Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
File:                     2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer (raw, json)
Hash identifier:          lsdMj22dmMAZRYaPqDGnHoujg48MiYoxApF3TKzgUv8=
Subject key identifier:   2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20742A44584340374EA4270EBB7959EE2C8D6602
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Mar 2025 20:09:17 +0000
Certificate not after:    Tue 10 Mar 2026 20:14:17 +0000
Subordinate resources:    AS: 52944
                          IP: 168.205.152.0/22
                          IP: 177.38.56.0/21
                          IP: 201.150.112.0/22
                          IP: 2804:b28::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:74:2a:44:58:43:40:37:4e:a4:27:0e:bb:79:59:ee:2c:8d:66:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 11 20:09:17 2025 GMT
            Not After : Mar 10 20:14:17 2026 GMT
        Subject: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cd:a6:71:63:b8:64:9d:f9:18:31:f1:ec:4d:
                    15:73:bc:c6:00:2e:00:36:fb:8c:7b:e2:8c:20:c4:
                    07:d9:87:77:9c:c4:4f:1a:9f:f6:8d:cf:6b:a2:df:
                    c5:30:3d:da:b8:d5:bb:70:ab:8a:f8:aa:75:62:bb:
                    75:d9:0c:bc:c8:c9:07:d9:c5:f5:15:a5:b5:9c:ba:
                    1a:44:fa:36:62:77:f6:3b:17:6b:00:64:7d:75:d4:
                    00:ac:b6:9e:2e:6f:5e:6a:57:a9:16:cf:b7:41:e8:
                    97:2d:0e:b1:70:0f:2e:e4:31:28:62:2f:41:a3:72:
                    d1:0b:f0:21:2d:73:a8:5a:01:bf:4f:ff:f3:78:11:
                    be:d2:ef:a3:1d:6b:3b:2d:e2:f1:f4:da:fb:f1:cd:
                    90:b9:df:06:7f:a0:30:ba:22:67:a4:dd:20:f4:03:
                    c3:21:c6:dc:49:07:49:6d:65:2f:a5:3b:6a:99:bb:
                    ee:9f:47:10:93:86:a9:b2:62:87:fc:dd:06:20:49:
                    a8:67:62:6d:73:dc:72:18:b0:a7:1a:e4:db:d0:86:
                    0f:c4:bf:4e:6c:4c:95:73:09:71:66:49:94:40:68:
                    06:57:84:82:ad:15:26:ae:dc:5d:53:07:4d:24:b5:
                    b0:ba:ad:61:32:d3:ba:71:9d:33:d8:0c:6d:ba:a6:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.152.0/22
                  177.38.56.0/21
                  201.150.112.0/22
                IPv6:
                  2804:b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52944

    Signature Algorithm: sha256WithRSAEncryption
         49:95:ee:9e:8e:b8:f0:60:f7:71:14:8b:4e:6b:d6:70:7f:87:
         47:28:94:af:b4:db:ba:8a:97:ee:16:0f:31:54:5b:7b:1a:3f:
         5d:a7:40:75:b9:ba:72:83:e8:47:19:df:75:a6:f1:78:ce:77:
         f5:d3:78:9d:a3:d6:55:38:f4:81:ee:75:cc:62:e5:3a:c3:2b:
         16:12:51:98:3a:29:2f:bd:d4:28:a5:f2:31:e9:ac:6f:75:e1:
         74:1f:4f:a7:3d:c5:b8:c5:d5:08:05:cc:d5:38:12:af:a5:02:
         ea:14:58:b0:eb:ac:62:aa:57:fd:9b:4b:82:d0:9d:e4:82:5b:
         de:16:68:31:c6:c8:91:ed:71:e5:b5:fd:ae:cd:e4:f4:94:63:
         39:7c:7e:d6:55:f0:5d:6d:8a:9a:88:29:12:78:fb:42:83:22:
         19:99:1d:68:fb:7a:8d:89:34:09:ae:9e:96:3e:f9:91:36:52:
         42:5e:59:36:29:3b:03:e5:09:85:78:ec:e9:f5:57:2a:c2:78:
         5f:86:26:bc:23:52:32:03:c0:a1:2e:4d:bb:6d:c3:0a:2b:9f:
         90:07:7e:00:50:d9:d9:d6:c4:2b:a6:1a:0b:da:cb:e2:f5:d0:
         91:00:d6:92:a7:f8:aa:3a:91:aa:ab:56:02:bb:79:70:b2:24:
         d1:ec:b4:15
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUIHQqRFhDQDdOpCcOu3lZ7iyNZgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMTEyMDA5MTdaFw0yNjAzMTAyMDE0MTdaMDMxMTAvBgNV
BAMTKDJCN0IyQjM2Q0IzMzNDMUNGNjAwMzlCMUMzODc0MjMzOEJFNjlFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDezaZxY7hknfkYMfHsTRVzvMYA
LgA2+4x74owgxAfZh3ecxE8an/aNz2ui38UwPdq41btwq4r4qnViu3XZDLzIyQfZ
xfUVpbWcuhpE+jZid/Y7F2sAZH111ACstp4ub15qV6kWz7dB6JctDrFwDy7kMShi
L0GjctEL8CEtc6haAb9P//N4Eb7S76Mdazst4vH02vvxzZC53wZ/oDC6Imek3SD0
A8MhxtxJB0ltZS+lO2qZu+6fRxCThqmyYof83QYgSahnYm1z3HIYsKca5NvQhg/E
v05sTJVzCXFmSZRAaAZXhIKtFSau3F1TB00ktbC6rWEy07pxnTPYDG26pmvlAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQreys2yzM8HPYA
ObHDh0Izi+aeLzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFZ1
TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNXZmovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RW
dU5zYUxqYWEyWFRiUWtyYlppZ2puVnlzN1FaZEFUTVBpR2ppckFTV2ZqLzAvMkI3
QjJCMzZDQjMzM0MxQ0Y2MDAzOUIxQzM4NzQyMzM4QkU2OUUyRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCqM2YAwQDsSY4AwQCyZZwMA0EAgACMAcDBQAoBAso
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDO0DANBgkqhkiG9w0BAQsFAAOCAQEA
SZXuno648GD3cRSLTmvWcH+HRyiUr7TbuoqX7hYPMVRbexo/XadAdbm6coPoRxnf
dabxeM539dN4naPWVTj0ge51zGLlOsMrFhJRmDopL73UKKXyMemsb3XhdB9Ppz3F
uMXVCAXM1TgSr6UC6hRYsOusYqpX/ZtLgtCd5IJb3hZoMcbIke1x5bX9rs3k9JRj
OXx+1lXwXW2KmogpEnj7QoMiGZkdaPt6jYk0Ca6elj75kTZSQl5ZNik7A+UJhXjs
6fVXKsJ4X4YmvCNSMgPAoS5Nu23DCiufkAd+AFDZ2dbEK6YaC9rL4vXQkQDWkqf4
qjqRqqtWArt5cLIk0ey0FQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:42 2025 by rpki-client