Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.cer
File:                     66BCBE742E9AFD2055BC7A34D73105EF55747D15.cer (raw, json)
Hash identifier:          MpCm6h//xbuCYSznBSSRADlIvk6mibhu5nwnHBeN3cg=
Subject key identifier:   66:BC:BE:74:2E:9A:FD:20:55:BC:7A:34:D7:31:05:EF:55:74:7D:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       103DFBC71890F7058A33A2E7C3BC0103C89685EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:44:15 +0000
Certificate not after:    Thu 03 Apr 2025 12:49:15 +0000
Subordinate resources:    AS: 262490
                          IP: 177.66.80.0/21
                          IP: 2804:514::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3d:fb:c7:18:90:f7:05:8a:33:a2:e7:c3:bc:01:03:c8:96:85:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:44:15 2024 GMT
            Not After : Apr  3 12:49:15 2025 GMT
        Subject: CN=66BCBE742E9AFD2055BC7A34D73105EF55747D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:eb:1e:c0:1f:49:a0:15:62:62:1a:98:4d:
                    6a:f6:c9:c6:18:9c:ac:cf:d4:7d:5d:be:00:3e:46:
                    1c:d2:28:1d:21:15:e3:50:9a:bc:aa:30:6b:27:ff:
                    9e:6b:d2:74:2c:0c:b5:85:e7:7d:2a:c5:ac:98:3f:
                    6a:78:ce:06:70:f0:a2:09:4c:3f:e4:f9:fc:72:32:
                    00:d2:ce:9e:18:64:de:0b:67:78:0d:cd:15:6e:cf:
                    33:9c:a1:20:da:39:d7:69:1e:ba:b8:42:45:c5:1d:
                    e0:34:92:e1:96:44:9f:17:3c:ca:4b:c3:7d:8e:44:
                    4d:27:16:47:11:60:83:6e:90:44:fc:d7:56:3a:71:
                    c5:7e:b1:e4:a8:ec:d7:52:c5:ee:c3:48:14:4c:0d:
                    e6:41:8a:d7:5f:df:f2:3f:7a:85:12:4b:b7:f3:f8:
                    51:08:03:2b:57:59:ea:fc:3e:11:b9:02:a8:6e:62:
                    81:4c:66:8e:51:b0:de:90:24:38:93:fd:26:dd:5a:
                    fd:52:86:10:e6:a0:75:33:fd:35:39:96:e9:56:d6:
                    83:66:38:81:ab:a3:d1:f2:d2:cc:43:7e:da:f2:ac:
                    81:00:4f:cc:dd:33:8f:06:4a:36:8c:3f:19:d9:ac:
                    b8:e3:22:ee:53:44:24:3c:a3:36:40:18:50:2d:f2:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:BC:BE:74:2E:9A:FD:20:55:BC:7A:34:D7:31:05:EF:55:74:7D:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.80.0/21
                IPv6:
                  2804:514::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262490

    Signature Algorithm: sha256WithRSAEncryption
         35:e9:94:25:b8:57:59:d3:b2:22:65:2d:af:bb:3c:f9:85:34:
         43:44:dd:dd:02:6b:77:de:50:a6:6b:18:fe:e1:33:3d:2b:35:
         29:6a:32:7a:d8:75:e5:b6:d7:90:df:62:58:2c:f3:43:b5:fa:
         29:4d:a1:6b:de:76:a8:a3:aa:02:93:0b:6e:06:5c:50:ac:84:
         02:b5:89:6f:2f:81:8e:46:49:5e:b2:4b:21:af:f5:a8:d0:4e:
         93:e9:31:fb:b7:e0:54:08:8f:22:c3:f2:78:b7:7e:9c:42:bb:
         5b:76:75:6a:97:71:af:7b:c5:e9:61:22:29:87:10:65:69:36:
         de:83:25:af:22:11:1e:49:07:89:5f:9a:3b:96:7d:32:04:43:
         e6:d2:fc:04:04:66:44:bd:be:5a:ed:4b:14:ab:27:ed:62:02:
         c7:e4:52:a4:33:c0:8f:3f:fc:6b:27:55:2a:18:73:ca:12:52:
         a9:43:15:81:4c:10:36:8f:f5:51:84:66:b5:ed:fc:b7:52:10:
         09:4f:4e:bc:5b:d6:ca:9c:22:41:24:a5:94:e2:c3:fb:50:68:
         41:10:46:6d:24:79:f4:09:40:6c:17:1a:a2:71:db:8b:15:f7:
         6b:79:ca:72:9e:06:a7:a4:fa:32:ef:cc:94:07:10:52:3d:32:
         3e:68:87:57
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUED37xxiQ9wWKM6Lnw7wBA8iWheowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMjQ0MTVaFw0yNTA0MDMxMjQ5MTVaMDMxMTAvBgNV
BAMTKDY2QkNCRTc0MkU5QUZEMjA1NUJDN0EzNEQ3MzEwNUVGNTU3NDdEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiOsewB9JoBViYhqYTWr2ycYY
nKzP1H1dvgA+RhzSKB0hFeNQmryqMGsn/55r0nQsDLWF530qxayYP2p4zgZw8KIJ
TD/k+fxyMgDSzp4YZN4LZ3gNzRVuzzOcoSDaOddpHrq4QkXFHeA0kuGWRJ8XPMpL
w32ORE0nFkcRYINukET811Y6ccV+seSo7NdSxe7DSBRMDeZBitdf3/I/eoUSS7fz
+FEIAytXWer8PhG5AqhuYoFMZo5RsN6QJDiT/SbdWv1ShhDmoHUz/TU5lulW1oNm
OIGro9Hy0sxDftryrIEAT8zdM48GSjaMPxnZrLjjIu5TRCQ8ozZAGFAt8gjhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmvL50Lpr9IFW8
ejTXMQXvVXR9FTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDZB
Ym03bXF0dXJEVlJZaDVLaThrYUxzOVVYOTVYeWpyZm1Tb2N5N0tKRTcvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q2
QWJtN21xdHVyRFZSWWg1S2k4a2FMczlVWDk1WHlqcmZtU29jeTdLSkU3LzEvNjZC
Q0JFNzQyRTlBRkQyMDU1QkM3QTM0RDczMTA1RUY1NTc0N0QxNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsUJQMA0EAgACMAcDBQAoBAUUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQBWjANBgkqhkiG9w0BAQsFAAOCAQEANemUJbhXWdOyImUt
r7s8+YU0Q0Td3QJrd95QpmsY/uEzPSs1KWoyeth15bbXkN9iWCzzQ7X6KU2ha952
qKOqApMLbgZcUKyEArWJby+BjkZJXrJLIa/1qNBOk+kx+7fgVAiPIsPyeLd+nEK7
W3Z1apdxr3vF6WEiKYcQZWk23oMlryIRHkkHiV+aO5Z9MgRD5tL8BARmRL2+Wu1L
FKsn7WICx+RSpDPAjz/8aydVKhhzyhJSqUMVgUwQNo/1UYRmte38t1IQCU9OvFvW
ypwiQSSllOLD+1BoQRBGbSR59AlAbBcaonHbixX3a3nKcp4Gp6T6Mu/MlAcQUj0y
PmiHVw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:55:57 2025 by rpki-client