Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
File:                     413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer (raw, json)
Hash identifier:          knQGPPiPo0IuIUv+1guRCnptSFH+nmPxfzgZEzSJ8LA=
Subject key identifier:   41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       455640A91FE440A0228D339B3D981F372D83E2CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:36:04 +0000
Certificate not after:    Wed 04 Mar 2026 18:41:04 +0000
Subordinate resources:    AS: 269449
                          IP: 45.186.176.0/22
                          IP: 2804:64cc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:56:40:a9:1f:e4:40:a0:22:8d:33:9b:3d:98:1f:37:2d:83:e2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:36:04 2025 GMT
            Not After : Mar  4 18:41:04 2026 GMT
        Subject: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:d2:9f:77:28:3a:ed:3f:ea:67:96:ed:35:
                    98:e3:1f:a4:9f:e2:be:d6:55:89:f1:83:a7:82:1e:
                    d0:ca:fe:2e:66:93:8f:f7:90:c7:41:9f:3d:b6:d2:
                    1f:03:20:b4:2d:49:33:cb:35:35:86:8d:0b:3c:00:
                    45:31:64:85:d4:0b:5b:5b:b0:b0:7b:09:f8:07:e8:
                    37:ab:11:0e:7c:b7:43:40:90:e8:bb:83:ae:4e:b7:
                    4d:5a:ca:65:23:13:03:d7:ca:a5:51:73:c3:91:fc:
                    b9:b2:ae:54:dd:ac:56:69:03:dc:c7:c5:03:5e:03:
                    e3:50:0b:a2:4e:96:18:7d:02:99:f9:a1:e0:bf:29:
                    5e:6b:dc:4f:4e:59:f5:f6:65:df:5f:07:a7:eb:db:
                    c2:cf:75:af:63:e9:2f:fb:73:a6:a6:81:ca:e6:ba:
                    22:1b:56:e9:bb:be:66:cb:cf:8d:f7:cb:43:a4:ed:
                    e4:b2:3e:9d:73:49:97:77:77:a0:99:d0:dd:c1:49:
                    32:39:59:1b:15:3b:85:29:3a:8e:b2:b1:af:dd:d5:
                    d8:16:1a:97:89:33:18:67:90:9a:42:86:ab:87:14:
                    7f:92:82:70:77:88:ab:a8:8e:d2:4d:7e:6d:05:85:
                    b7:7e:81:df:40:b3:fd:1b:9e:8a:69:d4:5e:8c:b6:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.176.0/22
                IPv6:
                  2804:64cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269449

    Signature Algorithm: sha256WithRSAEncryption
         37:7f:90:5a:a6:db:79:3c:29:5d:7b:3c:78:13:28:69:30:e0:
         1c:c0:ad:bd:91:5f:aa:f1:16:61:88:fe:e0:7a:a2:12:ba:52:
         2a:85:44:05:93:9e:8d:4b:b4:b7:8e:62:0c:f1:7d:f3:52:df:
         ee:f6:24:33:23:58:58:04:b1:e9:cc:b6:fc:ca:ee:f2:09:c1:
         20:ad:f5:68:67:df:f5:6c:29:be:39:8e:e6:44:a3:16:9c:c1:
         93:da:b9:18:48:64:f0:e1:d5:6c:2f:65:c3:f0:34:e4:55:cf:
         6e:75:a8:0c:93:22:57:b6:3a:77:57:31:64:ff:5e:61:34:95:
         74:26:e4:5a:2e:f3:f6:72:00:2c:13:75:24:b7:b5:9d:ad:33:
         53:be:52:6d:02:4e:5a:93:b3:43:e9:73:4f:1d:4b:f1:2b:b2:
         11:85:c2:c4:27:a6:eb:e4:27:d4:14:13:70:02:6d:cc:bf:78:
         48:4e:57:ed:43:ff:dd:42:a8:da:fb:03:ce:77:65:2e:50:6a:
         e3:4c:b8:c9:cf:5b:7f:93:b3:37:07:90:01:c2:0c:54:93:13:
         92:77:01:30:b1:bf:36:2d:91:2d:ad:c0:b7:a9:84:ce:e0:ba:
         37:7b:54:ec:0c:1f:c5:64:0c:f3:62:31:be:23:41:bd:92:b4:
         22:d5:15:12
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIURVZAqR/kQKAijTObPZgfNy2D4s4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM2MDRaFw0yNjAzMDQxODQxMDRaMDMxMTAvBgNV
BAMTKDQxM0RFRTJBMjQyMjU2QzVDMUE5NTY2RkQxOEMwM0VDRjJGMEY1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6NKfdyg67T/qZ5btNZjjH6Sf
4r7WVYnxg6eCHtDK/i5mk4/3kMdBnz220h8DILQtSTPLNTWGjQs8AEUxZIXUC1tb
sLB7CfgH6DerEQ58t0NAkOi7g65Ot01aymUjEwPXyqVRc8OR/LmyrlTdrFZpA9zH
xQNeA+NQC6JOlhh9Apn5oeC/KV5r3E9OWfX2Zd9fB6fr28LPda9j6S/7c6amgcrm
uiIbVum7vmbLz433y0Ok7eSyPp1zSZd3d6CZ0N3BSTI5WRsVO4UpOo6ysa/d1dgW
GpeJMxhnkJpChquHFH+SgnB3iKuojtJNfm0Fhbd+gd9As/0bnopp1F6MtutRAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBPe4qJCJWxcGp
Vm/RjAPs8vD1hjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDli
M1duODhKWHRXUVBtTEtqcVB0UnVDTkhnZlJxTnJtZHhrWFJVMzFVQ1EvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDli
M1duODhKWHRXUVBtTEtqcVB0UnVDTkhnZlJxTnJtZHhrWFJVMzFVQ1EvMS80MTNE
RUUyQTI0MjI1NkM1QzFBOTU2NkZEMThDMDNFQ0YyRjBGNTg2Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIturAwDQQCAAIwBwMFACgEZMwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBByJMA0GCSqGSIb3DQEBCwUAA4IBAQA3f5Baptt5PCldezx4
EyhpMOAcwK29kV+q8RZhiP7geqISulIqhUQFk56NS7S3jmIM8X3zUt/u9iQzI1hY
BLHpzLb8yu7yCcEgrfVoZ9/1bCm+OY7mRKMWnMGT2rkYSGTw4dVsL2XD8DTkVc9u
dagMkyJXtjp3VzFk/15hNJV0JuRaLvP2cgAsE3Ukt7WdrTNTvlJtAk5ak7ND6XNP
HUvxK7IRhcLEJ6br5CfUFBNwAm3Mv3hITlftQ//dQqja+wPOd2UuUGrjTLjJz1t/
k7M3B5ABwgxUkxOSdwEwsb82LZEtrcC3qYTO4Lo3e1TsDB/FZAzzYjG+I0G9krQi
1RUS
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:28:54 2025 by rpki-client