Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer
File:                     C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer (raw, json)
Hash identifier:          4LP8xTV9Ya4wWxP+Wn4kiiQ8oMnwQY8dQHM7Difpnd0=
Subject key identifier:   C7:57:68:4E:22:CC:EF:F7:9D:D9:DF:FD:B7:BA:53:ED:8C:BE:88:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       61EF6C2289566DEDBF0A177574343845B3A07EFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:16:07 +0000
Certificate not after:    Fri 06 Mar 2026 02:21:07 +0000
Subordinate resources:    AS: 271365
                          IP: 200.53.80.0/22
                          IP: 2804:7a54::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ef:6c:22:89:56:6d:ed:bf:0a:17:75:74:34:38:45:b3:a0:7e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:16:07 2025 GMT
            Not After : Mar  6 02:21:07 2026 GMT
        Subject: CN=C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:66:62:ac:33:af:fb:ae:54:ac:ed:79:df:
                    81:1b:b8:58:03:dd:18:9d:60:7b:95:39:71:17:c7:
                    bf:e7:a8:b7:6b:77:e9:58:a2:b2:9a:25:0a:f9:2a:
                    e6:a6:89:02:4b:be:51:38:17:63:20:6c:24:23:9c:
                    2b:23:c9:cd:50:37:e7:ec:13:23:dc:ea:53:ee:c0:
                    d8:a5:6a:f4:eb:01:56:3c:de:fc:55:58:2f:a7:e5:
                    2a:46:c0:ed:92:74:03:44:1f:e1:28:e1:6c:fb:96:
                    b2:20:18:9e:49:2a:53:4f:a2:ea:ea:b6:c9:8b:df:
                    79:0d:e0:34:73:22:d1:9b:18:67:86:10:86:3d:8a:
                    d0:34:0a:1f:fe:f5:4c:7a:b1:28:3e:63:ca:1d:13:
                    d2:37:7e:1c:e1:60:ce:63:65:07:f3:14:bf:da:6e:
                    c5:d3:fb:25:ec:7f:f6:a1:fa:e1:fe:e9:07:1b:8a:
                    f5:3f:54:c2:f7:a2:8d:f0:65:6b:6d:31:c4:fd:a6:
                    cf:a2:3f:e7:12:1c:20:2b:8d:f7:94:28:d2:b4:dc:
                    13:0d:52:ef:b6:16:10:c7:5d:dc:a1:dc:6a:84:5c:
                    4a:91:55:72:f7:80:f4:e6:b4:24:51:95:0a:cd:46:
                    e9:a0:67:eb:ce:f8:82:96:a6:12:22:de:1b:7d:00:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:57:68:4E:22:CC:EF:F7:9D:D9:DF:FD:B7:BA:53:ED:8C:BE:88:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.80.0/22
                IPv6:
                  2804:7a54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271365

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:8f:d7:4b:21:89:68:82:c3:ed:31:d1:b7:7d:01:da:3d:
         b5:75:82:a6:00:03:11:45:22:73:59:56:31:89:3b:87:9a:db:
         ee:89:77:42:f1:6e:6d:c2:e6:8d:eb:77:fe:aa:20:bd:af:b4:
         af:73:50:10:16:aa:c9:cb:83:00:72:58:b4:97:18:22:69:41:
         57:c8:c1:2a:29:bc:2a:4d:31:1d:bb:58:eb:9e:8f:1a:1d:f7:
         a2:8e:e6:5f:93:aa:1b:a9:9b:ac:9b:ff:f1:fd:6a:3f:b8:56:
         c0:69:18:26:7a:2e:63:a6:53:9d:72:34:b7:1c:e9:75:17:47:
         39:8a:60:0d:17:d7:17:c6:de:c7:bd:ab:34:fc:ff:0e:90:5d:
         91:6b:53:db:8e:e3:1c:fc:71:15:9c:79:d3:36:df:d2:db:e8:
         44:ec:e0:ba:c1:24:e8:ad:2c:55:a2:77:ac:a6:06:5a:59:e1:
         64:d1:c6:46:93:36:3f:fa:73:4d:fa:8d:73:60:ed:47:83:9c:
         9b:3a:38:e7:81:b3:8b:72:23:36:e6:5e:8c:e3:0c:a1:da:b8:
         e1:fc:f5:4c:23:d0:27:a9:61:92:f6:92:e0:f9:03:22:50:d4:
         cc:14:ab:13:2b:54:19:ae:ec:8b:b7:84:48:72:f0:42:a9:ac:
         f7:22:e6:b2
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYe9sIolWbe2/Chd1dDQ4RbOgfvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwMjE2MDdaFw0yNjAzMDYwMjIxMDdaMDMxMTAvBgNV
BAMTKEM3NTc2ODRFMjJDQ0VGRjc5REQ5REZGREI3QkE1M0VEOENCRTg4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJmZirDOv+65UrO1534EbuFgD
3RidYHuVOXEXx7/nqLdrd+lYorKaJQr5KuamiQJLvlE4F2MgbCQjnCsjyc1QN+fs
EyPc6lPuwNilavTrAVY83vxVWC+n5SpGwO2SdANEH+Eo4Wz7lrIgGJ5JKlNPourq
tsmL33kN4DRzItGbGGeGEIY9itA0Ch/+9Ux6sSg+Y8odE9I3fhzhYM5jZQfzFL/a
bsXT+yXsf/ah+uH+6QcbivU/VML3oo3wZWttMcT9ps+iP+cSHCArjfeUKNK03BMN
Uu+2FhDHXdyh3GqEXEqRVXL3gPTmtCRRlQrNRumgZ+vO+IKWphIi3ht9AGs5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHV2hOIszv953Z
3/23ulPtjL6IHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTJr
Vkx1Z3JSdVU3NGpYbVY3OVlSYUFEV0NodXFjd3Jmd1Q3Tk1QMW9NankvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ey
a1ZMdWdyUnVVNzRqWG1WNzlZUmFBRFdDaHVxY3dyZndUN05NUDFvTWp5LzEvQzc1
NzY4NEUyMkNDRUZGNzlERDlERkZEQjdCQTUzRUQ4Q0JFODgxQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyDVQMA0EAgACMAcDBQAoBHpUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQkBTANBgkqhkiG9w0BAQsFAAOCAQEASwCP10shiWiCw+0x
0bd9Ado9tXWCpgADEUUic1lWMYk7h5rb7ol3QvFubcLmjet3/qogva+0r3NQEBaq
ycuDAHJYtJcYImlBV8jBKim8Kk0xHbtY656PGh33oo7mX5OqG6mbrJv/8f1qP7hW
wGkYJnouY6ZTnXI0txzpdRdHOYpgDRfXF8bex72rNPz/DpBdkWtT247jHPxxFZx5
0zbf0tvoROzgusEk6K0sVaJ3rKYGWlnhZNHGRpM2P/pzTfqNc2DtR4Ocmzo454Gz
i3IjNuZejOMModq44fz1TCPQJ6lhkvaS4PkDIlDUzBSrEytUGa7si7eESHLwQqms
9yLmsg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:19:57 2025 by rpki-client