Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
File:                     C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer (raw, json)
Hash identifier:          2ZlBGSS2r638qggXk9DNCUvDsmTHSFLX786KJ7H+I2U=
Subject key identifier:   C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BD46E797A06D80836C017ACC0F24E966EA70CEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Jan 2025 17:21:47 +0000
Certificate not after:    Wed 07 Jan 2026 17:26:47 +0000
Subordinate resources:    AS: 52968
                          IP: 138.36.184.0/22
                          IP: 168.194.116.0/22
                          IP: 177.38.112.0/20
                          IP: 179.108.64.0/21
                          IP: 200.229.212.0/22
                          IP: 2804:ea0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d4:6e:79:7a:06:d8:08:36:c0:17:ac:c0:f2:4e:96:6e:a7:0c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  8 17:21:47 2025 GMT
            Not After : Jan  7 17:26:47 2026 GMT
        Subject: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:d2:ee:6a:9a:1d:d6:0c:ca:91:65:a7:ce:
                    aa:bb:5d:11:a5:59:00:83:9e:13:f7:9f:8d:af:51:
                    be:9d:e2:d0:10:a4:f5:e1:1a:74:55:0d:d6:c4:12:
                    d9:c0:27:60:4b:c6:ed:98:27:4c:90:51:ff:09:ac:
                    7f:cf:00:87:d6:89:1f:46:d0:4f:b8:fe:a2:bd:9c:
                    c2:67:8b:16:04:e5:30:58:cf:6f:b1:63:df:05:c7:
                    7b:bf:e7:e8:61:22:ef:b6:c3:04:25:e4:e6:25:96:
                    56:70:73:8b:60:94:9e:57:b0:64:6e:2c:17:08:41:
                    82:94:94:19:f7:0b:94:82:dd:ef:52:d1:b9:ae:9e:
                    f5:4e:3e:43:6a:9c:88:1e:fa:a9:58:6b:15:5f:51:
                    11:a9:6e:ea:2b:82:58:a3:92:7a:73:0f:f5:bc:61:
                    86:ff:3b:b8:ba:1d:76:c4:39:63:04:e8:bd:fa:1c:
                    e5:3e:04:63:1e:fc:4e:69:5b:f7:2d:9a:6f:f0:f0:
                    92:d4:60:91:15:c6:6f:9b:64:86:6d:fd:82:e5:d8:
                    f3:69:ec:2a:02:2d:87:51:26:c7:05:21:0c:1a:69:
                    e2:ba:d6:82:7d:99:6b:bb:75:5f:88:33:0d:ca:3c:
                    ac:9c:1c:ee:2b:94:7b:09:04:0c:a7:56:8b:85:d3:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.184.0/22
                  168.194.116.0/22
                  177.38.112.0/20
                  179.108.64.0/21
                  200.229.212.0/22
                IPv6:
                  2804:ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52968

    Signature Algorithm: sha256WithRSAEncryption
         0e:2a:02:d3:60:2d:f5:c3:0c:3d:cb:6a:e8:25:35:cb:b6:37:
         78:a5:4a:6e:d9:34:a8:91:9d:3f:92:57:1a:33:41:8b:1c:96:
         5d:e7:68:0a:0b:57:5d:f8:2c:05:b5:2b:67:42:99:d2:0e:0f:
         3e:c2:85:6f:be:9f:4b:c2:f7:24:c7:f8:81:59:52:d5:de:f5:
         54:77:56:67:99:9e:a2:b9:3c:2d:6f:e9:5d:15:57:03:20:13:
         e3:d1:06:4a:a9:15:6e:be:24:d7:3b:66:a1:42:80:8d:a4:63:
         de:73:05:b5:ac:35:98:47:e6:01:23:a0:a7:9d:97:1a:24:c1:
         5d:d7:1d:44:9b:6c:4d:2d:29:5e:9a:bd:ae:6d:fc:5e:aa:f2:
         56:6f:68:1e:34:39:18:18:e7:d7:65:e3:6a:dd:27:8b:60:6b:
         2e:b6:97:16:90:88:f1:ee:72:0c:70:6d:1f:93:b7:4c:af:b7:
         f3:1f:89:3b:9c:3a:ec:90:c4:9f:3a:6d:0d:87:be:45:7a:2f:
         39:b8:9b:a3:f7:b9:26:05:d2:39:02:15:f8:5e:84:1a:a5:9f:
         44:fc:5d:8f:82:1a:80:8f:2b:7e:14:40:bd:9a:21:2a:df:f0:
         31:72:3f:e4:9f:ce:76:07:04:0c:20:f4:9e:ef:4d:42:45:f6:
         36:8e:25:ff
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUa9RueXoG2Ag2wBeswPJOlm6nDOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMDgxNzIxNDdaFw0yNjAxMDcxNzI2NDdaMDMxMTAvBgNV
BAMTKEMyNzE4MUQzRDUzQkQyMjhCMzQ1ODZEQzZGNzU2RUJGNTY5NUE2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGotLuapod1gzKkWWnzqq7XRGl
WQCDnhP3n42vUb6d4tAQpPXhGnRVDdbEEtnAJ2BLxu2YJ0yQUf8JrH/PAIfWiR9G
0E+4/qK9nMJnixYE5TBYz2+xY98Fx3u/5+hhIu+2wwQl5OYlllZwc4tglJ5XsGRu
LBcIQYKUlBn3C5SC3e9S0bmunvVOPkNqnIge+qlYaxVfURGpbuorglijknpzD/W8
YYb/O7i6HXbEOWME6L36HOU+BGMe/E5pW/ctmm/w8JLUYJEVxm+bZIZt/YLl2PNp
7CoCLYdRJscFIQwaaeK61oJ9mWu7dV+IMw3KPKycHO4rlHsJBAynVouF08+7AgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCcYHT1TvSKLNF
htxvdW6/VpWmsjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXNr
MTVaeUxXVjdNUVoxa3VXWkp3UHBvYTIxUmEyN1JXTkJuYmQzQkRyR2IvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVz
azE1WnlMV1Y3TVFaMWt1V1pKd1Bwb2EyMVJhMjdSV05CbmJkM0JEckdiLzEvQzI3
MTgxRDNENTNCRDIyOEIzNDU4NkRDNkY3NTZFQkY1Njk1QTZCMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCiiS4AwQCqMJ0AwQEsSZwAwQDs2xAAwQCyOXUMA0E
AgACMAcDBQAoBA6gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDO6DANBgkqhkiG
9w0BAQsFAAOCAQEADioC02At9cMMPctq6CU1y7Y3eKVKbtk0qJGdP5JXGjNBixyW
XedoCgtXXfgsBbUrZ0KZ0g4PPsKFb76fS8L3JMf4gVlS1d71VHdWZ5meork8LW/p
XRVXAyAT49EGSqkVbr4k1ztmoUKAjaRj3nMFtaw1mEfmASOgp52XGiTBXdcdRJts
TS0pXpq9rm38XqryVm9oHjQ5GBjn12Xjat0ni2BrLraXFpCI8e5yDHBtH5O3TK+3
8x+JO5w67JDEnzptDYe+RXovObibo/e5JgXSOQIV+F6EGqWfRPxdj4IagI8rfhRA
vZohKt/wMXI/5J/OdgcEDCD0nu9NQkX2No4l/w==
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:13 2025 by rpki-client