Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.cer
File:                     A82DD96719E370BD78BE6F421B9E292F589B4A4D.cer (raw, json)
Hash identifier:          K2fG8efj6X++975psHGLAh5kNyzpFALgArJnfs/PlWQ=
Subject key identifier:   A8:2D:D9:67:19:E3:70:BD:78:BE:6F:42:1B:9E:29:2F:58:9B:4A:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79DEC3F24E44A01FB84F5E9E57552AC24D5B006C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 19:43:20 +0000
Certificate not after:    Fri 06 Mar 2026 19:48:20 +0000
Subordinate resources:    AS: 268154
                          IP: 45.170.120.0/22
                          IP: 2804:58dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:de:c3:f2:4e:44:a0:1f:b8:4f:5e:9e:57:55:2a:c2:4d:5b:00:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 19:43:20 2025 GMT
            Not After : Mar  6 19:48:20 2026 GMT
        Subject: CN=A82DD96719E370BD78BE6F421B9E292F589B4A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:62:b0:ce:11:7c:d7:a5:44:0a:57:1a:1f:
                    98:fa:dc:69:8b:02:70:86:2f:9e:70:2d:07:25:e4:
                    99:67:d7:06:99:d3:11:f2:ae:d2:8b:2f:84:86:80:
                    22:43:56:ce:b9:4d:1b:07:e6:40:ad:23:b4:a9:19:
                    79:fa:76:03:d9:a1:5a:12:09:90:d5:42:aa:10:9d:
                    7a:9b:0c:e0:9f:ff:43:14:bd:d3:e6:a9:da:85:cd:
                    1b:ae:58:43:11:59:9a:38:52:85:26:69:d7:4e:26:
                    7c:e6:65:17:95:45:61:40:3a:93:c1:d9:1b:2d:de:
                    d9:7b:88:40:74:1e:1c:94:fd:2f:c4:9d:cd:ed:cc:
                    96:d1:d2:fe:6b:0a:77:03:56:64:c2:12:53:60:0b:
                    d8:68:71:95:30:1c:ca:bf:73:85:60:16:a2:f6:9d:
                    5d:d8:1f:83:68:95:ef:39:0b:ad:9a:2c:8f:46:c4:
                    64:e5:b8:ac:71:25:d1:b5:cd:ff:7e:eb:9a:47:fa:
                    23:02:94:78:fa:88:6f:2b:95:40:10:f1:27:4f:66:
                    1b:13:f0:8e:e5:a0:1f:38:88:da:8f:f5:a5:41:57:
                    c7:f2:7b:39:9a:78:16:0a:27:3d:b0:aa:df:a6:56:
                    22:88:88:bf:41:dd:45:c8:da:49:7d:61:ea:32:03:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:2D:D9:67:19:E3:70:BD:78:BE:6F:42:1B:9E:29:2F:58:9B:4A:4D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.120.0/22
                IPv6:
                  2804:58dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268154

    Signature Algorithm: sha256WithRSAEncryption
         2f:db:06:a1:61:c1:3f:d0:11:c5:8f:d1:0b:18:41:42:f7:94:
         86:b5:21:1d:f9:ad:ba:13:c3:ad:be:08:46:6c:e2:6d:2a:4c:
         99:3d:2c:39:36:67:55:0b:8a:93:b3:36:d8:65:b3:d1:b4:96:
         0f:93:6b:52:31:46:43:bc:d6:5b:07:92:04:b2:b0:dc:70:4d:
         7c:96:85:20:02:e6:73:19:73:dc:72:6f:70:63:64:fb:9b:67:
         31:17:c2:d2:20:c9:ac:52:5a:62:e3:b6:e0:54:76:10:66:01:
         3e:57:3f:23:9b:9d:eb:81:f8:ea:29:b7:e2:9d:79:5f:b1:39:
         97:b4:e0:5b:0e:fa:fd:d6:b6:12:0b:aa:0b:0e:ce:7c:2f:8b:
         27:58:4c:43:04:c3:65:75:69:fe:f4:93:4e:ad:71:51:58:d5:
         2b:61:f5:5f:a1:f3:22:4c:1a:12:7e:4d:08:ec:af:83:6d:89:
         f8:65:db:05:f8:ee:5b:03:3c:e5:17:25:47:1c:56:34:6e:0f:
         35:9e:2b:ab:31:7b:ed:f2:25:bb:3b:41:3a:34:f7:05:22:a6:
         56:9c:5a:44:2b:25:f5:24:dc:7e:9a:f9:e1:36:7d:b1:1b:0f:
         61:e0:e5:13:da:e0:4f:5b:25:bf:3b:e5:71:4c:f6:12:46:9c:
         da:40:7f:37
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUed7D8k5EoB+4T16eV1Uqwk1bAGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcxOTQzMjBaFw0yNjAzMDYxOTQ4MjBaMDMxMTAvBgNV
BAMTKEE4MkREOTY3MTlFMzcwQkQ3OEJFNkY0MjFCOUUyOTJGNTg5QjRBNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjmKwzhF816VEClcaH5j63GmL
AnCGL55wLQcl5Jln1waZ0xHyrtKLL4SGgCJDVs65TRsH5kCtI7SpGXn6dgPZoVoS
CZDVQqoQnXqbDOCf/0MUvdPmqdqFzRuuWEMRWZo4UoUmaddOJnzmZReVRWFAOpPB
2Rst3tl7iEB0HhyU/S/Enc3tzJbR0v5rCncDVmTCElNgC9hocZUwHMq/c4VgFqL2
nV3YH4Nole85C62aLI9GxGTluKxxJdG1zf9+65pH+iMClHj6iG8rlUAQ8SdPZhsT
8I7loB84iNqP9aVBV8fyezmaeBYKJz2wqt+mViKIiL9B3UXI2kl9YeoyA1crAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoLdlnGeNwvXi+
b0IbnikvWJtKTTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjRV
M0IxZFdEam9vMmE4U21zNGl5ODFkUVZqZ3YzNThVSGJBeVhlWVh6cWgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0I0
VTNCMWRXRGpvbzJhOFNtczRpeTgxZFFWamd2MzU4VUhiQXlYZVlYenFoLzEvQTgy
REQ5NjcxOUUzNzBCRDc4QkU2RjQyMUI5RTI5MkY1ODlCNEE0RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLap4MA0EAgACMAcDBQAoBFjcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXejANBgkqhkiG9w0BAQsFAAOCAQEAL9sGoWHBP9ARxY/R
CxhBQveUhrUhHfmtuhPDrb4IRmzibSpMmT0sOTZnVQuKk7M22GWz0bSWD5NrUjFG
Q7zWWweSBLKw3HBNfJaFIALmcxlz3HJvcGNk+5tnMRfC0iDJrFJaYuO24FR2EGYB
Plc/I5ud64H46im34p15X7E5l7TgWw76/da2EguqCw7OfC+LJ1hMQwTDZXVp/vST
Tq1xUVjVK2H1X6HzIkwaEn5NCOyvg22J+GXbBfjuWwM85RclRxxWNG4PNZ4rqzF7
7fIluztBOjT3BSKmVpxaRCsl9STcfpr54TZ9sRsPYeDlE9rgT1slvzvlcUz2Ekac
2kB/Nw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:51 2025 by rpki-client