Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
File:                     638087ED81E6ABF3705A6FE4584C399C4C56720F.cer (raw, json)
Hash identifier:          cj5pIZaCthYq0gx56jMO/p5eKUGe5uxBB2fW+a6uucQ=
Subject key identifier:   63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B5BDD87416447926E8EB50624496A59418626CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 06:59:55 +0000
Certificate not after:    Fri 06 Mar 2026 07:04:55 +0000
Subordinate resources:    AS: 267389
                          IP: 45.234.252.0/22
                          IP: 2804:4cc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5b:dd:87:41:64:47:92:6e:8e:b5:06:24:49:6a:59:41:86:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 06:59:55 2025 GMT
            Not After : Mar  6 07:04:55 2026 GMT
        Subject: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:7d:7a:ff:d5:18:e2:c5:90:4f:49:d1:35:
                    97:a9:0f:36:3d:c6:ea:5a:f6:de:dc:42:fb:cb:d8:
                    34:98:77:eb:a7:6f:22:91:1c:16:6b:5e:29:e5:33:
                    3c:fa:6d:6d:15:42:7d:1f:a6:72:d7:be:cd:78:fc:
                    67:bf:c1:91:66:4b:fc:4e:9e:e4:f8:c2:a0:a9:16:
                    31:1e:c0:91:e0:ad:d5:d2:16:b8:94:7c:78:80:cd:
                    77:d4:7a:a2:d7:16:e0:b6:73:12:36:d2:05:55:c9:
                    6f:30:5c:28:07:8b:51:78:b8:55:92:ee:53:5d:66:
                    0e:d6:8e:60:49:7d:31:91:33:01:ea:a7:80:d6:bf:
                    c1:ad:4e:b0:f3:6c:3a:b4:c0:6d:b4:a6:bb:40:4a:
                    49:06:a6:17:51:68:88:88:b2:55:63:87:f5:83:26:
                    50:a0:ea:01:a2:5d:8a:6b:e7:5e:70:af:8a:d7:e7:
                    07:a2:0a:ef:69:4a:f9:f5:9a:b8:46:8f:a6:ae:3d:
                    ab:78:27:8b:69:d7:2f:71:89:ef:0a:41:15:bf:40:
                    ac:3d:0f:44:61:a3:e9:5e:8a:03:6e:62:bf:7c:e1:
                    4a:00:b0:49:6e:d4:2d:3c:93:8d:20:fb:96:e8:4b:
                    6a:29:6a:25:24:d4:1f:20:30:58:db:e2:ad:44:73:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.252.0/22
                IPv6:
                  2804:4cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267389

    Signature Algorithm: sha256WithRSAEncryption
         1f:a6:dc:0e:0b:a8:36:e9:96:92:ae:8c:77:e7:d4:a6:b3:c2:
         76:f7:d3:c5:10:83:32:57:16:0f:0d:15:b9:7d:1a:f8:10:b3:
         38:32:1c:47:2b:4c:2e:70:e8:cc:42:b2:21:20:bd:4d:ad:2a:
         22:48:39:5b:79:c8:0f:dc:0b:39:5e:2b:d8:92:52:08:2d:40:
         70:ec:c6:4d:e9:5f:6f:42:0d:a2:79:cb:bd:ee:a8:7f:2b:d2:
         4f:e7:b4:4e:a1:99:ea:55:d9:c4:07:f8:f3:89:b4:aa:f4:bb:
         44:e4:23:fe:61:51:a0:cd:5d:15:fd:29:4d:64:13:42:f6:e3:
         ec:ca:9e:f3:00:22:72:75:f6:fb:ea:01:1b:fd:84:4f:e7:ef:
         17:4f:47:dc:4f:99:6c:d6:d3:96:b2:0a:36:16:a9:90:7a:a9:
         a0:44:dc:a0:23:f8:85:df:1c:ee:87:1b:22:c5:1b:2c:f1:a0:
         2b:fb:c2:b1:11:d4:7e:b2:d9:b3:22:5e:75:50:90:32:35:9d:
         07:c0:cf:e3:11:8e:10:17:f9:35:16:70:7a:88:a6:7e:90:77:
         4a:7c:bb:c8:85:82:25:a6:09:31:7a:ed:44:65:25:99:08:f8:
         4a:94:11:e5:13:08:64:e3:ac:c9:cf:38:9e:6d:f3:be:cd:61:
         af:21:ed:cc
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIUW1vdh0FkR5JujrUGJElqWUGGJs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwNjU5NTVaFw0yNjAzMDYwNzA0NTVaMDMxMTAvBgNV
BAMTKDYzODA4N0VEODFFNkFCRjM3MDVBNkZFNDU4NEMzOTlDNEM1NjcyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtH16/9UY4sWQT0nRNZepDzY9
xupa9t7cQvvL2DSYd+unbyKRHBZrXinlMzz6bW0VQn0fpnLXvs14/Ge/wZFmS/xO
nuT4wqCpFjEewJHgrdXSFriUfHiAzXfUeqLXFuC2cxI20gVVyW8wXCgHi1F4uFWS
7lNdZg7WjmBJfTGRMwHqp4DWv8GtTrDzbDq0wG20prtASkkGphdRaIiIslVjh/WD
JlCg6gGiXYpr515wr4rX5weiCu9pSvn1mrhGj6auPat4J4tp1y9xie8KQRW/QKw9
D0Rho+leigNuYr984UoAsElu1C08k40g+5boS2opaiUk1B8gMFjb4q1Ec+xJAgMB
AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjgIftgear83Ba
b+RYTDmcTFZyDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI
KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZW1q
MTQ5YVRrTGREb3hpU3lZdm11S1hlWlNIU29yYUNqRnJhNnB5NUJXQi8xMIGJBggr
BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9lbWox
NDlhVGtMZERveGlTeVl2bXVLWGVaU0hTb3JhQ2pGcmE2cHk1QldCLzEvNjM4MDg3
RUQ4MUU2QUJGMzcwNUE2RkU0NTg0QzM5OUM0QzU2NzIwRi5tZnQwPwYIKwYBBQUH
MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0
aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCLer8MA0EAgACMAcDBQAoBEzAMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwQUfTANBgkqhkiG9w0BAQsFAAOCAQEAH6bcDguoNumWkq6Md+fU
prPCdvfTxRCDMlcWDw0VuX0a+BCzODIcRytMLnDozEKyISC9Ta0qIkg5W3nID9wL
OV4r2JJSCC1AcOzGTelfb0INonnLve6ofyvST+e0TqGZ6lXZxAf484m0qvS7ROQj
/mFRoM1dFf0pTWQTQvbj7Mqe8wAicnX2++oBG/2ET+fvF09H3E+ZbNbTlrIKNhap
kHqpoETcoCP4hd8c7ocbIsUbLPGgK/vCsRHUfrLZsyJedVCQMjWdB8DP4xGOEBf5
NRZweoimfpB3Sny7yIWCJaYJMXrtRGUlmQj4SpQR5RMIZOOsyc84nm3zvs1hryHt
zA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:58:18 2025 by rpki-client