Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer
File:                     717380C17B82263404536494404A01EF51405E80.cer (raw, json)
Hash identifier:          OuCvwxv29pLl3c5TZw3g2898pNSM1DZxuwE7gzbpMNg=
Subject key identifier:   71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D11A92A3DD8EEA8EDADAFFDD379A911A09DB2D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 17:32:22 +0000
Certificate not after:    Wed 25 Mar 2026 17:37:22 +0000
Subordinate resources:    AS: 267047
                          IP: 45.227.28.0/22
                          IP: 2804:4758::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:11:a9:2a:3d:d8:ee:a8:ed:ad:af:fd:d3:79:a9:11:a0:9d:b2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 17:32:22 2025 GMT
            Not After : Mar 25 17:37:22 2026 GMT
        Subject: CN=717380C17B82263404536494404A01EF51405E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:4e:8d:04:d4:37:91:2d:ac:4a:02:49:1b:
                    bb:7a:ab:2e:0c:12:fc:04:19:70:da:e4:ed:2e:89:
                    5d:fc:db:94:04:24:47:4e:f3:bb:9f:f4:c2:d3:8e:
                    fb:fa:4f:90:bd:2c:48:68:86:76:a1:2f:8a:c0:67:
                    4c:8f:eb:28:d6:af:86:b9:f6:e3:85:be:c1:57:08:
                    22:fe:a5:c4:2a:5c:94:d0:7f:80:e8:3d:52:c4:ac:
                    f3:7e:f3:df:32:88:f4:b0:02:36:53:a1:b1:66:57:
                    f9:b9:03:f1:76:ac:e2:25:55:17:15:08:dd:c6:e8:
                    e2:6a:a0:d8:96:f6:e2:ea:60:e8:52:d0:65:dc:ae:
                    f4:c6:32:cd:b9:59:63:47:c6:83:e2:e2:09:8f:f8:
                    36:a7:c0:47:73:5b:65:ad:3a:e1:d6:58:1e:42:ea:
                    30:3a:53:75:4d:a7:5f:91:99:87:6c:46:a0:c5:3b:
                    a6:a0:a8:7e:b3:2c:9e:3a:73:19:c5:e8:ac:d8:ce:
                    25:5e:73:63:a4:ba:d2:e0:cb:3d:d7:0b:df:9a:bb:
                    ba:66:e1:90:0f:13:d9:34:6b:a9:c3:11:d7:3f:ab:
                    68:fe:eb:8a:42:be:ba:0f:db:8b:80:ee:1b:1a:f3:
                    a8:ce:1b:65:ad:ba:84:d0:7c:04:81:5e:63:98:f0:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.28.0/22
                IPv6:
                  2804:4758::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267047

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:a0:77:98:fa:41:5e:31:83:23:b2:b0:15:ae:56:fa:a7:
         91:28:87:11:16:59:eb:57:53:5c:66:a7:dd:62:c7:b4:97:51:
         93:f6:0c:97:14:9d:8c:74:d8:8e:40:23:a9:6c:30:3d:87:52:
         9e:7d:f0:5d:c4:c9:08:b2:c7:e5:02:83:2c:d1:ef:d5:89:91:
         d0:ef:47:e3:4d:2b:44:cc:45:6a:ca:07:1d:5c:ec:a5:c9:35:
         fe:0b:40:ea:92:80:82:7b:1c:14:1e:04:df:62:08:57:43:70:
         d5:37:13:0d:5c:2c:ad:68:f5:bb:43:33:d5:6f:c3:e5:58:63:
         58:fe:ee:80:56:58:db:85:10:71:67:a7:a7:ff:ac:89:58:ab:
         f0:5b:0c:6c:41:4d:4b:72:31:82:cc:a6:44:00:12:ea:51:88:
         7a:1a:d2:3a:d0:f5:71:1c:34:de:74:86:79:0c:d0:49:85:6a:
         36:34:ce:a9:a4:26:68:5d:13:bb:fa:17:14:45:9a:89:ed:3a:
         39:f5:c0:dd:0f:65:4b:bd:f7:22:fe:25:dc:20:de:82:49:26:
         23:46:fa:b1:66:3e:4c:f2:e6:36:a0:1b:b1:5c:66:7f:c1:c2:
         d7:fb:42:0b:4f:e5:9b:fa:9c:16:4c:71:81:3b:53:20:4e:51:
         90:80:d1:43
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUDRGpKj3Y7qjtra/903mpEaCdstQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjYxNzMyMjJaFw0yNjAzMjUxNzM3MjJaMDMxMTAvBgNV
BAMTKDcxNzM4MEMxN0I4MjI2MzQwNDUzNjQ5NDQwNEEwMUVGNTE0MDVFODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu606NBNQ3kS2sSgJJG7t6qy4M
EvwEGXDa5O0uiV3825QEJEdO87uf9MLTjvv6T5C9LEhohnahL4rAZ0yP6yjWr4a5
9uOFvsFXCCL+pcQqXJTQf4DoPVLErPN+898yiPSwAjZTobFmV/m5A/F2rOIlVRcV
CN3G6OJqoNiW9uLqYOhS0GXcrvTGMs25WWNHxoPi4gmP+DanwEdzW2WtOuHWWB5C
6jA6U3VNp1+RmYdsRqDFO6agqH6zLJ46cxnF6KzYziVec2OkutLgyz3XC9+au7pm
4ZAPE9k0a6nDEdc/q2j+64pCvroP24uA7hsa86jOG2WtuoTQfASBXmOY8DsRAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxc4DBe4ImNART
ZJRASgHvUUBegDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVhm
UngyOGYyVnpkM0dZQkVpMUd5dUVoWTZrU1A5OEdKWmJockhlWnVUQ2EvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVhm
UngyOGYyVnpkM0dZQkVpMUd5dUVoWTZrU1A5OEdKWmJockhlWnVUQ2EvMC83MTcz
ODBDMTdCODIyNjM0MDQ1MzY0OTQ0MDRBMDFFRjUxNDA1RTgwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt4xwwDQQCAAIwBwMFACgER1gwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBMnMA0GCSqGSIb3DQEBCwUAA4IBAQAQi6B3mPpBXjGDI7Kw
Fa5W+qeRKIcRFlnrV1NcZqfdYse0l1GT9gyXFJ2MdNiOQCOpbDA9h1KeffBdxMkI
ssflAoMs0e/ViZHQ70fjTStEzEVqygcdXOylyTX+C0DqkoCCexwUHgTfYghXQ3DV
NxMNXCytaPW7QzPVb8PlWGNY/u6AVljbhRBxZ6en/6yJWKvwWwxsQU1LcjGCzKZE
ABLqUYh6GtI60PVxHDTedIZ5DNBJhWo2NM6ppCZoXRO7+hcURZqJ7To59cDdD2VL
vfci/iXcIN6CSSYjRvqxZj5M8uY2oBuxXGZ/wcLX+0ILT+Wb+pwWTHGBO1MgTlGQ
gNFD
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:16 2025 by rpki-client