Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/41BB31658E11CA0A5B3B23717AC39AF6641482A1.cer
File:                     41BB31658E11CA0A5B3B23717AC39AF6641482A1.cer (raw, json)
Hash identifier:          CQwIX368tZrsQraS5QWyMOTA7WQzmEJ4S47aJxieRn8=
Subject key identifier:   41:BB:31:65:8E:11:CA:0A:5B:3B:23:71:7A:C3:9A:F6:64:14:82:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6116A7EF0ADAEC6689896D9E61031AD4A79C79BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/41BB31658E11CA0A5B3B23717AC39AF6641482A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Nov 2024 20:35:49 +0000
Certificate not after:    Thu 06 Nov 2025 20:40:49 +0000
Subordinate resources:    AS: 262493
                          IP: 138.255.216.0/22
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:a7:ef:0a:da:ec:66:89:89:6d:9e:61:03:1a:d4:a7:9c:79:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  7 20:35:49 2024 GMT
            Not After : Nov  6 20:40:49 2025 GMT
        Subject: CN=41BB31658E11CA0A5B3B23717AC39AF6641482A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:d5:74:15:95:8a:32:46:e7:b7:e2:96:da:
                    ce:9a:2f:05:60:52:5c:44:18:bd:44:46:4f:c5:dc:
                    a2:c2:cb:1a:66:fc:4c:11:09:27:c6:3e:53:a1:28:
                    96:18:e3:da:db:2b:69:64:8e:c7:6a:bf:7d:90:3c:
                    d5:80:b5:08:1f:a0:65:62:b4:4a:d5:60:3e:a4:a8:
                    3c:6b:0b:fb:b8:23:ca:97:3f:30:d7:3b:2d:9a:ae:
                    a4:8e:94:b0:d5:ef:4e:6c:91:e1:ae:d8:c4:48:57:
                    ee:e3:f3:22:cb:60:ca:3d:20:3e:67:90:9b:1e:c7:
                    47:8c:4a:4e:15:18:e4:2e:14:3e:6d:e6:6a:85:f2:
                    49:d1:0d:44:2b:0e:aa:8f:de:d5:8a:4b:ce:d7:97:
                    fa:06:1a:75:17:2b:9c:49:2a:fd:d3:47:b7:b9:9d:
                    a5:fc:cc:b8:3d:4b:dc:92:f6:9e:82:55:e9:2f:6f:
                    1a:49:15:ee:4b:10:ab:2e:b9:e0:d0:11:64:71:f8:
                    90:ba:8e:4d:0b:89:e3:47:d7:bf:bf:80:30:c1:d1:
                    f6:6a:7b:4d:a2:97:2a:cd:c0:b5:9e:9a:2a:78:14:
                    b2:09:a3:fa:7a:d5:c2:5c:a7:70:a9:c2:77:8f:fa:
                    12:64:8f:d0:22:0f:76:08:8b:80:ff:d7:90:1a:6b:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:BB:31:65:8E:11:CA:0A:5B:3B:23:71:7A:C3:9A:F6:64:14:82:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/41BB31658E11CA0A5B3B23717AC39AF6641482A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         61:84:2d:83:69:4b:39:f1:95:2e:e3:5d:58:cd:a5:1f:ce:2b:
         74:8e:e5:99:a2:c8:56:a7:c6:0c:8a:cd:6f:a5:80:c2:ed:22:
         51:7a:28:a5:94:25:61:3d:78:5d:02:1a:ba:83:11:1f:c1:7e:
         af:bc:9d:b7:c5:da:04:87:80:b2:d8:bd:a1:1e:2b:ee:0f:d9:
         84:e5:49:3a:e2:28:50:3d:52:aa:79:b6:f9:c3:6f:23:92:ad:
         42:90:b4:20:a0:0c:78:7a:6a:e5:a9:02:f9:c5:05:e5:74:01:
         77:fc:da:0a:2b:5f:dc:ee:92:d3:e8:f4:01:2b:cb:37:9d:96:
         c7:03:36:a9:65:8a:15:a6:b5:ad:12:f1:f5:0b:31:bb:09:8f:
         9a:db:0b:e0:39:65:e5:9f:7c:ad:49:6b:18:ed:65:fb:c7:9e:
         f1:90:c9:b1:6a:71:93:4d:28:cb:71:df:1c:8b:5d:b6:1a:e8:
         de:d3:33:44:2f:1f:8d:bf:97:79:0d:25:97:bc:63:58:f9:1a:
         2e:18:19:14:1d:93:bd:16:61:4c:b2:22:91:1c:f5:3c:a1:73:
         a5:25:07:af:c2:fc:51:0a:80:ed:3d:ff:5b:6e:67:cd:2d:12:
         04:4a:93:c6:a6:bd:95:10:5f:4d:db:1e:74:bb:76:7f:0a:4b:
         f1:d8:ba:01
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUYRan7wra7GaJiW2eYQMa1KecebswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDcyMDM1NDlaFw0yNTExMDYyMDQwNDlaMDMxMTAvBgNV
BAMTKDQxQkIzMTY1OEUxMUNBMEE1QjNCMjM3MTdBQzM5QUY2NjQxNDgyQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvtV0FZWKMkbnt+KW2s6aLwVg
UlxEGL1ERk/F3KLCyxpm/EwRCSfGPlOhKJYY49rbK2lkjsdqv32QPNWAtQgfoGVi
tErVYD6kqDxrC/u4I8qXPzDXOy2arqSOlLDV705skeGu2MRIV+7j8yLLYMo9ID5n
kJsex0eMSk4VGOQuFD5t5mqF8knRDUQrDqqP3tWKS87Xl/oGGnUXK5xJKv3TR7e5
naX8zLg9S9yS9p6CVekvbxpJFe5LEKsuueDQEWRx+JC6jk0LieNH17+/gDDB0fZq
e02ilyrNwLWemip4FLIJo/p61cJcp3CpwneP+hJkj9AiD3YIi4D/15Aaa/kHAgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBuzFljhHKCls7
I3F6w5r2ZBSCoTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRU1Q
M3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNRZDQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VN
UDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAvNDFC
QjMxNjU4RTExQ0EwQTVCM0IyMzcxN0FDMzlBRjY2NDE0ODJBMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCiv/YAwQCqHmUAwQCqlKEAwQDsQgwAwQEsTcwMA0E
AgACMAcDBQAoBA/sMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBXTANBgkqhkiG
9w0BAQsFAAOCAQEAYYQtg2lLOfGVLuNdWM2lH84rdI7lmaLIVqfGDIrNb6WAwu0i
UXoopZQlYT14XQIauoMRH8F+r7ydt8XaBIeAsti9oR4r7g/ZhOVJOuIoUD1Sqnm2
+cNvI5KtQpC0IKAMeHpq5akC+cUF5XQBd/zaCitf3O6S0+j0ASvLN52WxwM2qWWK
Faa1rRLx9QsxuwmPmtsL4Dll5Z98rUlrGO1l+8ee8ZDJsWpxk00oy3HfHItdthro
3tMzRC8fjb+XeQ0ll7xjWPkaLhgZFB2TvRZhTLIikRz1PKFzpSUHr8L8UQqA7T3/
W25nzS0SBEqTxqa9lRBfTdsedLt2fwpL8di6AQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:59 2025 by rpki-client