Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
File:                     3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer (raw, json)
Hash identifier:          /b6K+jBQuDz3wkVzAZ+KEjo82EcDQH+BB2JoenccRVc=
Subject key identifier:   3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F88011843C0A43391688E89EA88FE5F310E3D3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 18:42:00 +0000
Certificate not after:    Fri 30 Jan 2026 18:47:00 +0000
Subordinate resources:    AS: 265062
                          IP: 170.231.156.0/22
                          IP: 2804:3234::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:88:01:18:43:c0:a4:33:91:68:8e:89:ea:88:fe:5f:31:0e:3d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 18:42:00 2025 GMT
            Not After : Jan 30 18:47:00 2026 GMT
        Subject: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:fd:81:5d:81:aa:5c:12:0e:4d:81:30:aa:
                    1d:03:2d:0c:44:31:5e:09:16:3b:12:d4:76:74:da:
                    b4:b0:b7:74:de:3b:9c:24:41:0b:a0:f6:6e:23:ff:
                    39:42:ae:8c:3b:ac:0c:b4:9e:ff:82:bf:5f:87:01:
                    a6:eb:6d:db:6a:b8:54:fb:d4:ab:73:a3:b0:8e:8c:
                    47:73:d5:4c:7d:78:18:ef:53:21:06:60:71:e9:ab:
                    90:fa:07:e9:43:63:ec:63:19:32:1a:b7:bc:4f:de:
                    50:14:fe:b6:0c:ca:f6:01:e0:d6:a9:90:14:79:7f:
                    fa:14:01:9a:b2:f9:24:dd:f1:0a:5d:8b:02:00:6e:
                    f9:c0:e1:e5:23:fb:d6:b0:ee:89:ef:95:3a:5a:45:
                    04:b8:ac:d3:a6:18:19:34:e8:4f:11:77:5d:11:10:
                    1b:b8:f0:06:45:f4:63:3e:e5:fa:3d:b3:92:10:fc:
                    89:c1:89:29:35:39:d8:58:54:80:bf:8a:c1:47:c5:
                    c8:f7:80:e7:49:e1:3c:a8:ad:a5:4e:d7:4d:dd:0f:
                    a7:34:da:0d:d4:77:fa:c7:40:ad:32:89:30:92:69:
                    84:76:26:6c:60:c6:d4:68:82:06:f4:7a:03:59:39:
                    51:79:a4:9e:f0:f1:36:ff:86:a2:67:4b:20:f2:cd:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.156.0/22
                IPv6:
                  2804:3234::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265062

    Signature Algorithm: sha256WithRSAEncryption
         d6:5b:28:82:06:48:7d:a9:2f:16:a7:cf:31:82:4b:42:3d:d2:
         5a:0d:48:d3:bf:5e:9d:59:15:05:ea:53:17:7c:9b:08:68:34:
         59:73:01:b6:7c:47:e4:d1:eb:3f:e1:7a:37:b9:8d:68:cd:72:
         b0:22:41:96:41:99:75:ed:da:89:c4:84:d9:e0:92:96:2c:e9:
         8c:92:7e:31:88:51:ca:d4:8c:03:97:e9:66:6b:5c:3e:d5:b3:
         fc:9f:cc:a2:17:c2:c1:83:03:28:2a:b5:a8:38:6a:b4:19:78:
         77:b2:42:23:fc:e0:e8:02:98:88:f8:a2:07:71:3f:80:20:d1:
         39:96:87:82:f5:09:e1:42:26:87:ed:4c:67:b0:45:f8:5e:4a:
         45:25:60:ab:c5:0a:36:e9:a8:d2:aa:12:e8:b9:5a:99:c7:74:
         af:b5:77:4f:7a:a3:07:15:b6:bd:c4:53:30:30:44:a1:1f:99:
         c2:6c:cf:1f:23:b6:91:06:17:4a:4b:dd:b2:88:2e:08:0e:92:
         6f:63:1a:c7:b3:67:19:3f:ba:5e:d9:65:6e:43:32:76:9f:1a:
         2c:90:32:a5:55:4d:65:b4:f5:45:a5:a5:3a:c2:09:d4:45:a5:
         b2:c0:f4:e3:dc:28:c0:67:dc:92:c0:b5:6c:db:8c:f1:25:de:
         c9:8b:8a:50
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUX4gBGEPApDORaI6J6oj+XzEOPT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMzExODQyMDBaFw0yNjAxMzAxODQ3MDBaMDMxMTAvBgNV
BAMTKDNGQjVBNEQ5RTY3RTlBNTlGQzU2NDJCMDIzQzNFMkUwMkIwQzkxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmv2BXYGqXBIOTYEwqh0DLQxE
MV4JFjsS1HZ02rSwt3TeO5wkQQug9m4j/zlCrow7rAy0nv+Cv1+HAabrbdtquFT7
1Ktzo7COjEdz1Ux9eBjvUyEGYHHpq5D6B+lDY+xjGTIat7xP3lAU/rYMyvYB4Nap
kBR5f/oUAZqy+STd8QpdiwIAbvnA4eUj+9aw7onvlTpaRQS4rNOmGBk06E8Rd10R
EBu48AZF9GM+5fo9s5IQ/InBiSk1OdhYVIC/isFHxcj3gOdJ4TyoraVO103dD6c0
2g3Ud/rHQK0yiTCSaYR2JmxgxtRoggb0egNZOVF5pJ7w8Tb/hqJnSyDyzWW7AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/taTZ5n6aWfxW
QrAjw+LgKwyRyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0pB
ZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NK
QWZDVDk4UDZrUkV1bXVWUldjZnVFMVF6R0FDR0xIQ0NMUXR5MXJxcFo0LzAvM0ZC
NUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAyQjBDOTFDOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCquecMA0EAgACMAcDBQAoBDI0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLZjANBgkqhkiG9w0BAQsFAAOCAQEA1lsoggZIfakvFqfP
MYJLQj3SWg1I079enVkVBepTF3ybCGg0WXMBtnxH5NHrP+F6N7mNaM1ysCJBlkGZ
de3aicSE2eCSlizpjJJ+MYhRytSMA5fpZmtcPtWz/J/MohfCwYMDKCq1qDhqtBl4
d7JCI/zg6AKYiPiiB3E/gCDROZaHgvUJ4UImh+1MZ7BF+F5KRSVgq8UKNumo0qoS
6Llamcd0r7V3T3qjBxW2vcRTMDBEoR+ZwmzPHyO2kQYXSkvdsoguCA6Sb2Max7Nn
GT+6XtllbkMydp8aLJAypVVNZbT1RaWlOsIJ1EWlssD049wowGfcksC1bNuM8SXe
yYuKUA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:04 2025 by rpki-client