Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/972A2A66D2C1CE7079ED1703C517510B65A0A37D.cer
File:                     972A2A66D2C1CE7079ED1703C517510B65A0A37D.cer (raw, json)
Hash identifier:          DvyEiPAKjuyUje3KdcuMCaMj2ro2pAZc8MaMlCXUGyA=
Subject key identifier:   97:2A:2A:66:D2:C1:CE:70:79:ED:17:03:C5:17:51:0B:65:A0:A3:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06B9DD7799C7107AA90122C68F61FECBA1E8DA93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/972A2A66D2C1CE7079ED1703C517510B65A0A37D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Dec 2024 20:49:22 +0000
Certificate not after:    Mon 08 Dec 2025 20:54:22 +0000
Subordinate resources:    AS: 265984
                          IP: 181.191.4.0/22
                          IP: 2804:40d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b9:dd:77:99:c7:10:7a:a9:01:22:c6:8f:61:fe:cb:a1:e8:da:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  9 20:49:22 2024 GMT
            Not After : Dec  8 20:54:22 2025 GMT
        Subject: CN=972A2A66D2C1CE7079ED1703C517510B65A0A37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:ac:c1:62:5a:b2:47:51:51:09:9d:99:b2:
                    8d:d1:95:ca:7a:ac:05:b7:10:27:74:ee:04:4c:ba:
                    81:38:ed:df:a5:5b:d7:5a:82:35:c7:ef:8b:85:bf:
                    d6:54:c7:c8:b3:ee:40:fc:9d:ce:0c:e2:5c:7a:b0:
                    b7:61:52:a1:d7:e6:c8:ba:5b:ab:5b:4f:ff:8a:9a:
                    c1:60:4e:a2:3c:e6:0e:df:95:57:b9:a7:47:bd:11:
                    8b:00:85:ae:96:b5:4b:fd:9c:d0:0e:3d:ca:7d:12:
                    51:40:af:18:c2:86:5e:e8:74:40:46:da:45:f8:82:
                    17:28:89:7a:89:82:86:8c:a3:4d:e7:00:9f:5d:c2:
                    a1:86:74:ec:6e:6f:05:03:9a:89:38:68:8e:c2:8d:
                    7e:33:98:cf:5d:ad:df:6b:03:af:0e:fa:3c:ed:fa:
                    1d:aa:bc:0a:38:ba:8c:0b:94:a7:3f:1c:ab:d2:ff:
                    f0:43:2e:67:68:2e:65:25:95:1d:ff:d0:32:db:8d:
                    9f:37:06:3f:b6:2c:87:b5:54:c5:d7:c4:ac:d1:7c:
                    28:a1:b9:22:da:03:d3:fe:94:a0:98:04:e7:cf:e5:
                    56:77:79:e1:f1:13:b1:da:6c:07:f7:f6:2c:66:7f:
                    ea:96:9e:d5:80:78:af:73:9e:a9:6a:33:15:ff:59:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:2A:2A:66:D2:C1:CE:70:79:ED:17:03:C5:17:51:0B:65:A0:A3:7D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/972A2A66D2C1CE7079ED1703C517510B65A0A37D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.4.0/22
                IPv6:
                  2804:40d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265984

    Signature Algorithm: sha256WithRSAEncryption
         ad:7e:6c:24:6d:3a:53:8f:79:5e:aa:d1:aa:4e:7d:e9:ed:34:
         52:4b:1a:54:2b:5f:77:d3:e3:39:39:94:bd:63:e4:d1:d8:73:
         e2:f4:9e:bd:7f:c9:75:29:8f:59:ce:8e:11:0e:a6:da:09:99:
         00:11:95:95:4b:98:71:5d:f4:b8:77:59:91:6f:31:f2:5b:91:
         29:59:47:a1:2f:60:9a:bd:f7:19:47:6d:1f:ce:c1:a5:12:91:
         e9:4e:43:c1:5f:27:0b:28:c9:fd:13:67:89:50:1b:d2:7b:d0:
         51:1b:d8:20:2c:82:bf:a0:3b:a7:ae:7a:68:b5:ba:93:a0:16:
         39:d5:59:06:20:7e:be:f9:3a:dc:ef:c9:49:08:1d:a1:51:57:
         e1:da:8c:b2:d2:cc:9f:f5:2f:5d:fb:dd:57:5d:28:8d:1d:1c:
         02:3b:36:f1:9b:94:0d:b7:c4:79:2a:b4:81:75:80:3a:a7:71:
         a9:77:ba:f1:05:10:57:44:43:6f:b4:a4:23:61:f3:c2:49:62:
         b4:2a:e6:cd:d5:8b:e0:e7:68:95:4e:43:80:78:af:55:18:9f:
         76:36:d2:a7:c4:32:44:a0:94:de:a8:7e:71:8e:5e:b8:c5:63:
         d9:e0:09:e8:32:25:30:90:8f:e0:d2:d6:ac:84:01:0f:7c:0c:
         81:a5:47:fd
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUBrndd5nHEHqpASLGj2H+y6Ho2pMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMDkyMDQ5MjJaFw0yNTEyMDgyMDU0MjJaMDMxMTAvBgNV
BAMTKDk3MkEyQTY2RDJDMUNFNzA3OUVEMTcwM0M1MTc1MTBCNjVBMEEzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk86zBYlqyR1FRCZ2Zso3Rlcp6
rAW3ECd07gRMuoE47d+lW9dagjXH74uFv9ZUx8iz7kD8nc4M4lx6sLdhUqHX5si6
W6tbT/+KmsFgTqI85g7flVe5p0e9EYsAha6WtUv9nNAOPcp9ElFArxjChl7odEBG
2kX4ghcoiXqJgoaMo03nAJ9dwqGGdOxubwUDmok4aI7CjX4zmM9drd9rA68O+jzt
+h2qvAo4uowLlKc/HKvS//BDLmdoLmUllR3/0DLbjZ83Bj+2LIe1VMXXxKzRfCih
uSLaA9P+lKCYBOfP5VZ3eeHxE7HabAf39ixmf+qWntWAeK9znqlqMxX/WU/DAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXKipm0sHOcHnt
FwPFF1ELZaCjfTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmVK
eGFZUXNiS2pUWTVIaHJnR2ZrNmNaelhXM1RkZU5NdU1VaFNBd3Z2cXgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zl
SnhhWVFzYktqVFk1SGhyZ0dmazZjWnpYVzNUZGVOTXVNVWhTQXd2dnF4LzAvOTcy
QTJBNjZEMkMxQ0U3MDc5RUQxNzAzQzUxNzUxMEI2NUEwQTM3RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb8EMA0EAgACMAcDBQAoBEDUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPADANBgkqhkiG9w0BAQsFAAOCAQEArX5sJG06U495XqrR
qk596e00UksaVCtfd9PjOTmUvWPk0dhz4vSevX/JdSmPWc6OEQ6m2gmZABGVlUuY
cV30uHdZkW8x8luRKVlHoS9gmr33GUdtH87BpRKR6U5DwV8nCyjJ/RNniVAb0nvQ
URvYICyCv6A7p656aLW6k6AWOdVZBiB+vvk63O/JSQgdoVFX4dqMstLMn/UvXfvd
V10ojR0cAjs28ZuUDbfEeSq0gXWAOqdxqXe68QUQV0RDb7SkI2HzwklitCrmzdWL
4OdolU5DgHivVRifdjbSp8QyRKCU3qh+cY5euMVj2eAJ6DIlMJCP4NLWrIQBD3wM
gaVH/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:01:41 2025 by rpki-client