Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
File:                     3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer (raw, json)
Hash identifier:          QiD7a7Qlho+GmMOaJkw8LzUH8B5LyFlLyPBlf8MBE7g=
Subject key identifier:   3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7DE4A616D16F622C61772F982EB02BBDE293BA62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Jan 2025 17:58:14 +0000
Certificate not after:    Wed 07 Jan 2026 18:03:14 +0000
Subordinate resources:    AS: 262953
                          IP: 186.235.248.0/22
                          IP: 2804:e68::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e4:a6:16:d1:6f:62:2c:61:77:2f:98:2e:b0:2b:bd:e2:93:ba:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  8 17:58:14 2025 GMT
            Not After : Jan  7 18:03:14 2026 GMT
        Subject: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:cc:0e:b9:dc:96:e9:ae:77:8e:94:3a:42:
                    97:6f:7d:36:b3:ae:38:4c:69:4d:0f:28:f2:c6:94:
                    f3:c1:da:f6:fb:04:7a:62:19:20:1b:fb:c4:27:e6:
                    44:f4:fc:c2:74:58:8b:cc:f1:ab:3c:57:af:c6:9f:
                    72:ee:ad:d3:af:03:0c:29:3e:81:56:0e:70:55:ec:
                    5b:6c:81:f6:2a:59:3f:9e:8f:57:46:e7:ce:c2:39:
                    11:59:ff:25:4c:85:e9:b6:be:b5:27:7f:e9:14:bf:
                    16:ce:cc:da:83:7c:7f:ad:53:2e:ce:50:a2:e0:fc:
                    95:97:97:9f:aa:39:22:3f:53:91:d2:55:82:6c:4e:
                    56:e4:67:d9:df:f2:e7:ea:0c:46:dd:d5:c1:16:1d:
                    99:a7:ea:e7:03:99:1e:04:e3:0a:54:ed:47:c9:58:
                    21:c7:a2:48:d3:a9:64:96:00:79:fd:88:08:8d:d9:
                    b8:be:ef:c1:1c:f1:60:ac:d0:53:51:b2:5b:92:40:
                    23:99:79:e3:a4:c7:a3:af:68:c5:2c:24:0c:e5:a1:
                    32:41:fc:5d:bc:99:e7:13:d7:59:bc:9d:67:7e:a3:
                    eb:cb:7a:12:2c:28:1b:d5:05:b6:3a:24:b5:13:91:
                    1a:36:97:63:4d:91:23:39:e4:ff:c9:ec:d9:a3:a9:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.248.0/22
                IPv6:
                  2804:e68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262953

    Signature Algorithm: sha256WithRSAEncryption
         00:48:89:98:a5:05:9a:07:ee:59:ee:8b:53:c7:b8:1d:a8:b8:
         e0:97:50:d6:80:e3:7b:3c:a9:44:4a:36:f1:be:f4:3f:5a:5d:
         17:bd:8e:3f:e5:40:ff:e2:ac:95:57:a0:9f:80:89:74:08:13:
         86:0b:4d:69:4e:2a:98:d1:5c:40:34:a7:54:b9:a3:7c:98:22:
         60:1e:e8:27:03:3d:d7:2c:97:0d:1e:0f:17:d2:ac:97:61:2c:
         8e:af:a6:2e:7a:f7:64:8f:17:35:27:3c:c8:e7:1f:53:a4:13:
         8e:84:34:e0:7e:66:3c:e0:1d:c7:6c:69:0f:5c:41:db:33:cf:
         5d:df:d4:ea:31:3d:5f:cc:b4:19:41:b7:1b:b5:d8:3d:c0:ad:
         92:5b:f8:ca:ad:61:58:d7:18:4b:94:7d:21:a0:9c:12:ad:f0:
         61:a9:49:33:bb:e3:30:8d:d9:eb:ba:42:a6:4e:ac:82:6a:35:
         4d:d2:91:75:8d:49:73:8c:cf:c2:74:52:ec:ab:f4:1e:b2:d5:
         71:05:dc:35:c4:31:5d:94:c4:e3:80:08:67:71:07:95:26:64:
         fa:3c:81:1a:45:ef:ce:4e:58:29:b6:a9:a3:9f:94:0a:c8:08:
         92:e8:18:0e:1b:c2:8e:f8:a6:48:78:77:43:ce:56:8d:4e:2d:
         9b:ac:05:52
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfeSmFtFvYixhdy+YLrArveKTumIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMDgxNzU4MTRaFw0yNjAxMDcxODAzMTRaMDMxMTAvBgNV
BAMTKDNFNTg2Rjk5ODk0OTI0NUE3QkE4N0Q1NEM0OERCNkM0MzYwQ0VCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3MwOudyW6a53jpQ6QpdvfTaz
rjhMaU0PKPLGlPPB2vb7BHpiGSAb+8Qn5kT0/MJ0WIvM8as8V6/Gn3LurdOvAwwp
PoFWDnBV7FtsgfYqWT+ej1dG587CORFZ/yVMhem2vrUnf+kUvxbOzNqDfH+tUy7O
UKLg/JWXl5+qOSI/U5HSVYJsTlbkZ9nf8ufqDEbd1cEWHZmn6ucDmR4E4wpU7UfJ
WCHHokjTqWSWAHn9iAiN2bi+78Ec8WCs0FNRsluSQCOZeeOkx6OvaMUsJAzloTJB
/F28mecT11m8nWd+o+vLehIsKBvVBbY6JLUTkRo2l2NNkSM55P/J7Nmjqc3lAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+WG+ZiUkkWnuo
fVTEjbbENgzrnTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3I5
eHl0a2t0cEJlMVE1QnROUndQTFh6RGIxVXQ4YTludWVia3NmM1hZWGQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNy
OXh5dGtrdHBCZTFRNUJ0TlJ3UExYekRiMVV0OGE5bnVlYmtzZjNYWVhkLzAvM0U1
ODZGOTk4OTQ5MjQ1QTdCQTg3RDU0QzQ4REI2QzQzNjBDRUI5RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCuuv4MA0EAgACMAcDBQAoBA5oMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQDKTANBgkqhkiG9w0BAQsFAAOCAQEAAEiJmKUFmgfuWe6L
U8e4Hai44JdQ1oDjezypREo28b70P1pdF72OP+VA/+KslVegn4CJdAgThgtNaU4q
mNFcQDSnVLmjfJgiYB7oJwM91yyXDR4PF9Ksl2Esjq+mLnr3ZI8XNSc8yOcfU6QT
joQ04H5mPOAdx2xpD1xB2zPPXd/U6jE9X8y0GUG3G7XYPcCtklv4yq1hWNcYS5R9
IaCcEq3wYalJM7vjMI3Z67pCpk6sgmo1TdKRdY1Jc4zPwnRS7Kv0HrLVcQXcNcQx
XZTE44AIZ3EHlSZk+jyBGkXvzk5YKbapo5+UCsgIkugYDhvCjvimSHh3Q85WjU4t
m6wFUg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:37 2025 by rpki-client