Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
File:                     B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer (raw, json)
Hash identifier:          +X+fRZGo3NKPPhRMCZulSpz8GKZ4NnbstOVU/9oZiiM=
Subject key identifier:   B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39723EC722AEE3D3CB2968D4A9C4CF5ED29FEBD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:37:12 +0000
Certificate not after:    Fri 06 Mar 2026 14:42:12 +0000
Subordinate resources:    AS: 52758
                          IP: 177.38.184.0/21
                          IP: 201.131.240.0/21
                          IP: 2804:b38::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:72:3e:c7:22:ae:e3:d3:cb:29:68:d4:a9:c4:cf:5e:d2:9f:eb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:37:12 2025 GMT
            Not After : Mar  6 14:42:12 2026 GMT
        Subject: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:69:65:8b:fa:d1:cc:45:ca:9f:72:91:12:
                    c9:45:d8:26:fa:17:59:3c:76:0e:2b:18:78:ce:09:
                    39:bb:23:34:2f:4b:63:bd:32:7d:f9:87:6f:8c:90:
                    46:99:56:c2:38:50:e9:ce:28:d8:d0:17:79:f9:04:
                    bb:6b:b1:61:ed:b7:a0:7f:e0:a8:f1:ae:33:a8:c5:
                    e8:15:2f:a4:bc:39:3c:1e:e0:d0:7e:04:d9:42:86:
                    1a:f8:ee:3b:6e:93:1c:59:71:e7:64:f3:02:43:03:
                    44:11:f1:b5:39:89:23:70:51:cb:04:f7:7b:ef:fc:
                    d4:6c:99:23:dc:d4:3d:a7:d0:6f:67:34:62:ef:f4:
                    36:d4:c3:c3:f3:61:0b:a7:0c:18:98:0f:3f:3c:04:
                    7e:43:9a:c5:b2:96:c3:97:2e:36:0e:dd:36:65:6b:
                    04:7d:67:a0:db:47:2b:71:40:8f:5d:ad:f6:38:77:
                    c2:c4:36:02:a1:8f:66:20:f4:de:5b:ff:67:81:28:
                    bf:02:89:12:42:d7:21:74:d1:9b:b3:74:72:a6:21:
                    6c:de:1c:85:c7:57:7a:fc:95:85:7b:02:6f:f1:f3:
                    3d:82:b0:b3:d3:85:80:d2:35:08:f4:d9:a5:99:1d:
                    ac:b9:d1:fd:10:ba:7b:73:15:00:29:e6:b6:7d:1e:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.184.0/21
                  201.131.240.0/21
                IPv6:
                  2804:b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52758

    Signature Algorithm: sha256WithRSAEncryption
         24:99:83:e8:81:6f:fa:a2:fa:fb:7a:5c:77:a1:03:b9:bc:3e:
         d3:3b:cf:e5:ec:92:4f:61:d7:aa:ad:f3:ce:c8:e9:e5:7a:58:
         4a:31:61:17:7a:e2:d8:02:e2:dc:c1:8a:95:73:f1:11:dd:22:
         c0:a8:bf:97:9b:e7:c8:22:a5:40:dd:dc:51:bd:76:5f:c9:64:
         99:9b:51:49:73:80:11:8b:e9:b7:17:b9:d3:89:60:65:94:94:
         a9:a8:ab:92:9d:22:a2:9a:ac:73:0e:c1:9a:0d:35:ee:44:ed:
         dd:7f:df:b9:c5:05:90:bd:aa:a8:c2:b6:9d:a5:33:32:c9:34:
         68:db:3f:d9:d8:8e:2b:e5:2b:e1:9b:b7:71:42:9b:8c:32:c9:
         f0:69:72:42:d3:dc:7b:84:d2:77:51:ef:c9:7b:f8:06:3d:16:
         fb:65:ed:f6:5f:40:70:2f:1e:69:97:dd:42:db:9c:89:d8:cc:
         0a:90:db:be:1b:ea:1c:12:88:48:1b:8b:f5:c7:38:ab:05:ba:
         7d:fb:dd:b8:c8:4c:93:7f:d4:31:d2:06:92:9e:63:0f:33:89:
         a6:ea:4b:a9:f0:73:ab:19:75:24:fd:46:49:af:72:3c:8a:26:
         c4:9b:cb:5f:c6:b3:f0:47:34:06:60:a4:f6:f4:2c:7e:fc:61:
         ee:68:9a:3e
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUOXI+xyKu49PLKWjUqcTPXtKf69cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcxNDM3MTJaFw0yNjAzMDYxNDQyMTJaMDMxMTAvBgNV
BAMTKEIzRTQ1RkYzRkQyMUZCNzc1Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88Wlli/rRzEXKn3KREslF2Cb6
F1k8dg4rGHjOCTm7IzQvS2O9Mn35h2+MkEaZVsI4UOnOKNjQF3n5BLtrsWHtt6B/
4KjxrjOoxegVL6S8OTwe4NB+BNlChhr47jtukxxZcedk8wJDA0QR8bU5iSNwUcsE
93vv/NRsmSPc1D2n0G9nNGLv9DbUw8PzYQunDBiYDz88BH5DmsWylsOXLjYO3TZl
awR9Z6DbRytxQI9drfY4d8LENgKhj2Yg9N5b/2eBKL8CiRJC1yF00ZuzdHKmIWze
HIXHV3r8lYV7Am/x8z2CsLPThYDSNQj02aWZHay50f0QuntzFQAp5rZ9HmYPAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSz5F/z/SH7d191
Awt7JMAk43DG2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR25y
REU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1c2gvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0du
ckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEvQjNF
NDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRFMzcwQzZEQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQDsSa4AwQDyYPwMA0EAgACMAcDBQAoBAs4MBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDOFjANBgkqhkiG9w0BAQsFAAOCAQEAJJmD6IFv
+qL6+3pcd6EDubw+0zvP5eyST2HXqq3zzsjp5XpYSjFhF3ri2ALi3MGKlXPxEd0i
wKi/l5vnyCKlQN3cUb12X8lkmZtRSXOAEYvptxe504lgZZSUqairkp0iopqscw7B
mg017kTt3X/fucUFkL2qqMK2naUzMsk0aNs/2diOK+Ur4Zu3cUKbjDLJ8GlyQtPc
e4TSd1HvyXv4Bj0W+2Xt9l9AcC8eaZfdQtucidjMCpDbvhvqHBKISBuL9cc4qwW6
ffvduMhMk3/UMdIGkp5jDzOJpupLqfBzqxl1JP1GSa9yPIomxJvLX8az8Ec0BmCk
9vQsfvxh7miaPg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:04 2025 by rpki-client