Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
File:                     0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer (raw, json)
Hash identifier:          yZ6LF2Xpf6qC9z/UmoZm2gdBbIFMDC7kmuwv1ubyTdw=
Subject key identifier:   0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F59C12A03FFBD4FD634E2E65D2A62AF97AE18A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 16:43:21 +0000
Certificate not after:    Wed 25 Mar 2026 16:48:21 +0000
Subordinate resources:    AS: 267942
                          IP: 45.166.4.0/22
                          IP: 2804:5590::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:59:c1:2a:03:ff:bd:4f:d6:34:e2:e6:5d:2a:62:af:97:ae:18:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 16:43:21 2025 GMT
            Not After : Mar 25 16:48:21 2026 GMT
        Subject: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:47:14:be:72:66:93:a3:5f:48:09:3a:1b:
                    0c:a6:9e:3d:07:65:bf:57:05:7c:6e:ad:9e:95:6f:
                    f8:bd:e1:0d:e4:3c:e5:46:76:b1:a4:27:3b:45:84:
                    e8:67:fc:03:57:4b:12:33:9a:44:16:28:64:06:9c:
                    28:32:ab:e9:30:62:23:86:1d:f7:45:42:e7:2f:9e:
                    55:ce:a7:19:bc:25:f9:a2:44:67:97:72:f2:87:42:
                    f4:53:2d:58:49:a1:00:b1:84:64:e1:84:b0:5b:95:
                    80:a2:cd:4a:64:24:e8:a3:51:11:2e:c7:75:30:e3:
                    85:4f:3e:90:0e:8b:0b:15:61:9d:10:4c:da:a8:59:
                    c8:5c:7f:68:2f:d7:ec:88:4e:91:40:11:41:f0:ff:
                    dc:f0:73:db:2d:17:2c:18:91:f3:7c:f3:45:c0:03:
                    c2:31:93:a7:5b:8d:5c:cc:6b:c2:ab:74:1f:f4:04:
                    a0:55:99:45:ae:64:31:7f:d4:a4:7e:c2:b3:2a:c1:
                    5d:bc:3d:5d:0a:d6:fc:55:dc:23:db:76:e8:cf:f5:
                    48:9e:8e:0b:42:f2:26:c9:ad:23:19:7d:83:a3:c5:
                    25:6c:30:e0:cf:65:41:4f:93:e2:a6:87:9e:c0:0f:
                    65:43:e7:c1:01:38:ef:95:17:31:5c:21:ae:02:80:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22
                IPv6:
                  2804:5590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267942

    Signature Algorithm: sha256WithRSAEncryption
         d5:d5:cb:5f:e6:4d:ab:3c:97:13:40:d7:43:ce:09:8f:17:b6:
         99:2f:e8:80:82:b7:53:2c:a5:4b:00:ca:16:0f:7f:08:1c:90:
         4c:ff:3c:7a:f5:c4:e8:3a:2a:e2:4b:50:2b:bf:c0:f4:99:2e:
         35:63:5b:fc:49:13:4e:e3:ed:4d:e2:f7:47:e9:c0:3a:ef:56:
         6e:36:31:2e:2f:16:ee:38:ec:b2:fe:2b:07:d3:9d:fe:52:a7:
         ca:66:0c:fe:97:04:1d:61:38:f1:25:d5:f9:37:6a:5c:69:46:
         c5:71:fd:17:57:24:18:0c:1e:39:43:e1:72:f7:d3:26:e1:29:
         f9:ed:14:46:57:42:0f:c1:e3:02:e6:98:27:ca:5c:1f:a3:8b:
         6e:a4:c0:c6:f7:fe:60:ba:bf:24:9f:b8:38:08:c4:78:89:77:
         45:92:12:e2:58:19:48:34:b6:a0:c1:8b:f0:ae:68:3d:26:02:
         33:1c:fe:20:f0:82:dc:bb:63:18:5b:36:6b:5c:85:4c:d9:24:
         99:84:bc:22:47:f8:d9:8f:42:96:4c:bc:e6:4b:0a:f0:23:34:
         2b:85:6a:68:05:57:33:f2:6e:86:65:3a:79:12:21:30:4b:bf:
         0f:88:87:40:f8:87:39:3c:10:22:e9:31:c4:7c:11:72:ee:d5:
         40:b7:c3:97
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUf1nBKgP/vU/WNOLmXSpir5euGKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjYxNjQzMjFaFw0yNjAzMjUxNjQ4MjFaMDMxMTAvBgNV
BAMTKDBGRDY1MDA0RTdDNDA4NUYyRDMzREYxNzM0NTI2MUVERDlCM0E4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjaUcUvnJmk6NfSAk6Gwymnj0H
Zb9XBXxurZ6Vb/i94Q3kPOVGdrGkJztFhOhn/ANXSxIzmkQWKGQGnCgyq+kwYiOG
HfdFQucvnlXOpxm8JfmiRGeXcvKHQvRTLVhJoQCxhGThhLBblYCizUpkJOijUREu
x3Uw44VPPpAOiwsVYZ0QTNqoWchcf2gv1+yITpFAEUHw/9zwc9stFywYkfN880XA
A8Ixk6dbjVzMa8KrdB/0BKBVmUWuZDF/1KR+wrMqwV28PV0K1vxV3CPbdujP9Uie
jgtC8ibJrSMZfYOjxSVsMODPZUFPk+Kmh57AD2VD58EBOO+VFzFcIa4CgHuBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQP1lAE58QIXy0z
3xc0UmHt2bOoETAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUNC
bkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0aUEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVD
Qm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzAvMEZE
NjUwMDRFN0M0MDg1RjJEMzNERjE3MzQ1MjYxRUREOUIzQTgxMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaYEMA0EAgACMAcDBQAoBFWQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQWpjANBgkqhkiG9w0BAQsFAAOCAQEA1dXLX+ZNqzyXE0DX
Q84Jjxe2mS/ogIK3UyylSwDKFg9/CByQTP88evXE6Doq4ktQK7/A9JkuNWNb/EkT
TuPtTeL3R+nAOu9WbjYxLi8W7jjssv4rB9Od/lKnymYM/pcEHWE48SXV+TdqXGlG
xXH9F1ckGAweOUPhcvfTJuEp+e0URldCD8HjAuaYJ8pcH6OLbqTAxvf+YLq/JJ+4
OAjEeIl3RZIS4lgZSDS2oMGL8K5oPSYCMxz+IPCC3LtjGFs2a1yFTNkkmYS8Ikf4
2Y9Clky85ksK8CM0K4VqaAVXM/JuhmU6eRIhMEu/D4iHQPiHOTwQIukxxHwRcu7V
QLfDlw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:03 2025 by rpki-client