Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
File:                     1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer (raw, json)
Hash identifier:          mKS3CAeEFVLodh2E+de3Vge0Wtd6mDv/lwYFIyUNjok=
Subject key identifier:   1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4191FB5C2113CB79AAC8A803818A41F9A1BC95AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Feb 2025 20:53:28 +0000
Certificate not after:    Mon 02 Feb 2026 20:58:28 +0000
Subordinate resources:    AS: 263911
                          IP: 138.204.172.0/22
                          IP: 2804:2794::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:91:fb:5c:21:13:cb:79:aa:c8:a8:03:81:8a:41:f9:a1:bc:95:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  3 20:53:28 2025 GMT
            Not After : Feb  2 20:58:28 2026 GMT
        Subject: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6d:f6:63:3d:b1:12:81:0e:47:89:a7:20:7e:
                    44:43:7f:25:a7:b8:40:81:aa:0a:01:08:47:80:ba:
                    c0:35:e6:08:f0:ab:ef:b0:af:7f:fc:9e:5a:ff:d1:
                    7d:d2:5f:78:2a:a7:a4:42:2b:02:53:41:98:bf:2c:
                    11:af:2e:6e:fd:0a:09:e8:26:7a:df:d5:47:5a:e1:
                    11:a2:e0:2a:32:71:01:3e:b4:29:8a:3c:93:a5:a5:
                    25:ca:1f:57:75:62:9c:e5:80:4f:30:53:8b:b8:6d:
                    8e:f3:5d:e7:4f:51:cc:ec:69:48:93:ae:c6:87:21:
                    0a:ff:f3:0e:18:8a:b7:72:3a:6b:f8:1c:61:b0:51:
                    c3:cd:ff:ee:19:af:2c:b7:34:75:b6:41:95:de:d7:
                    cc:59:f8:cd:6f:ca:e4:d2:53:1b:a0:cc:45:ed:15:
                    7e:e5:9a:14:c2:d2:aa:3d:43:7f:7b:1b:c7:75:7d:
                    6c:49:ff:1d:14:79:31:c6:dd:55:39:9e:92:eb:b3:
                    c6:80:13:87:e1:73:03:e2:1d:e3:c1:43:ad:9b:38:
                    db:36:df:ad:20:08:8b:27:4f:67:2f:10:d0:30:bf:
                    d9:5f:fa:25:ef:99:ba:e5:17:6a:9f:4f:cd:88:12:
                    15:93:77:10:e5:60:dd:cb:80:73:6b:7a:f1:cd:57:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.172.0/22
                IPv6:
                  2804:2794::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263911

    Signature Algorithm: sha256WithRSAEncryption
         b0:6d:85:7d:38:c9:f9:be:5b:17:87:a8:fb:f0:df:eb:72:df:
         c2:00:f5:09:aa:91:19:45:91:d6:39:7d:80:c1:eb:3a:e2:77:
         f4:59:43:a0:25:84:cf:3d:d1:1b:48:e7:6c:d1:37:1c:4c:e0:
         86:65:66:78:d5:00:00:43:4d:20:8c:8a:82:00:d1:16:b2:02:
         2e:9a:4a:9d:7a:4b:f8:ba:4c:b5:f7:4f:1e:af:7d:6a:2a:b2:
         84:4e:fe:04:40:e2:46:f2:f7:eb:64:12:e9:50:3f:c0:60:d2:
         5e:04:ed:63:fc:b9:d3:18:31:46:5d:84:20:ff:4b:e5:79:2b:
         55:c2:24:d4:7a:5c:2d:17:1b:c8:a8:89:1f:fb:6b:75:15:74:
         27:e0:48:77:0f:35:a3:97:fd:ef:17:55:dd:08:b1:d3:d8:cc:
         a3:64:7e:b2:d4:8c:e5:95:1d:00:b5:69:26:8f:65:f7:8a:f6:
         8a:be:f2:59:f3:f8:7e:12:0e:76:5d:e1:99:66:81:4e:76:03:
         ea:3c:e6:78:2f:83:b0:b4:47:5a:99:e9:70:01:73:bf:01:49:
         aa:20:c4:a8:27:d0:45:f7:d5:c0:8b:0e:7a:c9:cf:16:b5:aa:
         84:15:22:56:75:75:4d:58:aa:22:52:43:22:35:ae:b0:81:ee:
         0b:81:1d:1d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQZH7XCETy3mqyKgDgYpB+aG8lawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMDMyMDUzMjhaFw0yNjAyMDIyMDU4MjhaMDMxMTAvBgNV
BAMTKDFCODI3QzlFQkMzMUQ0OERDMTBBQjUyQUNFNTJCRjI3Qzg5RTkwQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzbfZjPbESgQ5HiacgfkRDfyWn
uECBqgoBCEeAusA15gjwq++wr3/8nlr/0X3SX3gqp6RCKwJTQZi/LBGvLm79Cgno
Jnrf1Uda4RGi4CoycQE+tCmKPJOlpSXKH1d1YpzlgE8wU4u4bY7zXedPUczsaUiT
rsaHIQr/8w4YirdyOmv4HGGwUcPN/+4Zryy3NHW2QZXe18xZ+M1vyuTSUxugzEXt
FX7lmhTC0qo9Q397G8d1fWxJ/x0UeTHG3VU5npLrs8aAE4fhcwPiHePBQ62bONs2
360gCIsnT2cvENAwv9lf+iXvmbrlF2qfT82IEhWTdxDlYN3LgHNrevHNV8inAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbgnyevDHUjcEK
tSrOUr8nyJ6QrDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM29Y
UkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNTclgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNv
WFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAvMUI4
MjdDOUVCQzMxRDQ4REMxMEFCNTJBQ0U1MkJGMjdDODlFOTBBQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCisysMA0EAgACMAcDBQAoBCeUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQG5zANBgkqhkiG9w0BAQsFAAOCAQEAsG2FfTjJ+b5bF4eo
+/Df63LfwgD1CaqRGUWR1jl9gMHrOuJ39FlDoCWEzz3RG0jnbNE3HEzghmVmeNUA
AENNIIyKggDRFrICLppKnXpL+LpMtfdPHq99aiqyhE7+BEDiRvL362QS6VA/wGDS
XgTtY/y50xgxRl2EIP9L5XkrVcIk1HpcLRcbyKiJH/trdRV0J+BIdw81o5f97xdV
3Qix09jMo2R+stSM5ZUdALVpJo9l94r2ir7yWfP4fhIOdl3hmWaBTnYD6jzmeC+D
sLRHWpnpcAFzvwFJqiDEqCfQRffVwIsOesnPFrWqhBUiVnV1TViqIlJDIjWusIHu
C4EdHQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:02:36 2025 by rpki-client