Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
File:                     A99D272225729B303C95F28914878741C6AE29BE.cer (raw, json)
Hash identifier:          d7uC2UGEKFJkX1NtNmPXZoHv5RnuAeSd8fpAYpSfgJY=
Subject key identifier:   A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66391C4A7451123ACBFDA026B24710814ECF1011
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 18:51:07 +0000
Certificate not after:    Wed 25 Mar 2026 18:56:07 +0000
Subordinate resources:    AS: 28204
                          IP: 189.91.48.0/20
                          IP: 2804:414c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:39:1c:4a:74:51:12:3a:cb:fd:a0:26:b2:47:10:81:4e:cf:10:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 18:51:07 2025 GMT
            Not After : Mar 25 18:56:07 2026 GMT
        Subject: CN=A99D272225729B303C95F28914878741C6AE29BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:07:07:22:86:9c:0e:04:b1:4f:ad:bb:1d:
                    57:6a:2e:8a:3a:1b:f8:e4:85:31:91:f7:7a:0e:37:
                    87:a5:c1:51:a4:20:09:d4:11:c9:b9:c1:e8:c7:b4:
                    fe:80:1f:13:b2:d7:cd:ff:7c:82:9d:3e:9e:a3:e2:
                    9b:f9:6c:e1:ad:74:1b:27:6e:52:49:65:76:de:4b:
                    29:ba:0e:88:9a:6a:2e:7a:59:3f:56:89:90:a5:2a:
                    61:4a:62:06:ec:ad:a9:01:e5:97:70:ad:fc:b3:66:
                    ac:a4:bc:d1:bc:38:79:29:b4:7b:eb:9a:9e:2e:bb:
                    50:8c:b0:c1:f4:6c:37:0a:bd:72:ba:82:59:b1:35:
                    13:ee:0b:b3:16:41:c3:3d:4c:d2:cb:66:c7:ec:99:
                    95:aa:a8:0e:16:5e:06:e4:c4:fb:10:f5:da:16:d0:
                    0b:6f:cd:b1:a4:0b:27:c9:f0:a8:1e:2a:82:2a:c8:
                    11:0d:03:c3:59:bd:c5:10:9d:18:2f:71:59:ba:4a:
                    a6:9a:92:30:3b:0b:58:b2:4b:6b:73:5c:a0:94:76:
                    cf:23:45:bb:db:05:5d:4b:b7:cb:f4:1a:77:98:c0:
                    d9:2b:28:33:9e:73:4c:78:87:a6:3a:4e:dd:57:f5:
                    12:54:f5:25:1c:e4:d5:1d:b6:04:82:4f:2b:29:c5:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.48.0/20
                IPv6:
                  2804:414c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28204

    Signature Algorithm: sha256WithRSAEncryption
         7a:be:0f:59:27:0a:71:36:22:8b:08:a2:c4:4f:09:81:5b:9f:
         90:dd:7a:30:1d:44:24:5c:1f:e2:4a:e9:26:bb:17:c4:c0:fb:
         b3:eb:1d:39:e4:a6:5d:50:a2:13:5c:f6:50:d8:69:bb:9f:28:
         19:de:9c:ad:4c:24:22:58:d0:38:85:4c:f1:88:af:79:50:78:
         6c:38:44:b3:ab:47:c7:23:81:95:e9:ba:1c:13:d7:53:fb:ee:
         bf:5c:83:c3:47:69:3b:2e:fe:60:6c:3f:99:cc:4f:9c:42:9c:
         34:c1:1d:50:ac:9c:18:a9:66:d1:da:9e:87:bf:a6:28:b2:18:
         42:b5:a4:6f:7e:31:7b:9b:de:46:1c:ed:96:2f:73:9e:9d:25:
         f4:1d:21:a0:8f:df:1d:62:9e:dd:b8:6e:e8:a9:bc:b6:54:f7:
         c1:e3:4f:1f:c8:fa:0f:7c:43:a9:0f:86:c2:0f:2d:3c:76:57:
         ed:c2:fa:6b:bb:1f:e2:8b:e3:53:55:e2:81:6a:16:bc:76:1f:
         bd:09:01:43:99:2a:41:70:95:14:63:5b:96:a4:cb:e2:69:02:
         27:4b:97:a2:06:be:f0:41:02:e0:45:c0:b4:30:94:6e:cb:fa:
         f9:f7:12:cd:79:19:a1:a0:b8:50:4e:ab:0c:d1:7d:91:d5:46:
         72:e3:5a:75
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUZjkcSnRREjrL/aAmskcQgU7PEBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjYxODUxMDdaFw0yNjAzMjUxODU2MDdaMDMxMTAvBgNV
BAMTKEE5OUQyNzIyMjU3MjlCMzAzQzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85QcHIoacDgSxT627HVdqLoo6
G/jkhTGR93oON4elwVGkIAnUEcm5wejHtP6AHxOy183/fIKdPp6j4pv5bOGtdBsn
blJJZXbeSym6Doiaai56WT9WiZClKmFKYgbsrakB5ZdwrfyzZqykvNG8OHkptHvr
mp4uu1CMsMH0bDcKvXK6glmxNRPuC7MWQcM9TNLLZsfsmZWqqA4WXgbkxPsQ9doW
0AtvzbGkCyfJ8KgeKoIqyBENA8NZvcUQnRgvcVm6SqaakjA7C1iyS2tzXKCUds8j
RbvbBV1Lt8v0GneYwNkrKDOec0x4h6Y6Tt1X9RJU9SUc5NUdtgSCTyspxXWTAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpnSciJXKbMDyV
8okUh4dBxq4pvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnRD
a2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0
Q2tod3lUTkh3TEIxWUxuaU1mTU44dFJhazZUUUxZM2t0NkpwV0RQTUZoLzAvQTk5
RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFDNkFFMjlCRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEvVswMA0EAgACMAcDBQAoBEFMMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAm4sMA0GCSqGSIb3DQEBCwUAA4IBAQB6vg9ZJwpxNiKLCKLE
TwmBW5+Q3XowHUQkXB/iSukmuxfEwPuz6x055KZdUKITXPZQ2Gm7nygZ3pytTCQi
WNA4hUzxiK95UHhsOESzq0fHI4GV6bocE9dT++6/XIPDR2k7Lv5gbD+ZzE+cQpw0
wR1QrJwYqWbR2p6Hv6YoshhCtaRvfjF7m95GHO2WL3OenSX0HSGgj98dYp7duG7o
qby2VPfB408fyPoPfEOpD4bCDy08dlftwvprux/ii+NTVeKBaha8dh+9CQFDmSpB
cJUUY1uWpMviaQInS5eiBr7wQQLgRcC0MJRuy/r59xLNeRmhoLhQTqsM0X2R1UZy
41p1
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:35 2025 by rpki-client