Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer
File:                     69B7F5A9658DE6458B100966610F13A42172540B.cer (raw, json)
Hash identifier:          RR/6GC12hUCzZv+KOfAKBXmi6Cuzn4rejwSDY8umaAs=
Subject key identifier:   69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       725BA96781FEBC28495DD11804E74A1A8A177412
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 08:31:34 +0000
Certificate not after:    Fri 06 Mar 2026 08:36:34 +0000
Subordinate resources:    AS: 266159
                          IP: 160.19.44.0/22
                          IP: 2804:3b98::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5b:a9:67:81:fe:bc:28:49:5d:d1:18:04:e7:4a:1a:8a:17:74:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 08:31:34 2025 GMT
            Not After : Mar  6 08:36:34 2026 GMT
        Subject: CN=69B7F5A9658DE6458B100966610F13A42172540B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:bd:1b:c6:4a:9d:a0:7b:db:5b:69:54:62:
                    3b:8d:a4:a4:1b:c5:8f:29:6a:44:47:ee:07:f0:1f:
                    c3:10:66:0e:32:87:6b:46:ee:e8:af:ce:41:d7:75:
                    ff:f4:50:13:02:cc:30:ff:c8:d4:f2:b2:a6:9a:a1:
                    3b:0b:3b:de:49:83:c2:20:bd:b3:e6:ec:be:38:7c:
                    a2:ba:bd:02:c6:6f:01:20:c2:b8:4a:0f:e8:04:f9:
                    62:25:dc:83:e9:4a:f7:48:ba:4e:56:03:d3:75:33:
                    4c:e7:52:44:b1:7f:e6:64:8e:89:67:71:e1:19:ec:
                    5a:14:ce:d6:71:8d:e6:be:f8:22:d5:5a:c5:14:04:
                    17:9c:64:45:f8:65:e9:ae:b6:11:ff:b1:7d:b3:2d:
                    e1:8d:3a:7b:4e:e2:f2:07:2a:0f:80:ee:f5:db:07:
                    08:21:8b:3d:57:6c:6d:29:a9:a6:c9:a8:2b:99:be:
                    08:6b:0a:02:50:d1:90:05:e7:ab:e0:84:7a:cc:0b:
                    49:6c:ff:ca:3d:08:e7:78:23:82:d7:e8:46:dc:bc:
                    c5:40:6b:71:e4:94:71:f7:f4:a1:d8:dc:21:53:32:
                    43:90:e3:25:af:9c:cc:ba:2c:0c:b9:f0:ee:13:cf:
                    10:a1:b6:7a:b0:d5:e6:d8:dd:d3:fa:2f:8e:5c:60:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.44.0/22
                IPv6:
                  2804:3b98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266159

    Signature Algorithm: sha256WithRSAEncryption
         76:8f:86:d3:8a:d7:1d:fc:cb:88:5e:75:d1:f1:39:de:5d:b4:
         0e:36:5c:39:50:88:1e:90:67:0a:42:f3:9d:48:83:95:c1:0b:
         07:b8:8d:ca:9e:35:0b:3c:df:24:d7:d5:cf:8a:7e:19:57:5c:
         98:8c:1c:11:b5:e9:b4:ae:ef:d5:fb:a5:94:5f:93:d0:8c:2d:
         0d:c5:59:b1:62:3a:20:44:75:d3:95:18:d1:03:e0:33:6a:75:
         a5:c4:68:44:57:93:8c:13:da:85:bd:99:80:7b:c5:54:27:20:
         15:29:f5:bc:35:3d:48:0d:58:76:13:ac:d4:b0:ec:14:77:ae:
         f5:51:55:86:74:51:9d:e0:89:02:13:0a:ca:a3:cc:05:14:33:
         0d:1b:4b:45:34:11:c4:ba:5a:ab:21:f4:43:36:5f:37:7f:5b:
         c5:02:f6:32:54:24:03:82:84:6b:0d:9b:46:77:79:20:70:cb:
         4b:1b:2a:97:da:3a:ae:b4:bf:28:97:59:b6:d3:d9:4f:95:ee:
         6f:80:f7:48:9b:4f:34:f2:c0:ab:29:b6:11:7e:b7:06:06:fd:
         de:f3:bc:b0:52:53:de:52:cc:1d:89:c2:33:06:a6:6d:cd:51:
         dd:a4:12:5b:e1:b5:a2:1f:16:a3:2b:5d:6b:86:12:a1:3d:ce:
         09:1a:01:81
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUclupZ4H+vChJXdEYBOdKGooXdBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwODMxMzRaFw0yNjAzMDYwODM2MzRaMDMxMTAvBgNV
BAMTKDY5QjdGNUE5NjU4REU2NDU4QjEwMDk2NjYxMEYxM0E0MjE3MjU0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBb0bxkqdoHvbW2lUYjuNpKQb
xY8pakRH7gfwH8MQZg4yh2tG7uivzkHXdf/0UBMCzDD/yNTysqaaoTsLO95Jg8Ig
vbPm7L44fKK6vQLGbwEgwrhKD+gE+WIl3IPpSvdIuk5WA9N1M0znUkSxf+Zkjoln
ceEZ7FoUztZxjea++CLVWsUUBBecZEX4ZemuthH/sX2zLeGNOntO4vIHKg+A7vXb
Bwghiz1XbG0pqabJqCuZvghrCgJQ0ZAF56vghHrMC0ls/8o9COd4I4LX6EbcvMVA
a3HklHH39KHY3CFTMkOQ4yWvnMy6LAy58O4TzxChtnqw1ebY3dP6L45cYJoDAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpt/WpZY3mRYsQ
CWZhDxOkIXJUCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2hL
aTVZczgyaGN5YlJaTll5WkJnZm5IaGhrVTRzOUQ4SlV4amd1QVRMaGQvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNo
S2k1WXM4MmhjeWJSWk5ZeVpCZ2ZuSGhoa1U0czlEOEpVeGpndUFUTGhkLzEvNjlC
N0Y1QTk2NThERTY0NThCMTAwOTY2NjEwRjEzQTQyMTcyNTQwQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCoBMsMA0EAgACMAcDBQAoBDuYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPrzANBgkqhkiG9w0BAQsFAAOCAQEAdo+G04rXHfzLiF51
0fE53l20DjZcOVCIHpBnCkLznUiDlcELB7iNyp41CzzfJNfVz4p+GVdcmIwcEbXp
tK7v1fullF+T0IwtDcVZsWI6IER105UY0QPgM2p1pcRoRFeTjBPahb2ZgHvFVCcg
FSn1vDU9SA1YdhOs1LDsFHeu9VFVhnRRneCJAhMKyqPMBRQzDRtLRTQRxLpaqyH0
QzZfN39bxQL2MlQkA4KEaw2bRnd5IHDLSxsql9o6rrS/KJdZttPZT5Xub4D3SJtP
NPLAqym2EX63Bgb93vO8sFJT3lLMHYnCMwambc1R3aQSW+G1oh8Woytda4YSoT3O
CRoBgQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:29 2025 by rpki-client