Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
File:                     BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer (raw, json)
Hash identifier:          yFXW/R3nHbfSzjw5vBiuhM69TcGceOaGwRLfKZgGl0k=
Subject key identifier:   BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       64EF85AFB8E0B11841EF1C6ABF4CBE58CD1595C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:25 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:25 +0000
Subordinate resources:    AS: 271330
                          IP: 207.248.4.0/22
                          IP: 2804:79d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ef:85:af:b8:e0:b1:18:41:ef:1c:6a:bf:4c:be:58:cd:15:95:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:25 2025 GMT
            Not After : Mar  4 18:40:25 2026 GMT
        Subject: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:43:d0:ef:fd:b2:2c:fd:55:7e:87:17:94:
                    e3:17:20:a6:3e:93:e6:f6:40:59:6d:33:a4:73:02:
                    76:e5:7f:f7:4b:d7:4d:81:cb:bf:e0:dc:0e:d4:6f:
                    99:62:ac:80:15:d3:3a:cc:85:62:f6:82:1d:a7:6e:
                    fd:1f:41:1a:3b:9f:07:ee:e8:92:2d:ea:5f:8e:d1:
                    e0:27:4a:7d:8c:a4:db:d6:81:41:76:28:40:1b:8f:
                    6e:33:8c:87:de:69:3a:46:01:a2:e6:c7:ea:da:95:
                    ee:4a:34:a7:6b:b5:c9:e6:88:68:a7:df:da:fe:d0:
                    b6:33:80:39:c9:68:91:f2:71:a1:99:de:d8:d1:57:
                    e7:76:b0:52:de:27:c0:b0:24:ea:03:72:0c:20:4f:
                    9a:e2:4c:30:b0:62:d1:01:41:18:a4:4b:c6:e0:54:
                    77:29:b5:81:81:1a:21:d6:e8:1a:e3:69:04:6e:1b:
                    d1:7e:60:5b:54:7b:81:0b:88:ef:5b:b7:96:49:b8:
                    8e:bf:74:92:b3:5f:51:0a:cf:c7:ff:1f:9b:9d:f0:
                    d0:d8:eb:44:16:f6:57:0b:e0:83:25:26:e2:eb:0c:
                    05:95:ff:5b:54:bb:07:74:36:fd:e7:89:81:ca:9f:
                    bb:c8:96:0a:52:6e:f1:f3:30:c7:5c:dc:93:db:be:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.4.0/22
                IPv6:
                  2804:79d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271330

    Signature Algorithm: sha256WithRSAEncryption
         bc:5c:b1:a8:e2:ca:4a:5f:ae:c3:88:98:36:15:f9:ea:0a:05:
         0e:49:6c:d2:28:b1:12:a7:7f:71:70:83:fb:a6:52:75:b6:65:
         04:cb:06:4d:5a:ec:f6:d9:0c:09:58:b3:a9:80:3c:34:39:fa:
         3f:95:82:21:5e:65:50:71:fd:f7:2e:90:40:21:f0:ba:25:70:
         94:73:74:3d:2f:33:6b:20:8d:99:3c:e5:31:88:93:15:0e:6b:
         b3:4b:c7:80:c8:ce:e7:65:85:06:83:22:60:b0:7e:65:c7:51:
         fa:4c:ec:a3:02:76:c9:31:8c:86:74:60:04:da:0a:08:52:6b:
         73:ad:14:70:09:5c:62:6c:14:22:ca:a4:2e:78:69:a8:59:e1:
         32:dd:04:db:d4:5d:b5:1d:b1:2f:c5:6a:ba:a5:b9:a8:8a:06:
         b8:2d:25:e1:d1:ff:34:18:f4:5d:8a:2b:8a:a2:92:ea:3d:78:
         de:04:b8:a1:2c:23:05:3c:98:4c:c3:29:50:ff:f6:0c:e4:d7:
         10:3d:60:01:8d:62:b0:af:13:19:12:c4:97:00:93:9d:64:54:
         1d:6f:88:06:20:0e:86:72:17:80:e2:82:ed:5d:ef:51:6b:c0:
         66:90:33:8b:19:99:de:33:34:8e:1c:d7:ce:f8:51:f2:0e:25:
         9d:ac:4d:f5
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUZO+Fr7jgsRhB7xxqv0y+WM0VlckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM1MjVaFw0yNjAzMDQxODQwMjVaMDMxMTAvBgNV
BAMTKEJCMEExRUVGRDY3RjM2QjdEN0Y2MEE2NDMxQzcyQzgxMzgwMjA2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4A0PQ7/2yLP1VfocXlOMXIKY+
k+b2QFltM6RzAnblf/dL102By7/g3A7Ub5lirIAV0zrMhWL2gh2nbv0fQRo7nwfu
6JIt6l+O0eAnSn2MpNvWgUF2KEAbj24zjIfeaTpGAaLmx+rale5KNKdrtcnmiGin
39r+0LYzgDnJaJHycaGZ3tjRV+d2sFLeJ8CwJOoDcgwgT5riTDCwYtEBQRikS8bg
VHcptYGBGiHW6BrjaQRuG9F+YFtUe4ELiO9bt5ZJuI6/dJKzX1EKz8f/H5ud8NDY
60QW9lcL4IMlJuLrDAWV/1tUuwd0Nv3niYHKn7vIlgpSbvHzMMdc3JPbvrtNAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7Ch7v1n82t9f2
CmQxxyyBOAIGYTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkZ3
R3BLZWhKalFweExxck1kU3VrZzZzNXZiSGd1bkhudFNtVUZla2FuVksvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkZ3
R3BLZWhKalFweExxck1kU3VrZzZzNXZiSGd1bkhudFNtVUZla2FuVksvMS9CQjBB
MUVFRkQ2N0YzNkI3RDdGNjBBNjQzMUM3MkM4MTM4MDIwNjYxLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBALP+AQwDQQCAAIwBwMFACgEedQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCPiMA0GCSqGSIb3DQEBCwUAA4IBAQC8XLGo4spKX67DiJg2
FfnqCgUOSWzSKLESp39xcIP7plJ1tmUEywZNWuz22QwJWLOpgDw0Ofo/lYIhXmVQ
cf33LpBAIfC6JXCUc3Q9LzNrII2ZPOUxiJMVDmuzS8eAyM7nZYUGgyJgsH5lx1H6
TOyjAnbJMYyGdGAE2goIUmtzrRRwCVxibBQiyqQueGmoWeEy3QTb1F21HbEvxWq6
pbmoiga4LSXh0f80GPRdiiuKopLqPXjeBLihLCMFPJhMwylQ//YM5NcQPWABjWKw
rxMZEsSXAJOdZFQdb4gGIA6GcheA4oLtXe9Ra8BmkDOLGZneMzSOHNfO+FHyDiWd
rE31
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:02 2025 by rpki-client