Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer
File:                     4AC63499535F096FC094DF4DF02AC3681513D3B2.cer (raw, json)
Hash identifier:          aEf7SziYEyTrAElaD4thWUwGfljVcjp7OaW3yYFyNL4=
Subject key identifier:   4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       084982F683F9F8D28B82BBE373864D44D5A61949
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Dec 2024 19:52:54 +0000
Certificate not after:    Mon 08 Dec 2025 19:57:54 +0000
Subordinate resources:    AS: 263256
                          IP: 170.247.200.0/22
                          IP: 198.58.8.0/22
                          IP: 2804:17e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:49:82:f6:83:f9:f8:d2:8b:82:bb:e3:73:86:4d:44:d5:a6:19:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  9 19:52:54 2024 GMT
            Not After : Dec  8 19:57:54 2025 GMT
        Subject: CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cf:c7:ce:95:79:2c:e4:6b:fd:78:c8:3f:26:
                    16:86:b0:c7:fd:cc:e3:7a:65:a4:e6:3a:13:54:e5:
                    73:f7:9a:33:18:ef:70:7b:ee:a9:29:9a:a6:7c:ec:
                    3e:19:78:f4:ba:79:1b:6e:95:e5:d2:8b:63:5f:84:
                    51:ef:40:90:18:dc:8b:c3:57:5f:9d:30:28:02:81:
                    12:cd:d4:5f:6f:1d:81:eb:08:e4:4d:c1:66:b3:05:
                    9d:da:ca:27:ed:03:8a:0d:ce:dd:f6:dd:b0:9a:36:
                    76:22:d6:24:10:89:3d:00:91:63:90:a8:0e:b6:fd:
                    79:9f:97:04:9e:88:6f:0d:7d:be:ed:70:9e:8e:bd:
                    67:b6:bd:3a:97:de:9b:96:6c:4c:13:2e:df:17:d1:
                    40:dd:c7:5d:d5:de:4c:42:25:37:33:9a:db:79:e7:
                    00:aa:70:ba:fc:36:09:40:3d:09:86:b1:3c:ff:11:
                    c3:c4:eb:c4:8d:f0:cd:b2:01:cb:0f:ff:87:4d:bd:
                    1e:db:7e:66:49:1a:92:b0:77:dd:ab:60:29:23:7e:
                    0c:23:98:fe:68:56:e4:42:9e:9a:cf:96:1b:c9:62:
                    ab:31:8e:f7:91:c5:8e:66:ad:28:85:d1:fe:5d:81:
                    5d:57:20:9f:62:5e:8a:34:51:73:b3:83:f1:61:a0:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/22
                  198.58.8.0/22
                IPv6:
                  2804:17e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263256

    Signature Algorithm: sha256WithRSAEncryption
         3d:f2:3f:bd:04:8b:de:e1:c0:ea:3e:ff:a1:a0:e2:b4:6f:49:
         9f:09:5e:57:55:aa:a4:ec:ea:6f:70:5e:59:d5:87:c0:cd:4b:
         7a:c5:14:c2:88:b9:4c:5d:02:43:00:cf:b2:32:34:5c:ca:45:
         1a:c8:1c:b7:d7:2c:d3:ee:5e:f7:70:4c:0d:8a:22:95:20:34:
         f6:8a:20:7f:78:e8:62:66:69:58:ed:40:8b:b8:8e:f5:00:b6:
         92:7a:05:85:c4:a9:00:b7:47:a4:e5:a6:2b:a8:32:bc:64:06:
         3d:21:f2:32:c5:17:7f:2b:8a:08:d9:b6:eb:be:11:e5:df:8d:
         aa:a8:30:08:2b:19:56:c4:17:91:f3:4e:b5:d3:19:dd:44:b5:
         a5:46:97:33:79:bc:d8:bd:96:0a:9e:55:a8:5c:97:50:fa:3d:
         0d:28:7f:1b:69:b6:ef:33:f2:06:09:4f:d3:d8:1f:5a:b9:87:
         1b:f2:f0:81:e1:2f:3b:7b:69:9f:8d:03:53:45:d1:89:32:9d:
         21:49:e6:86:89:73:39:b5:04:00:76:04:6d:d2:7a:9e:0b:ab:
         77:40:32:8a:1c:e1:33:9f:75:a7:1f:0a:b8:69:4b:1e:cc:63:
         d9:cb:63:20:dd:21:33:ed:a9:43:13:7f:45:bb:60:2b:78:28:
         0f:ab:97:55
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUCEmC9oP5+NKLgrvjc4ZNRNWmGUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMDkxOTUyNTRaFw0yNTEyMDgxOTU3NTRaMDMxMTAvBgNV
BAMTKDRBQzYzNDk5NTM1RjA5NkZDMDk0REY0REYwMkFDMzY4MTUxM0QzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkz8fOlXks5Gv9eMg/JhaGsMf9
zON6ZaTmOhNU5XP3mjMY73B77qkpmqZ87D4ZePS6eRtuleXSi2NfhFHvQJAY3IvD
V1+dMCgCgRLN1F9vHYHrCORNwWazBZ3ayiftA4oNzt323bCaNnYi1iQQiT0AkWOQ
qA62/XmflwSeiG8Nfb7tcJ6OvWe2vTqX3puWbEwTLt8X0UDdx13V3kxCJTczmtt5
5wCqcLr8NglAPQmGsTz/EcPE68SN8M2yAcsP/4dNvR7bfmZJGpKwd92rYCkjfgwj
mP5oVuRCnprPlhvJYqsxjveRxY5mrSiF0f5dgV1XIJ9iXoo0UXOzg/FhoHqfAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKxjSZU18Jb8CU
303wKsNoFRPTsjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXB3
UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw
d1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAvNEFD
NjM0OTk1MzVGMDk2RkMwOTRERjRERjAyQUMzNjgxNTEzRDNCMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqvfIAwQCxjoIMA0EAgACMAcDBQAoBBfgMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQEWDANBgkqhkiG9w0BAQsFAAOCAQEAPfI/vQSL
3uHA6j7/oaDitG9JnwleV1WqpOzqb3BeWdWHwM1LesUUwoi5TF0CQwDPsjI0XMpF
Gsgct9cs0+5e93BMDYoilSA09oogf3joYmZpWO1Ai7iO9QC2knoFhcSpALdHpOWm
K6gyvGQGPSHyMsUXfyuKCNm2674R5d+NqqgwCCsZVsQXkfNOtdMZ3US1pUaXM3m8
2L2WCp5VqFyXUPo9DSh/G2m27zPyBglP09gfWrmHG/LwgeEvO3tpn40DU0XRiTKd
IUnmholzObUEAHYEbdJ6ngurd0AyihzhM591px8KuGlLHsxj2ctjIN0hM+2pQxN/
RbtgK3goD6uXVQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:26 2025 by rpki-client