Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
File:                     4329045FF5A88F6B7949093B6FE2C5D28A774010.cer (raw, json)
Hash identifier:          mB49IzywoDIbi57Ou6CsX5Zu3eTwY+dl75BTXxl+fus=
Subject key identifier:   43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AA9ECFF560CB62C01497C21BCFD99EF16A4A4BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 09:37:52 +0000
Certificate not after:    Thu 05 Mar 2026 09:42:52 +0000
Subordinate resources:    AS: 263098
                          IP: 167.249.180.0/22
                          IP: 186.208.252.0/22
                          IP: 186.233.92.0/22
                          IP: 2804:176c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a9:ec:ff:56:0c:b6:2c:01:49:7c:21:bc:fd:99:ef:16:a4:a4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 09:37:52 2025 GMT
            Not After : Mar  5 09:42:52 2026 GMT
        Subject: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:df:3c:86:4e:ef:60:a8:d8:a9:27:99:72:
                    16:49:49:f0:1e:01:8c:d3:68:0c:25:59:93:5a:c5:
                    31:0d:4d:6c:3b:86:72:d4:bf:1e:00:b9:49:e6:c1:
                    0a:15:34:c8:5e:93:46:a9:87:95:93:32:31:54:56:
                    d2:21:0b:6f:dd:06:50:ca:46:55:91:b2:2d:8c:3d:
                    e3:9d:fc:1d:d9:ff:19:0b:97:de:e9:65:bc:ff:db:
                    19:aa:c2:00:2b:83:7b:e3:98:2c:99:aa:23:75:e4:
                    77:d7:fe:ff:b6:9a:2d:11:34:cd:4e:fe:74:79:15:
                    01:5c:c4:a3:7b:e7:e7:08:c3:be:38:f3:13:18:4b:
                    a2:fa:b9:7e:cb:70:b2:db:76:89:6f:82:b2:de:0b:
                    fa:56:f6:71:6f:7d:c4:25:af:48:df:8d:8b:38:e0:
                    3e:e9:fb:6d:e7:13:8e:3e:3a:34:0a:27:a5:46:07:
                    40:b9:5a:d5:e2:64:ee:6f:e1:49:bf:f3:e5:fe:8d:
                    9f:8e:16:84:09:bb:a3:cc:4b:3d:0b:5a:81:3b:85:
                    72:f2:09:88:cc:ad:21:cc:30:7b:75:cc:e5:a3:a4:
                    f4:37:70:4a:92:da:57:48:e9:32:9d:d5:97:01:af:
                    11:01:91:49:b9:f9:5c:ca:80:90:6c:28:0d:81:f5:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.180.0/22
                  186.208.252.0/22
                  186.233.92.0/22
                IPv6:
                  2804:176c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263098

    Signature Algorithm: sha256WithRSAEncryption
         50:db:d3:53:1f:5b:d1:9d:8a:de:8d:58:10:29:38:0c:e4:4e:
         ce:5a:cc:fc:99:54:cd:84:61:2b:86:be:7d:61:9c:08:4e:22:
         82:4c:5f:1e:36:f0:b3:24:06:9f:d5:e0:c1:f3:35:19:8d:64:
         0f:c6:e3:fa:f2:8c:92:4f:b1:4f:b0:73:6c:83:99:d2:1f:dc:
         7a:83:78:d2:50:c3:fc:5a:0e:2f:b6:51:29:1e:21:b8:1d:69:
         ea:74:20:06:fb:6f:b5:0d:04:d4:1f:79:20:8f:f1:e0:38:e4:
         3d:ed:99:05:3d:7f:9b:f7:50:95:46:fe:df:8b:16:d0:17:ba:
         e9:e1:05:07:1b:b7:97:48:f3:2c:1e:a1:33:bc:42:67:a8:8f:
         7c:fc:58:96:08:4d:2f:a9:2f:82:5f:fa:4c:a0:cb:49:b0:a5:
         1e:04:ba:2a:c7:76:d5:6b:64:65:64:49:4a:20:5e:6e:29:f4:
         ec:c5:ac:37:db:8d:93:5e:0c:45:f5:91:af:80:f4:13:4d:a6:
         14:66:9f:64:9e:f9:f9:54:20:1d:c3:e5:d3:41:c3:39:f8:67:
         3e:a5:5c:2c:f8:d5:db:d3:52:d2:14:34:5d:0a:0e:63:12:b5:
         b9:a5:14:82:0f:15:1e:c6:d7:69:0d:23:6b:b6:cc:23:8d:bf:
         84:7b:6b:f5
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUWqns/1YMtiwBSXwhvP2Z7xakpLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYwOTM3NTJaFw0yNjAzMDUwOTQyNTJaMDMxMTAvBgNV
BAMTKDQzMjkwNDVGRjVBODhGNkI3OTQ5MDkzQjZGRTJDNUQyOEE3NzQwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzt88hk7vYKjYqSeZchZJSfAe
AYzTaAwlWZNaxTENTWw7hnLUvx4AuUnmwQoVNMhek0aph5WTMjFUVtIhC2/dBlDK
RlWRsi2MPeOd/B3Z/xkLl97pZbz/2xmqwgArg3vjmCyZqiN15HfX/v+2mi0RNM1O
/nR5FQFcxKN75+cIw7448xMYS6L6uX7LcLLbdolvgrLeC/pW9nFvfcQlr0jfjYs4
4D7p+23nE44+OjQKJ6VGB0C5WtXiZO5v4Um/8+X+jZ+OFoQJu6PMSz0LWoE7hXLy
CYjMrSHMMHt1zOWjpPQ3cEqS2ldI6TKd1ZcBrxEBkUm5+VzKgJBsKA2B9bgDAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDKQRf9aiPa3lJ
CTtv4sXSindAEDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBR
dTJzdUJpVFE4ZVRva01ORHUyWUNEMUVFdHZtU2o3WUx3bTJ3aXNMN00vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw
UXUyc3VCaVRROGVUb2tNTkR1MllDRDFFRXR2bVNqN1lMd20yd2lzTDdNLzEvNDMy
OTA0NUZGNUE4OEY2Qjc5NDkwOTNCNkZFMkM1RDI4QTc3NDAxMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCp/m0AwQCutD8AwQCuulcMA0EAgACMAcDBQAoBBds
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDujANBgkqhkiG9w0BAQsFAAOCAQEA
UNvTUx9b0Z2K3o1YECk4DOROzlrM/JlUzYRhK4a+fWGcCE4igkxfHjbwsyQGn9Xg
wfM1GY1kD8bj+vKMkk+xT7BzbIOZ0h/ceoN40lDD/FoOL7ZRKR4huB1p6nQgBvtv
tQ0E1B95II/x4DjkPe2ZBT1/m/dQlUb+34sW0Be66eEFBxu3l0jzLB6hM7xCZ6iP
fPxYlghNL6kvgl/6TKDLSbClHgS6Ksd21WtkZWRJSiBebin07MWsN9uNk14MRfWR
r4D0E02mFGafZJ75+VQgHcPl00HDOfhnPqVcLPjV29NS0hQ0XQoOYxK1uaUUgg8V
HsbXaQ0ja7bMI42/hHtr9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:43 2025 by rpki-client