Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/54ECB9E41C7E9AD87080FB4B2CEAA554B3397847.cer
File:                     54ECB9E41C7E9AD87080FB4B2CEAA554B3397847.cer (raw, json)
Hash identifier:          04bS5Vn5kzaD0lMjCJNDoMALy8hx8KJdYgwH3Z0tilM=
Subject key identifier:   54:EC:B9:E4:1C:7E:9A:D8:70:80:FB:4B:2C:EA:A5:54:B3:39:78:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D4458CB1B3ECC2152C2038FF4B720BCC369F6F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/54ECB9E41C7E9AD87080FB4B2CEAA554B3397847.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 22:19:22 +0000
Certificate not after:    Tue 16 Dec 2025 22:24:22 +0000
Subordinate resources:    AS: 273779
                          IP: 177.8.69.0/24
                          IP: 2804:8c18::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:44:58:cb:1b:3e:cc:21:52:c2:03:8f:f4:b7:20:bc:c3:69:f6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 22:19:22 2024 GMT
            Not After : Dec 16 22:24:22 2025 GMT
        Subject: CN=54ECB9E41C7E9AD87080FB4B2CEAA554B3397847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:8a:11:bb:d1:03:5f:84:9d:19:a7:f1:df:
                    b1:71:d4:40:32:68:09:e0:6d:8c:db:b4:2f:ff:7c:
                    19:b1:0e:26:1a:19:b1:23:ae:a1:50:0a:5d:e7:53:
                    c0:0e:15:9c:13:39:35:bc:01:4d:65:20:3a:3d:6b:
                    3e:48:f1:91:81:70:77:df:26:c6:44:d0:bd:61:39:
                    65:35:7f:48:12:85:41:7f:a5:77:0b:89:78:c2:50:
                    8d:6d:63:1b:4a:39:5f:17:15:f6:c8:4b:b3:b6:83:
                    ee:4f:29:08:60:ab:e1:b1:c8:29:b6:7f:ee:a2:fe:
                    7e:67:ff:d5:27:4f:7c:e0:0c:e8:db:54:ed:29:b0:
                    1d:95:2a:0a:97:20:f7:28:9b:65:dd:fd:e2:d7:fa:
                    10:1f:85:cd:a6:fd:0c:d4:26:e8:09:29:f7:02:c7:
                    5d:0c:13:cb:0f:69:fe:73:90:b2:40:8d:2b:3b:df:
                    e8:72:f9:40:33:d6:9b:f0:01:11:08:1e:96:bf:1e:
                    be:c8:92:aa:d6:19:17:6e:5b:12:9a:e1:3a:4c:cf:
                    11:19:e8:2f:b2:c2:33:3b:34:e8:39:7d:42:d6:5b:
                    f8:e4:9b:60:48:ab:9c:7e:e8:35:f2:e9:26:f7:47:
                    53:49:50:c5:8b:ca:63:ef:8f:c3:6f:63:64:18:2f:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:EC:B9:E4:1C:7E:9A:D8:70:80:FB:4B:2C:EA:A5:54:B3:39:78:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/54ECB9E41C7E9AD87080FB4B2CEAA554B3397847.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.69.0/24
                IPv6:
                  2804:8c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273779

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:b7:26:5c:94:f0:9a:ce:1a:ad:03:aa:a6:18:fe:bb:32:
         ab:46:0c:ac:f7:68:a1:7a:37:b0:a5:66:3e:10:e3:3f:8e:b1:
         e9:bb:b1:15:ce:a5:9a:9b:1a:7d:62:79:37:b9:82:42:a5:c3:
         07:ff:b3:5b:63:24:38:2b:75:d2:11:27:e2:17:6d:b7:23:cf:
         ac:dc:6e:2d:a2:a3:31:fe:5a:47:41:8b:df:54:51:30:0a:ab:
         1d:bd:57:bb:fc:66:a2:46:42:bf:f1:85:44:fe:ab:d7:e3:3f:
         c6:c0:c6:e6:bd:c4:53:d8:92:ae:69:76:80:85:71:32:9f:c2:
         16:24:4f:45:39:e1:c2:a6:45:55:f6:fb:95:36:4a:c0:1a:7a:
         74:69:7e:9e:4d:f5:4c:f0:0f:44:90:78:80:4a:d1:f8:a2:43:
         7b:27:8c:d5:83:68:9b:47:4e:1a:45:89:d8:1e:f5:62:d4:72:
         e6:19:cf:cc:e8:02:0a:c5:dd:ed:92:7f:fb:0d:9c:b3:fc:0b:
         36:32:c9:36:d7:c8:42:19:c4:1f:84:bf:63:f1:92:ef:5a:6d:
         1f:8a:69:ec:dc:94:44:90:5d:b3:25:e2:c1:68:84:75:95:a7:
         24:a2:ac:13:cd:cd:11:72:32:c9:7f:11:10:2a:87:e0:1d:7d:
         dd:3b:11:17
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUTURYyxs+zCFSwgOP9LcgvMNp9vEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTcyMjE5MjJaFw0yNTEyMTYyMjI0MjJaMDMxMTAvBgNV
BAMTKDU0RUNCOUU0MUM3RTlBRDg3MDgwRkI0QjJDRUFBNTU0QjMzOTc4NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xYoRu9EDX4SdGafx37Fx1EAy
aAngbYzbtC//fBmxDiYaGbEjrqFQCl3nU8AOFZwTOTW8AU1lIDo9az5I8ZGBcHff
JsZE0L1hOWU1f0gShUF/pXcLiXjCUI1tYxtKOV8XFfbIS7O2g+5PKQhgq+GxyCm2
f+6i/n5n/9UnT3zgDOjbVO0psB2VKgqXIPcom2Xd/eLX+hAfhc2m/QzUJugJKfcC
x10ME8sPaf5zkLJAjSs73+hy+UAz1pvwAREIHpa/Hr7IkqrWGRduWxKa4TpMzxEZ
6C+ywjM7NOg5fULWW/jkm2BIq5x+6DXy6Sb3R1NJUMWLymPvj8NvY2QYL4eTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRU7LnkHH6a2HCA
+0ss6qVUszl4RzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlZw
Rk10ejhMMWRIQ2VSNTh5WnFWdVVCeEhjSjh2MWtaWHhRb2tITXR0U0wvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZW
cEZNdHo4TDFkSENlUjU4eVpxVnVVQnhIY0o4djFrWlh4UW9rSE10dFNMLzAvNTRF
Q0I5RTQxQzdFOUFEODcwODBGQjRCMkNFQUE1NTRCMzM5Nzg0Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQAsQhFMA0EAgACMAcDBQAoBIwYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQtczANBgkqhkiG9w0BAQsFAAOCAQEAW8+3JlyU8JrOGq0D
qqYY/rsyq0YMrPdooXo3sKVmPhDjP46x6buxFc6lmpsafWJ5N7mCQqXDB/+zW2Mk
OCt10hEn4hdttyPPrNxuLaKjMf5aR0GL31RRMAqrHb1Xu/xmokZCv/GFRP6r1+M/
xsDG5r3EU9iSrml2gIVxMp/CFiRPRTnhwqZFVfb7lTZKwBp6dGl+nk31TPAPRJB4
gErR+KJDeyeM1YNom0dOGkWJ2B71YtRy5hnPzOgCCsXd7ZJ/+w2cs/wLNjLJNtfI
QhnEH4S/Y/GS71ptH4pp7NyURJBdsyXiwWiEdZWnJKKsE83NEXIyyX8RECqH4B19
3TsRFw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:53 2025 by rpki-client