Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
File:                     3583862D781B71B103E9FA8D726C4D02380ACEE3.cer (raw, json)
Hash identifier:          lkcvrRO+3mEx2TlCbgpKLCv5GN5hVZK6rZAV7Vol448=
Subject key identifier:   35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6676B34A7A09EF6768F592C8E3BB3D9E61B8AC88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 12:06:45 +0000
Certificate not after:    Thu 05 Mar 2026 12:11:45 +0000
Subordinate resources:    AS: 273814
                          IP: 2804:8cac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:76:b3:4a:7a:09:ef:67:68:f5:92:c8:e3:bb:3d:9e:61:b8:ac:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 12:06:45 2025 GMT
            Not After : Mar  5 12:11:45 2026 GMT
        Subject: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:af:f1:77:57:11:23:37:5d:6d:1f:93:e1:
                    23:d9:ab:d5:1a:5c:17:1c:08:fc:f9:09:45:3e:42:
                    2c:9b:a2:43:80:7e:ac:f3:43:75:12:50:52:df:5f:
                    a4:c3:33:f8:ad:47:0b:91:56:99:37:ea:da:6d:c3:
                    40:76:6f:a8:7b:e2:59:36:ff:66:24:14:90:8d:39:
                    4f:dd:d5:80:28:e8:a6:40:6c:ea:1e:de:7a:e7:0e:
                    30:a4:60:fd:d0:69:0f:8b:d0:bf:e9:2f:15:cc:95:
                    b1:89:12:ec:18:b3:45:a1:de:6b:56:fe:f4:a9:ac:
                    fc:95:6a:8e:57:32:2a:87:d1:d8:ec:af:db:f9:5c:
                    97:3f:d1:c1:88:34:03:99:44:0b:f3:8c:b0:4b:45:
                    a4:38:77:9e:b0:64:cc:3f:47:07:f4:73:ae:6d:21:
                    39:86:d7:af:56:4c:dd:01:2d:eb:65:4b:a9:3d:ee:
                    3c:1c:3c:9c:30:b7:6d:68:1c:d5:88:50:01:35:f6:
                    99:a0:f2:15:53:b7:ed:f9:c4:fb:cb:9b:d6:70:c4:
                    71:aa:6c:9c:75:04:9f:d9:83:b3:aa:f1:f5:c6:0e:
                    80:dc:9c:4c:7c:d3:ce:1f:57:71:88:df:83:e4:81:
                    67:71:10:c5:21:97:09:3e:85:40:9a:b5:c1:2f:54:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273814

    Signature Algorithm: sha256WithRSAEncryption
         04:63:d5:1a:a8:a6:c4:12:67:26:86:52:39:38:b5:0b:6f:12:
         5a:e5:82:0f:9a:1c:e4:5e:11:4b:9e:09:0e:c0:a7:76:4b:0d:
         8a:0d:1c:00:f6:36:b1:fb:4e:70:a1:58:46:37:67:fe:41:96:
         78:7d:e2:69:2a:06:82:11:53:4f:69:ad:1b:cf:ea:01:6c:77:
         50:39:f0:12:ca:35:ae:dd:f9:71:d6:fe:4c:5b:3a:f5:a5:a4:
         fb:d1:6a:7c:6d:4d:51:0e:e7:e5:bd:01:b0:38:fe:b9:41:5f:
         80:0e:ac:87:6e:f3:76:b0:f0:d2:9d:78:8e:1f:06:22:15:ad:
         54:9b:09:a0:04:f7:18:19:a3:ea:69:ae:c8:b8:2e:a4:a2:89:
         34:7b:fc:34:a1:c7:2d:ce:b2:6d:54:f8:ef:65:0b:de:be:d8:
         63:f7:88:1b:fd:8e:49:42:2e:1e:a3:ce:3a:91:24:52:a9:8f:
         c2:66:ed:85:06:14:de:1d:97:fd:4c:36:b8:60:5d:46:bf:1a:
         c0:d1:c6:8f:04:df:e8:ff:89:5a:20:d7:df:c8:3e:f6:b2:e8:
         11:97:08:1c:42:ed:4f:ee:c5:e6:0f:0c:9b:bd:85:a2:68:5f:
         71:50:e1:02:32:a5:d0:ce:13:71:4a:3a:8d:0a:6b:58:ea:56:
         f4:54:ca:bc
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUZnazSnoJ72do9ZLI47s9nmG4rIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYxMjA2NDVaFw0yNjAzMDUxMjExNDVaMDMxMTAvBgNV
BAMTKDM1ODM4NjJENzgxQjcxQjEwM0U5RkE4RDcyNkM0RDAyMzgwQUNFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFg6/xd1cRIzddbR+T4SPZq9Ua
XBccCPz5CUU+QiybokOAfqzzQ3USUFLfX6TDM/itRwuRVpk36tptw0B2b6h74lk2
/2YkFJCNOU/d1YAo6KZAbOoe3nrnDjCkYP3QaQ+L0L/pLxXMlbGJEuwYs0Wh3mtW
/vSprPyVao5XMiqH0djsr9v5XJc/0cGINAOZRAvzjLBLRaQ4d56wZMw/Rwf0c65t
ITmG169WTN0BLetlS6k97jwcPJwwt21oHNWIUAE19pmg8hVTt+35xPvLm9ZwxHGq
bJx1BJ/Zg7Oq8fXGDoDcnEx8084fV3GI34PkgWdxEMUhlwk+hUCatcEvVM8PAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1g4YteBtxsQPp
+o1ybE0COArO4zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmhx
Nm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQTEsvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zo
cTZvWDNieHhrblh0Y2ZCMXJ0WXlUamttazJEdkZvbW9SNUc0ajY2UExLLzEvMzU4
Mzg2MkQ3ODFCNzFCMTAzRTlGQThENzI2QzREMDIzODBBQ0VFMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASMrDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LZYwDQYJKoZIhvcNAQELBQADggEBAARj1RqopsQSZyaGUjk4tQtvElrlgg+aHORe
EUueCQ7Ap3ZLDYoNHAD2NrH7TnChWEY3Z/5Blnh94mkqBoIRU09prRvP6gFsd1A5
8BLKNa7d+XHW/kxbOvWlpPvRanxtTVEO5+W9AbA4/rlBX4AOrIdu83aw8NKdeI4f
BiIVrVSbCaAE9xgZo+pprsi4LqSiiTR7/DShxy3Osm1U+O9lC96+2GP3iBv9jklC
Lh6jzjqRJFKpj8Jm7YUGFN4dl/1MNrhgXUa/GsDRxo8E3+j/iVog19/IPvay6BGX
CBxC7U/uxeYPDJu9haJoX3FQ4QIypdDOE3FKOo0Ka1jqVvRUyrw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:23 2025 by rpki-client