Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1C461D45DB6710ED9A2911217FE03AFDB5EFEB2A.cer
File:                     1C461D45DB6710ED9A2911217FE03AFDB5EFEB2A.cer (raw, json)
Hash identifier:          ynmkqkDdbkxHVmiY2y6av2j0bfeXKg7ti2R8NRrqz4k=
Subject key identifier:   1C:46:1D:45:DB:67:10:ED:9A:29:11:21:7F:E0:3A:FD:B5:EF:EB:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49F6B3BE2CF0F7213A6B1F54FDD46532F0CCDBDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1C461D45DB6710ED9A2911217FE03AFDB5EFEB2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Nov 2024 18:36:41 +0000
Certificate not after:    Wed 26 Nov 2025 18:41:41 +0000
Subordinate resources:    AS: 264927
                          IP: 168.228.184.0/22
                          IP: 201.159.90.0/23
                          IP: 2804:3008::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f6:b3:be:2c:f0:f7:21:3a:6b:1f:54:fd:d4:65:32:f0:cc:db:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 27 18:36:41 2024 GMT
            Not After : Nov 26 18:41:41 2025 GMT
        Subject: CN=1C461D45DB6710ED9A2911217FE03AFDB5EFEB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:17:5c:dc:ba:2b:41:9a:50:3a:8d:58:5b:
                    38:cf:b7:31:5e:7e:76:a0:fd:72:19:55:20:54:4c:
                    b1:bc:83:2a:47:df:cf:73:ad:74:65:21:59:d4:3e:
                    6a:fa:b5:8a:c6:f0:91:f1:24:ef:da:83:25:ec:aa:
                    f3:b5:f2:21:a6:7c:15:47:f8:ac:87:39:5a:9c:3d:
                    3e:20:bb:8b:2d:fb:d2:ce:80:0f:6b:07:dd:1b:70:
                    08:77:17:ee:cc:7d:d5:f2:81:48:24:67:65:1b:57:
                    ac:3d:5f:c1:09:91:bc:68:3e:3f:a2:e8:70:b5:cd:
                    d4:da:e8:8c:04:fc:cd:fe:7f:5c:d0:25:2b:49:e9:
                    e3:06:48:1b:0f:c4:f7:47:af:87:da:87:40:92:51:
                    a1:7d:a2:00:69:c3:de:92:52:55:10:7b:74:54:c9:
                    a3:5e:59:b7:d6:d9:c1:8d:33:2d:50:ac:ce:b7:ee:
                    53:6a:70:4a:d6:09:0a:7f:65:b3:90:c5:ab:9c:d0:
                    29:d8:9b:e3:14:e0:1c:74:3f:ae:66:cd:84:0a:4a:
                    f7:b3:a4:0a:44:53:bd:84:c1:3e:e0:50:b1:2c:cc:
                    9d:c6:a7:f8:d9:61:8b:19:5a:c7:47:b7:16:6d:5f:
                    30:44:bc:f1:7f:60:db:b1:a5:24:24:5e:c0:02:03:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:46:1D:45:DB:67:10:ED:9A:29:11:21:7F:E0:3A:FD:B5:EF:EB:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1C461D45DB6710ED9A2911217FE03AFDB5EFEB2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/22
                  201.159.90.0/23
                IPv6:
                  2804:3008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264927

    Signature Algorithm: sha256WithRSAEncryption
         10:93:cc:5e:75:81:e0:d9:d6:b5:3b:33:be:92:73:e9:40:48:
         b3:fb:11:53:fe:0a:87:7b:10:6c:9d:b8:df:54:7e:92:95:c8:
         b9:26:5a:29:e4:ff:4e:4c:63:47:92:f0:1e:82:ad:59:4d:ec:
         50:74:52:9d:03:95:bf:49:de:c0:de:af:63:a6:83:db:87:5f:
         64:59:32:f7:24:00:b1:e7:2d:7a:84:a1:2f:3e:b4:24:75:74:
         a0:d3:24:98:ae:72:b0:b8:2b:54:cf:a1:7e:79:bb:6f:fd:07:
         98:8f:25:7d:0a:b7:f4:9d:6d:40:48:ef:ff:3e:f2:33:31:07:
         b4:40:5a:ec:50:a1:1a:c0:b4:ed:26:de:1c:13:9c:e5:43:20:
         17:a5:38:86:ab:2f:38:ff:a3:13:06:e9:fc:1a:5a:38:9b:84:
         1e:67:bb:92:82:48:8b:b2:c9:13:f7:90:51:7b:35:06:83:80:
         99:c4:93:aa:f2:a4:b8:58:55:d9:8a:32:d6:19:3f:02:ab:12:
         ce:13:9b:e4:0c:2d:b5:ea:c3:38:5e:44:47:51:68:b0:b5:b4:
         ac:14:63:b3:64:b4:40:43:3f:7c:58:2e:40:4e:22:aa:ab:33:
         1f:b8:00:36:b6:e7:c3:8d:60:ca:62:92:40:92:94:45:c5:5d:
         37:6d:b0:32
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUSfazvizw9yE6ax9U/dRlMvDM29owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjcxODM2NDFaFw0yNTExMjYxODQxNDFaMDMxMTAvBgNV
BAMTKDFDNDYxRDQ1REI2NzEwRUQ5QTI5MTEyMTdGRTAzQUZEQjVFRkVCMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVvRdc3LorQZpQOo1YWzjPtzFe
fnag/XIZVSBUTLG8gypH389zrXRlIVnUPmr6tYrG8JHxJO/agyXsqvO18iGmfBVH
+KyHOVqcPT4gu4st+9LOgA9rB90bcAh3F+7MfdXygUgkZ2UbV6w9X8EJkbxoPj+i
6HC1zdTa6IwE/M3+f1zQJStJ6eMGSBsPxPdHr4fah0CSUaF9ogBpw96SUlUQe3RU
yaNeWbfW2cGNMy1QrM637lNqcErWCQp/ZbOQxauc0CnYm+MU4Bx0P65mzYQKSvez
pApEU72EwT7gULEszJ3Gp/jZYYsZWsdHtxZtXzBEvPF/YNuxpSQkXsACA675AgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcRh1F22cQ7Zop
ESF/4Dr9te/rKjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWZS
cmF6aG9UclZMSFpFQUJjRXBOTHh6eEI0bVhhWnJwaDRlMnkycFRGWUsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fm
UnJhemhvVHJWTEhaRUFCY0VwTkx4enhCNG1YYVpycGg0ZTJ5MnBURllLLzAvMUM0
NjFENDVEQjY3MTBFRDlBMjkxMTIxN0ZFMDNBRkRCNUVGRUIyQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqOS4AwQByZ9aMA0EAgACMAcDBQAoBDAIMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQK3zANBgkqhkiG9w0BAQsFAAOCAQEAEJPMXnWB
4NnWtTszvpJz6UBIs/sRU/4Kh3sQbJ2431R+kpXIuSZaKeT/TkxjR5LwHoKtWU3s
UHRSnQOVv0newN6vY6aD24dfZFky9yQAsecteoShLz60JHV0oNMkmK5ysLgrVM+h
fnm7b/0HmI8lfQq39J1tQEjv/z7yMzEHtEBa7FChGsC07SbeHBOc5UMgF6U4hqsv
OP+jEwbp/BpaOJuEHme7koJIi7LJE/eQUXs1BoOAmcSTqvKkuFhV2Yoy1hk/AqsS
zhOb5AwtterDOF5ER1FosLW0rBRjs2S0QEM/fFguQE4iqqszH7gANrbnw41gymKS
QJKURcVdN22wMg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:11 2025 by rpki-client