Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9EFC57BCB21F18564776236AED122597B797EEB5.cer
File:                     9EFC57BCB21F18564776236AED122597B797EEB5.cer (raw, json)
Hash identifier:          08kAhbPzbKHqTkZrwolzPdjMJNGB0CCcewpH7XtdQOg=
Subject key identifier:   9E:FC:57:BC:B2:1F:18:56:47:76:23:6A:ED:12:25:97:B7:97:EE:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       409049F6C7D46AC2445A80EA5EA56C657A2430F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/3/9EFC57BCB21F18564776236AED122597B797EEB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jan 2025 14:14:54 +0000
Certificate not after:    Fri 02 Jan 2026 14:19:54 +0000
Subordinate resources:    AS: 263142
                          IP: 177.93.80.0/21
                          IP: 2804:1760::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:90:49:f6:c7:d4:6a:c2:44:5a:80:ea:5e:a5:6c:65:7a:24:30:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  3 14:14:54 2025 GMT
            Not After : Jan  2 14:19:54 2026 GMT
        Subject: CN=9EFC57BCB21F18564776236AED122597B797EEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:ce:aa:84:f0:24:b3:3a:44:2c:70:79:e1:
                    1e:f8:41:ad:b1:39:fe:df:80:96:8d:57:d4:67:9c:
                    c7:78:ed:85:dc:6e:ed:99:ed:25:fc:6f:17:71:77:
                    7b:21:cf:cb:88:e0:fb:5e:e5:14:7c:33:21:e7:65:
                    e0:b8:5b:24:b1:08:05:57:e6:77:fb:6f:63:9a:da:
                    97:44:f3:8d:3d:4a:06:e4:b3:e4:e9:dc:76:c1:45:
                    54:10:8c:02:28:9f:c7:0a:6f:25:35:2d:46:1b:c5:
                    67:ab:02:d4:c3:e7:1b:35:ee:d2:49:4b:53:97:b6:
                    66:bd:86:00:30:e3:f7:1c:49:f3:e5:49:85:da:a8:
                    3a:58:eb:c1:14:f0:64:41:7f:55:27:30:75:bd:82:
                    5e:e4:0d:3e:c9:5b:5e:52:4b:34:ac:e1:39:ab:99:
                    4f:b3:90:cf:4f:14:08:c3:e5:65:cc:06:2f:62:cc:
                    86:27:04:8e:21:b4:45:bd:24:64:93:93:9d:7f:03:
                    66:6f:76:ec:86:2b:7a:9c:1f:1d:a8:58:c7:4f:63:
                    13:fb:4c:98:ce:b0:b0:18:a4:3e:4a:ba:ec:21:0f:
                    b1:04:4a:db:99:8d:5b:e4:e3:93:61:cb:89:71:61:
                    9b:b0:04:03:fd:2a:5a:94:6d:cd:8b:a5:df:76:51:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:FC:57:BC:B2:1F:18:56:47:76:23:6A:ED:12:25:97:B7:97:EE:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/3/9EFC57BCB21F18564776236AED122597B797EEB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21
                IPv6:
                  2804:1760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263142

    Signature Algorithm: sha256WithRSAEncryption
         85:0a:de:17:e2:bb:39:a1:2b:aa:25:d8:9b:2a:a0:94:90:fe:
         90:46:bb:f0:56:fb:0b:72:52:cd:0c:1b:a2:26:af:21:61:0e:
         55:d8:b2:01:af:b1:b6:82:09:bf:72:15:5a:aa:c7:d4:b4:4c:
         ac:8f:dd:e9:c0:f3:9b:55:f0:c7:2e:19:ba:50:cd:ce:96:0e:
         0b:ed:50:fa:2c:7e:d3:aa:98:76:02:2d:c1:c5:01:c4:5f:48:
         e9:20:bd:9a:ab:58:8d:34:a2:ee:79:87:4c:36:5e:05:b5:69:
         29:3f:e8:bb:36:fc:35:88:b5:9b:e9:37:3d:7a:83:cd:90:58:
         71:57:35:a3:96:be:fa:d7:64:7d:bd:21:3a:1d:1a:5c:b9:73:
         2a:fc:97:d1:8c:bb:be:75:59:74:cd:99:03:ba:26:a9:85:a5:
         2b:17:45:0c:34:29:bf:95:f1:fe:7f:53:c7:55:98:78:a2:81:
         bd:57:e3:6b:84:b8:fd:76:75:05:94:ea:e1:e7:3f:b2:18:72:
         42:14:c9:ef:81:0d:66:3f:69:b0:84:39:54:71:66:b8:e3:87:
         12:45:3c:1f:83:8f:90:51:36:42:18:fe:a3:35:bd:3f:a7:9c:
         b9:88:dc:f3:47:db:5e:b9:1a:f4:20:91:24:65:e8:64:8a:77:
         80:91:7e:f3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQJBJ9sfUasJEWoDqXqVsZXokMPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMDMxNDE0NTRaFw0yNjAxMDIxNDE5NTRaMDMxMTAvBgNV
BAMTKDlFRkM1N0JDQjIxRjE4NTY0Nzc2MjM2QUVEMTIyNTk3Qjc5N0VFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCc6qhPAkszpELHB54R74Qa2x
Of7fgJaNV9RnnMd47YXcbu2Z7SX8bxdxd3shz8uI4Pte5RR8MyHnZeC4WySxCAVX
5nf7b2Oa2pdE8409Sgbks+Tp3HbBRVQQjAIon8cKbyU1LUYbxWerAtTD5xs17tJJ
S1OXtma9hgAw4/ccSfPlSYXaqDpY68EU8GRBf1UnMHW9gl7kDT7JW15SSzSs4Tmr
mU+zkM9PFAjD5WXMBi9izIYnBI4htEW9JGSTk51/A2ZvduyGK3qcHx2oWMdPYxP7
TJjOsLAYpD5KuuwhD7EEStuZjVvk45Nhy4lxYZuwBAP9KlqUbc2Lpd92UZqrAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSe/Fe8sh8YVkd2
I2rtEiWXt5futTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFlT
UUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4c1kvMy8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhZ
U1FKQ1lKdmtLUXFQckJmZnhEd3FCR2VaOGlaTEh2eTdtOGlUNlFKeHNZLzMvOUVG
QzU3QkNCMjFGMTg1NjQ3NzYyMzZBRUQxMjI1OTdCNzk3RUVCNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsV1QMA0EAgACMAcDBQAoBBdgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQD5jANBgkqhkiG9w0BAQsFAAOCAQEAhQreF+K7OaErqiXY
myqglJD+kEa78Fb7C3JSzQwboiavIWEOVdiyAa+xtoIJv3IVWqrH1LRMrI/d6cDz
m1Xwxy4ZulDNzpYOC+1Q+ix+06qYdgItwcUBxF9I6SC9mqtYjTSi7nmHTDZeBbVp
KT/ouzb8NYi1m+k3PXqDzZBYcVc1o5a++tdkfb0hOh0aXLlzKvyX0Yy7vnVZdM2Z
A7omqYWlKxdFDDQpv5Xx/n9Tx1WYeKKBvVfja4S4/XZ1BZTq4ec/shhyQhTJ74EN
Zj9psIQ5VHFmuOOHEkU8H4OPkFE2Qhj+ozW9P6ecuYjc80fbXrka9CCRJGXoZIp3
gJF+8w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:34 2025 by rpki-client