Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
File:                     93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer (raw, json)
Hash identifier:          Bd9lqZBIyVXVkX8Hp90D/XPV2HeRvrkMjs6Ez7HmUOQ=
Subject key identifier:   93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3BF8FF3E29DD46014886221BDDBFCD7855B3213C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 18:01:53 +0000
Certificate not after:    Tue 02 Dec 2025 18:06:53 +0000
Subordinate resources:    AS: 263073
                          IP: 138.0.196.0/22
                          IP: 138.219.240.0/22
                          IP: 164.163.12.0/22
                          IP: 168.121.192.0/22
                          IP: 170.78.80.0/22
                          IP: 170.244.96.0/22
                          IP: 177.200.240.0/20
                          IP: 177.223.16.0/20
                          IP: 179.0.24.0/24
                          IP: 186.194.112.0/20
                          IP: 186.224.24.0/21
                          IP: 186.233.104.0/21
                          IP: 191.6.48.0/21
                          IP: 201.71.60.0/22
                          IP: 2804:954::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f8:ff:3e:29:dd:46:01:48:86:22:1b:dd:bf:cd:78:55:b3:21:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 18:01:53 2024 GMT
            Not After : Dec  2 18:06:53 2025 GMT
        Subject: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:5f:ee:8e:29:f7:3e:fa:93:03:dd:a1:3b:
                    4d:4e:a2:a2:52:6f:9d:a8:0b:df:36:e4:72:fa:c4:
                    44:7d:a6:d2:5e:f8:2d:a8:ac:60:c4:ea:ed:16:eb:
                    f7:a4:25:c8:20:f7:8d:35:38:96:4a:3d:a4:93:d9:
                    97:66:8c:ba:11:3f:cb:5d:69:15:ab:2a:c0:ab:e8:
                    3b:f8:2f:e4:56:c6:2a:1d:37:b3:91:01:c9:17:97:
                    f7:89:e0:8d:8d:62:3b:f6:86:b5:6f:6e:c4:5b:a3:
                    f7:fd:91:7f:bb:96:78:2a:1b:54:0f:8d:6b:31:40:
                    6f:e0:04:47:36:6e:fa:dd:5d:e3:56:d7:07:10:c4:
                    9b:3e:b3:cc:4e:ed:78:93:8a:05:e1:02:a6:63:28:
                    e1:60:16:85:9e:49:0e:f4:5c:63:1b:23:02:a0:c3:
                    df:28:81:d3:6f:e6:bd:e4:5d:55:4e:a9:02:26:2b:
                    09:f3:45:b4:b0:35:f8:99:ed:64:bb:49:fa:42:c2:
                    a5:e3:f5:a3:09:1b:7e:b4:62:dc:ef:f3:ae:5a:03:
                    a7:a8:38:c6:6a:89:4f:f2:a4:48:28:c2:ac:fd:80:
                    81:34:8d:ac:23:21:bf:84:50:14:9b:e1:f9:0e:52:
                    20:53:37:c6:7d:54:d8:6e:d0:1a:56:1d:57:4f:de:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.196.0/22
                  138.219.240.0/22
                  164.163.12.0/22
                  168.121.192.0/22
                  170.78.80.0/22
                  170.244.96.0/22
                  177.200.240.0/20
                  177.223.16.0/20
                  179.0.24.0/24
                  186.194.112.0/20
                  186.224.24.0/21
                  186.233.104.0/21
                  191.6.48.0/21
                  201.71.60.0/22
                IPv6:
                  2804:954::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263073

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:7d:67:3e:d2:b8:cb:51:b7:6c:7f:cd:44:6c:6e:2b:a1:
         2d:32:9c:67:65:4d:f1:bd:dd:bf:90:56:a8:e9:d7:b3:90:67:
         9e:0f:9e:4f:72:8e:b9:1f:78:2f:76:f5:8a:c0:38:39:29:aa:
         e9:5c:15:59:24:78:25:c1:e0:c9:ec:04:a5:78:c8:e2:aa:fc:
         71:08:9e:14:2b:fd:1b:c3:ed:06:0a:de:64:82:2c:b1:30:62:
         d2:83:af:5b:ac:b2:91:79:39:e5:ad:a3:1a:26:b2:c1:02:71:
         04:30:f8:67:96:0c:1e:25:95:95:8b:20:c6:6d:ca:6a:af:74:
         48:08:c3:e0:70:9b:f4:9a:30:85:cf:94:1e:de:2e:c6:44:67:
         ae:ec:2b:9a:73:aa:8b:0a:71:2a:a9:bf:fb:2c:86:9c:c7:eb:
         c1:9c:dd:b9:55:fb:6a:69:0a:ab:98:d2:61:78:88:5a:ff:33:
         c3:a5:ff:a7:56:59:55:7a:29:0c:5d:53:63:9f:d7:9b:92:11:
         0f:d3:a9:d4:85:1c:0c:61:df:21:d4:19:a6:fd:3d:6c:56:6d:
         8b:70:98:01:66:fb:de:35:e4:3b:57:6a:c6:e8:53:e3:1a:1f:
         f3:88:b3:ea:b5:06:5e:3a:bf:11:21:a4:27:23:eb:37:f1:be:
         7b:a0:5b:bb
-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgIUO/j/PindRgFIhiIb3b/NeFWzITwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMDMxODAxNTNaFw0yNTEyMDIxODA2NTNaMDMxMTAvBgNV
BAMTKDkzQkU0QjQ0MzEwM0M5RUEzQ0U0MDY5RDA5MkM2MkI5OEYwODk1RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRl/ujin3PvqTA92hO01OoqJS
b52oC9825HL6xER9ptJe+C2orGDE6u0W6/ekJcgg9401OJZKPaST2ZdmjLoRP8td
aRWrKsCr6Dv4L+RWxiodN7ORAckXl/eJ4I2NYjv2hrVvbsRbo/f9kX+7lngqG1QP
jWsxQG/gBEc2bvrdXeNW1wcQxJs+s8xO7XiTigXhAqZjKOFgFoWeSQ70XGMbIwKg
w98ogdNv5r3kXVVOqQImKwnzRbSwNfiZ7WS7SfpCwqXj9aMJG360Ytzv865aA6eo
OMZqiU/ypEgowqz9gIE0jawjIb+EUBSb4fkOUiBTN8Z9VNhu0BpWHVdP3np9AgMB
AAGjggOIMIIDhDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTvktEMQPJ6jzk
Bp0JLGK5jwiV/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmI4
NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFia20vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zi
ODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEvOTNC
RTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4RjA4OTVGRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEH
AQH/BG0wazBaBAIAATBUAwQCigDEAwQCitvwAwQCpKMMAwQCqHnAAwQCqk5QAwQC
qvRgAwQEscjwAwQEsd8QAwQAswAYAwQEusJwAwQDuuAYAwQDuuloAwQDvwYwAwQC
yUc8MA0EAgACMAcDBQAoBAlUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDoTAN
BgkqhkiG9w0BAQsFAAOCAQEAYbx9Zz7SuMtRt2x/zURsbiuhLTKcZ2VN8b3dv5BW
qOnXs5Bnng+eT3KOuR94L3b1isA4OSmq6VwVWSR4JcHgyewEpXjI4qr8cQieFCv9
G8PtBgreZIIssTBi0oOvW6yykXk55a2jGiaywQJxBDD4Z5YMHiWVlYsgxm3Kaq90
SAjD4HCb9Jowhc+UHt4uxkRnruwrmnOqiwpxKqm/+yyGnMfrwZzduVX7amkKq5jS
YXiIWv8zw6X/p1ZZVXopDF1TY5/Xm5IRD9Op1IUcDGHfIdQZpv09bFZti3CYAWb7
3jXkO1dqxuhT4xof84iz6rUGXjq/ESGkJyPrN/G+e6Bbuw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:10 2025 by rpki-client