Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
File:                     1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer (raw, json)
Hash identifier:          Zu3tt7JpyrCg9BnZJLvn2oU4teYUtMYOcpHgUy+LTaA=
Subject key identifier:   16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F0EB3A0A91CC826B5B2E0DB82857A103024BC7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 13:53:57 +0000
Certificate not after:    Thu 05 Mar 2026 13:58:57 +0000
Subordinate resources:    AS: 271002
                          IP: 177.223.144.0/22
                          IP: 2804:74c4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0e:b3:a0:a9:1c:c8:26:b5:b2:e0:db:82:85:7a:10:30:24:bc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 13:53:57 2025 GMT
            Not After : Mar  5 13:58:57 2026 GMT
        Subject: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:e3:09:41:72:44:65:d3:d0:11:02:61:1a:
                    49:25:47:d0:2a:5e:a5:3d:c3:6e:af:ef:09:cd:2d:
                    9b:4f:03:f6:9c:63:d4:74:38:cc:36:05:17:0d:7f:
                    5f:01:e8:e4:18:9b:e8:cc:b7:1a:87:9d:e2:5e:1d:
                    7f:9f:67:54:cc:aa:b0:de:92:0e:28:81:92:5b:7f:
                    29:ba:84:3d:47:78:c5:25:d8:0d:e7:20:bb:f9:bd:
                    97:5d:cd:d9:a9:3c:44:e9:14:2a:83:e5:ce:48:5b:
                    b6:58:5d:e4:f2:8f:45:b2:4f:4d:08:bc:4a:f0:d9:
                    c6:b0:f1:44:18:13:2c:1d:7c:86:3f:0f:32:38:94:
                    df:e9:1a:58:20:2b:db:1e:76:80:52:aa:61:5d:90:
                    40:2e:cf:70:2f:0e:b5:5d:2f:c1:9a:1b:76:e7:3d:
                    d1:48:9e:24:f4:6e:61:91:39:85:ee:13:9a:4c:ec:
                    d8:c6:49:7c:a7:12:ea:81:4f:1a:ed:78:1a:b3:33:
                    41:87:33:b7:93:67:fb:46:b2:82:37:7f:4c:2c:1e:
                    d0:6d:33:1d:3c:49:c7:96:0b:aa:18:30:ce:1e:41:
                    58:81:70:9a:0a:d5:6d:42:df:a6:81:05:d6:87:5d:
                    b8:60:3a:9b:2d:26:55:cf:e7:9d:cb:50:28:6b:fb:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.144.0/22
                IPv6:
                  2804:74c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271002

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:a6:99:dd:3b:b9:4a:b7:f6:ac:df:70:f9:53:d7:4e:17:
         1e:7c:51:71:07:fc:98:e5:cd:db:c0:7f:06:5d:79:72:c2:4a:
         fe:f2:4f:ee:c3:50:c7:e9:39:16:59:49:06:52:31:50:85:dd:
         65:96:6e:8c:ac:22:38:c8:ce:d0:44:4b:1f:89:9b:ea:2c:f3:
         82:5d:6b:9a:91:42:46:44:5b:5a:c7:92:aa:14:7f:2e:d3:5d:
         46:e4:98:94:0d:4a:21:c0:97:6f:3b:f7:b8:8d:c0:e9:9a:40:
         a0:8b:55:c4:85:b3:31:53:38:16:76:91:e1:91:09:64:a2:e5:
         4f:83:e2:ed:82:a3:70:b2:fb:69:ff:eb:85:c3:2d:e3:04:f1:
         81:81:7f:df:8b:fb:7a:c8:79:c6:df:9f:aa:d0:90:fd:41:45:
         1a:cd:58:7d:3f:50:81:38:8f:25:52:a8:9f:32:c8:e8:e8:03:
         dc:42:67:75:5d:ba:e1:d6:ae:36:97:ae:16:75:58:9c:51:5e:
         f2:25:02:2a:2f:bc:f6:1b:b4:99:89:bf:ae:10:7b:e4:0f:10:
         42:6c:10:8f:52:38:0c:a0:9a:05:7e:10:77:13:07:ff:fe:e9:
         ab:63:92:b5:71:19:c0:be:c8:44:6b:e0:70:13:75:ec:be:e7:
         4b:6e:fa:b6
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUHw6zoKkcyCa1suDbgoV6EDAkvH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYxMzUzNTdaFw0yNjAzMDUxMzU4NTdaMDMxMTAvBgNV
BAMTKDE2NzJBNkFDNURGQkU4NUI3QjEwQ0ZDOEFEQUNERjZCQkEwOEE0Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLuMJQXJEZdPQEQJhGkklR9Aq
XqU9w26v7wnNLZtPA/acY9R0OMw2BRcNf18B6OQYm+jMtxqHneJeHX+fZ1TMqrDe
kg4ogZJbfym6hD1HeMUl2A3nILv5vZddzdmpPETpFCqD5c5IW7ZYXeTyj0WyT00I
vErw2caw8UQYEywdfIY/DzI4lN/pGlggK9sedoBSqmFdkEAuz3AvDrVdL8GaG3bn
PdFIniT0bmGROYXuE5pM7NjGSXynEuqBTxrteBqzM0GHM7eTZ/tGsoI3f0wsHtBt
Mx08SceWC6oYMM4eQViBcJoK1W1C36aBBdaHXbhgOpstJlXP553LUChr+3XTAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWcqasXfvoW3sQ
z8itrN9rugikzDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkQ2
YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpuU3cvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkQ2
YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpuU3cvMS8xNjcy
QTZBQzVERkJFODVCN0IxMENGQzhBREFDREY2QkJBMDhBNENDLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKx35AwDQQCAAIwBwMFACgEdMQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCKaMA0GCSqGSIb3DQEBCwUAA4IBAQBU4KaZ3Tu5Srf2rN9w
+VPXThcefFFxB/yY5c3bwH8GXXlywkr+8k/uw1DH6TkWWUkGUjFQhd1llm6MrCI4
yM7QREsfiZvqLPOCXWuakUJGRFtax5KqFH8u011G5JiUDUohwJdvO/e4jcDpmkCg
i1XEhbMxUzgWdpHhkQlkouVPg+LtgqNwsvtp/+uFwy3jBPGBgX/fi/t6yHnG35+q
0JD9QUUazVh9P1CBOI8lUqifMsjo6APcQmd1Xbrh1q42l64WdVicUV7yJQIqL7z2
G7SZib+uEHvkDxBCbBCPUjgMoJoFfhB3Ewf//umrY5K1cRnAvshEa+BwE3XsvudL
bvq2
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:25 2025 by rpki-client