Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer
File:                     4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer (raw, json)
Hash identifier:          M8fQlEFw8eRZ+2H/7Ghyb0mdDcs7KM4eKlPxkewZhCE=
Subject key identifier:   4F:CC:70:17:42:5B:1C:B2:3C:D1:BE:04:EE:4F:FA:D0:0F:43:45:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53AD1CD2F0818F3217088143EBCE8C1B79119E6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 21:56:31 +0000
Certificate not after:    Thu 05 Mar 2026 22:01:31 +0000
Subordinate resources:    AS: 269574
                          IP: 45.189.88.0/22
                          IP: 2804:66a8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ad:1c:d2:f0:81:8f:32:17:08:81:43:eb:ce:8c:1b:79:11:9e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 21:56:31 2025 GMT
            Not After : Mar  5 22:01:31 2026 GMT
        Subject: CN=4FCC7017425B1CB23CD1BE04EE4FFAD00F434520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f1:f0:20:e3:b6:ba:2c:1f:59:80:0c:56:67:
                    73:5c:0d:6c:62:95:fc:16:fb:7c:67:8f:69:6e:a7:
                    14:92:bf:43:d8:26:3c:dd:28:28:ca:77:39:24:f9:
                    f4:f7:29:df:ac:ca:2a:88:df:04:1f:b7:e0:b4:eb:
                    4f:74:f3:f5:ea:2d:60:d0:24:2f:8b:7f:b7:74:1a:
                    1f:8d:14:b1:b0:81:2f:72:60:89:d1:85:7d:a9:e2:
                    4a:ff:9b:2e:5e:ac:19:38:47:c3:2d:70:67:aa:80:
                    6d:49:d9:bd:19:31:1f:66:e1:e4:dc:9e:d5:e3:94:
                    ca:3e:16:2a:b4:08:98:be:de:ba:9b:2b:87:74:8f:
                    ef:fb:44:02:0f:c4:0a:6b:70:d7:a5:14:ce:0b:e0:
                    8a:5f:67:79:71:7b:cc:be:6a:45:96:c3:c7:88:ef:
                    18:91:d8:54:68:a4:16:cb:1c:f9:13:04:60:0a:64:
                    f0:ff:fd:47:e1:cf:6b:ff:4d:11:d5:11:61:10:52:
                    20:c2:75:52:5e:8e:0e:21:6b:1f:62:5f:a2:6c:2d:
                    91:46:8b:3b:0a:58:27:f3:e7:92:58:14:fb:3c:91:
                    82:48:66:d6:04:1e:e7:08:dc:14:70:e4:e1:d3:09:
                    52:b0:42:47:2c:7a:e1:3a:95:ac:79:ad:69:0b:cb:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:CC:70:17:42:5B:1C:B2:3C:D1:BE:04:EE:4F:FA:D0:0F:43:45:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.88.0/22
                IPv6:
                  2804:66a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269574

    Signature Algorithm: sha256WithRSAEncryption
         66:b6:98:53:17:76:9a:7a:2e:5e:8e:c2:2d:e2:46:53:ce:a6:
         c3:50:ac:10:b9:34:50:42:4e:07:99:29:32:d9:18:78:3a:0b:
         eb:32:4b:ca:16:ee:a4:71:a0:8c:50:28:2e:c8:74:1d:f6:7f:
         9e:7c:4c:40:fb:9e:1c:bc:82:72:2a:3b:b1:97:70:03:03:ee:
         21:16:bf:9c:28:44:40:b1:5b:18:11:37:f9:85:2c:82:aa:7d:
         7a:3f:42:4b:7f:e4:2a:6b:07:fd:10:5d:d3:41:8e:08:75:88:
         1e:8b:26:ed:b8:ca:d3:b7:09:46:4e:e4:c4:87:c5:7f:84:d0:
         3f:27:fb:d8:5b:17:a0:7d:3a:a7:19:79:7a:17:84:9c:26:8d:
         80:23:d9:c2:c7:67:2b:c6:22:2f:6e:6b:56:e9:56:8f:61:68:
         e8:88:0f:33:87:e1:37:e0:96:1b:92:ef:d6:83:37:58:1e:30:
         79:1a:ad:ea:0f:c6:2a:90:01:59:0e:e7:bd:39:4e:fa:c4:a2:
         1b:fe:79:38:11:38:d3:2f:2a:40:d1:a7:38:59:d6:25:a3:c3:
         e3:19:d7:06:c3:b7:7b:c7:aa:20:b7:1d:c6:07:4e:58:5b:40:
         27:e9:60:cf:3f:1e:45:f4:c7:aa:6b:1d:a1:01:2c:4b:bf:88:
         ce:1d:28:4c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUU60c0vCBjzIXCIFD686MG3kRnm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMTU2MzFaFw0yNjAzMDUyMjAxMzFaMDMxMTAvBgNV
BAMTKDRGQ0M3MDE3NDI1QjFDQjIzQ0QxQkUwNEVFNEZGQUQwMEY0MzQ1MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx8fAg47a6LB9ZgAxWZ3NcDWxi
lfwW+3xnj2lupxSSv0PYJjzdKCjKdzkk+fT3Kd+syiqI3wQft+C060908/XqLWDQ
JC+Lf7d0Gh+NFLGwgS9yYInRhX2p4kr/my5erBk4R8MtcGeqgG1J2b0ZMR9m4eTc
ntXjlMo+Fiq0CJi+3rqbK4d0j+/7RAIPxAprcNelFM4L4IpfZ3lxe8y+akWWw8eI
7xiR2FRopBbLHPkTBGAKZPD//Ufhz2v/TRHVEWEQUiDCdVJejg4hax9iX6JsLZFG
izsKWCfz55JYFPs8kYJIZtYEHucI3BRw5OHTCVKwQkcseuE6lax5rWkLyxT3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPzHAXQlscsjzR
vgTuT/rQD0NFIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2dC
cU5BeFh4bWFDbk03ZVA2ekd6ZUMxRGp3NDF6YThUTko2SDU1ZlI0QlAvMy8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dn
QnFOQXhYeG1hQ25NN2VQNnpHemVDMURqdzQxemE4VE5KNkg1NWZSNEJQLzMvNEZD
QzcwMTc0MjVCMUNCMjNDRDFCRTA0RUU0RkZBRDAwRjQzNDUyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb1YMA0EAgACMAcDBQAoBGaoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdBjANBgkqhkiG9w0BAQsFAAOCAQEAZraYUxd2mnouXo7C
LeJGU86mw1CsELk0UEJOB5kpMtkYeDoL6zJLyhbupHGgjFAoLsh0HfZ/nnxMQPue
HLyCcio7sZdwAwPuIRa/nChEQLFbGBE3+YUsgqp9ej9CS3/kKmsH/RBd00GOCHWI
Hosm7bjK07cJRk7kxIfFf4TQPyf72FsXoH06pxl5eheEnCaNgCPZwsdnK8YiL25r
VulWj2Fo6IgPM4fhN+CWG5Lv1oM3WB4weRqt6g/GKpABWQ7nvTlO+sSiG/55OBE4
0y8qQNGnOFnWJaPD4xnXBsO3e8eqILcdxgdOWFtAJ+lgzz8eRfTHqmsdoQEsS7+I
zh0oTA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:58 2025 by rpki-client