Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer
File:                     25F750CC8B097F02421DA84CAA0417DC66A794EE.cer (raw, json)
Hash identifier:          8Lmdpny30xgkrcCYB1gdlL/vQoQGmeCJ1NOV92YdC/8=
Subject key identifier:   25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0DF0D1B84F8D74BAD8510985A99F605C8B8744AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:36:26 +0000
Certificate not after:    Wed 04 Mar 2026 18:41:26 +0000
Subordinate resources:    AS: 52995
                          IP: 177.47.224.0/20
                          IP: 177.93.248.0/21
                          IP: 2804:4d8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f0:d1:b8:4f:8d:74:ba:d8:51:09:85:a9:9f:60:5c:8b:87:44:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:36:26 2025 GMT
            Not After : Mar  4 18:41:26 2026 GMT
        Subject: CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:73:99:fe:93:d0:97:93:a5:76:74:16:9e:
                    99:30:0b:08:77:99:47:58:99:99:4c:38:94:de:d8:
                    26:5a:0d:a0:2b:74:08:86:bc:33:c8:48:94:9b:aa:
                    e4:93:04:bb:9e:33:10:d6:57:12:60:be:04:c0:b9:
                    07:85:db:b3:fe:8f:54:ff:8e:ca:c3:83:84:2c:ad:
                    23:a7:9b:b6:0a:0c:46:50:8d:8c:bc:9c:41:54:9f:
                    60:df:f9:ad:b8:03:7a:b9:39:7b:32:3f:8a:4b:df:
                    7b:3c:d5:a0:c4:8c:49:45:63:54:32:f9:54:02:c9:
                    b4:59:8f:9e:b6:d8:a5:0b:61:fb:86:af:66:ea:58:
                    93:5b:0b:70:99:84:6b:e4:00:4d:86:8f:9e:c0:38:
                    42:a7:22:7e:c3:5c:58:de:ae:5e:c7:3b:27:eb:0a:
                    af:6f:80:6c:96:e1:30:ea:a0:42:40:43:74:0d:89:
                    62:f3:8d:69:f7:39:63:70:3b:5e:cb:52:01:5a:2c:
                    56:82:10:3b:03:23:6b:05:22:ab:72:d3:f7:38:4e:
                    a2:e9:15:79:18:9d:bd:77:b3:c9:aa:01:6d:6c:c6:
                    f5:b7:58:b3:4c:b2:7c:db:16:30:bd:e7:22:c4:c0:
                    61:5f:00:a3:36:5e:e5:6c:26:e1:77:1a:63:93:9f:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.224.0/20
                  177.93.248.0/21
                IPv6:
                  2804:4d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52995

    Signature Algorithm: sha256WithRSAEncryption
         04:ad:af:08:9d:3e:2b:6c:73:1f:c9:b7:04:5e:08:f3:8b:94:
         b4:93:dd:54:1d:04:4d:75:23:96:fe:04:2a:e7:4d:dd:0c:5f:
         64:70:14:9e:87:e7:e9:13:ac:74:b6:4e:5b:46:99:9e:5e:7b:
         07:01:85:6f:ca:37:5c:a9:95:5e:e4:9b:38:de:a8:82:d5:45:
         54:bd:b2:4e:e7:5c:68:7f:6f:45:0d:65:ef:ca:c6:40:e0:68:
         de:01:b9:a0:14:1c:41:e8:e3:01:21:4f:f5:ef:5b:7e:73:61:
         f0:02:2e:cb:d6:73:d2:3a:7d:e6:96:23:cd:d8:24:3f:e7:09:
         b5:b2:53:ca:a4:f1:51:66:4f:d9:c1:f0:b0:20:57:bd:72:3c:
         c7:50:18:51:a2:94:46:aa:8d:7d:d4:33:82:5c:12:10:ca:53:
         94:17:f4:de:33:53:08:eb:ea:29:7a:23:03:55:b1:34:c9:02:
         a3:74:e3:d9:e7:d5:82:18:a9:5c:51:74:7c:44:ce:3f:c2:c9:
         66:1a:ed:a1:7c:3c:8e:72:03:7c:8f:89:75:5a:c8:a4:7d:6d:
         aa:59:fc:81:e8:8d:e4:45:4b:73:69:b3:9b:49:8f:c8:60:be:
         36:c7:64:69:f1:9e:22:56:49:1a:cf:34:6f:30:69:af:2f:29:
         b4:65:6f:7d
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUDfDRuE+NdLrYUQmFqZ9gXIuHRKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM2MjZaFw0yNjAzMDQxODQxMjZaMDMxMTAvBgNV
BAMTKDI1Rjc1MENDOEIwOTdGMDI0MjFEQTg0Q0FBMDQxN0RDNjZBNzk0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1nOZ/pPQl5OldnQWnpkwCwh3
mUdYmZlMOJTe2CZaDaArdAiGvDPISJSbquSTBLueMxDWVxJgvgTAuQeF27P+j1T/
jsrDg4QsrSOnm7YKDEZQjYy8nEFUn2Df+a24A3q5OXsyP4pL33s81aDEjElFY1Qy
+VQCybRZj5622KULYfuGr2bqWJNbC3CZhGvkAE2Gj57AOEKnIn7DXFjerl7HOyfr
Cq9vgGyW4TDqoEJAQ3QNiWLzjWn3OWNwO17LUgFaLFaCEDsDI2sFIqty0/c4TqLp
FXkYnb13s8mqAW1sxvW3WLNMsnzbFjC95yLEwGFfAKM2XuVsJuF3GmOTn1bTAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQl91DMiwl/AkId
qEyqBBfcZqeU7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3Vw
UDlGUTU4YUc4QjExd01kS1IyZmVIUXdVMkNiUWVyZnZoUFdDYmJodTMvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3Vw
UDlGUTU4YUc4QjExd01kS1IyZmVIUXdVMkNiUWVyZnZoUFdDYmJodTMvMS8yNUY3
NTBDQzhCMDk3RjAyNDIxREE4NENBQTA0MTdEQzY2QTc5NEVFLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB
Af8EJTAjMBIEAgABMAwDBASxL+ADBAOxXfgwDQQCAAIwBwMFACgEBNgwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAM8DMA0GCSqGSIb3DQEBCwUAA4IBAQAEra8InT4r
bHMfybcEXgjzi5S0k91UHQRNdSOW/gQq503dDF9kcBSeh+fpE6x0tk5bRpmeXnsH
AYVvyjdcqZVe5Js43qiC1UVUvbJO51xof29FDWXvysZA4GjeAbmgFBxB6OMBIU/1
71t+c2HwAi7L1nPSOn3mliPN2CQ/5wm1slPKpPFRZk/ZwfCwIFe9cjzHUBhRopRG
qo191DOCXBIQylOUF/TeM1MI6+opeiMDVbE0yQKjdOPZ59WCGKlcUXR8RM4/wslm
Gu2hfDyOcgN8j4l1WsikfW2qWfyB6I3kRUtzabObSY/IYL42x2Rp8Z4iVkkazzRv
MGmvLym0ZW99
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:44:28 2025 by rpki-client