Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.cer
File:                     52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.cer (raw, json)
Hash identifier:          DIBJGY/0MYBPHr1wk9i9PmBkZ1/uEK80FgsDHikNW5E=
Subject key identifier:   52:B7:E6:3B:BE:78:61:E4:DB:24:2A:39:39:B5:2D:FC:B2:5E:AC:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A194EC727A03E7D9530416BC3100D1D45560D88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:39:35 +0000
Certificate not after:    Thu 03 Apr 2025 07:44:35 +0000
Subordinate resources:    AS: 61850
                          IP: 201.149.112.0/22
                          IP: 2804:1a48::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:19:4e:c7:27:a0:3e:7d:95:30:41:6b:c3:10:0d:1d:45:56:0d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:39:35 2024 GMT
            Not After : Apr  3 07:44:35 2025 GMT
        Subject: CN=52B7E63BBE7861E4DB242A3939B52DFCB25EAC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:e5:1b:e1:30:11:5c:97:c8:d8:0f:12:34:
                    25:5e:eb:d9:99:cd:b2:37:98:45:28:7f:f9:03:c4:
                    6e:af:19:84:1e:10:a8:16:a3:af:85:79:b5:e1:8d:
                    f9:0a:7a:2a:be:df:a1:8f:d1:3b:c3:ae:4b:b5:5e:
                    5f:3a:84:89:76:f4:ed:89:7e:67:28:64:3a:7e:0f:
                    57:0a:a7:77:d2:9d:1d:65:6d:4c:ce:6d:1f:bb:72:
                    54:dd:b9:77:33:9c:4e:4b:40:e1:1e:7a:e9:96:b3:
                    ec:bd:f6:85:7d:72:09:f7:53:7b:51:b3:23:7e:a3:
                    f3:23:75:0b:1d:3d:4f:5d:eb:9b:9e:cd:1e:15:cb:
                    62:17:8e:63:82:d4:87:c2:3d:39:17:27:9f:4b:d9:
                    e8:f4:35:a6:18:0a:cf:e3:77:3d:f6:60:46:47:5f:
                    9e:c2:e5:89:84:b7:03:cb:3f:4b:c4:af:48:0b:91:
                    e9:d3:69:72:1d:88:9b:ed:35:fc:c7:db:e9:2c:3b:
                    c7:f9:e8:b0:eb:e8:ba:ca:29:1f:c8:58:b9:f0:e8:
                    8b:e9:2e:a1:ab:92:6c:26:77:ff:7b:2f:88:59:28:
                    ee:fb:15:44:0e:27:d6:7a:0a:9a:f6:10:f3:ab:97:
                    d9:cf:a9:5a:4f:07:f8:f2:ee:ce:f7:ea:0e:4b:ed:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:B7:E6:3B:BE:78:61:E4:DB:24:2A:39:39:B5:2D:FC:B2:5E:AC:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.112.0/22
                IPv6:
                  2804:1a48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61850

    Signature Algorithm: sha256WithRSAEncryption
         a3:e4:d0:f4:8b:5b:f6:cd:b3:28:cb:60:f6:f4:45:a5:fb:7e:
         d1:f2:ff:da:17:54:ea:1c:02:a1:dc:95:c5:34:8e:04:30:fe:
         8f:e1:25:b7:5b:24:c6:a7:46:71:f0:24:36:9f:83:a3:f3:3c:
         25:2d:04:8a:2a:3e:97:55:49:b7:8a:a5:73:1d:1d:d5:7e:58:
         0a:94:cc:4c:d9:86:34:b6:0c:68:b9:7c:aa:98:e4:48:6b:13:
         47:64:b3:96:50:fd:44:4c:9b:1d:f1:20:ed:05:c9:e4:77:30:
         22:a2:b3:f4:82:f2:50:63:b5:84:31:67:22:44:ac:7f:95:37:
         0f:ed:9a:06:c8:3c:f2:3a:ed:12:e4:09:8f:e5:e7:b8:17:63:
         af:e6:36:8b:25:1e:89:1b:da:a9:a7:ad:df:8e:39:12:c6:96:
         9f:4b:ca:fe:3d:6f:b2:ef:87:4c:f4:19:a5:fb:68:2a:ec:39:
         b4:06:a1:af:2a:5d:6a:97:62:3a:4f:4c:a4:31:7d:e8:bf:f4:
         af:65:88:d8:0b:0b:a5:64:1f:d6:47:67:79:e8:fb:7c:e3:b0:
         90:71:df:4e:2c:06:bf:a1:21:fb:62:a2:99:c5:de:10:5f:8b:
         53:35:2f:b0:0e:4f:a9:ab:f9:9a:6d:39:ac:d4:d0:73:00:bb:
         f9:22:fb:87
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUehlOxyegPn2VMEFrwxANHUVWDYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzM5MzVaFw0yNTA0MDMwNzQ0MzVaMDMxMTAvBgNV
BAMTKDUyQjdFNjNCQkU3ODYxRTREQjI0MkEzOTM5QjUyREZDQjI1RUFDMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zOUb4TARXJfI2A8SNCVe69mZ
zbI3mEUof/kDxG6vGYQeEKgWo6+FebXhjfkKeiq+36GP0TvDrku1Xl86hIl29O2J
fmcoZDp+D1cKp3fSnR1lbUzObR+7clTduXcznE5LQOEeeumWs+y99oV9cgn3U3tR
syN+o/MjdQsdPU9d65uezR4Vy2IXjmOC1IfCPTkXJ59L2ej0NaYYCs/jdz32YEZH
X57C5YmEtwPLP0vEr0gLkenTaXIdiJvtNfzH2+ksO8f56LDr6LrKKR/IWLnw6Ivp
LqGrkmwmd/97L4hZKO77FUQOJ9Z6Cpr2EPOrl9nPqVpPB/jy7s736g5L7YsNAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSt+Y7vnhh5Nsk
Kjk5tS38sl6sJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXQ0
MkFEZzZpeEFud3RuMUY3UFVYS3J2QnZBMkYxdTEyWFJkNktxSFRGbmsvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F0
NDJBRGc2aXhBbnd0bjFGN1BVWEtydkJ2QTJGMXUxMlhSZDZLcUhURm5rLzEvNTJC
N0U2M0JCRTc4NjFFNERCMjQyQTM5MzlCNTJERkNCMjVFQUMyNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyZVwMA0EAgACMAcDBQAoBBpIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDxmjANBgkqhkiG9w0BAQsFAAOCAQEAo+TQ9Itb9s2zKMtg
9vRFpft+0fL/2hdU6hwCodyVxTSOBDD+j+Elt1skxqdGcfAkNp+Do/M8JS0Eiio+
l1VJt4qlcx0d1X5YCpTMTNmGNLYMaLl8qpjkSGsTR2SzllD9REybHfEg7QXJ5Hcw
IqKz9ILyUGO1hDFnIkSsf5U3D+2aBsg88jrtEuQJj+XnuBdjr+Y2iyUeiRvaqaet
3445EsaWn0vK/j1vsu+HTPQZpftoKuw5tAahrypdapdiOk9MpDF96L/0r2WI2AsL
pWQf1kdneej7fOOwkHHfTiwGv6Eh+2KimcXeEF+LUzUvsA5Pqav5mm05rNTQcwC7
+SL7hw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:19 2025 by rpki-client