Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.cer
File:                     2B879BD1BC8C8BC4822F65B21C2481479AEF4474.cer (raw, json)
Hash identifier:          I/BMifTjnHFWJwYlPlapcCQCmuKABr6r/QhmI9NOl38=
Subject key identifier:   2B:87:9B:D1:BC:8C:8B:C4:82:2F:65:B2:1C:24:81:47:9A:EF:44:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2015815A99CB467D0418160FA3EF91B0C7428B7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.mft
caRepository:             rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 18:50:22 +0000
Certificate not after:    Fri 06 Mar 2026 18:55:22 +0000
Subordinate resources:    AS: 272633
                          IP: 2804:8648::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:15:81:5a:99:cb:46:7d:04:18:16:0f:a3:ef:91:b0:c7:42:8b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 18:50:22 2025 GMT
            Not After : Mar  6 18:55:22 2026 GMT
        Subject: CN=2B879BD1BC8C8BC4822F65B21C2481479AEF4474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:9f:c1:84:60:61:93:01:eb:9a:d6:bb:78:
                    30:d4:e4:fd:44:76:7a:ad:1d:aa:93:6f:42:79:8b:
                    52:66:9d:07:6a:0a:f8:ec:da:95:12:a2:29:65:82:
                    3e:fa:5d:f6:66:f5:a9:af:51:b2:a3:ae:ed:01:63:
                    19:0d:cb:09:98:4e:dd:b4:be:93:86:14:07:e5:04:
                    ca:17:12:32:51:80:de:bb:1e:32:36:62:70:72:bb:
                    25:e2:4d:0b:29:e7:e6:5d:b2:63:b5:ba:f9:1e:9f:
                    b9:e2:0e:06:c2:2b:d9:14:e4:91:96:f0:27:09:48:
                    28:4f:28:57:59:cb:af:68:1d:d2:da:92:98:25:c7:
                    69:68:58:2e:3f:93:17:77:b2:8a:ef:30:13:65:94:
                    a1:0e:ae:4a:7e:4d:e6:c1:01:b2:b2:37:87:31:a7:
                    db:24:be:7f:6a:37:b3:2e:1a:64:ff:7d:07:b2:86:
                    0a:50:a9:ff:ff:90:12:d8:ad:fb:5d:3c:0b:c6:b1:
                    4c:19:b8:ba:40:0a:cd:41:db:9b:af:af:da:65:72:
                    2f:05:f5:b7:3b:ea:94:ea:99:10:81:51:e2:ff:72:
                    80:82:2c:89:cb:1d:51:57:9a:1e:56:44:60:92:ee:
                    15:15:37:cf:ac:e2:53:d8:7b:5e:bf:78:fd:32:ad:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:87:9B:D1:BC:8C:8B:C4:82:2F:65:B2:1C:24:81:47:9A:EF:44:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272633

    Signature Algorithm: sha256WithRSAEncryption
         29:86:5c:64:c1:b0:00:78:09:59:fd:32:e8:43:38:c4:4b:39:
         73:b0:25:9c:45:06:44:c0:b6:7c:f2:3a:01:8d:c3:4a:14:19:
         76:22:34:d5:07:b3:5d:3e:7e:19:21:8e:76:c6:0f:12:b0:84:
         64:ae:56:54:cc:e0:17:5e:0c:0e:2b:26:4f:9a:8c:57:a8:3b:
         8e:37:c9:5e:a8:60:29:21:61:57:06:6c:3c:53:10:c2:2d:92:
         1c:82:35:e5:80:a0:7b:07:9e:99:f8:ef:e9:3d:3b:c6:9a:10:
         d0:79:22:a7:8f:65:a1:6b:d1:89:82:6f:69:af:74:04:fe:cd:
         b4:36:99:af:f3:cd:ce:eb:1a:d0:96:94:eb:86:45:63:16:c9:
         a1:26:32:b1:5d:01:ee:b5:35:41:67:79:fe:83:d8:cc:53:4c:
         3a:08:18:47:10:40:4e:77:14:a2:7c:26:8e:f5:5c:e3:d3:0f:
         8e:4b:b0:0a:73:fd:3b:3f:c0:01:f5:23:52:b7:77:bd:18:8b:
         9c:18:93:58:a2:11:e8:5f:e6:8a:35:45:07:5c:30:6c:cf:19:
         0b:7c:6e:b3:3b:2c:88:62:23:5d:80:8a:2a:72:a5:49:ad:e1:
         ec:a3:b1:22:96:96:91:e8:4f:e1:56:b3:8a:42:25:47:89:32:
         cf:af:9d:2d
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUIBWBWpnLRn0EGBYPo++RsMdCi3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcxODUwMjJaFw0yNjAzMDYxODU1MjJaMDMxMTAvBgNV
BAMTKDJCODc5QkQxQkM4QzhCQzQ4MjJGNjVCMjFDMjQ4MTQ3OUFFRjQ0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdZ/BhGBhkwHrmta7eDDU5P1E
dnqtHaqTb0J5i1JmnQdqCvjs2pUSoillgj76XfZm9amvUbKjru0BYxkNywmYTt20
vpOGFAflBMoXEjJRgN67HjI2YnByuyXiTQsp5+ZdsmO1uvken7niDgbCK9kU5JGW
8CcJSChPKFdZy69oHdLakpglx2loWC4/kxd3sorvMBNllKEOrkp+TebBAbKyN4cx
p9skvn9qN7MuGmT/fQeyhgpQqf//kBLYrftdPAvGsUwZuLpACs1B25uvr9plci8F
9bc76pTqmRCBUeL/coCCLInLHVFXmh5WRGCS7hUVN8+s4lPYe16/eP0yrcwhAgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrh5vRvIyLxIIv
ZbIcJIFHmu9EdDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vd2Fy
aWpTakpFVjhuVmM1S2NMYWJTd3JvUGJZRVpwQVY2eHZEVVhjWXFCYi8xLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vd2Fy
aWpTakpFVjhuVmM1S2NMYWJTd3JvUGJZRVpwQVY2eHZEVVhjWXFCYi8xLzJCODc5
QkQxQkM4QzhCQzQ4MjJGNjVCMjFDMjQ4MTQ3OUFFRjQ0NzQubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEhkgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCj5
MA0GCSqGSIb3DQEBCwUAA4IBAQAphlxkwbAAeAlZ/TLoQzjESzlzsCWcRQZEwLZ8
8joBjcNKFBl2IjTVB7NdPn4ZIY52xg8SsIRkrlZUzOAXXgwOKyZPmoxXqDuON8le
qGApIWFXBmw8UxDCLZIcgjXlgKB7B56Z+O/pPTvGmhDQeSKnj2Wha9GJgm9pr3QE
/s20Npmv883O6xrQlpTrhkVjFsmhJjKxXQHutTVBZ3n+g9jMU0w6CBhHEEBOdxSi
fCaO9Vzj0w+OS7AKc/07P8AB9SNSt3e9GIucGJNYohHoX+aKNUUHXDBszxkLfG6z
OyyIYiNdgIoqcqVJreHso7EilpaR6E/hVrOKQiVHiTLPr50t
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:38 2025 by rpki-client