Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
File:                     725BCF70C08F4B2744E301141EF06513A96F28D6.cer (raw, json)
Hash identifier:          ODnLSdW+gyUhpkoKPcu5QDV7CuZiFeCuQ6RSrA/fi/s=
Subject key identifier:   72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BB4BE17F41BFF6FB82E95B3DF86613E931315F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:11 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:11 +0000
Subordinate resources:    AS: 53166
                          IP: 186.217.0.0/16
                          IP: 200.145.0.0/16
                          IP: 2801:88::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b4:be:17:f4:1b:ff:6f:b8:2e:95:b3:df:86:61:3e:93:13:15:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:11 2025 GMT
            Not After : Mar  4 18:40:11 2026 GMT
        Subject: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:82:00:ef:fc:fb:c6:d2:db:f5:d7:32:d9:
                    f8:58:70:ba:90:cb:16:7c:60:99:2b:22:ad:2e:73:
                    c3:40:9a:f1:2e:40:6a:b9:a7:43:24:75:ab:df:c1:
                    c1:8b:e1:6f:39:93:e1:5f:ee:be:32:41:64:87:ae:
                    b4:99:60:ea:6e:72:4d:1d:57:fa:07:12:22:cf:7c:
                    d8:3c:60:e1:1f:42:c4:81:07:47:32:8c:17:7e:66:
                    a8:e4:11:88:01:81:92:8a:9b:06:3f:97:f3:45:f9:
                    3a:30:b6:5f:f3:29:f3:e3:ef:79:17:a6:7e:20:c4:
                    c6:95:8e:40:ea:9d:ce:28:92:03:88:88:43:d5:5c:
                    32:cf:e1:6a:42:b1:25:50:83:8e:fb:b5:39:06:d9:
                    5b:73:05:88:e2:6c:da:2a:14:74:86:66:1f:6a:6a:
                    15:c1:39:e2:49:f7:d3:e0:80:5c:0c:23:06:58:5f:
                    d9:83:3f:ed:a8:18:f5:64:8a:fe:76:3d:51:38:c9:
                    ce:b3:7e:6e:ae:ae:ea:a3:da:6a:da:52:14:07:19:
                    74:1d:62:d3:65:96:59:f9:0c:cb:cd:5d:95:c8:e3:
                    06:39:d7:73:fd:b1:fb:96:ac:64:bd:64:6a:00:a2:
                    98:a8:36:6a:74:61:11:27:d1:22:a1:36:34:8f:d1:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.217.0.0/16
                  200.145.0.0/16
                IPv6:
                  2801:88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53166

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:40:99:28:38:21:db:dd:14:49:af:d9:7f:fc:2c:f3:4a:
         0c:da:7e:42:c6:a9:94:33:cc:6d:6e:f5:18:2b:94:32:16:93:
         9d:c0:5c:e1:19:ad:e6:33:47:06:b2:55:34:96:3c:b7:af:7c:
         c5:f1:1d:56:12:b7:93:40:5a:09:f0:fb:fd:19:25:d9:65:1e:
         dd:9c:31:37:60:77:a3:32:8a:78:87:50:c9:0d:ae:73:3c:fc:
         08:22:cc:1d:4b:90:01:55:99:12:da:66:c8:e2:74:38:58:34:
         b3:f9:18:3a:89:2f:de:27:a7:2c:e0:42:e8:11:82:8c:0a:a0:
         01:42:37:ea:32:d9:ab:c1:8d:82:98:6c:8b:b1:c0:70:61:f0:
         a4:c0:ec:ae:54:e4:cc:55:3b:f5:d7:49:db:4b:d4:a1:47:06:
         4a:02:f5:4f:f4:67:66:07:77:0f:a5:22:25:e2:b9:17:7a:25:
         1e:da:f7:6f:15:b1:37:3a:bd:b6:09:c5:7f:fe:4d:ae:e4:47:
         e3:c0:17:05:e7:21:ce:ac:ae:8f:ce:ee:12:4c:e9:ce:70:b9:
         9d:80:1a:d6:b3:47:68:c4:ef:28:d2:b2:9e:be:3e:36:91:3c:
         05:17:ce:0f:09:08:8f:bc:98:be:b7:c7:98:9f:23:13:35:13:
         4b:2a:26:07
-----BEGIN CERTIFICATE-----
MIIGMzCCBRugAwIBAgIUa7S+F/Qb/2+4LpWz34ZhPpMTFfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM1MTFaFw0yNjAzMDQxODQwMTFaMDMxMTAvBgNV
BAMTKDcyNUJDRjcwQzA4RjRCMjc0NEUzMDExNDFFRjA2NTEzQTk2RjI4RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ioIA7/z7xtLb9dcy2fhYcLqQ
yxZ8YJkrIq0uc8NAmvEuQGq5p0MkdavfwcGL4W85k+Ff7r4yQWSHrrSZYOpuck0d
V/oHEiLPfNg8YOEfQsSBB0cyjBd+ZqjkEYgBgZKKmwY/l/NF+Towtl/zKfPj73kX
pn4gxMaVjkDqnc4okgOIiEPVXDLP4WpCsSVQg477tTkG2VtzBYjibNoqFHSGZh9q
ahXBOeJJ99PggFwMIwZYX9mDP+2oGPVkiv52PVE4yc6zfm6uruqj2mraUhQHGXQd
YtNllln5DMvNXZXI4wY513P9sfuWrGS9ZGoAopioNmp0YREn0SKhNjSP0eB9AgMB
AAGjggM9MIIDOTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRyW89wwI9LJ0Tj
ARQe8GUTqW8o1jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTR3
V0Q2aVp5OWltUjJNamhvQjQ3S1NtQXZQdk1pY2k4MVlqQ1k5ZXBBMmovMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTR3
V0Q2aVp5OWltUjJNamhvQjQ3S1NtQXZQdk1pY2k4MVlqQ1k5ZXBBMmovMS83MjVC
Q0Y3MEMwOEY0QjI3NDRFMzAxMTQxRUYwNjUxM0E5NkYyOEQ2Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUHAQcB
Af8EIzAhMBAEAgABMAoDAwC62QMDAMiRMA0EAgACMAcDBQAoAQCIMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDPrjANBgkqhkiG9w0BAQsFAAOCAQEAellAmSg4Idvd
FEmv2X/8LPNKDNp+QsaplDPMbW71GCuUMhaTncBc4Rmt5jNHBrJVNJY8t698xfEd
VhK3k0BaCfD7/Rkl2WUe3ZwxN2B3ozKKeIdQyQ2uczz8CCLMHUuQAVWZEtpmyOJ0
OFg0s/kYOokv3ienLOBC6BGCjAqgAUI36jLZq8GNgphsi7HAcGHwpMDsrlTkzFU7
9ddJ20vUoUcGSgL1T/RnZgd3D6UiJeK5F3olHtr3bxWxNzq9tgnFf/5NruRH48AX
Bechzqyuj87uEkzpznC5nYAa1rNHaMTvKNKynr4+NpE8BRfODwkIj7yYvrfHmJ8j
EzUTSyomBw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:17 2025 by rpki-client