Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C99D0692688A31FA4DF8A88CB9408F0D25F15B49.cer
File:                     C99D0692688A31FA4DF8A88CB9408F0D25F15B49.cer (raw, json)
Hash identifier:          ULhvvhtSOh5uCj4Es2Mx9/e3aGsjjixwFVxvpRR/31M=
Subject key identifier:   C9:9D:06:92:68:8A:31:FA:4D:F8:A8:8C:B9:40:8F:0D:25:F1:5B:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AAA957AE70A1823294EE35D3A97E165192AF0F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/C99D0692688A31FA4DF8A88CB9408F0D25F15B49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Jan 2025 17:35:45 +0000
Certificate not after:    Mon 12 Jan 2026 17:40:45 +0000
Subordinate resources:    AS: 52709
                          IP: 177.84.56.0/22
                          IP: 2804:c74::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:aa:95:7a:e7:0a:18:23:29:4e:e3:5d:3a:97:e1:65:19:2a:f0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 17:35:45 2025 GMT
            Not After : Jan 12 17:40:45 2026 GMT
        Subject: CN=C99D0692688A31FA4DF8A88CB9408F0D25F15B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:b7:3f:c4:e5:c5:8d:05:47:51:87:42:64:
                    63:0a:78:e8:f5:b7:f1:b1:cb:26:3d:68:b7:53:64:
                    be:6a:15:cc:58:a3:3d:7d:c3:d0:4c:17:67:8f:ad:
                    3a:38:c9:95:87:59:2e:0f:bf:13:0a:39:6e:0b:4a:
                    dc:6e:87:12:f0:e8:f1:03:e7:3e:db:1a:ea:e7:4f:
                    d4:9e:ec:c7:5b:6c:62:f4:f3:93:2d:f5:bc:d0:68:
                    60:78:6e:89:e0:ca:e6:46:6b:7c:66:80:78:12:26:
                    39:5b:2f:e1:ff:07:b3:fa:2c:3a:ac:82:4c:b6:91:
                    2a:48:32:63:2b:46:0f:b5:5d:0c:fc:5b:96:7a:47:
                    76:d2:06:e7:b9:d3:dc:36:1f:ba:5f:77:83:b3:3a:
                    df:01:1d:50:0c:fe:78:02:a0:18:24:1a:94:c1:f2:
                    b2:93:f0:ef:51:62:30:f4:a7:f8:2c:34:07:48:75:
                    03:3c:44:bc:37:e8:10:53:c4:df:14:a7:dd:7b:4e:
                    75:72:8d:22:b3:d9:22:2f:57:d8:00:5f:6f:c6:25:
                    75:6d:c6:eb:8f:3b:80:dd:d6:0d:9a:16:87:d8:77:
                    35:75:7b:e4:8c:4f:6f:c3:e0:8c:45:bb:b4:e0:2f:
                    54:89:73:14:4b:07:b2:2a:df:e2:dd:13:69:ea:1e:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:9D:06:92:68:8A:31:FA:4D:F8:A8:8C:B9:40:8F:0D:25:F1:5B:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/C99D0692688A31FA4DF8A88CB9408F0D25F15B49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.56.0/22
                IPv6:
                  2804:c74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52709

    Signature Algorithm: sha256WithRSAEncryption
         85:64:d1:75:40:4d:a3:17:e6:7e:eb:fa:e4:bd:f8:f4:28:1e:
         6b:17:f5:8e:aa:2f:05:d7:3d:fc:03:be:cb:5c:4c:6e:c0:98:
         22:de:5d:63:2d:71:e0:19:c1:0d:c6:b5:35:12:4d:66:81:ff:
         f7:af:90:5a:1e:20:1a:1a:1e:c7:f4:62:a7:af:54:ff:bf:10:
         57:33:45:fb:b9:20:d0:d0:9e:a8:3d:de:15:28:06:42:0d:65:
         19:2f:8f:90:21:63:31:53:4b:12:0b:05:84:00:1b:c6:db:9a:
         e8:50:bf:ca:01:55:0a:d1:3d:5c:0f:8e:b2:32:5f:fb:d8:a3:
         57:bc:d7:53:8c:6b:98:e2:b4:80:fb:cb:da:bc:99:99:7c:8c:
         0a:90:9b:4e:f2:ce:e5:d0:91:ab:e7:bb:65:4a:25:60:11:02:
         5e:fd:8a:0f:fa:04:6b:51:98:8a:25:96:69:39:eb:b2:1d:48:
         05:ed:bc:33:4f:09:44:76:3c:82:d2:b2:f8:54:ee:43:3b:f4:
         ba:98:2b:5e:fc:88:0e:c1:69:59:3e:70:72:d6:ba:59:0c:b9:
         46:e9:14:8e:2a:cf:fd:8c:20:01:54:b8:6b:82:30:26:aa:ab:
         86:7c:ac:8c:79:0e:c2:15:cb:07:71:14:12:8c:d9:f8:f5:be:
         e5:90:81:7c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGqqVeucKGCMpTuNdOpfhZRkq8PYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMTMxNzM1NDVaFw0yNjAxMTIxNzQwNDVaMDMxMTAvBgNV
BAMTKEM5OUQwNjkyNjg4QTMxRkE0REY4QTg4Q0I5NDA4RjBEMjVGMTVCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaobc/xOXFjQVHUYdCZGMKeOj1
t/GxyyY9aLdTZL5qFcxYoz19w9BMF2ePrTo4yZWHWS4PvxMKOW4LStxuhxLw6PED
5z7bGurnT9Se7MdbbGL085Mt9bzQaGB4bongyuZGa3xmgHgSJjlbL+H/B7P6LDqs
gky2kSpIMmMrRg+1XQz8W5Z6R3bSBue509w2H7pfd4OzOt8BHVAM/ngCoBgkGpTB
8rKT8O9RYjD0p/gsNAdIdQM8RLw36BBTxN8Up917TnVyjSKz2SIvV9gAX2/GJXVt
xuuPO4Dd1g2aFofYdzV1e+SMT2/D4IxFu7TgL1SJcxRLB7Iq3+LdE2nqHrQ9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJnQaSaIox+k34
qIy5QI8NJfFbSTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkNn
eHdlMzRFMzVGUWo4UEt6NGVlbzdnUHhyZjFFN0dNU0xNcng2YjZ6OXAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pD
Z3h3ZTM0RTM1RlFqOFBLejRlZW83Z1B4cmYxRTdHTVNMTXJ4NmI2ejlwLzAvQzk5
RDA2OTI2ODhBMzFGQTRERjhBODhDQjk0MDhGMEQyNUYxNUI0OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsVQ4MA0EAgACMAcDBQAoBAx0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDN5TANBgkqhkiG9w0BAQsFAAOCAQEAhWTRdUBNoxfmfuv6
5L349Cgeaxf1jqovBdc9/AO+y1xMbsCYIt5dYy1x4BnBDca1NRJNZoH/96+QWh4g
Ghoex/Rip69U/78QVzNF+7kg0NCeqD3eFSgGQg1lGS+PkCFjMVNLEgsFhAAbxtua
6FC/ygFVCtE9XA+OsjJf+9ijV7zXU4xrmOK0gPvL2ryZmXyMCpCbTvLO5dCRq+e7
ZUolYBECXv2KD/oEa1GYiiWWaTnrsh1IBe28M08JRHY8gtKy+FTuQzv0upgrXvyI
DsFpWT5wcta6WQy5RukUjirP/YwgAVS4a4IwJqqrhnysjHkOwhXLB3EUEozZ+PW+
5ZCBfA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:46 2025 by rpki-client