Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/562496ECCDFA6B8476D42A4737CDA6DB17AB816B.cer
File:                     562496ECCDFA6B8476D42A4737CDA6DB17AB816B.cer (raw, json)
Hash identifier:          Pk1ZvR4THUScrT0c+oZ/8qf0RT1YRnqN5y5VK35pTII=
Subject key identifier:   56:24:96:EC:CD:FA:6B:84:76:D4:2A:47:37:CD:A6:DB:17:AB:81:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AB0AE78540DD5408470051B6B8CB849D67161DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/48RBvbahj7fg2ZCJoQTW6CvkEVNrzdvKNUXsXTjaQhMy/0/562496ECCDFA6B8476D42A4737CDA6DB17AB816B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/48RBvbahj7fg2ZCJoQTW6CvkEVNrzdvKNUXsXTjaQhMy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 18:58:52 +0000
Certificate not after:    Wed 25 Mar 2026 19:03:52 +0000
Subordinate resources:    AS: 265250
                          IP: 168.0.116.0/22
                          IP: 2804:2ce8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b0:ae:78:54:0d:d5:40:84:70:05:1b:6b:8c:b8:49:d6:71:61:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 18:58:52 2025 GMT
            Not After : Mar 25 19:03:52 2026 GMT
        Subject: CN=562496ECCDFA6B8476D42A4737CDA6DB17AB816B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:ff:61:3e:18:c7:ab:9f:5c:0b:a9:d9:d2:
                    d9:13:c7:bb:41:1c:28:ca:ab:7a:2a:b6:3b:d2:c9:
                    68:30:5a:d0:38:7f:cb:74:ba:7f:0d:ca:da:08:a2:
                    9e:b7:db:03:26:9b:8a:10:a7:6c:49:81:aa:21:2b:
                    94:43:71:54:75:9f:02:11:e7:8f:9e:2b:24:0b:c2:
                    f8:2d:03:0c:c1:c7:07:bf:ce:17:34:0c:01:ed:fe:
                    c8:5d:31:ae:94:a4:cd:7e:71:bb:63:24:43:96:41:
                    95:5d:95:d5:07:b4:c3:61:27:0c:f0:0c:db:85:c4:
                    b3:d4:ee:2d:0f:16:f4:80:cb:21:e0:b3:ab:74:e7:
                    33:25:16:e4:ee:21:fb:f6:8e:a2:d9:00:86:13:7a:
                    ec:0f:1a:8b:ed:2f:39:41:8e:99:fc:4a:f8:d6:1a:
                    d2:b4:76:0a:f5:9f:c1:e9:b1:42:ab:3b:fe:dd:93:
                    e5:c0:0d:b8:e0:92:f5:18:6a:3b:60:fd:70:7a:6e:
                    0e:c2:8d:4a:3b:0a:98:f0:3b:6a:66:75:50:1e:37:
                    0b:43:7c:cf:10:49:d6:83:0b:d1:98:e5:39:5e:62:
                    a5:21:54:e7:56:f5:23:52:d0:23:e5:ee:dd:d2:90:
                    12:54:8d:21:55:9c:de:a9:b6:ee:93:03:c0:d0:b7:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:24:96:EC:CD:FA:6B:84:76:D4:2A:47:37:CD:A6:DB:17:AB:81:6B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/48RBvbahj7fg2ZCJoQTW6CvkEVNrzdvKNUXsXTjaQhMy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48RBvbahj7fg2ZCJoQTW6CvkEVNrzdvKNUXsXTjaQhMy/0/562496ECCDFA6B8476D42A4737CDA6DB17AB816B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.116.0/22
                IPv6:
                  2804:2ce8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265250

    Signature Algorithm: sha256WithRSAEncryption
         02:e7:43:76:52:1d:be:e6:76:bf:d5:f7:49:36:5b:9e:97:c3:
         e4:f5:c8:aa:82:e6:2e:ac:9f:22:5c:e4:bd:07:0b:56:ed:79:
         5d:6d:d6:80:d2:68:d4:af:84:ce:a6:37:ce:12:19:08:fa:d1:
         e9:06:68:2e:da:86:31:82:c2:69:df:44:9d:da:a2:e4:9b:d3:
         e2:b6:32:63:63:5a:8a:61:6b:f7:5f:74:08:d9:ab:d5:38:94:
         bf:32:c0:cf:8a:6a:86:ff:7d:9a:2c:1b:90:e0:e4:13:85:79:
         e9:42:ba:a3:57:21:1c:fd:89:2f:02:b4:b7:0d:ad:30:70:d2:
         cc:05:a8:de:05:9c:6b:df:6f:53:8a:83:da:03:ee:38:37:cd:
         1e:6b:6e:76:41:cb:84:fa:9d:71:35:46:e9:81:ef:a9:c4:9e:
         26:a9:a6:85:01:dc:6f:d1:e5:3e:d6:05:52:c3:79:d4:ea:a8:
         4e:35:95:5e:61:67:7b:34:de:c1:1b:f5:42:08:2b:b7:66:c2:
         f1:9f:54:1d:31:e3:f7:0f:36:1b:74:0d:f4:f6:f3:fd:fc:7a:
         3c:c3:1d:be:5f:fb:ce:0b:c1:62:04:ff:96:e4:2e:bd:37:77:
         da:2f:d0:5c:64:f1:9d:38:dd:3c:cf:62:26:a7:13:84:dc:99:
         d7:3c:95:4f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWrCueFQN1UCEcAUba4y4SdZxYd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjYxODU4NTJaFw0yNjAzMjUxOTAzNTJaMDMxMTAvBgNV
BAMTKDU2MjQ5NkVDQ0RGQTZCODQ3NkQ0MkE0NzM3Q0RBNkRCMTdBQjgxNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgAP9hPhjHq59cC6nZ0tkTx7tB
HCjKq3oqtjvSyWgwWtA4f8t0un8NytoIop632wMmm4oQp2xJgaohK5RDcVR1nwIR
54+eKyQLwvgtAwzBxwe/zhc0DAHt/shdMa6UpM1+cbtjJEOWQZVdldUHtMNhJwzw
DNuFxLPU7i0PFvSAyyHgs6t05zMlFuTuIfv2jqLZAIYTeuwPGovtLzlBjpn8SvjW
GtK0dgr1n8HpsUKrO/7dk+XADbjgkvUYajtg/XB6bg7CjUo7CpjwO2pmdVAeNwtD
fM8QSdaDC9GY5TleYqUhVOdW9SNS0CPl7t3SkBJUjSFVnN6ptu6TA8DQtzSHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWJJbszfprhHbU
Kkc3zabbF6uBazAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDhS
QnZiYWhqN2ZnMlpDSm9RVFc2Q3ZrRVZOcnpkdktOVVhzWFRqYVFoTXkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ4
UkJ2YmFoajdmZzJaQ0pvUVRXNkN2a0VWTnJ6ZHZLTlVYc1hUamFRaE15LzAvNTYy
NDk2RUNDREZBNkI4NDc2RDQyQTQ3MzdDREE2REIxN0FCODE2Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqAB0MA0EAgACMAcDBQAoBCzoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMIjANBgkqhkiG9w0BAQsFAAOCAQEAAudDdlIdvuZ2v9X3
STZbnpfD5PXIqoLmLqyfIlzkvQcLVu15XW3WgNJo1K+EzqY3zhIZCPrR6QZoLtqG
MYLCad9Endqi5JvT4rYyY2NaimFr9190CNmr1TiUvzLAz4pqhv99miwbkODkE4V5
6UK6o1chHP2JLwK0tw2tMHDSzAWo3gWca99vU4qD2gPuODfNHmtudkHLhPqdcTVG
6YHvqcSeJqmmhQHcb9HlPtYFUsN51OqoTjWVXmFnezTewRv1Qggrt2bC8Z9UHTHj
9w82G3QN9Pbz/fx6PMMdvl/7zgvBYgT/luQuvTd32i/QXGTxnTjdPM9iJqcThNyZ
1zyVTw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:06 2025 by rpki-client