Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
File:                     A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer (raw, json)
Hash identifier:          iHi4s3VluGhxiAa9Z9SdlSSmaASAYtwfrRqeHqttkj8=
Subject key identifier:   A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FAF17694890750D7250ECB32FC82A7419AA049E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:56:11 +0000
Certificate not after:    Fri 06 Mar 2026 03:01:11 +0000
Subordinate resources:    AS: 266341
                          IP: 170.239.60.0/22
                          IP: 2804:3650::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:af:17:69:48:90:75:0d:72:50:ec:b3:2f:c8:2a:74:19:aa:04:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:56:11 2025 GMT
            Not After : Mar  6 03:01:11 2026 GMT
        Subject: CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:2e:82:c8:3a:1d:e0:ee:fc:3b:8b:b1:02:
                    94:bc:3f:5d:56:ea:46:d8:53:c5:19:0d:f6:38:17:
                    33:ca:68:d6:63:cb:e8:19:73:ca:02:a0:42:f6:0a:
                    57:d8:36:8b:2f:ec:7e:13:8b:de:46:f5:62:ce:01:
                    e8:c0:09:bc:a2:95:db:f5:c0:92:10:44:25:f2:07:
                    ad:2a:20:61:bc:66:b5:eb:8b:28:ca:5b:f8:7b:f9:
                    b8:60:02:e2:7e:22:e8:7b:e4:8d:7e:04:f5:c5:39:
                    98:a5:2f:6f:89:a2:87:4b:52:b9:43:4d:46:b9:7b:
                    39:0b:7f:4b:d4:96:09:79:bc:38:b2:67:f6:60:c0:
                    3e:34:ba:bb:4d:05:f4:61:11:cd:a0:2a:ad:88:a7:
                    7e:70:e0:4e:37:79:1e:44:96:90:2c:bd:99:44:31:
                    d6:0d:46:7c:71:00:b7:d0:a5:f2:9c:cc:21:de:c3:
                    01:b2:86:6c:07:03:27:52:22:78:86:d4:d8:be:34:
                    52:4e:77:6c:23:90:05:ee:a8:b2:88:43:12:7c:5a:
                    3c:58:30:55:6f:bd:c3:44:79:de:49:63:b0:cb:83:
                    59:d1:d2:bf:ce:3c:75:5b:97:82:84:42:26:44:9a:
                    b7:63:2b:70:f9:7b:b4:7f:25:d1:76:93:a1:62:10:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.60.0/22
                IPv6:
                  2804:3650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266341

    Signature Algorithm: sha256WithRSAEncryption
         96:04:cd:31:e9:af:f8:1e:3e:bf:19:b6:c5:f6:6b:24:47:0b:
         ca:59:eb:1d:1a:45:cd:1f:ee:60:18:28:f2:08:cc:4e:15:90:
         e1:b8:3a:36:8b:23:07:d4:52:75:10:28:9e:08:19:48:17:f8:
         79:87:2a:a9:47:3c:c9:f2:5c:69:e1:2d:1e:d7:be:b5:7b:c2:
         6c:ba:cd:86:48:d3:fa:7e:8e:50:6d:85:fe:90:b7:52:26:ea:
         ef:85:e3:a4:eb:6c:b8:61:27:76:1d:84:31:91:72:5f:35:fc:
         87:c7:08:7d:35:d8:c6:69:a7:6b:d1:65:1f:52:24:bf:f4:d2:
         b4:e6:f1:08:02:b8:42:2e:9d:78:64:62:3e:1c:ee:0e:4d:80:
         20:dc:ec:db:71:8a:93:87:1b:99:4f:bc:2d:75:e7:3b:3d:03:
         7d:1a:75:86:70:60:d4:0f:c0:e1:68:07:c4:6b:12:cb:cb:55:
         f4:1d:94:ac:29:d8:7f:64:2a:4a:11:eb:55:7f:c9:ed:67:14:
         2e:f8:1c:3e:a2:0a:f3:48:ef:e5:ac:fd:73:28:cd:c5:2a:fc:
         4c:49:d3:18:f8:69:c4:2a:4f:dd:73:40:fa:1f:a1:66:a4:cd:
         76:9b:59:2e:3a:a3:9f:65:34:ef:c4:df:3b:96:ca:03:e2:b3:
         ec:e9:cd:58
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUP68XaUiQdQ1yUOyzL8gqdBmqBJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwMjU2MTFaFw0yNjAzMDYwMzAxMTFaMDMxMTAvBgNV
BAMTKEE1RTZDNDA5ODUzQzREQkM1MDhENEUxMjRGMDNCMUVBMjcxMEEwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEji6CyDod4O78O4uxApS8P11W
6kbYU8UZDfY4FzPKaNZjy+gZc8oCoEL2ClfYNosv7H4Ti95G9WLOAejACbyildv1
wJIQRCXyB60qIGG8ZrXriyjKW/h7+bhgAuJ+Iuh75I1+BPXFOZilL2+JoodLUrlD
TUa5ezkLf0vUlgl5vDiyZ/ZgwD40urtNBfRhEc2gKq2Ip35w4E43eR5ElpAsvZlE
MdYNRnxxALfQpfKczCHewwGyhmwHAydSIniG1Ni+NFJOd2wjkAXuqLKIQxJ8WjxY
MFVvvcNEed5JY7DLg1nR0r/OPHVbl4KEQiZEmrdjK3D5e7R/JdF2k6FiEK9hAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSl5sQJhTxNvFCN
ThJPA7HqJxCgpjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWpD
amJKemR4eGlUNjMySG84ZzdlVlozWnh0UVJQRDRpcWZYb2txTXJvb2gvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWpD
amJKemR4eGlUNjMySG84ZzdlVlozWnh0UVJQRDRpcWZYb2txTXJvb2gvMS9BNUU2
QzQwOTg1M0M0REJDNTA4RDRFMTI0RjAzQjFFQTI3MTBBMEE2Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKq7zwwDQQCAAIwBwMFACgENlAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBBlMA0GCSqGSIb3DQEBCwUAA4IBAQCWBM0x6a/4Hj6/GbbF
9mskRwvKWesdGkXNH+5gGCjyCMxOFZDhuDo2iyMH1FJ1ECieCBlIF/h5hyqpRzzJ
8lxp4S0e1761e8Jsus2GSNP6fo5QbYX+kLdSJurvheOk62y4YSd2HYQxkXJfNfyH
xwh9NdjGaadr0WUfUiS/9NK05vEIArhCLp14ZGI+HO4OTYAg3OzbcYqThxuZT7wt
dec7PQN9GnWGcGDUD8DhaAfEaxLLy1X0HZSsKdh/ZCpKEetVf8ntZxQu+Bw+ogrz
SO/lrP1zKM3FKvxMSdMY+GnEKk/dc0D6H6FmpM12m1kuOqOfZTTvxN87lsoD4rPs
6c1Y
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:11 2025 by rpki-client