Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.cer
File:                     491DF027C89335A18A3A28961D8C093B7FAF2B03.cer (raw, json)
Hash identifier:          5hDIpgJ7YW+idUrbsNXp5+lC8aQKGUndjkLSQN6I7po=
Subject key identifier:   49:1D:F0:27:C8:93:35:A1:8A:3A:28:96:1D:8C:09:3B:7F:AF:2B:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       112918EEA19EE411418B78CE3C99AF0565463B44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Oct 2024 20:25:57 +0000
Certificate not after:    Thu 09 Oct 2025 20:30:57 +0000
Subordinate resources:    AS: 270428
                          IP: 190.111.184.0/22
                          IP: 2804:6bd4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:18:ee:a1:9e:e4:11:41:8b:78:ce:3c:99:af:05:65:46:3b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 10 20:25:57 2024 GMT
            Not After : Oct  9 20:30:57 2025 GMT
        Subject: CN=491DF027C89335A18A3A28961D8C093B7FAF2B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:61:e4:be:6b:b7:a9:96:d2:ce:f8:97:9d:
                    d7:86:6b:09:2e:44:25:cf:b4:b0:27:73:08:7c:b9:
                    95:e8:32:00:68:d0:ad:b1:26:1f:74:6e:41:bc:e0:
                    51:29:07:25:60:2f:19:27:84:f3:e6:c5:2c:d5:ba:
                    f9:1a:e9:ac:cb:1e:d9:8e:b4:d5:2a:5e:56:ee:dc:
                    b3:6a:b6:23:c5:93:ba:f2:22:8e:4c:7c:93:1c:19:
                    52:8e:5b:d2:09:8f:fe:ab:f7:04:f3:ff:47:53:36:
                    66:2a:fb:d6:7b:12:65:c4:f6:f7:47:6e:ad:40:e8:
                    fb:53:3c:e9:ed:f0:e8:96:05:a2:a4:8c:30:2f:4b:
                    b0:c1:be:e0:86:00:e5:f2:24:2a:ba:89:4e:68:82:
                    57:ed:2d:9f:ad:e5:37:4e:bc:94:53:15:0e:85:5c:
                    1e:5c:ae:4e:f0:83:ea:e5:cd:7d:45:58:30:9a:cf:
                    fe:00:d9:17:d7:96:01:21:d3:d2:70:3b:e0:1a:ce:
                    b0:cc:2d:fb:84:8a:46:12:d0:73:16:da:cb:7c:94:
                    c5:83:b4:e5:a6:0a:44:82:34:10:ac:fc:e6:49:ac:
                    6f:6e:cb:67:46:6d:3e:13:4e:ca:0a:36:67:36:23:
                    f4:ce:f0:48:79:bb:34:f8:c3:1d:55:42:7b:26:92:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:1D:F0:27:C8:93:35:A1:8A:3A:28:96:1D:8C:09:3B:7F:AF:2B:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.184.0/22
                IPv6:
                  2804:6bd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270428

    Signature Algorithm: sha256WithRSAEncryption
         1e:56:19:d9:a9:d6:57:ce:60:67:69:b8:d2:db:7b:c3:05:71:
         24:cd:08:d7:0f:25:1c:a6:2a:c7:4f:b6:db:d8:fe:d4:75:a0:
         fc:c2:f2:3c:1c:0c:23:c1:24:c4:01:40:15:a8:3d:30:c3:0f:
         83:25:16:11:86:cd:58:ea:f1:07:a5:87:2a:4f:be:17:1a:2c:
         dc:fc:71:ef:de:2b:1b:69:ca:3b:eb:7f:54:c5:6b:1b:2b:16:
         d9:96:72:66:85:29:fc:40:0f:75:c8:ec:f9:c3:6a:9a:2c:d5:
         07:5f:12:db:43:55:b4:5a:e2:4a:79:83:e9:6e:74:fd:26:d8:
         e0:fa:27:3c:5e:15:06:c5:f3:60:83:90:28:2b:01:2d:75:42:
         e4:58:4d:c2:53:5c:d7:f4:92:2e:d5:a0:93:9d:7c:6e:de:17:
         40:ba:0a:aa:68:1d:28:c6:3e:38:2d:5a:58:18:6f:38:17:f8:
         06:f4:2f:6f:51:b4:d0:7c:ea:66:fa:c7:5a:3f:34:d4:bb:ec:
         b9:4f:ca:c8:fd:0d:05:94:eb:40:67:b1:aa:70:45:7e:04:04:
         57:99:fd:23:20:d7:12:71:b6:5d:c5:2d:5c:08:7d:60:59:26:
         f2:1b:bd:b3:1b:ac:8b:32:05:a6:1e:c0:ab:08:47:53:f1:c8:
         5b:2d:70:a7
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUESkY7qGe5BFBi3jOPJmvBWVGO0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMTAyMDI1NTdaFw0yNTEwMDkyMDMwNTdaMDMxMTAvBgNV
BAMTKDQ5MURGMDI3Qzg5MzM1QTE4QTNBMjg5NjFEOEMwOTNCN0ZBRjJCMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRyGHkvmu3qZbSzviXndeGawku
RCXPtLAncwh8uZXoMgBo0K2xJh90bkG84FEpByVgLxknhPPmxSzVuvka6azLHtmO
tNUqXlbu3LNqtiPFk7ryIo5MfJMcGVKOW9IJj/6r9wTz/0dTNmYq+9Z7EmXE9vdH
bq1A6PtTPOnt8OiWBaKkjDAvS7DBvuCGAOXyJCq6iU5oglftLZ+t5TdOvJRTFQ6F
XB5crk7wg+rlzX1FWDCaz/4A2RfXlgEh09JwO+AazrDMLfuEikYS0HMW2st8lMWD
tOWmCkSCNBCs/OZJrG9uy2dGbT4TTsoKNmc2I/TO8Eh5uzT4wx1VQnsmkoubAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJHfAnyJM1oYo6
KJYdjAk7f68rAzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3F3
NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpzdTcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3F3
NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpzdTcvMS80OTFE
RjAyN0M4OTMzNUExOEEzQTI4OTYxRDhDMDkzQjdGQUYyQjAzLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAK+b7gwDQQCAAIwBwMFACgEa9QwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCBcMA0GCSqGSIb3DQEBCwUAA4IBAQAeVhnZqdZXzmBnabjS
23vDBXEkzQjXDyUcpirHT7bb2P7UdaD8wvI8HAwjwSTEAUAVqD0www+DJRYRhs1Y
6vEHpYcqT74XGizc/HHv3isbaco7639UxWsbKxbZlnJmhSn8QA91yOz5w2qaLNUH
XxLbQ1W0WuJKeYPpbnT9Jtjg+ic8XhUGxfNgg5AoKwEtdULkWE3CU1zX9JIu1aCT
nXxu3hdAugqqaB0oxj44LVpYGG84F/gG9C9vUbTQfOpm+sdaPzTUu+y5T8rI/Q0F
lOtAZ7GqcEV+BARXmf0jINcScbZdxS1cCH1gWSbyG72zG6yLMgWmHsCrCEdT8chb
LXCn
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:03 2025 by rpki-client