Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer
File:                     18330DC0F98F298BD4E31F45E07E665325C9862F.cer (raw, json)
Hash identifier:          yB2amcofK/ML8ACr9Khm/5a4Pfk9oVBTJUQDT3Mvgso=
Subject key identifier:   18:33:0D:C0:F9:8F:29:8B:D4:E3:1F:45:E0:7E:66:53:25:C9:86:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F8821A798F9AF97511CB0E8DB8A46A5287FBFC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Jan 2025 18:18:20 +0000
Certificate not after:    Fri 23 Jan 2026 18:23:20 +0000
Subordinate resources:    AS: 61910
                          IP: 201.87.232.0/21
                          IP: 2804:16b0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:88:21:a7:98:f9:af:97:51:1c:b0:e8:db:8a:46:a5:28:7f:bf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 18:18:20 2025 GMT
            Not After : Jan 23 18:23:20 2026 GMT
        Subject: CN=18330DC0F98F298BD4E31F45E07E665325C9862F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:5f:5e:cb:d7:bc:53:5d:bd:17:14:a7:4b:
                    38:48:00:8c:4a:17:96:6e:e2:91:c2:56:67:db:0e:
                    5e:3c:e9:b2:45:56:f8:bc:65:84:25:ec:14:c1:6c:
                    14:85:50:20:01:8a:85:f8:4a:34:4f:c1:55:38:85:
                    b3:64:c1:5c:aa:ef:75:f0:21:15:e7:54:05:df:dd:
                    aa:3b:1c:4c:2a:29:3a:20:b3:b2:42:f7:ea:3d:da:
                    bf:35:ff:e7:d6:2c:f7:b7:28:28:7b:9b:34:13:25:
                    b6:b2:46:da:7e:b9:9f:e6:ae:1f:fd:d8:0d:f7:0d:
                    82:b8:b4:a6:c2:9f:1a:d8:55:bf:09:60:c9:bd:0d:
                    ca:a0:eb:2f:62:90:c5:b1:2f:6d:7b:df:bb:71:c6:
                    ed:e4:cc:67:2c:1a:1f:95:8c:b3:2a:65:16:df:a4:
                    58:79:53:29:63:7f:b8:0b:56:7c:d6:20:20:8d:a8:
                    20:a0:a3:7a:28:1b:d2:af:75:4d:79:1b:6c:e5:53:
                    10:ba:bb:88:ce:1e:65:dd:70:dc:dc:7e:e3:0b:d4:
                    e5:4f:0d:8b:2e:4b:44:69:d5:6f:1a:f3:b2:9a:35:
                    fe:9d:d2:b4:3c:09:da:da:9b:05:6e:c2:50:0a:83:
                    71:1b:92:b3:9a:b6:53:61:94:72:73:40:c4:34:03:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:33:0D:C0:F9:8F:29:8B:D4:E3:1F:45:E0:7E:66:53:25:C9:86:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/21
                IPv6:
                  2804:16b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61910

    Signature Algorithm: sha256WithRSAEncryption
         0b:e0:9f:7a:e9:b5:ce:88:bc:65:db:98:ab:3e:53:90:2c:00:
         1b:da:b8:1f:c4:5c:05:e2:dd:f4:9b:d6:d7:2e:d9:06:fb:e1:
         c4:d9:36:11:e6:d6:b1:1c:b7:a7:74:7b:5c:bd:7d:e2:d4:ee:
         6d:b9:54:54:13:a6:56:34:31:35:d6:df:82:33:1b:38:2b:18:
         88:a3:22:7a:58:67:62:f2:9f:99:70:56:3e:8a:5f:1e:9c:71:
         2e:51:d6:63:6c:f3:1a:54:ec:21:75:5a:b5:5b:0f:a7:25:40:
         4c:ff:e0:dd:19:5a:5b:cb:17:93:38:5a:7c:37:50:10:d6:95:
         84:4d:25:d8:4a:87:57:52:d5:9e:43:9b:fe:01:ea:e5:38:42:
         00:96:7a:01:8e:ff:4a:29:e1:2f:3e:5a:1a:da:39:f3:10:ba:
         27:2a:a9:2c:61:01:76:8e:46:53:5c:75:6f:04:da:a5:1f:52:
         3e:cb:fe:d2:53:27:b0:e7:27:f8:76:f0:c0:f4:57:3f:33:50:
         2a:3b:10:74:4e:2c:23:e9:20:20:c1:a0:a2:e3:4c:be:68:03:
         5a:a5:60:95:9e:3e:6a:e0:fd:a9:93:d6:b4:5a:79:b6:0f:0f:
         0e:c6:a3:fb:73:44:cf:82:e5:0f:3e:d5:fc:03:6d:c7:d8:d0:
         80:c5:13:8a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUH4ghp5j5r5dRHLDo24pGpSh/v8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjQxODE4MjBaFw0yNjAxMjMxODIzMjBaMDMxMTAvBgNV
BAMTKDE4MzMwREMwRjk4RjI5OEJENEUzMUY0NUUwN0U2NjUzMjVDOTg2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGl9ey9e8U129FxSnSzhIAIxK
F5Zu4pHCVmfbDl486bJFVvi8ZYQl7BTBbBSFUCABioX4SjRPwVU4hbNkwVyq73Xw
IRXnVAXf3ao7HEwqKTogs7JC9+o92r81/+fWLPe3KCh7mzQTJbayRtp+uZ/mrh/9
2A33DYK4tKbCnxrYVb8JYMm9Dcqg6y9ikMWxL21737txxu3kzGcsGh+VjLMqZRbf
pFh5Uyljf7gLVnzWICCNqCCgo3ooG9KvdU15G2zlUxC6u4jOHmXdcNzcfuML1OVP
DYsuS0Rp1W8a87KaNf6d0rQ8CdramwVuwlAKg3EbkrOatlNhlHJzQMQ0A/hhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYMw3A+Y8pi9Tj
H0XgfmZTJcmGLzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmZv
aDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldraWsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jm
b2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzAvMTgz
MzBEQzBGOThGMjk4QkQ0RTMxRjQ1RTA3RTY2NTMyNUM5ODYyRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDyVfoMA0EAgACMAcDBQAoBBawMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDx1jANBgkqhkiG9w0BAQsFAAOCAQEAC+Cfeum1zoi8ZduY
qz5TkCwAG9q4H8RcBeLd9JvW1y7ZBvvhxNk2EebWsRy3p3R7XL194tTubblUVBOm
VjQxNdbfgjMbOCsYiKMielhnYvKfmXBWPopfHpxxLlHWY2zzGlTsIXVatVsPpyVA
TP/g3RlaW8sXkzhafDdQENaVhE0l2EqHV1LVnkOb/gHq5ThCAJZ6AY7/SinhLz5a
Gto58xC6JyqpLGEBdo5GU1x1bwTapR9SPsv+0lMnsOcn+HbwwPRXPzNQKjsQdE4s
I+kgIMGgouNMvmgDWqVglZ4+auD9qZPWtFp5tg8PDsaj+3NEz4LlDz7V/ANtx9jQ
gMUTig==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:20 2025 by rpki-client