Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
File:                     6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer (raw, json)
Hash identifier:          9d2T4BNUBkmPlv37RRR6xMzanqx60LRNnWO5OMEQfIs=
Subject key identifier:   66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0733EC6853404E04B4E40364210C0138F3502D4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 20:04:58 +0000
Certificate not after:    Mon 07 Apr 2025 20:09:58 +0000
Subordinate resources:    AS: 262493
                          IP: 138.255.216.0/22
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:33:ec:68:53:40:4e:04:b4:e4:03:64:21:0c:01:38:f3:50:2d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 20:04:58 2024 GMT
            Not After : Apr  7 20:09:58 2025 GMT
        Subject: CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:87:3c:1b:49:6f:88:51:83:a2:b6:3e:19:
                    86:be:24:6a:ad:b3:04:f6:8f:e5:17:de:4a:2a:d9:
                    19:43:ee:4a:bd:a7:05:f3:a8:80:4d:52:44:b9:25:
                    8e:3b:dd:36:bc:b9:6a:f6:a9:c3:fb:3b:bf:64:07:
                    c4:0a:95:27:bc:be:97:13:a1:f4:c2:17:34:0d:9a:
                    04:a6:7e:8e:bc:8c:de:ea:c0:38:89:8b:80:45:4d:
                    4b:0e:aa:11:1d:bd:91:61:cb:7a:2e:13:d4:76:12:
                    93:ef:fb:c8:08:ab:97:68:9b:93:36:e7:fa:bd:df:
                    a6:4f:35:9e:5f:00:1e:13:e7:a1:a2:d7:19:3d:e9:
                    1f:1a:bb:05:75:87:71:ce:cf:aa:18:2c:04:00:25:
                    3e:16:cc:f7:58:5b:26:19:91:2d:2d:5f:00:34:f2:
                    21:72:bf:0c:f9:f8:91:8b:bf:76:48:c0:85:5a:98:
                    1c:c8:7f:7b:b2:8a:a1:64:04:60:c7:9d:a2:91:cf:
                    35:9c:58:cf:c9:67:84:eb:97:94:41:32:06:5d:95:
                    c7:ef:8d:c1:bc:b1:bf:be:c6:39:2f:cc:fa:97:ca:
                    6a:1f:47:c0:d1:6d:72:1e:7b:5e:95:b4:8e:df:b2:
                    c8:e0:bf:4d:e8:ee:e7:93:f5:5b:cb:07:6e:43:cb:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         d2:8b:dd:33:e2:33:ad:63:df:8f:6c:49:7d:16:e6:d0:d2:f6:
         de:73:08:53:f9:9b:28:89:73:7a:ff:e2:55:fd:b2:b4:18:33:
         a4:d2:19:a4:ee:7f:98:cc:bd:86:35:bc:3c:b2:21:99:c5:70:
         5a:12:ad:de:df:9d:e0:84:7c:e7:67:16:be:3a:47:1b:da:18:
         e8:a9:9a:11:e5:10:d1:f3:d1:ce:3f:fc:fb:04:20:d2:3f:9b:
         c5:fe:e8:79:9e:d0:87:a5:14:cb:02:42:5f:f2:f0:25:15:1b:
         90:35:61:a1:59:af:1f:40:83:4f:cb:3c:b1:fc:53:60:8f:3c:
         cf:0b:45:3f:c1:fc:19:86:24:8b:51:c4:eb:ca:73:2c:29:9f:
         e7:20:0d:cb:bc:99:fe:e1:f8:90:cc:64:24:c6:98:3c:e0:de:
         8e:07:ad:52:e5:6b:cf:f6:2f:71:16:31:93:96:84:b8:81:c0:
         37:d2:81:11:a6:68:d4:c6:09:ab:94:44:cb:f0:ad:b8:0e:7e:
         73:fc:a5:96:e5:13:f8:e8:95:22:d5:3e:21:9f:a9:8b:05:9d:
         9d:b1:c4:b5:8f:90:c6:21:a0:71:07:c7:62:c1:43:87:9c:1c:
         e4:7a:e5:5e:b2:18:a8:73:66:7f:b9:08:cf:6e:40:ca:fe:2e:
         08:05:be:87
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUBzPsaFNATgS05ANkIQwBOPNQLUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDgyMDA0NThaFw0yNTA0MDcyMDA5NThaMDMxMTAvBgNV
BAMTKDY2MjRBMjRGQzZENTFDMUE1MDM1REM4RURGRkU3QTI2NjM2OTk0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLIc8G0lviFGDorY+GYa+JGqt
swT2j+UX3koq2RlD7kq9pwXzqIBNUkS5JY473Ta8uWr2qcP7O79kB8QKlSe8vpcT
ofTCFzQNmgSmfo68jN7qwDiJi4BFTUsOqhEdvZFhy3ouE9R2EpPv+8gIq5dom5M2
5/q936ZPNZ5fAB4T56Gi1xk96R8auwV1h3HOz6oYLAQAJT4WzPdYWyYZkS0tXwA0
8iFyvwz5+JGLv3ZIwIVamBzIf3uyiqFkBGDHnaKRzzWcWM/JZ4Trl5RBMgZdlcfv
jcG8sb++xjkvzPqXymofR8DRbXIee16VtI7fssjgv03o7ueT9VvLB25Dy9szAgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmJKJPxtUcGlA1
3I7f/nomY2mUCTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRU1Q
M3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNRZDQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VN
UDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAvNjYy
NEEyNEZDNkQ1MUMxQTUwMzVEQzhFREZGRTdBMjY2MzY5OTQwOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCiv/YAwQCqHmUAwQCqlKEAwQDsQgwAwQEsTcwMA0E
AgACMAcDBQAoBA/sMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBXTANBgkqhkiG
9w0BAQsFAAOCAQEA0ovdM+IzrWPfj2xJfRbm0NL23nMIU/mbKIlzev/iVf2ytBgz
pNIZpO5/mMy9hjW8PLIhmcVwWhKt3t+d4IR852cWvjpHG9oY6KmaEeUQ0fPRzj/8
+wQg0j+bxf7oeZ7Qh6UUywJCX/LwJRUbkDVhoVmvH0CDT8s8sfxTYI88zwtFP8H8
GYYki1HE68pzLCmf5yANy7yZ/uH4kMxkJMaYPODejgetUuVrz/YvcRYxk5aEuIHA
N9KBEaZo1MYJq5REy/CtuA5+c/ylluUT+OiVItU+IZ+piwWdnbHEtY+QxiGgcQfH
YsFDh5wc5HrlXrIYqHNmf7kIz25Ayv4uCAW+hw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:40 2025 by rpki-client