Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
File:                     3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer (raw, json)
Hash identifier:          ksoYCr4Qi1pY8OQwQGT6QK66mRm5F2KBDp4fYzgsMGw=
Subject key identifier:   3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B20691A7FDEC461674771AD9A73BEA9BBFCC481
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 07:54:51 +0000
Certificate not after:    Fri 06 Mar 2026 07:59:51 +0000
Subordinate resources:    AS: 273727
                          IP: 2804:8b58::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:20:69:1a:7f:de:c4:61:67:47:71:ad:9a:73:be:a9:bb:fc:c4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 07:54:51 2025 GMT
            Not After : Mar  6 07:59:51 2026 GMT
        Subject: CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:4e:d1:a8:0f:80:29:4a:d6:cb:31:57:ac:
                    ec:fe:c8:a4:56:71:86:dc:b7:2e:fd:07:8c:c2:22:
                    62:f0:b5:d8:3e:80:a4:80:5e:6a:01:70:8d:cf:3d:
                    19:4f:13:6d:cf:f3:97:37:41:0a:a8:4c:94:8b:54:
                    06:22:e1:cb:98:d6:e2:da:b9:e2:cf:64:dd:ca:0b:
                    86:3c:d1:93:19:4a:98:6c:59:47:a2:bf:7d:9f:72:
                    82:a6:39:f0:ff:9b:75:f9:51:3b:80:fb:ff:f3:93:
                    56:64:f4:8d:29:e1:bb:6c:4e:e9:df:7d:97:e9:50:
                    34:04:32:ab:a5:f2:95:6a:1e:78:5f:44:ab:d2:7f:
                    61:27:84:85:a5:79:e2:69:79:51:e8:37:1a:9f:a5:
                    9f:4e:c1:e1:a1:cb:44:49:97:a9:7e:f2:e8:98:40:
                    51:9c:19:80:4e:9c:37:ce:1d:7c:f9:3a:10:55:21:
                    13:99:67:05:b8:aa:2a:a7:dc:04:7b:21:57:0d:3c:
                    be:d2:c5:5e:55:7a:9f:09:61:68:3c:7e:96:01:00:
                    07:3c:c4:16:91:d6:06:e4:6f:63:97:01:c6:66:80:
                    8e:a2:ad:af:9d:38:3c:52:a7:35:16:ce:b8:d8:d5:
                    a4:af:02:f5:58:f5:95:40:fd:7c:53:c8:99:35:66:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273727

    Signature Algorithm: sha256WithRSAEncryption
         81:67:c3:98:1a:85:ce:90:ac:bc:8b:23:4e:6e:6d:64:e7:f1:
         f0:7a:76:25:5d:c2:c9:79:83:8a:d3:78:4d:f7:32:7d:f4:1a:
         04:0a:c6:70:7c:98:79:a9:29:4a:9b:13:7c:cf:98:ad:28:75:
         c3:c2:f1:9b:61:be:0a:ec:20:94:f3:ef:69:1e:84:82:fb:ea:
         8d:8a:d3:93:79:4c:54:ef:1f:ed:b7:ad:99:27:d5:73:89:e5:
         0e:be:d2:7d:bd:20:8e:c3:24:28:f9:4b:83:90:2f:15:6c:82:
         2d:4b:70:21:80:2e:e4:38:8d:f5:20:a5:a0:da:05:cc:6f:25:
         1e:8e:85:c1:7d:76:cd:ce:c9:26:c8:56:15:2d:e6:0a:a0:25:
         06:bd:c2:69:e4:e8:49:7b:bf:39:4c:4e:5b:81:a5:31:cc:dc:
         75:db:13:24:45:5a:18:2b:9f:54:7c:1e:93:c6:99:4e:da:4d:
         c6:9d:ac:7e:f5:ab:35:54:9b:aa:96:a8:6c:b5:8b:ff:d8:28:
         1f:93:07:31:cb:5b:bf:65:c3:0a:b5:05:82:47:ec:a5:4b:cd:
         ca:bd:db:1b:fa:6d:1a:0f:2f:e1:be:af:82:84:a1:a9:19:6e:
         8d:93:28:5c:11:8f:88:41:9b:7a:a6:e2:38:8d:56:73:fb:97:
         84:78:15:d0
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUKyBpGn/exGFnR3GtmnO+qbv8xIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwNzU0NTFaFw0yNjAzMDYwNzU5NTFaMDMxMTAvBgNV
BAMTKDNDMEZCNkY4M0Q2Q0E0OURBNjZDQjFDRTE1OUE0OTM4NUM4MzBGRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzm07RqA+AKUrWyzFXrOz+yKRW
cYbcty79B4zCImLwtdg+gKSAXmoBcI3PPRlPE23P85c3QQqoTJSLVAYi4cuY1uLa
ueLPZN3KC4Y80ZMZSphsWUeiv32fcoKmOfD/m3X5UTuA+//zk1Zk9I0p4btsTunf
fZfpUDQEMqul8pVqHnhfRKvSf2EnhIWleeJpeVHoNxqfpZ9OweGhy0RJl6l+8uiY
QFGcGYBOnDfOHXz5OhBVIROZZwW4qiqn3AR7IVcNPL7SxV5Vep8JYWg8fpYBAAc8
xBaR1gbkb2OXAcZmgI6ira+dODxSpzUWzrjY1aSvAvVY9ZVA/XxTyJk1ZouZAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8D7b4PWyknaZs
sc4Vmkk4XIMP/jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFhz
NjlYejFXQktqSlNGYWVneDlwb29HUFkzd2N3anNWUG9Eem1ZSjk2ek0vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hY
czY5WHoxV0JLakpTRmFlZ3g5cG9vR1BZM3djd2pzVlBvRHptWUo5NnpNLzEvM0Mw
RkI2RjgzRDZDQTQ5REE2NkNCMUNFMTU5QTQ5Mzg1QzgzMEZGRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASLWDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LT8wDQYJKoZIhvcNAQELBQADggEBAIFnw5gahc6QrLyLI05ubWTn8fB6diVdwsl5
g4rTeE33Mn30GgQKxnB8mHmpKUqbE3zPmK0odcPC8ZthvgrsIJTz72kehIL76o2K
05N5TFTvH+23rZkn1XOJ5Q6+0n29II7DJCj5S4OQLxVsgi1LcCGALuQ4jfUgpaDa
BcxvJR6OhcF9ds3OySbIVhUt5gqgJQa9wmnk6El7vzlMTluBpTHM3HXbEyRFWhgr
n1R8HpPGmU7aTcadrH71qzVUm6qWqGy1i//YKB+TBzHLW79lwwq1BYJH7KVLzcq9
2xv6bRoPL+G+r4KEoakZbo2TKFwRj4hBm3qm4jiNVnP7l4R4FdA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:11 2025 by rpki-client