Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.cer
File:                     C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.cer (raw, json)
Hash identifier:          IpAtP1CYoZbygr3u1MphsvNTOYFm541qSpK908jk0lw=
Subject key identifier:   C8:4D:DE:59:A1:0C:27:7C:B9:6F:57:73:B9:F9:AB:C5:4B:3C:32:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       673790C817FEB04E721BD15AF6452E847F5628C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jan 2025 22:34:23 +0000
Certificate not after:    Tue 27 Jan 2026 22:39:23 +0000
Subordinate resources:    AS: 269076
                          IP: 45.179.116.0/22
                          IP: 2804:5f18::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:37:90:c8:17:fe:b0:4e:72:1b:d1:5a:f6:45:2e:84:7f:56:28:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 28 22:34:23 2025 GMT
            Not After : Jan 27 22:39:23 2026 GMT
        Subject: CN=C84DDE59A10C277CB96F5773B9F9ABC54B3C3273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:d3:df:45:d7:dc:db:b6:43:0d:45:90:a3:
                    d3:58:4f:c1:4e:2d:12:e4:40:43:d6:7d:df:93:1c:
                    cc:a9:9c:1e:31:c6:8d:b1:a6:a5:fe:4d:c9:90:7f:
                    e8:fb:f1:4f:df:59:38:ba:72:04:21:20:75:27:7c:
                    2b:64:cb:46:a7:53:40:4c:b2:79:bc:81:28:b2:0a:
                    fa:a9:b3:2d:c4:72:73:1c:ca:b0:46:6a:06:60:1c:
                    b8:a5:ad:09:b3:a0:8a:a6:04:dc:34:72:52:0c:ee:
                    71:cf:81:60:39:27:ce:70:f2:25:80:28:9a:45:70:
                    8e:a5:05:0f:54:94:0c:87:50:00:a1:7f:f3:d4:d1:
                    7b:25:dd:8a:81:a4:53:7a:c6:a4:82:0c:59:0a:07:
                    79:fc:88:f6:21:ac:43:1f:94:cd:3b:6a:56:fc:3e:
                    9d:66:71:73:14:5e:e6:fb:a1:4b:41:84:5f:14:c4:
                    8e:76:2e:03:f2:af:4c:10:cc:4c:62:fe:85:53:9a:
                    db:e3:ce:31:ff:d7:15:17:bd:c3:c7:68:bc:af:21:
                    b4:10:84:70:46:a2:da:76:94:53:d4:43:b9:2f:13:
                    0e:78:2a:7b:de:e4:14:9c:a9:c0:72:49:60:49:0a:
                    f8:bd:86:a6:b2:f5:3b:57:3c:7a:64:9c:b7:81:7e:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:4D:DE:59:A1:0C:27:7C:B9:6F:57:73:B9:F9:AB:C5:4B:3C:32:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.116.0/22
                IPv6:
                  2804:5f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269076

    Signature Algorithm: sha256WithRSAEncryption
         dc:89:db:20:99:bd:39:fa:50:e3:bc:aa:42:46:1a:7f:bf:a5:
         e8:22:de:74:00:0e:f3:b1:5f:c8:e7:dd:d4:ff:a9:77:53:01:
         60:51:8f:90:5a:49:8e:73:bd:69:93:12:02:6a:75:0d:b1:e6:
         0e:44:46:81:91:24:f3:04:eb:5f:f3:d5:bd:8f:fb:0b:2e:7c:
         99:1d:75:33:d8:a6:9c:46:c4:f9:4c:39:98:dd:a4:eb:ac:7c:
         98:55:50:2e:13:09:9e:1f:10:d6:89:07:6b:b7:55:2f:ac:5d:
         45:bc:17:05:12:ea:ae:a0:90:86:99:9c:f6:74:80:ec:27:e7:
         de:10:51:dc:35:21:23:ae:85:63:90:fc:a9:a8:46:0b:e8:37:
         a6:1a:34:d8:5b:95:d6:55:58:09:5f:1f:2b:b9:20:6e:fd:bb:
         b4:2a:2e:91:ae:df:53:39:6f:ec:27:9b:72:9f:95:d9:5c:c9:
         84:4e:9d:ef:c9:a2:38:f4:d4:f5:2f:6d:13:94:a9:b6:5b:24:
         46:11:97:62:db:6e:68:c2:10:64:20:8e:13:0e:14:67:c9:06:
         8b:72:02:a7:66:97:b9:51:ed:cd:30:65:39:9e:ca:65:38:3d:
         25:90:1b:6e:0b:d2:a1:8e:a9:5f:05:62:b1:5b:72:43:7e:b4:
         8b:b9:64:bf
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZzeQyBf+sE5yG9Fa9kUuhH9WKMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjgyMjM0MjNaFw0yNjAxMjcyMjM5MjNaMDMxMTAvBgNV
BAMTKEM4NERERTU5QTEwQzI3N0NCOTZGNTc3M0I5RjlBQkM1NEIzQzMyNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQtPfRdfc27ZDDUWQo9NYT8FO
LRLkQEPWfd+THMypnB4xxo2xpqX+TcmQf+j78U/fWTi6cgQhIHUnfCtky0anU0BM
snm8gSiyCvqpsy3EcnMcyrBGagZgHLilrQmzoIqmBNw0clIM7nHPgWA5J85w8iWA
KJpFcI6lBQ9UlAyHUAChf/PU0Xsl3YqBpFN6xqSCDFkKB3n8iPYhrEMflM07alb8
Pp1mcXMUXub7oUtBhF8UxI52LgPyr0wQzExi/oVTmtvjzjH/1xUXvcPHaLyvIbQQ
hHBGotp2lFPUQ7kvEw54Knve5BScqcBySWBJCvi9hqay9TtXPHpknLeBfuuVAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTITd5ZoQwnfLlv
V3O5+avFSzwyczAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGg5
TjN6N01xanpCTm45amVYM3ZxWndnZTRGcHhDS2lGdkh3dmVhYllmdHcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ro
OU4zejdNcWp6Qk5uOWplWDN2cVp3Z2U0RnB4Q0tpRnZId3ZlYWJZZnR3LzAvQzg0
RERFNTlBMTBDMjc3Q0I5NkY1NzczQjlGOUFCQzU0QjNDMzI3My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbN0MA0EAgACMAcDBQAoBF8YMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbFDANBgkqhkiG9w0BAQsFAAOCAQEA3InbIJm9OfpQ47yq
QkYaf7+l6CLedAAO87FfyOfd1P+pd1MBYFGPkFpJjnO9aZMSAmp1DbHmDkRGgZEk
8wTrX/PVvY/7Cy58mR11M9imnEbE+Uw5mN2k66x8mFVQLhMJnh8Q1okHa7dVL6xd
RbwXBRLqrqCQhpmc9nSA7Cfn3hBR3DUhI66FY5D8qahGC+g3pho02FuV1lVYCV8f
K7kgbv27tCouka7fUzlv7Cebcp+V2VzJhE6d78miOPTU9S9tE5SptlskRhGXYttu
aMIQZCCOEw4UZ8kGi3ICp2aXuVHtzTBlOZ7KZTg9JZAbbgvSoY6pXwVisVtyQ360
i7lkvw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:15 2025 by rpki-client