Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.cer
File:                     3810FB892A861E12E8FAE64FBDA04320F34EEEB6.cer (raw, json)
Hash identifier:          Xjxh1hgKaG7ILyR0/km+5yL1rcsTUb39NFhZP0mhN6Q=
Subject key identifier:   38:10:FB:89:2A:86:1E:12:E8:FA:E6:4F:BD:A0:43:20:F3:4E:EE:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C4C6F8E3DF596A4EF67A1ADD9BF5E1108684115
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Mar 2025 19:28:18 +0000
Certificate not after:    Thu 26 Mar 2026 19:33:18 +0000
Subordinate resources:    AS: 264458
                          IP: 132.255.84.0/22
                          IP: 2804:1efc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:6f:8e:3d:f5:96:a4:ef:67:a1:ad:d9:bf:5e:11:08:68:41:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 19:28:18 2025 GMT
            Not After : Mar 26 19:33:18 2026 GMT
        Subject: CN=3810FB892A861E12E8FAE64FBDA04320F34EEEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:b7:c5:43:fd:c5:2f:d7:bb:c7:59:20:63:
                    fe:90:be:ee:1f:4a:74:bb:ad:49:a1:0c:c5:d4:71:
                    58:4d:53:24:b5:16:2b:8b:7b:2d:4f:9f:3f:77:a7:
                    b5:02:a3:db:e0:02:42:0c:8c:54:55:2d:57:8b:7e:
                    44:3d:ef:b6:29:92:34:66:f7:1b:b8:4b:49:8a:6f:
                    63:54:c1:34:67:5d:3a:02:43:38:2c:68:72:dc:81:
                    32:14:d9:bf:53:d5:55:1a:b2:df:03:86:76:fa:78:
                    bf:96:3e:01:15:6a:6a:ba:f6:d9:b1:ce:3d:d9:e6:
                    42:db:57:6b:04:17:55:c6:17:16:97:67:70:ea:2a:
                    e8:4b:29:d3:d9:0d:3a:6c:08:5d:22:bd:e5:1e:8c:
                    17:db:d6:3a:78:06:7c:12:15:f1:89:31:80:d5:2b:
                    f9:75:1c:84:69:90:01:9c:34:90:3e:d0:0a:49:36:
                    4e:52:0b:8c:b3:ad:cd:fc:6a:dc:7b:7e:19:c8:70:
                    64:32:0f:67:cb:28:58:f0:64:b3:fe:37:2b:e8:88:
                    07:12:e7:6e:96:cc:0e:fb:d6:af:93:54:27:9c:37:
                    ee:f3:a4:9c:a7:40:86:34:e6:f7:45:b4:6c:24:14:
                    41:18:ef:c1:dc:07:fd:46:ef:18:b2:6d:76:ad:f2:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:10:FB:89:2A:86:1E:12:E8:FA:E6:4F:BD:A0:43:20:F3:4E:EE:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.84.0/22
                IPv6:
                  2804:1efc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264458

    Signature Algorithm: sha256WithRSAEncryption
         c6:ab:60:90:a5:3c:5a:f4:a6:67:88:5d:98:9d:8c:0e:4c:33:
         c6:57:dc:2e:ce:22:d3:82:09:c1:04:71:d6:3e:f2:d5:33:8f:
         3c:72:9c:f2:f3:4e:5b:dd:69:96:f6:c5:57:d1:54:0a:4a:e4:
         75:17:c0:d2:0a:f9:37:34:79:51:28:98:a9:18:a8:bb:b0:4d:
         b9:18:e0:06:a1:f8:4d:06:34:a9:b3:84:e0:8f:0a:f3:6a:e3:
         94:ca:eb:05:b5:5f:c7:4c:71:d8:92:57:51:36:04:9b:48:d8:
         c6:5d:52:f8:a3:50:28:00:40:bf:4f:30:22:a7:34:26:6f:5d:
         5b:e2:a3:ed:7b:1f:0d:fe:cf:5a:06:7f:50:fd:07:b9:4f:55:
         7c:e6:a5:56:3e:b3:36:81:0a:52:64:6b:2a:c7:5c:2f:98:4e:
         e2:cc:08:09:d6:ce:c8:4c:44:52:95:61:65:da:af:98:6b:77:
         be:b0:3a:39:64:8c:72:48:de:10:4a:f1:2e:e3:5a:6a:54:35:
         ef:56:fd:e3:a4:9b:e4:14:d0:f6:8a:06:18:4d:70:aa:fa:a5:
         ea:e7:a7:4b:b5:45:7d:4b:b8:25:95:7b:1e:af:67:a7:c6:81:
         39:1c:e8:11:de:cd:b7:c0:13:e1:bb:e2:36:8a:7a:71:0c:42:
         52:0d:93:39
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIULExvjj31lqTvZ6Gt2b9eEQhoQRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjcxOTI4MThaFw0yNjAzMjYxOTMzMThaMDMxMTAvBgNV
BAMTKDM4MTBGQjg5MkE4NjFFMTJFOEZBRTY0RkJEQTA0MzIwRjM0RUVFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdLfFQ/3FL9e7x1kgY/6Qvu4f
SnS7rUmhDMXUcVhNUyS1FiuLey1Pnz93p7UCo9vgAkIMjFRVLVeLfkQ977YpkjRm
9xu4S0mKb2NUwTRnXToCQzgsaHLcgTIU2b9T1VUast8Dhnb6eL+WPgEVamq69tmx
zj3Z5kLbV2sEF1XGFxaXZ3DqKuhLKdPZDTpsCF0iveUejBfb1jp4BnwSFfGJMYDV
K/l1HIRpkAGcNJA+0ApJNk5SC4yzrc38atx7fhnIcGQyD2fLKFjwZLP+NyvoiAcS
526WzA771q+TVCecN+7zpJynQIY05vdFtGwkFEEY78HcB/1G7xiybXat8j9nAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4EPuJKoYeEuj6
5k+9oEMg807utjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEh6
UFQ0ZmJaUDZEWmNHd0dKUjFrWDFieEJXQUtrWTZldGg2aE11b2NzVEwvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRI
elBUNGZiWlA2RFpjR3dHSlIxa1gxYnhCV0FLa1k2ZXRoNmhNdW9jc1RMLzAvMzgx
MEZCODkyQTg2MUUxMkU4RkFFNjRGQkRBMDQzMjBGMzRFRUVCNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQChP9UMA0EAgACMAcDBQAoBB78MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQJCjANBgkqhkiG9w0BAQsFAAOCAQEAxqtgkKU8WvSmZ4hd
mJ2MDkwzxlfcLs4i04IJwQRx1j7y1TOPPHKc8vNOW91plvbFV9FUCkrkdRfA0gr5
NzR5USiYqRiou7BNuRjgBqH4TQY0qbOE4I8K82rjlMrrBbVfx0xx2JJXUTYEm0jY
xl1S+KNQKABAv08wIqc0Jm9dW+Kj7XsfDf7PWgZ/UP0HuU9VfOalVj6zNoEKUmRr
KsdcL5hO4swICdbOyExEUpVhZdqvmGt3vrA6OWSMckjeEErxLuNaalQ171b946Sb
5BTQ9ooGGE1wqvql6uenS7VFfUu4JZV7Hq9np8aBORzoEd7Nt8AT4bviNop6cQxC
Ug2TOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:56 2025 by rpki-client