe:d3:
                    7a:33:23:bd:4b:c3:85:58:e9:ca:b1:94:17:ba:87:
                    74:84:39:ee:20:fe:e0:f4:f5:6b:5f:eb:02:0f:07:
                    a6:a6:c3:e5:6f:40:1b:5d:4c:99:ce:21:f5:5a:0f:
                    e1:42:f0:df:5f:da:ab:ed:7c:63:7f:55:6a:38:52:
                    bd:b3:15:10:31:69:70:fb:c5:eb:8e:fc:e2:5f:b1:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:2F:4F:24:97:54:DD:D7:70:6E:89:18:C1:AF:50:39:A9:40:5F:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/F62F4F249754DDD7706E8918C1AF5039A9405FB7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.72.0/22
                IPv6:
                  2804:6894::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269702

    Signature Algorithm: sha256WithRSAEncryption
         d6:99:0d:03:1f:47:3c:b8:52:98:18:d9:9d:e7:13:24:c9:f3:
         44:d6:ee:96:43:30:f3:2a:2d:21:e3:25:11:7e:c3:2e:10:ac:
         49:10:ab:35:fc:ee:85:dc:4c:17:01:61:0d:f1:2f:c1:9b:0f:
         54:08:77:b3:11:ba:dd:28:cb:0a:c8:e1:95:50:53:09:15:09:
         51:ca:d8:9a:15:21:cd:b4:28:a5:b3:96:f8:96:80:c4:ff:c4:
         2a:63:2b:e9:73:9f:6f:20:7a:09:1f:d0:90:96:eb:40:4e:ca:
         6e:07:42:7e:09:db:a8:f9:69:f4:46:bb:15:a9:cd:6d:ba:28:
         e3:45:65:78:6d:a0:1b:2f:2b:f7:07:92:89:c1:6c:59:26:30:
         7e:a4:68:75:ac:1c:44:54:19:a1:dc:86:b0:5b:29:a1:fd:9c:
         08:37:fa:d7:79:f9:50:08:6c:22:e6:48:59:9b:f6:d4:b3:69:
         8b:81:97:93:b0:4c:85:c4:41:9a:6e:38:5e:b7:c1:ad:33:8d:
         2e:9a:c4:02:bb:1c:86:33:e9:8c:2f:1d:5a:35:8c:04:4f:9e:
         26:66:f9:03:09:bd:e0:09:7d:99:4c:bc:a2:00:98:21:03:97:
         c8:f2:90:b9:81:58:84:2c:ff:25:ca:57:a7:ba:dc:1b:17:a4:
         28:4a:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:54:20 2025 by rpki-client