Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer
File:                     5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer (raw, json)
Hash identifier:          MaqZbXe31+e73iR70tPDu86yhJXdABRnfnbTjKb86KE=
Subject key identifier:   5F:39:69:BC:85:18:83:72:D2:CA:FF:D0:20:E8:13:3C:1D:23:E4:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25647322CF493146DA88C3EF5D7FC280644E1444
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Mar 2025 22:11:06 +0000
Certificate not after:    Fri 20 Mar 2026 22:16:06 +0000
Subordinate resources:    AS: 265029
                          IP: 170.84.24.0/22
                          IP: 2804:31a8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:64:73:22:cf:49:31:46:da:88:c3:ef:5d:7f:c2:80:64:4e:14:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 21 22:11:06 2025 GMT
            Not After : Mar 20 22:16:06 2026 GMT
        Subject: CN=5F3969BC85188372D2CAFFD020E8133C1D23E4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:36:4e:8f:24:c1:9d:0a:56:83:af:4e:13:
                    69:2b:d9:a1:6c:64:ec:2a:42:0d:44:7d:d8:11:02:
                    e3:74:e1:5b:dc:3f:ed:e2:27:31:45:8d:8f:b3:93:
                    99:be:9e:27:7d:a0:08:f1:9e:44:0e:10:82:cc:3f:
                    6d:47:67:cf:37:d4:d0:f1:f1:f9:ec:3d:7a:12:e8:
                    21:a6:de:bc:9e:83:0c:41:35:a7:d1:95:0f:e7:de:
                    c1:47:32:08:72:ea:62:7b:d5:04:ab:d3:c9:cb:a4:
                    62:82:7b:5c:e7:ef:d6:d9:69:93:93:67:18:2a:f1:
                    5b:52:19:98:ef:1e:ab:db:c6:00:4b:69:34:da:2b:
                    ca:1d:3e:93:ea:4d:20:6b:ea:83:72:b1:af:9c:9f:
                    4d:98:e6:e7:01:77:76:8c:fe:84:f9:dc:6b:95:81:
                    de:88:53:14:12:de:f1:47:71:97:94:81:7e:db:3e:
                    a3:de:d5:98:9a:cc:0e:95:5c:5a:93:00:69:cf:5f:
                    b8:91:92:30:54:fc:61:89:08:5e:fd:d1:07:f6:92:
                    f1:ed:95:97:e2:d9:34:58:f3:84:68:39:da:eb:8d:
                    86:78:89:7b:46:8e:e0:5c:45:f5:95:cc:d1:14:48:
                    7f:bf:82:68:7b:4f:b2:7e:08:00:b0:9d:7e:2d:ef:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:39:69:BC:85:18:83:72:D2:CA:FF:D0:20:E8:13:3C:1D:23:E4:DD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.24.0/22
                IPv6:
                  2804:31a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265029

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:c7:02:35:f0:6e:9f:8a:d7:0c:bc:e6:67:88:4e:09:9a:
         08:bc:ab:30:53:f5:ce:d9:97:5b:92:27:e6:03:d7:41:ad:ff:
         57:f9:62:32:c1:04:b7:ca:cb:5e:f5:ec:00:9d:cd:f7:ba:9b:
         5c:65:f8:8d:6e:ba:b5:a8:ab:6e:19:7b:31:7b:0b:0b:10:39:
         e8:bc:ab:ca:51:27:c4:ca:e4:8f:9d:ef:33:b9:b0:ef:31:b5:
         40:d0:b2:0b:c2:52:cc:3e:af:94:ff:58:e9:7a:42:13:78:46:
         52:6d:4a:6f:8d:e1:0c:e5:90:76:5e:d8:5e:a9:94:c1:2f:01:
         3c:4b:e7:e6:0d:4b:52:59:3a:24:b9:61:08:06:26:eb:33:98:
         ef:d2:94:50:f4:d3:0f:50:a3:98:31:ad:f7:ee:ef:2f:29:ce:
         c4:85:03:4b:a7:4d:96:c1:67:17:a5:76:25:52:ff:0f:71:3f:
         17:8f:73:c6:20:2e:76:fe:5f:99:b6:4a:8c:63:9c:45:b3:7f:
         77:d8:8e:43:38:75:93:e8:f8:85:9b:5e:19:ba:6c:ed:d7:64:
         ce:eb:40:07:c8:d8:f9:ae:cf:6c:ea:59:26:40:11:e7:d3:18:
         d0:d4:3d:f0:16:e2:6b:01:3d:c2:96:f4:ca:7d:f7:ab:ce:d2:
         a7:0f:c1:19
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJWRzIs9JMUbaiMPvXX/CgGROFEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjEyMjExMDZaFw0yNjAzMjAyMjE2MDZaMDMxMTAvBgNV
BAMTKDVGMzk2OUJDODUxODgzNzJEMkNBRkZEMDIwRTgxMzNDMUQyM0U0REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlTZOjyTBnQpWg69OE2kr2aFs
ZOwqQg1EfdgRAuN04VvcP+3iJzFFjY+zk5m+nid9oAjxnkQOEILMP21HZ8831NDx
8fnsPXoS6CGm3ryegwxBNafRlQ/n3sFHMghy6mJ71QSr08nLpGKCe1zn79bZaZOT
Zxgq8VtSGZjvHqvbxgBLaTTaK8odPpPqTSBr6oNysa+cn02Y5ucBd3aM/oT53GuV
gd6IUxQS3vFHcZeUgX7bPqPe1ZiazA6VXFqTAGnPX7iRkjBU/GGJCF790Qf2kvHt
lZfi2TRY84RoOdrrjYZ4iXtGjuBcRfWVzNEUSH+/gmh7T7J+CACwnX4t7/shAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfOWm8hRiDctLK
/9Ag6BM8HSPk3TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Fn
RkZ4NzRZR3RQR3FvOFJTM0Z0eTFDalR4ZXBpUFIxeVlKNnN2cXFlVEovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dx
Z0ZGeDc0WUd0UEdxbzhSUzNGdHkxQ2pUeGVwaVBSMXlZSjZzdnFxZVRKLzAvNUYz
OTY5QkM4NTE4ODM3MkQyQ0FGRkQwMjBFODEzM0MxRDIzRTRERC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqlQYMA0EAgACMAcDBQAoBDGoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLRTANBgkqhkiG9w0BAQsFAAOCAQEAZDzHAjXwbp+K1wy8
5meITgmaCLyrMFP1ztmXW5In5gPXQa3/V/liMsEEt8rLXvXsAJ3N97qbXGX4jW66
tairbhl7MXsLCxA56LyrylEnxMrkj53vM7mw7zG1QNCyC8JSzD6vlP9Y6XpCE3hG
Um1Kb43hDOWQdl7YXqmUwS8BPEvn5g1LUlk6JLlhCAYm6zOY79KUUPTTD1CjmDGt
9+7vLynOxIUDS6dNlsFnF6V2JVL/D3E/F49zxiAudv5fmbZKjGOcRbN/d9iOQzh1
k+j4hZteGbps7ddkzutAB8jY+a7PbOpZJkAR59MY0NQ98BbiawE9wpb0yn33q87S
pw/BGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:50:03 2025 by rpki-client