Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
File:                     9954871A58BD1D563C66245B157E43881A74A8D7.cer (raw, json)
Hash identifier:          LACgrt4DHOSLNtq6udFerKEoFySDJ+fBI7hfrcQp7Gc=
Subject key identifier:   99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57388948EB3E619910A5687796C414A141324832
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:20:34 +0000
Certificate not after:    Thu 05 Mar 2026 22:25:34 +0000
Subordinate resources:    AS: 61856
                          IP: 131.0.40.0/22
                          IP: 138.117.208.0/22
                          IP: 143.208.120.0/22
                          IP: 170.245.252.0/22
                          IP: 2804:1a5c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:38:89:48:eb:3e:61:99:10:a5:68:77:96:c4:14:a1:41:32:48:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 22:20:34 2025 GMT
            Not After : Mar  5 22:25:34 2026 GMT
        Subject: CN=9954871A58BD1D563C66245B157E43881A74A8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:d5:ae:ba:79:40:87:d6:9f:0d:59:c3:b8:
                    0c:d5:f5:bc:7d:2c:c5:47:a6:58:a1:ec:49:10:df:
                    38:6d:0b:cb:94:f6:47:64:c1:58:e3:91:76:98:a5:
                    92:6f:06:7c:b5:fc:c1:49:b1:b3:44:57:66:ee:71:
                    5a:b6:89:09:04:a0:12:11:28:9a:ec:ce:94:21:31:
                    f8:9a:50:e7:3f:d7:96:14:87:50:31:13:bc:ca:7d:
                    9a:0d:10:32:8c:5c:1c:d2:16:70:57:a4:86:74:7f:
                    3c:a3:42:90:d2:49:c4:e9:8d:8d:7b:40:8d:71:8b:
                    f0:6e:16:a2:9f:67:cd:3c:9e:e6:17:0d:fd:37:b3:
                    a4:e4:c3:2c:4f:87:a8:b9:98:6c:a3:63:88:5c:d5:
                    f0:45:13:f0:af:56:d5:73:cb:92:73:c4:ca:cd:44:
                    e5:04:63:b3:f0:cd:03:ac:b0:3c:33:e1:b3:8f:25:
                    3e:13:36:1d:9b:04:ee:16:0a:c4:b1:82:8b:65:6d:
                    19:fb:dc:4b:9f:02:8f:53:51:d3:1b:56:07:18:7b:
                    c8:2a:e1:7e:07:a8:df:e8:20:09:2f:ad:b0:e8:f9:
                    26:cc:27:ca:82:f8:92:36:11:f7:db:e8:9f:ed:41:
                    6f:b2:e1:4a:87:5f:18:bb:7b:12:a3:7f:13:29:f8:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.40.0/22
                  138.117.208.0/22
                  143.208.120.0/22
                  170.245.252.0/22
                IPv6:
                  2804:1a5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61856

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:c9:15:b2:85:74:5e:71:99:9e:5e:c9:07:f4:9a:1b:9b:
         da:e7:f5:ab:21:ca:c7:6e:64:22:4d:27:15:e8:08:ea:48:8e:
         c8:ee:2f:4c:fd:6c:69:aa:72:b4:03:65:5f:1d:cc:a8:a7:ca:
         8f:5e:16:40:14:ea:7f:29:14:bd:ad:9a:33:1a:38:68:bb:5a:
         9e:f3:f3:93:b7:1b:e4:2b:3d:7a:7d:d2:f0:08:7a:18:e3:df:
         fb:a2:2f:90:5c:b2:2f:ff:3f:96:1b:bf:39:35:1f:24:76:e1:
         66:58:b2:03:38:d1:9d:43:61:6c:c1:1d:5b:87:7d:c5:09:07:
         aa:41:4e:f9:ec:ba:7f:5b:92:a6:be:81:05:96:02:fa:db:fb:
         08:97:75:49:7f:89:36:44:ee:8d:8c:82:a1:7e:f8:df:c5:3a:
         bb:70:f5:0b:aa:15:f7:c1:be:5f:4a:11:1b:fe:fe:88:f2:fd:
         42:18:3b:63:02:8d:9e:de:aa:e7:d6:6d:1e:5f:fe:35:42:df:
         93:b4:f6:47:63:eb:1a:d3:85:4a:1d:3e:84:5d:3d:63:11:a8:
         86:75:78:c8:fa:3d:30:5c:6a:64:a7:aa:37:da:da:42:9f:b4:
         39:b7:ca:54:a9:c2:33:4e:e1:7d:3b:de:24:82:28:38:4e:63:
         b7:7a:4d:1a
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIUVziJSOs+YZkQpWh3lsQUoUEySDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMjIwMzRaFw0yNjAzMDUyMjI1MzRaMDMxMTAvBgNV
BAMTKDk5NTQ4NzFBNThCRDFENTYzQzY2MjQ1QjE1N0U0Mzg4MUE3NEE4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11tWuunlAh9afDVnDuAzV9bx9
LMVHplih7EkQ3zhtC8uU9kdkwVjjkXaYpZJvBny1/MFJsbNEV2bucVq2iQkEoBIR
KJrszpQhMfiaUOc/15YUh1AxE7zKfZoNEDKMXBzSFnBXpIZ0fzyjQpDSScTpjY17
QI1xi/BuFqKfZ808nuYXDf03s6TkwyxPh6i5mGyjY4hc1fBFE/CvVtVzy5JzxMrN
ROUEY7PwzQOssDwz4bOPJT4TNh2bBO4WCsSxgotlbRn73EufAo9TUdMbVgcYe8gq
4X4HqN/oIAkvrbDo+SbMJ8qC+JI2Effb6J/tQW+y4UqHXxi7exKjfxMp+B3TAgMB
AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZVIcaWL0dVjxm
JFsVfkOIGnSo1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXNq
N2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1a3EvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXNq
N2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1a3EvMS85OTU0
ODcxQTU4QkQxRDU2M0M2NjI0NUIxNTdFNDM4ODFBNzRBOEQ3Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB
Af8EMTAvMB4EAgABMBgDBAKDACgDBAKKddADBAKP0HgDBAKq9fwwDQQCAAIwBwMF
ACgEGlwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPGgMA0GCSqGSIb3DQEBCwUA
A4IBAQCJT8kVsoV0XnGZnl7JB/SaG5va5/WrIcrHbmQiTScV6AjqSI7I7i9M/Wxp
qnK0A2VfHcyop8qPXhZAFOp/KRS9rZozGjhou1qe8/OTtxvkKz16fdLwCHoY49/7
oi+QXLIv/z+WG785NR8kduFmWLIDONGdQ2FswR1bh33FCQeqQU757Lp/W5KmvoEF
lgL62/sIl3VJf4k2RO6NjIKhfvjfxTq7cPULqhX3wb5fShEb/v6I8v1CGDtjAo2e
3qrn1m0eX/41Qt+TtPZHY+sa04VKHT6EXT1jEaiGdXjI+j0wXGpkp6o32tpCn7Q5
t8pUqcIzTuF9O94kgig4TmO3ek0a
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:49 2025 by rpki-client