Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer
File:                     3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer (raw, json)
Hash identifier:          6W9zyWIJ9XjNVd8szw4GAeValkgKqx21awbWK4lGdpI=
Subject key identifier:   3D:05:9F:9D:67:F1:4B:63:24:D1:9C:ED:D7:A9:4C:ED:91:E5:D9:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B121B53E912D3B0C9BD8DC6D62375F37F0F0516
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Feb 2025 18:08:47 +0000
Certificate not after:    Wed 11 Feb 2026 18:13:47 +0000
Subordinate resources:    AS: 262285
                          IP: 45.161.252.0/22
                          IP: 45.170.64.0/22
                          IP: 45.180.160.0/22
                          IP: 177.52.244.0/22
                          IP: 177.124.8.0/21
                          IP: 201.159.24.0/21
                          IP: 2804:a74::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:12:1b:53:e9:12:d3:b0:c9:bd:8d:c6:d6:23:75:f3:7f:0f:05:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 12 18:08:47 2025 GMT
            Not After : Feb 11 18:13:47 2026 GMT
        Subject: CN=3D059F9D67F14B6324D19CEDD7A94CED91E5D920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:31:c5:25:59:dc:92:92:a2:cb:28:3e:5e:
                    9f:ee:5d:6a:83:de:92:f6:c2:b0:88:b7:f1:f8:34:
                    48:95:a9:d4:7d:46:60:dd:b0:8f:bb:79:b1:f5:c7:
                    73:17:21:c8:57:65:33:5e:e2:0c:15:cc:9b:9e:91:
                    8e:37:52:42:fd:71:5b:6f:38:65:1e:f9:3e:1c:71:
                    e1:99:ee:ba:5b:fb:d0:82:5f:7c:88:3c:94:f6:c7:
                    1e:41:86:94:e4:20:e6:b6:1e:ff:cc:9b:82:5c:36:
                    d9:31:93:84:fd:3b:c2:24:6f:46:1c:5b:61:64:5d:
                    a9:c7:90:d7:38:48:1f:4c:ea:bd:8f:19:99:6c:fd:
                    6f:3b:06:d9:c9:ff:2e:bd:20:ac:6d:62:88:b6:08:
                    54:d0:02:e6:1c:30:36:98:eb:a8:58:f4:b0:23:fc:
                    ae:8e:9e:7f:e0:f0:f3:15:ce:67:81:8b:c1:23:df:
                    e9:80:bc:52:22:86:4d:dc:49:0b:4d:9b:20:3e:3c:
                    35:7f:e3:f4:77:b0:9f:95:23:d2:99:a1:e5:ac:c2:
                    3e:af:84:93:35:61:2c:88:7c:df:bd:15:f2:24:9c:
                    59:1e:2c:68:fc:3d:62:fc:b3:bf:5c:64:07:cd:e6:
                    65:c2:8d:1e:e1:f8:3d:5c:4a:eb:73:7b:cd:a5:e3:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:05:9F:9D:67:F1:4B:63:24:D1:9C:ED:D7:A9:4C:ED:91:E5:D9:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.252.0/22
                  45.170.64.0/22
                  45.180.160.0/22
                  177.52.244.0/22
                  177.124.8.0/21
                  201.159.24.0/21
                IPv6:
                  2804:a74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262285

    Signature Algorithm: sha256WithRSAEncryption
         be:ac:ec:fb:69:d8:9b:57:90:ed:ee:35:28:a6:64:6d:6f:c5:
         4d:f0:8f:7b:92:8c:4f:80:1f:6b:53:69:f2:e8:f5:a5:e3:e8:
         c8:96:e4:bc:61:58:4f:f1:35:1a:2c:26:55:d3:d8:67:df:7e:
         04:37:df:2c:68:7f:a5:08:c6:44:9a:3d:9d:92:14:26:93:7b:
         d8:ba:34:97:95:5c:a1:33:4c:22:2f:c9:71:7c:b5:96:77:73:
         1f:2e:4e:16:d0:6b:ac:94:8e:d6:ca:c9:6e:7e:bf:41:63:e7:
         17:0b:ad:20:b5:23:7e:48:09:5d:42:80:e0:f5:e1:ec:f8:71:
         e8:c9:43:bd:f5:68:95:c7:50:1d:74:4c:34:0c:b3:a0:8e:2f:
         90:c2:8f:99:76:c4:62:af:bb:87:bf:dc:96:a5:93:6b:10:7e:
         53:8c:f2:fc:34:38:83:27:f3:7e:d8:c2:1a:ba:78:42:e9:b3:
         cd:56:fe:59:f1:7e:86:10:c3:a1:af:bd:7c:12:79:cd:14:54:
         ff:22:7f:59:bf:61:5a:ec:24:11:66:e3:b0:e1:13:5e:b4:58:
         68:38:2f:c6:14:23:3a:6e:3f:57:02:36:c8:ee:dc:b4:c2:c6:
         9c:c1:9b:1e:27:81:19:99:bf:ff:ae:8f:86:61:88:d3:f5:74:
         69:fb:1c:f9
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUCxIbU+kS07DJvY3G1iN1838PBRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTIxODA4NDdaFw0yNjAyMTExODEzNDdaMDMxMTAvBgNV
BAMTKDNEMDU5RjlENjdGMTRCNjMyNEQxOUNFREQ3QTk0Q0VEOTFFNUQ5MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8njHFJVnckpKiyyg+Xp/uXWqD
3pL2wrCIt/H4NEiVqdR9RmDdsI+7ebH1x3MXIchXZTNe4gwVzJuekY43UkL9cVtv
OGUe+T4cceGZ7rpb+9CCX3yIPJT2xx5BhpTkIOa2Hv/Mm4JcNtkxk4T9O8Ikb0Yc
W2FkXanHkNc4SB9M6r2PGZls/W87BtnJ/y69IKxtYoi2CFTQAuYcMDaY66hY9LAj
/K6Onn/g8PMVzmeBi8Ej3+mAvFIihk3cSQtNmyA+PDV/4/R3sJ+VI9KZoeWswj6v
hJM1YSyIfN+9FfIknFkeLGj8PWL8s79cZAfN5mXCjR7h+D1cSutze82l4w1HAgMB
AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9BZ+dZ/FLYyTR
nO3XqUztkeXZIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNENS
a29aZEdvNzlUOEpLZ1ZORWh1OU42NEJEWnlxeWdDWG44QzZvUkV3NTUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRD
UmtvWmRHbzc5VDhKS2dWTkVodTlONjRCRFp5cXlnQ1huOEM2b1JFdzU1LzAvM0Qw
NTlGOUQ2N0YxNEI2MzI0RDE5Q0VERDdBOTRDRUQ5MUU1RDkyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEH
AQH/BD0wOzAqBAIAATAkAwQCLaH8AwQCLapAAwQCLbSgAwQCsTT0AwQDsXwIAwQD
yZ8YMA0EAgACMAcDBQAoBAp0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAjTAN
BgkqhkiG9w0BAQsFAAOCAQEAvqzs+2nYm1eQ7e41KKZkbW/FTfCPe5KMT4Afa1Np
8uj1pePoyJbkvGFYT/E1GiwmVdPYZ99+BDffLGh/pQjGRJo9nZIUJpN72Lo0l5Vc
oTNMIi/JcXy1lndzHy5OFtBrrJSO1srJbn6/QWPnFwutILUjfkgJXUKA4PXh7Phx
6MlDvfVolcdQHXRMNAyzoI4vkMKPmXbEYq+7h7/clqWTaxB+U4zy/DQ4gyfzftjC
Grp4QumzzVb+WfF+hhDDoa+9fBJ5zRRU/yJ/Wb9hWuwkEWbjsOETXrRYaDgvxhQj
Om4/VwI2yO7ctMLGnMGbHieBGZm//66PhmGI0/V0afsc+Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:51 2025 by rpki-client