Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
File:                     CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer (raw, json)
Hash identifier:          Np9hfaZx+OXRHpUstswBS9CxlgIgycPLQD80qCwatiQ=
Subject key identifier:   CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6EDBBD6B2E42E220D1C144009EF163003120CD45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 23:49:44 +0000
Certificate not after:    Mon 16 Mar 2026 23:54:44 +0000
Subordinate resources:    AS: 271363
                          IP: 181.189.36.0/22
                          IP: 2804:7a4c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:db:bd:6b:2e:42:e2:20:d1:c1:44:00:9e:f1:63:00:31:20:cd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 23:49:44 2025 GMT
            Not After : Mar 16 23:54:44 2026 GMT
        Subject: CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:4d:48:9a:a1:08:09:88:ab:96:9b:14:69:
                    95:1b:41:60:ac:90:ef:01:8e:a1:b1:9c:4c:a4:3b:
                    6e:de:67:17:f3:c8:78:64:88:1e:fc:7c:6a:51:76:
                    1c:e9:a9:b1:ee:14:39:91:d5:02:83:29:aa:c3:65:
                    8e:84:aa:35:4e:88:32:f0:8c:3d:15:2d:8e:51:55:
                    35:ed:62:8b:40:28:b2:d0:21:ad:33:7c:d6:8a:89:
                    74:ea:95:d4:1b:8c:7d:12:74:f7:d1:12:fb:91:2b:
                    a9:04:b7:30:63:70:c2:23:0a:32:e2:8a:30:91:e2:
                    bb:2b:27:74:55:45:36:7b:ec:83:0f:a4:87:79:e1:
                    f3:c7:f2:78:08:36:97:35:31:07:aa:41:9b:50:39:
                    f4:7d:eb:08:a3:5d:43:a3:53:f4:c5:5a:e1:db:17:
                    94:09:5b:aa:30:49:64:6d:35:36:ee:d9:52:f1:95:
                    d0:4d:57:b2:e2:29:6d:3e:2c:77:04:76:f6:d5:9d:
                    ed:86:52:c1:f4:67:7c:d8:dc:ff:e1:eb:e6:80:0e:
                    5d:34:b8:b3:ea:84:26:b8:f8:cd:76:46:45:ee:d0:
                    f8:c1:69:92:6d:46:d6:68:9a:eb:8e:ce:7b:8d:a8:
                    10:ea:1a:b2:88:a0:1d:3e:e8:36:75:a3:28:e1:b2:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.36.0/22
                IPv6:
                  2804:7a4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271363

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:18:65:75:c0:50:c7:d9:40:41:2e:c1:69:ae:1b:f9:ec:
         5a:df:47:7a:0e:2c:e8:a6:8e:fd:28:a3:6e:38:bb:f7:f9:92:
         e1:8c:87:3c:ce:8d:14:8c:f3:17:76:33:bb:b9:f2:ae:ef:02:
         fe:d9:47:de:32:31:60:d4:f3:ef:92:52:ac:05:65:d9:48:4d:
         d6:10:79:0f:a0:f5:b3:5b:df:d1:4a:4f:18:f5:cf:d9:cc:d1:
         6f:84:10:93:5f:af:d0:2e:34:ab:49:d5:61:55:42:0c:2f:71:
         53:95:9d:44:db:00:37:58:24:4a:13:4a:03:a9:ff:08:c4:68:
         05:e8:e5:97:4e:a5:22:db:22:a1:84:7d:a7:06:c8:22:28:a1:
         9e:30:a2:83:a1:06:47:10:70:83:24:bc:03:7b:34:22:20:55:
         11:5c:6d:d4:bf:56:29:6c:27:3a:dc:52:66:7c:be:ef:b4:bb:
         ff:81:d9:b6:3b:7f:0a:44:e8:1a:e3:54:1b:36:e2:b1:62:a0:
         32:23:70:6e:48:bc:7d:2f:ad:a0:76:32:57:a1:cf:d9:e3:50:
         17:42:15:32:71:6f:e7:70:e6:b2:c8:f1:73:31:7f:40:4c:a0:
         c0:ae:b3:be:3b:d6:a0:62:a6:f6:76:62:4f:23:e2:bb:bb:59:
         c6:05:35:05
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbtu9ay5C4iDRwUQAnvFjADEgzUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMTcyMzQ5NDRaFw0yNjAzMTYyMzU0NDRaMDMxMTAvBgNV
BAMTKENCOEI1QjlGNTM3RDcxQUFGNzQyMkY2MDNDQUQzNzE1RDk5RjY1RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/k1ImqEICYirlpsUaZUbQWCs
kO8BjqGxnEykO27eZxfzyHhkiB78fGpRdhzpqbHuFDmR1QKDKarDZY6EqjVOiDLw
jD0VLY5RVTXtYotAKLLQIa0zfNaKiXTqldQbjH0SdPfREvuRK6kEtzBjcMIjCjLi
ijCR4rsrJ3RVRTZ77IMPpId54fPH8ngINpc1MQeqQZtQOfR96wijXUOjU/TFWuHb
F5QJW6owSWRtNTbu2VLxldBNV7LiKW0+LHcEdvbVne2GUsH0Z3zY3P/h6+aADl00
uLPqhCa4+M12RkXu0PjBaZJtRtZomuuOznuNqBDqGrKIoB0+6DZ1oyjhsuqxAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLi1ufU31xqvdC
L2A8rTcV2Z9l8jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR29E
OWQ3NUR5TUVvY0drS0FMeTkzcFB5VjdIaDJGeTRGZXVQdHlGSm1ObW4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dv
RDlkNzVEeU1Fb2NHa0tBTHk5M3BQeVY3SGgyRnk0RmV1UHR5RkptTm1uLzAvQ0I4
QjVCOUY1MzdENzFBQUY3NDIyRjYwM0NBRDM3MTVEOTlGNjVGMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb0kMA0EAgACMAcDBQAoBHpMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQkAzANBgkqhkiG9w0BAQsFAAOCAQEATsMYZXXAUMfZQEEu
wWmuG/nsWt9Heg4s6KaO/Sijbji79/mS4YyHPM6NFIzzF3Yzu7nyru8C/tlH3jIx
YNTz75JSrAVl2UhN1hB5D6D1s1vf0UpPGPXP2czRb4QQk1+v0C40q0nVYVVCDC9x
U5WdRNsAN1gkShNKA6n/CMRoBejll06lItsioYR9pwbIIiihnjCig6EGRxBwgyS8
A3s0IiBVEVxt1L9WKWwnOtxSZny+77S7/4HZtjt/CkToGuNUGzbisWKgMiNwbki8
fS+toHYyV6HP2eNQF0IVMnFv53DmssjxczF/QEygwK6zvjvWoGKm9nZiTyPiu7tZ
xgU1BQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:03 2025 by rpki-client