Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
File:                     15513D1A379C5EDDB8158CEA26166691DE1B169A.cer (raw, json)
Hash identifier:          l9TlTVVrxZCwAs+6D9vZKIekRqNXor2VyaONUHE/LoM=
Subject key identifier:   15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       228E31BB2CF03D2CB2D1583B485BF4A0A9F4FE37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 19:27:38 +0000
Certificate not after:    Thu 05 Mar 2026 19:32:38 +0000
Subordinate resources:    AS: 263289
                          IP: 168.196.128.0/22
                          IP: 177.190.64.0/21
                          IP: 2804:1680::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8e:31:bb:2c:f0:3d:2c:b2:d1:58:3b:48:5b:f4:a0:a9:f4:fe:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 19:27:38 2025 GMT
            Not After : Mar  5 19:32:38 2026 GMT
        Subject: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:2f:df:73:b9:67:76:74:3c:49:3e:17:a4:
                    4c:ce:cb:26:7b:60:20:85:9e:71:35:cd:e9:30:35:
                    57:4f:4a:98:30:a6:9d:7e:3b:7e:d3:77:52:5d:1a:
                    75:53:46:47:58:c1:1c:bb:a1:15:5f:dd:f9:57:a1:
                    19:3d:a2:fb:b6:16:e6:21:0d:2a:4a:dd:a8:b8:88:
                    cf:10:ee:a5:18:52:35:7d:9a:1e:70:a7:fb:6b:64:
                    f5:54:6a:e4:c6:ef:b8:97:04:3c:cb:34:91:3f:6f:
                    c6:e2:4a:c7:ac:53:51:b9:a8:76:2e:f5:9f:00:78:
                    6f:bc:90:17:92:f2:ab:33:08:8b:4c:3a:1c:47:ce:
                    0a:75:87:26:23:f9:11:d2:5b:78:ed:d6:66:9c:1b:
                    40:40:6e:d5:ac:d0:cd:a2:33:57:95:b9:02:04:40:
                    30:40:d1:cd:76:2b:98:d0:49:19:27:b1:fc:c8:58:
                    c2:69:21:af:c2:d8:ee:83:5e:75:b5:c8:b8:03:68:
                    bd:06:97:47:57:2b:35:c5:e4:3c:a5:03:99:6b:3d:
                    df:20:bf:89:5a:31:7c:d4:0e:be:0c:0e:7a:af:d8:
                    1e:99:ec:a6:cb:28:6a:75:1e:94:f2:a6:33:c7:c7:
                    e0:b3:69:8c:79:db:66:cd:eb:27:ce:2f:01:44:f3:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.128.0/22
                  177.190.64.0/21
                IPv6:
                  2804:1680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263289

    Signature Algorithm: sha256WithRSAEncryption
         54:8b:90:cf:27:8f:2c:b4:f5:da:15:67:19:2f:92:62:49:61:
         cb:11:51:35:8d:bc:4c:2a:94:21:f2:91:f5:c1:51:eb:54:49:
         82:a9:b7:4f:4b:64:50:b9:e7:32:51:e9:11:dd:e2:ad:2e:50:
         01:f1:f1:c1:a8:c5:88:8d:29:8e:ba:cf:18:4f:27:3a:7d:1f:
         38:6d:af:74:54:72:66:ca:1b:e3:d4:ff:1e:46:0e:11:30:6d:
         00:9f:f0:f6:b9:8c:28:e1:c4:36:6d:07:27:eb:a8:81:e9:17:
         77:78:1d:b9:51:ab:6a:b4:fa:b6:21:d9:73:4f:d3:4d:7f:6a:
         ea:8b:1d:36:8b:3a:e8:62:e6:02:14:f4:a7:4c:d0:fd:26:09:
         26:eb:f1:66:eb:0d:63:69:54:40:22:69:a8:4d:e6:f9:d4:3d:
         c7:39:5d:d8:8d:2e:4b:c5:21:eb:61:c1:99:56:a2:92:b9:71:
         3f:60:bd:95:7d:fe:ad:e7:76:cb:f8:15:14:58:19:13:73:dd:
         68:5b:3c:47:0d:c5:4a:2a:05:f0:d0:79:75:f0:46:cf:fb:45:
         4c:c6:36:74:ab:59:4e:18:f7:11:6e:da:d1:40:a4:8d:3c:48:
         48:c0:bf:eb:a0:e1:c4:05:63:62:aa:47:84:f3:8d:57:c9:49:
         10:46:7b:2e
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUIo4xuyzwPSyy0Vg7SFv0oKn0/jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYxOTI3MzhaFw0yNjAzMDUxOTMyMzhaMDMxMTAvBgNV
BAMTKDE1NTEzRDFBMzc5QzVFRERCODE1OENFQTI2MTY2NjkxREUxQjE2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhS/fc7lndnQ8ST4XpEzOyyZ7
YCCFnnE1zekwNVdPSpgwpp1+O37Td1JdGnVTRkdYwRy7oRVf3flXoRk9ovu2FuYh
DSpK3ai4iM8Q7qUYUjV9mh5wp/trZPVUauTG77iXBDzLNJE/b8biSsesU1G5qHYu
9Z8AeG+8kBeS8qszCItMOhxHzgp1hyYj+RHSW3jt1macG0BAbtWs0M2iM1eVuQIE
QDBA0c12K5jQSRknsfzIWMJpIa/C2O6DXnW1yLgDaL0Gl0dXKzXF5DylA5lrPd8g
v4laMXzUDr4MDnqv2B6Z7KbLKGp1HpTypjPHx+CzaYx522bN6yfOLwFE8+CFAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVUT0aN5xe3bgV
jOomFmaR3hsWmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnlj
RjZpV0JpdFRMTnlrVHp4Q3N6TkttUDZUbnN1RXFSdU11YmE0MlBRM1UvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ5
Y0Y2aVdCaXRUTE55a1R6eENzek5LbVA2VG5zdUVxUnVNdWJhNDJQUTNVLzEvMTU1
MTNEMUEzNzlDNUVEREI4MTU4Q0VBMjYxNjY2OTFERTFCMTY5QS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqMSAAwQDsb5AMA0EAgACMAcDBQAoBBaAMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQEeTANBgkqhkiG9w0BAQsFAAOCAQEAVIuQzyeP
LLT12hVnGS+SYklhyxFRNY28TCqUIfKR9cFR61RJgqm3T0tkULnnMlHpEd3irS5Q
AfHxwajFiI0pjrrPGE8nOn0fOG2vdFRyZsob49T/HkYOETBtAJ/w9rmMKOHENm0H
J+uogekXd3gduVGrarT6tiHZc0/TTX9q6osdNos66GLmAhT0p0zQ/SYJJuvxZusN
Y2lUQCJpqE3m+dQ9xzld2I0uS8Uh62HBmVaikrlxP2C9lX3+red2y/gVFFgZE3Pd
aFs8Rw3FSioF8NB5dfBGz/tFTMY2dKtZThj3EW7a0UCkjTxISMC/66DhxAVjYqpH
hPONV8lJEEZ7Lg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:30:04 2025 by rpki-client