Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
File:                     21619A6DD05DB15FE1B213C8C5C580B755346175.cer (raw, json)
Hash identifier:          8v7d65RBinhnCZ4y1iq9u9Mbv5XOQp6oXBwDW4kWOm8=
Subject key identifier:   21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A74A40A19EED4A87756853A67F07A605A91384D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:56:57 +0000
Certificate not after:    Thu 05 Mar 2026 23:01:57 +0000
Subordinate resources:    AS: 262996
                          IP: 186.219.208.0/21
                          IP: 2804:9d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:74:a4:0a:19:ee:d4:a8:77:56:85:3a:67:f0:7a:60:5a:91:38:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 22:56:57 2025 GMT
            Not After : Mar  5 23:01:57 2026 GMT
        Subject: CN=21619A6DD05DB15FE1B213C8C5C580B755346175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:c6:33:91:ca:8e:19:42:f8:78:d5:8a:53:
                    5f:f8:95:4b:24:35:36:1d:56:d6:16:56:d0:32:69:
                    d2:f8:e6:c0:cc:b9:a8:26:a1:4f:22:26:ca:b6:6d:
                    85:5a:7c:f8:ef:89:89:96:3e:b0:c4:5b:9a:cd:cf:
                    37:f3:1f:d5:6b:74:2c:ac:4d:1c:7c:eb:3d:75:69:
                    ed:9c:19:c1:23:5d:95:dc:ad:6a:2b:04:ff:d7:de:
                    31:90:8b:84:55:ed:ae:70:ea:0a:25:7f:b2:17:fd:
                    82:ae:7a:8c:5c:f4:67:da:e0:b2:69:20:eb:12:66:
                    32:12:e6:67:78:90:2d:27:1e:a5:5d:d4:13:11:6b:
                    ce:4f:b4:e7:81:8b:6c:b2:7b:78:ec:3d:53:e3:8b:
                    7d:a7:55:fd:a9:3a:60:6e:74:0f:8d:fa:27:0b:c5:
                    cf:f6:b6:bd:52:da:6e:61:fa:1f:d9:a6:11:1a:f9:
                    4f:0c:c0:a6:23:a4:10:bd:28:a4:fd:66:11:10:fd:
                    4f:09:30:cd:98:18:a2:37:dc:71:db:c9:ae:68:0d:
                    c6:48:20:fe:70:b1:87:aa:01:36:40:67:0d:ee:de:
                    bb:b9:27:da:69:6b:df:55:9f:2e:24:81:93:9b:e9:
                    c3:ab:69:9a:cd:2b:71:aa:5e:91:c4:27:15:8d:39:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.208.0/21
                IPv6:
                  2804:9d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262996

    Signature Algorithm: sha256WithRSAEncryption
         45:83:a4:76:7f:91:65:0c:4e:d6:59:4d:2a:34:d8:ee:1a:48:
         64:9f:59:6b:cc:49:9b:73:42:62:2f:24:06:5c:ee:75:9d:2e:
         95:d7:30:78:fe:35:31:63:bb:5b:d0:10:26:f3:7f:e3:cf:c3:
         88:92:de:39:fb:b1:65:8d:8c:16:f1:c2:0c:19:74:c7:39:51:
         56:8c:e0:16:0c:69:8d:b7:56:39:1b:58:ee:40:ce:f7:79:3c:
         3f:9e:2b:23:ed:12:68:5a:07:59:5b:62:10:34:81:4d:25:f3:
         66:be:df:5b:15:b1:8b:5f:3e:23:79:da:28:d2:f2:9c:33:13:
         70:54:d2:32:dc:02:d2:96:0a:81:d7:34:57:f7:c0:73:f0:1f:
         70:6c:de:83:22:f3:01:9d:de:93:e1:a9:b5:8d:b4:ed:88:70:
         c8:c7:47:d4:b1:cc:3a:92:3e:1d:6a:6a:14:53:35:78:8c:b2:
         de:93:11:b9:72:54:dd:49:4d:86:5d:02:34:a1:90:a9:cc:81:
         f5:bf:72:e7:3a:1f:73:8a:ae:8d:1b:31:50:d3:2f:7c:a1:2d:
         7d:c3:9d:34:d0:0c:8e:b2:b3:e7:77:f4:85:62:87:8d:b9:10:
         aa:fb:57:76:a0:71:c2:08:b4:69:a1:4a:da:97:62:0c:ff:42:
         a3:f9:8b:f0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOnSkChnu1Kh3VoU6Z/B6YFqROE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMjU2NTdaFw0yNjAzMDUyMzAxNTdaMDMxMTAvBgNV
BAMTKDIxNjE5QTZERDA1REIxNUZFMUIyMTNDOEM1QzU4MEI3NTUzNDYxNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZa8YzkcqOGUL4eNWKU1/4lUsk
NTYdVtYWVtAyadL45sDMuagmoU8iJsq2bYVafPjviYmWPrDEW5rNzzfzH9VrdCys
TRx86z11ae2cGcEjXZXcrWorBP/X3jGQi4RV7a5w6golf7IX/YKueoxc9Gfa4LJp
IOsSZjIS5md4kC0nHqVd1BMRa85PtOeBi2yye3jsPVPji32nVf2pOmBudA+N+icL
xc/2tr1S2m5h+h/ZphEa+U8MwKYjpBC9KKT9ZhEQ/U8JMM2YGKI33HHbya5oDcZI
IP5wsYeqATZAZw3u3ru5J9ppa99Vny4kgZOb6cOraZrNK3GqXpHEJxWNOfCtAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhYZpt0F2xX+Gy
E8jFxYC3VTRhdTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSE5m
S2Z5VUFGTkF0em00UkVvajZQY2NFeEU0azV2R1Iza0M2RkdTWHFnRHMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hO
ZktmeVVBRk5BdHptNFJFb2o2UGNjRXhFNGs1dkdSM2tDNkZHU1hxZ0RzLzEvMjE2
MTlBNkREMDVEQjE1RkUxQjIxM0M4QzVDNTgwQjc1NTM0NjE3NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDutvQMA0EAgACMAcDBQAoBAnUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQDVDANBgkqhkiG9w0BAQsFAAOCAQEARYOkdn+RZQxO1llN
KjTY7hpIZJ9Za8xJm3NCYi8kBlzudZ0uldcweP41MWO7W9AQJvN/48/DiJLeOfux
ZY2MFvHCDBl0xzlRVozgFgxpjbdWORtY7kDO93k8P54rI+0SaFoHWVtiEDSBTSXz
Zr7fWxWxi18+I3naKNLynDMTcFTSMtwC0pYKgdc0V/fAc/AfcGzegyLzAZ3ek+Gp
tY207YhwyMdH1LHMOpI+HWpqFFM1eIyy3pMRuXJU3UlNhl0CNKGQqcyB9b9y5zof
c4qujRsxUNMvfKEtfcOdNNAMjrKz53f0hWKHjbkQqvtXdqBxwgi0aaFK2pdiDP9C
o/mL8A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:33:38 2025 by rpki-client