Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3181673CD1F45B9890AA72455EDF0FA9C92B5B68.cer
File:                     3181673CD1F45B9890AA72455EDF0FA9C92B5B68.cer (raw, json)
Hash identifier:          a6/45gNovBhLzDiHnJgS8PFKkf/90UTrB7NxTynSYso=
Subject key identifier:   31:81:67:3C:D1:F4:5B:98:90:AA:72:45:5E:DF:0F:A9:C9:2B:5B:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53F8A660DD2343D89B4989DA0C0254CCD921AF6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/1/3181673CD1F45B9890AA72455EDF0FA9C92B5B68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2024 20:16:58 +0000
Certificate not after:    Fri 29 Aug 2025 20:21:58 +0000
Subordinate resources:    AS: 262851
                          IP: 177.10.144.0/21
                          IP: 177.86.144.0/21
                          IP: 191.240.200.0/21
                          IP: 191.242.112.0/20
                          IP: 2804:1270::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f8:a6:60:dd:23:43:d8:9b:49:89:da:0c:02:54:cc:d9:21:af:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 30 20:16:58 2024 GMT
            Not After : Aug 29 20:21:58 2025 GMT
        Subject: CN=3181673CD1F45B9890AA72455EDF0FA9C92B5B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:e6:76:5c:62:98:89:24:37:c8:00:fd:fd:
                    29:9c:e4:66:58:cb:a0:59:b0:64:c2:98:ab:26:11:
                    34:c4:4f:03:fa:57:56:1a:87:d7:e5:3d:1e:2e:af:
                    b6:2c:53:d2:d2:46:f8:5f:9e:c9:6c:36:40:7c:5a:
                    b1:07:ba:44:de:64:00:fd:6e:6d:a2:b9:cb:68:aa:
                    bb:0c:34:31:3b:c6:b4:e2:f4:79:2c:c8:2b:d4:1b:
                    6a:fb:38:09:04:b6:02:05:30:8e:d0:27:5f:17:3f:
                    7c:66:db:74:f6:10:18:d8:c1:d5:91:fe:d9:9b:57:
                    b6:42:a0:28:fa:2e:4a:5b:93:65:6f:16:cb:78:18:
                    59:aa:fa:8e:bc:3f:38:2a:e0:02:4a:da:04:01:f8:
                    ce:cc:76:2d:2e:7f:bc:a4:bd:96:76:d0:8c:2d:08:
                    4c:6d:90:5b:6e:6a:76:1e:12:d9:38:2f:90:7c:41:
                    a2:b0:8b:51:47:fc:b6:24:ee:e3:a2:1a:a9:78:e6:
                    f7:4d:79:e0:d6:ee:80:20:cf:15:21:92:b1:55:b8:
                    0a:74:ec:45:c6:ae:68:2a:09:f8:c0:f8:ed:df:e4:
                    e3:e0:55:42:3d:20:48:dc:55:e1:79:5e:d8:8f:51:
                    7d:67:d3:9f:12:80:d5:19:9b:8e:2e:28:8b:7c:c1:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:81:67:3C:D1:F4:5B:98:90:AA:72:45:5E:DF:0F:A9:C9:2B:5B:68
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/1/3181673CD1F45B9890AA72455EDF0FA9C92B5B68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.144.0/21
                  177.86.144.0/21
                  191.240.200.0/21
                  191.242.112.0/20
                IPv6:
                  2804:1270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262851

    Signature Algorithm: sha256WithRSAEncryption
         bc:43:6e:8e:b1:f8:6d:a2:9d:e5:60:25:13:13:5a:93:1a:a3:
         3a:3d:a9:22:37:c5:ad:04:3e:30:b3:86:7c:12:8f:12:31:54:
         3c:bc:56:8f:1e:19:02:59:99:fc:ff:ac:b4:e4:62:00:1c:5d:
         61:78:a5:4c:e3:e1:68:f6:e4:d5:fb:ba:f8:04:b7:4f:96:f7:
         34:5d:7e:92:21:c8:e2:bb:18:7a:d5:8f:3a:1b:11:eb:f4:53:
         c0:5b:3d:b7:63:cf:6b:46:5b:38:3f:34:d5:a6:e6:26:0b:02:
         8d:f9:09:35:cb:f5:56:e3:6d:4f:63:b0:54:3b:50:d2:e8:77:
         1c:6d:82:93:a1:9a:b9:4a:bd:47:97:92:83:3b:cb:33:2e:07:
         66:aa:4f:ee:ed:87:42:86:2b:04:65:04:a9:e0:5f:a5:10:2b:
         b8:fd:ef:99:6b:bc:62:be:7b:d1:26:fd:64:49:ea:ac:c2:3e:
         fc:8c:12:46:57:84:1f:84:e4:70:ff:da:70:f2:2a:3e:63:b7:
         27:ad:3d:51:34:4e:b5:46:c4:c0:b2:c5:0c:ff:a1:93:5a:63:
         c8:32:f2:e2:5d:df:63:5d:bb:fa:af:c5:ea:a0:6b:e6:31:e1:
         7b:a5:96:1f:1a:1e:78:ca:92:e1:90:52:a8:0e:f0:47:0a:31:
         71:de:79:26
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUU/imYN0jQ9ibSYnaDAJUzNkhr2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MzAyMDE2NThaFw0yNTA4MjkyMDIxNThaMDMxMTAvBgNV
BAMTKDMxODE2NzNDRDFGNDVCOTg5MEFBNzI0NTVFREYwRkE5QzkyQjVCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCeZ2XGKYiSQ3yAD9/Smc5GZY
y6BZsGTCmKsmETTETwP6V1Yah9flPR4ur7YsU9LSRvhfnslsNkB8WrEHukTeZAD9
bm2iuctoqrsMNDE7xrTi9HksyCvUG2r7OAkEtgIFMI7QJ18XP3xm23T2EBjYwdWR
/tmbV7ZCoCj6Lkpbk2VvFst4GFmq+o68Pzgq4AJK2gQB+M7Mdi0uf7ykvZZ20Iwt
CExtkFtuanYeEtk4L5B8QaKwi1FH/LYk7uOiGql45vdNeeDW7oAgzxUhkrFVuAp0
7EXGrmgqCfjA+O3f5OPgVUI9IEjcVeF5XtiPUX1n058SgNUZm44uKIt8wW+XAgMB
AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxgWc80fRbmJCq
ckVe3w+pyStbaDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkp5
MkFQZzdna21hZmg3d21aeHJiRk1GUFpOVnJSTVgzU3FZcjJvRmc4cUQvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZK
eTJBUGc3Z2ttYWZoN3dtWnhyYkZNRlBaTlZyUk1YM1NxWXIyb0ZnOHFELzEvMzE4
MTY3M0NEMUY0NUI5ODkwQUE3MjQ1NUVERjBGQTlDOTJCNUI2OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAeBAIAATAYAwQDsQqQAwQDsVaQAwQDv/DIAwQEv/JwMA0EAgACMAcD
BQAoBBJwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQCwzANBgkqhkiG9w0BAQsF
AAOCAQEAvENujrH4baKd5WAlExNakxqjOj2pIjfFrQQ+MLOGfBKPEjFUPLxWjx4Z
AlmZ/P+stORiABxdYXilTOPhaPbk1fu6+AS3T5b3NF1+kiHI4rsYetWPOhsR6/RT
wFs9t2PPa0ZbOD801abmJgsCjfkJNcv1VuNtT2OwVDtQ0uh3HG2Ck6GauUq9R5eS
gzvLMy4HZqpP7u2HQoYrBGUEqeBfpRAruP3vmWu8Yr570Sb9ZEnqrMI+/IwSRleE
H4TkcP/acPIqPmO3J609UTROtUbEwLLFDP+hk1pjyDLy4l3fY127+q/F6qBr5jHh
e6WWHxoeeMqS4ZBSqA7wRwoxcd55Jg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:18 2025 by rpki-client