Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
File:                     29693FC359A5A86688559CF55626142C53AF60AF.cer (raw, json)
Hash identifier:          H9Vcmki1zy5+xeoBV4gQlr5Eniya5PmXGONmciv8F14=
Subject key identifier:   29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B906E8D834D517FC2107238A5A317C6956B12B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 04:43:55 +0000
Certificate not after:    Fri 06 Mar 2026 04:48:55 +0000
Subordinate resources:    AS: 264926
                          IP: 168.228.176.0/22
                          IP: 2804:3004::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:90:6e:8d:83:4d:51:7f:c2:10:72:38:a5:a3:17:c6:95:6b:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 04:43:55 2025 GMT
            Not After : Mar  6 04:48:55 2026 GMT
        Subject: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:63:46:81:1d:a4:eb:72:a7:c8:f7:ec:c0:c7:
                    30:06:d5:d9:3c:61:4c:5d:f9:0d:52:4a:16:f2:14:
                    fb:75:04:d8:43:11:6a:7b:36:e0:f0:53:42:81:8c:
                    d5:88:8e:1c:5b:28:ca:12:cc:64:d3:48:e1:9a:c2:
                    a6:1e:df:6c:d6:50:ac:fc:2d:e2:31:97:86:65:a7:
                    2c:00:2f:e3:0f:8a:26:0a:e1:52:a1:87:b7:a1:43:
                    cc:af:ed:f1:c6:23:2c:64:47:33:c1:f3:ae:0d:f8:
                    19:ad:c9:eb:b3:ad:41:b0:46:bc:9c:85:79:27:3b:
                    86:d0:09:43:88:40:ba:98:e2:58:5b:86:00:d0:a6:
                    ae:44:83:76:fe:a8:a0:81:b6:3e:ec:e3:55:58:0c:
                    92:94:46:aa:d4:0c:c6:3e:d3:e6:4e:10:58:ea:3f:
                    8a:2c:ec:f8:ab:de:67:a2:95:c3:34:4d:73:7c:8c:
                    b5:05:ae:e9:04:7d:55:f8:3a:96:15:be:13:48:91:
                    69:23:fc:90:41:86:6f:28:72:5d:2c:8d:16:e8:ca:
                    c5:ee:10:e6:16:90:2c:d5:45:e6:22:6e:26:4d:83:
                    15:85:e0:f0:bc:3e:74:14:e4:33:51:86:97:2e:c6:
                    81:1a:42:50:39:d1:8f:1c:bf:a0:ad:cc:82:40:07:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/22
                IPv6:
                  2804:3004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264926

    Signature Algorithm: sha256WithRSAEncryption
         48:18:cd:3a:82:9e:cb:45:c7:a4:75:c3:5b:5a:a4:d6:b1:58:
         03:37:be:4e:bd:f1:8d:eb:4f:83:73:25:af:2a:22:a4:fc:8e:
         8d:04:07:4b:fb:00:e6:da:38:9b:ef:b4:28:ee:a1:a1:d9:92:
         10:65:84:b7:09:a9:f9:6e:de:66:5d:ed:5e:ea:39:11:5b:82:
         80:a6:c9:d2:a0:16:b7:56:d1:0b:23:67:12:a4:18:e9:1e:dd:
         31:46:9f:2f:10:3e:ee:56:b2:2d:c8:9e:6b:ea:bd:2e:cd:17:
         6c:7e:df:a5:59:49:4c:07:39:e3:6f:45:4e:04:23:bd:21:b1:
         f7:e8:51:39:41:8d:2b:d0:31:65:a1:e6:d4:0d:31:42:64:6a:
         bf:50:52:48:4e:6c:34:69:fb:bd:2b:e2:1a:b5:0c:a0:55:e9:
         68:c9:71:5b:0a:b6:ad:9f:99:e1:08:93:fc:99:72:2c:24:df:
         4a:46:c1:65:fb:98:f4:16:07:88:5f:2f:74:29:3b:c3:26:79:
         6f:ca:ec:09:d8:b2:cf:08:32:6c:a5:c9:75:9d:e9:82:fb:26:
         67:dd:91:5c:dc:d0:1c:c7:1a:de:2e:c8:88:90:fc:35:5e:23:
         e0:cc:63:28:d4:37:da:3f:a1:bb:a1:26:c0:83:f9:f5:52:90:
         9e:72:ed:e3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUa5BujYNNUX/CEHI4paMXxpVrErAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwNDQzNTVaFw0yNjAzMDYwNDQ4NTVaMDMxMTAvBgNV
BAMTKDI5NjkzRkMzNTlBNUE4NjY4ODU1OUNGNTU2MjYxNDJDNTNBRjYwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxY0aBHaTrcqfI9+zAxzAG1dk8
YUxd+Q1SShbyFPt1BNhDEWp7NuDwU0KBjNWIjhxbKMoSzGTTSOGawqYe32zWUKz8
LeIxl4ZlpywAL+MPiiYK4VKhh7ehQ8yv7fHGIyxkRzPB864N+BmtyeuzrUGwRryc
hXknO4bQCUOIQLqY4lhbhgDQpq5Eg3b+qKCBtj7s41VYDJKURqrUDMY+0+ZOEFjq
P4os7Pir3meilcM0TXN8jLUFrukEfVX4OpYVvhNIkWkj/JBBhm8ocl0sjRboysXu
EOYWkCzVReYibiZNgxWF4PC8PnQU5DNRhpcuxoEaQlA50Y8cv6CtzIJAB8U3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpaT/DWaWoZohV
nPVWJhQsU69grzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzVj
WmRHbnhaSG0ydGV0akFCVmZ3dFFaN2ZOVDVoajJ3V1Y0OHRDbUVldFMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc1
Y1pkR254WkhtMnRldGpBQlZmd3RRWjdmTlQ1aGoyd1dWNDh0Q21FZXRTLzEvMjk2
OTNGQzM1OUE1QTg2Njg4NTU5Q0Y1NTYyNjE0MkM1M0FGNjBBRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqOSwMA0EAgACMAcDBQAoBDAEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQK3jANBgkqhkiG9w0BAQsFAAOCAQEASBjNOoKey0XHpHXD
W1qk1rFYAze+Tr3xjetPg3MlryoipPyOjQQHS/sA5to4m++0KO6hodmSEGWEtwmp
+W7eZl3tXuo5EVuCgKbJ0qAWt1bRCyNnEqQY6R7dMUafLxA+7layLciea+q9Ls0X
bH7fpVlJTAc5429FTgQjvSGx9+hROUGNK9AxZaHm1A0xQmRqv1BSSE5sNGn7vSvi
GrUMoFXpaMlxWwq2rZ+Z4QiT/JlyLCTfSkbBZfuY9BYHiF8vdCk7wyZ5b8rsCdiy
zwgybKXJdZ3pgvsmZ92RXNzQHMca3i7IiJD8NV4j4MxjKNQ32j+hu6EmwIP59VKQ
nnLt4w==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:37 2025 by rpki-client