Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
File:                     54204F38B6BA00E08F89389BEA820C255D02514C.cer (raw, json)
Hash identifier:          ExX0KKrarQIT8gA+Irh2lZaLzfn7Gxzr8b+3y1EmFpY=
Subject key identifier:   54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16E9A9F194A818BF80FED82A6A369254404A01F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:59 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:59 +0000
Subordinate resources:    AS: 265379
                          IP: 168.194.64.0/22
                          IP: 2804:332c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:a9:f1:94:a8:18:bf:80:fe:d8:2a:6a:36:92:54:40:4a:01:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:59 2025 GMT
            Not After : Mar  4 18:40:59 2026 GMT
        Subject: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:c0:d4:0d:e2:23:12:46:55:91:93:3f:1e:
                    a4:ec:f7:b2:ea:6c:c5:2a:98:3d:98:04:76:da:0e:
                    3a:27:f4:72:16:1b:e8:16:5f:48:9d:aa:01:11:50:
                    a0:ad:61:64:5a:ef:2f:03:37:51:1b:ef:b4:ba:08:
                    95:0b:00:a0:7b:8c:81:06:cc:34:0f:eb:0c:57:d4:
                    97:a5:77:83:6c:fc:60:1a:75:66:e3:03:2d:91:1d:
                    77:8b:0f:fc:a9:7d:19:20:2f:a5:20:f0:45:08:40:
                    81:9c:b0:77:1e:a6:29:65:2d:a1:35:70:a1:58:f8:
                    7c:48:f0:e6:88:e1:37:20:58:c2:c0:c2:d7:5d:76:
                    cc:7c:fc:41:88:e4:6b:8a:6c:06:a8:8c:32:15:04:
                    87:8b:1f:50:21:d2:a1:26:ac:8d:03:cb:8b:88:04:
                    ea:0b:0d:9a:48:08:9e:86:ea:88:b8:e3:98:6b:e9:
                    65:39:62:b1:6d:a8:15:f6:5f:2a:e1:0a:b3:ee:f3:
                    ad:19:aa:be:d5:7b:6c:fc:64:f1:d5:ca:0d:fe:fd:
                    62:30:c0:ef:fb:05:90:74:b5:be:0b:cb:20:87:c5:
                    ef:96:dc:9d:80:d7:13:7e:81:6a:00:c3:02:93:3f:
                    c7:59:36:c2:bc:f2:81:5a:ed:df:28:97:81:ef:d1:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.64.0/22
                IPv6:
                  2804:332c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265379

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:0f:a0:37:da:2f:04:f1:b9:22:c9:6c:e2:30:ff:ec:9f:
         8f:24:2f:ae:b0:77:99:b4:c3:d8:bf:27:eb:57:73:26:2d:bf:
         6a:58:98:bf:2c:1b:33:68:e4:76:4b:83:38:f9:43:56:f8:48:
         9e:c3:d8:63:b2:18:79:8f:fc:25:11:8e:2a:ff:35:78:e7:19:
         28:4c:fc:0a:e7:0b:81:14:23:25:a1:df:bb:95:07:0b:f4:1f:
         d8:a3:6b:76:ea:d2:5b:65:18:12:3d:84:be:f4:64:be:c7:91:
         8d:ff:31:f2:dd:c6:ab:8f:82:db:8e:b1:c4:86:32:04:67:c6:
         57:98:c9:15:d1:d2:01:65:74:0f:c8:50:68:64:8c:fc:f7:06:
         30:b5:f1:6b:7f:a4:fe:f4:2a:ba:01:9c:59:ba:47:74:24:e8:
         14:49:d0:55:6d:c4:ba:6e:24:b7:02:c8:5c:4b:fa:54:b6:1f:
         54:ee:d5:6f:36:37:92:36:d9:73:69:d2:f0:0d:96:50:9c:37:
         1d:fd:15:44:26:92:86:db:93:b4:c3:18:33:aa:ee:0a:b4:ff:
         50:ff:83:b4:ee:6f:8c:d9:a1:f1:74:19:1f:00:0a:55:75:b2:
         02:dd:52:f5:83:e4:b9:d4:28:4a:b7:1f:be:34:19:9c:47:d0:
         11:02:2c:97
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUFump8ZSoGL+A/tgqajaSVEBKAfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM1NTlaFw0yNjAzMDQxODQwNTlaMDMxMTAvBgNV
BAMTKDU0MjA0RjM4QjZCQTAwRTA4Rjg5Mzg5QkVBODIwQzI1NUQwMjUxNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LcDUDeIjEkZVkZM/HqTs97Lq
bMUqmD2YBHbaDjon9HIWG+gWX0idqgERUKCtYWRa7y8DN1Eb77S6CJULAKB7jIEG
zDQP6wxX1Jeld4Ns/GAadWbjAy2RHXeLD/ypfRkgL6Ug8EUIQIGcsHcepillLaE1
cKFY+HxI8OaI4TcgWMLAwtdddsx8/EGI5GuKbAaojDIVBIeLH1Ah0qEmrI0Dy4uI
BOoLDZpICJ6G6oi445hr6WU5YrFtqBX2XyrhCrPu860Zqr7Ve2z8ZPHVyg3+/WIw
wO/7BZB0tb4LyyCHxe+W3J2A1xN+gWoAwwKTP8dZNsK88oFa7d8ol4Hv0cjtAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUIE84troA4I+J
OJvqggwlXQJRTDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODFN
QkVORkxIOW43NzRBN0d0QnBYMmlpRG92YkxaTTN2S1BjVjJjN1l3cHAvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODFN
QkVORkxIOW43NzRBN0d0QnBYMmlpRG92YkxaTTN2S1BjVjJjN1l3cHAvMS81NDIw
NEYzOEI2QkEwMEUwOEY4OTM4OUJFQTgyMEMyNTVEMDI1MTRDLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKowkAwDQQCAAIwBwMFACgEMywwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBAyjMA0GCSqGSIb3DQEBCwUAA4IBAQAnjg+gN9ovBPG5Isls
4jD/7J+PJC+usHeZtMPYvyfrV3MmLb9qWJi/LBszaOR2S4M4+UNW+Eiew9hjshh5
j/wlEY4q/zV45xkoTPwK5wuBFCMlod+7lQcL9B/Yo2t26tJbZRgSPYS+9GS+x5GN
/zHy3carj4LbjrHEhjIEZ8ZXmMkV0dIBZXQPyFBoZIz89wYwtfFrf6T+9Cq6AZxZ
ukd0JOgUSdBVbcS6biS3AshcS/pUth9U7tVvNjeSNtlzadLwDZZQnDcd/RVEJpKG
25O0wxgzqu4KtP9Q/4O07m+M2aHxdBkfAApVdbIC3VL1g+S51ChKtx++NBmcR9AR
AiyX
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:51 2025 by rpki-client