Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29D311E07E371336F94D10B16A429E47398D71E2.cer
File:                     29D311E07E371336F94D10B16A429E47398D71E2.cer (raw, json)
Hash identifier:          agsWR42+vdNgrVgH1LAMxZUiqa/i/feNtF7lU5ECm4o=
Subject key identifier:   29:D3:11:E0:7E:37:13:36:F9:4D:10:B1:6A:42:9E:47:39:8D:71:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37F32D172FC58270FC4A826DE3E0092034E92FB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Oct 2024 14:32:24 +0000
Certificate not after:    Mon 20 Oct 2025 14:37:24 +0000
Subordinate resources:    AS: 263278
                          IP: 186.227.124.0/22
                          IP: 2804:1648::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f3:2d:17:2f:c5:82:70:fc:4a:82:6d:e3:e0:09:20:34:e9:2f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 21 14:32:24 2024 GMT
            Not After : Oct 20 14:37:24 2025 GMT
        Subject: CN=29D311E07E371336F94D10B16A429E47398D71E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:96:26:87:28:72:3a:63:6d:9a:4e:e6:07:
                    d2:34:20:f0:bb:a8:fd:ef:a2:23:85:c3:56:ff:2f:
                    60:59:21:35:f8:f4:5d:b3:9e:98:5b:e4:c0:68:52:
                    8b:a4:dc:f9:6c:e9:b4:b0:a4:ad:75:ae:ac:d5:50:
                    3c:b0:aa:0d:d7:8f:1d:d8:3f:30:51:d1:c2:0c:81:
                    9e:f9:99:e3:2b:a0:27:65:4a:72:26:07:c1:fc:ae:
                    5c:0e:ac:a4:3e:a9:7f:07:20:19:60:f3:8c:58:38:
                    12:2a:1d:e4:76:83:f3:2c:70:83:c9:2e:6b:db:94:
                    86:5f:b2:df:01:99:c2:20:f2:1e:59:d7:54:94:ff:
                    bb:2f:95:20:5b:9f:67:7a:34:1e:54:bd:9d:60:c7:
                    93:70:50:f8:59:c1:52:af:06:76:61:14:c3:75:f6:
                    38:38:8d:23:60:79:c9:f0:9e:a1:db:b0:0b:cc:b5:
                    82:2a:0e:3b:e9:78:a3:4b:80:ba:13:43:2a:4f:a6:
                    6e:4c:02:17:75:5f:62:67:32:cb:e8:3c:d4:fc:0b:
                    c4:b3:4a:3a:0c:bf:61:46:f7:ff:8c:2c:78:72:a1:
                    3e:33:2b:cb:c7:d8:14:e1:c7:85:9f:9c:d9:12:96:
                    5b:e3:01:ab:bb:f6:f5:69:2a:25:43:11:10:54:de:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:D3:11:E0:7E:37:13:36:F9:4D:10:B1:6A:42:9E:47:39:8D:71:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.124.0/22
                IPv6:
                  2804:1648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263278

    Signature Algorithm: sha256WithRSAEncryption
         70:09:d9:57:0a:f5:72:a8:86:77:fd:88:35:67:be:95:7b:ae:
         20:06:b5:32:9b:05:65:eb:5a:cb:65:4e:1f:ad:23:a9:07:e8:
         53:a8:9d:85:db:83:65:56:ba:66:c5:5d:c2:81:39:7d:20:8a:
         38:e5:6c:f2:24:7f:39:de:6a:f7:79:93:26:08:c9:8d:9f:39:
         aa:f7:93:a6:15:39:ee:9e:87:b7:01:e5:57:dd:98:f8:7a:9f:
         05:c9:f7:82:3c:a8:c3:e5:eb:5a:b4:3e:73:a4:43:40:7b:b5:
         ba:44:e0:0d:6b:64:03:35:87:6a:f4:af:3a:10:63:b5:43:7f:
         e3:45:d4:83:b6:5c:1f:0c:50:e2:f7:c5:62:e2:e7:80:bc:08:
         7f:d4:58:29:d2:23:e3:42:47:ef:49:4f:0e:e5:45:85:99:53:
         f5:e6:ca:76:ef:1a:b0:c4:aa:54:2a:28:57:4b:48:e6:24:7f:
         cb:ba:d0:49:33:57:8d:5c:78:bd:9c:7a:4c:6b:f9:bf:38:53:
         a3:c5:14:6c:d5:0f:14:43:93:c0:9d:be:43:b1:1c:94:1b:d5:
         28:8f:8c:68:05:dd:5b:41:6a:da:4d:76:e9:53:34:fc:2e:c6:
         26:93:6d:4a:41:47:00:2c:a6:5c:eb:9e:28:c6:98:09:d6:f7:
         a1:2d:92:fe
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUN/MtFy/FgnD8SoJt4+AJIDTpL7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMjExNDMyMjRaFw0yNTEwMjAxNDM3MjRaMDMxMTAvBgNV
BAMTKDI5RDMxMUUwN0UzNzEzMzZGOTREMTBCMTZBNDI5RTQ3Mzk4RDcxRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjE5YmhyhyOmNtmk7mB9I0IPC7
qP3voiOFw1b/L2BZITX49F2znphb5MBoUouk3Pls6bSwpK11rqzVUDywqg3Xjx3Y
PzBR0cIMgZ75meMroCdlSnImB8H8rlwOrKQ+qX8HIBlg84xYOBIqHeR2g/MscIPJ
LmvblIZfst8BmcIg8h5Z11SU/7svlSBbn2d6NB5UvZ1gx5NwUPhZwVKvBnZhFMN1
9jg4jSNgecnwnqHbsAvMtYIqDjvpeKNLgLoTQypPpm5MAhd1X2JnMsvoPNT8C8Sz
SjoMv2FG9/+MLHhyoT4zK8vH2BThx4WfnNkSllvjAau79vVpKiVDERBU3qgjAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQp0xHgfjcTNvlN
ELFqQp5HOY1x4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHNW
N0RUejdkcW1iSnlxRWdRN0JzVDlQQ3dCZXcyNk55R3ZZRGk5N3BMM3MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhz
VjdEVHo3ZHFtYkp5cUVnUTdCc1Q5UEN3QmV3MjZOeUd2WURpOTdwTDNzLzAvMjlE
MzExRTA3RTM3MTMzNkY5NEQxMEIxNkE0MjlFNDczOThENzFFMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCuuN8MA0EAgACMAcDBQAoBBZIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQEbjANBgkqhkiG9w0BAQsFAAOCAQEAcAnZVwr1cqiGd/2I
NWe+lXuuIAa1MpsFZetay2VOH60jqQfoU6idhduDZVa6ZsVdwoE5fSCKOOVs8iR/
Od5q93mTJgjJjZ85qveTphU57p6HtwHlV92Y+HqfBcn3gjyow+XrWrQ+c6RDQHu1
ukTgDWtkAzWHavSvOhBjtUN/40XUg7ZcHwxQ4vfFYuLngLwIf9RYKdIj40JH70lP
DuVFhZlT9ebKdu8asMSqVCooV0tI5iR/y7rQSTNXjVx4vZx6TGv5vzhTo8UUbNUP
FEOTwJ2+Q7EclBvVKI+MaAXdW0Fq2k126VM0/C7GJpNtSkFHACymXOueKMaYCdb3
oS2S/g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:15 2025 by rpki-client