Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer
File:                     CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer (raw, json)
Hash identifier:          96OHX/6v97+AkGmd1lMfe+6TCbDRDBfR5edWr4okZBA=
Subject key identifier:   CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7390C55C3A5B04A8928C894A68A859777A8DDC61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Feb 2025 11:46:42 +0000
Certificate not after:    Fri 27 Feb 2026 11:51:42 +0000
Subordinate resources:    AS: 262690
                          IP: 187.87.240.0/20
                          IP: 2804:7348::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:90:c5:5c:3a:5b:04:a8:92:8c:89:4a:68:a8:59:77:7a:8d:dc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 28 11:46:42 2025 GMT
            Not After : Feb 27 11:51:42 2026 GMT
        Subject: CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:99:73:39:03:79:87:5a:1b:02:cb:b8:ba:
                    69:c8:32:44:0f:4c:5b:3d:3e:80:9c:9d:c8:6c:b5:
                    d2:88:5a:a4:05:07:68:cd:9e:87:74:01:1d:f8:af:
                    3c:bc:ab:3c:6d:f0:ba:f1:0a:2c:a3:12:9f:10:51:
                    ca:97:3b:7c:33:df:f0:a4:6a:6a:38:34:e4:d1:e3:
                    5a:09:33:fe:70:fb:42:f0:07:05:70:ce:e4:f4:97:
                    bd:00:54:99:a0:c2:8c:25:b2:08:ae:88:e1:41:12:
                    c5:84:61:55:d5:dd:56:03:5c:52:98:84:c8:cd:4d:
                    db:6f:8d:dd:e8:7f:0f:d9:2b:bd:d0:a5:a2:a5:f6:
                    b6:42:e1:7d:4c:94:5a:8a:ee:b6:95:ab:0f:0b:fd:
                    3d:75:b4:2b:67:8d:61:60:c4:25:af:d8:a0:07:1b:
                    01:02:df:df:f0:27:8b:f0:3c:f9:7f:95:43:87:17:
                    b1:42:46:6f:c7:e1:06:f9:77:ed:96:7e:60:7d:24:
                    f6:50:96:a5:0f:c6:be:c1:0d:61:c7:ff:70:54:53:
                    5e:1e:92:62:0b:53:65:28:94:4d:b5:fb:ce:f8:79:
                    16:dc:10:6f:91:41:30:ab:e9:d7:53:89:7c:26:22:
                    17:51:1c:cc:8b:27:51:5d:06:b5:f4:b6:9a:0f:15:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.240.0/20
                IPv6:
                  2804:7348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262690

    Signature Algorithm: sha256WithRSAEncryption
         31:13:28:3a:50:11:be:77:8f:80:c4:0f:99:62:ae:f4:f3:a6:
         14:44:c9:21:86:af:ff:00:6e:db:04:4d:4a:a2:68:6a:f5:7a:
         72:05:0d:9d:bf:65:90:fc:ef:0f:02:25:3a:63:15:b3:93:5d:
         09:8f:c9:60:24:e8:44:7d:9d:d8:9c:e0:ff:36:96:6b:99:96:
         ae:b1:18:97:0f:fc:17:5d:1a:23:f8:d8:5f:34:02:b3:da:cf:
         7e:df:a6:79:8d:b3:48:66:c0:d4:8d:10:aa:0e:3e:b7:58:b5:
         fd:b5:df:80:ca:8c:5c:d2:d8:6b:2b:a7:c4:f1:2e:b8:c5:93:
         4b:ae:09:17:9d:5d:6b:b2:39:d3:c4:14:71:8f:ea:6f:49:f9:
         09:14:78:5c:1f:51:37:52:75:8b:5e:0a:6f:07:6e:7e:fa:56:
         7f:7d:f8:4e:60:99:28:da:60:b0:2a:e1:86:6a:e4:e4:db:26:
         72:76:c6:11:e3:eb:2b:2b:e1:05:c3:2b:6c:de:6f:10:4c:c1:
         d5:0c:53:22:47:43:51:05:20:e5:c4:4b:bc:16:ec:a0:56:53:
         08:99:62:25:90:53:b5:47:a5:29:2f:c5:67:31:fa:a2:0a:82:
         cd:63:e3:22:88:d1:d9:77:73:e0:cf:a5:69:1e:5e:87:9f:e4:
         40:63:1c:fc
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUc5DFXDpbBKiSjIlKaKhZd3qN3GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMjgxMTQ2NDJaFw0yNjAyMjcxMTUxNDJaMDMxMTAvBgNV
BAMTKENEMkFFRDU4MEJFNDVBRTZERDU3RDRFNkE1NUFDOTJDNzA3RkNEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGZlzOQN5h1obAsu4umnIMkQP
TFs9PoCcnchstdKIWqQFB2jNnod0AR34rzy8qzxt8LrxCiyjEp8QUcqXO3wz3/Ck
amo4NOTR41oJM/5w+0LwBwVwzuT0l70AVJmgwowlsgiuiOFBEsWEYVXV3VYDXFKY
hMjNTdtvjd3ofw/ZK73QpaKl9rZC4X1MlFqK7raVqw8L/T11tCtnjWFgxCWv2KAH
GwEC39/wJ4vwPPl/lUOHF7FCRm/H4Qb5d+2WfmB9JPZQlqUPxr7BDWHH/3BUU14e
kmILU2UolE21+874eRbcEG+RQTCr6ddTiXwmIhdRHMyLJ1FdBrX0tpoPFdbXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNKu1YC+Ra5t1X
1OalWskscH/NvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODJ6
cnVhU1RkYWNVMWFQc0FDSkc4bXFXY1A3a1c2SlF4ZkZ5WG15cnBObVovMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgy
enJ1YVNUZGFjVTFhUHNBQ0pHOG1xV2NQN2tXNkpReGZGeVhteXJwTm1aLzIvQ0Qy
QUVENTgwQkU0NUFFNkRENTdENEU2QTU1QUM5MkM3MDdGQ0RCQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEu1fwMA0EAgACMAcDBQAoBHNIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQCIjANBgkqhkiG9w0BAQsFAAOCAQEAMRMoOlARvnePgMQP
mWKu9POmFETJIYav/wBu2wRNSqJoavV6cgUNnb9lkPzvDwIlOmMVs5NdCY/JYCTo
RH2d2Jzg/zaWa5mWrrEYlw/8F10aI/jYXzQCs9rPft+meY2zSGbA1I0Qqg4+t1i1
/bXfgMqMXNLYayunxPEuuMWTS64JF51da7I508QUcY/qb0n5CRR4XB9RN1J1i14K
bwdufvpWf334TmCZKNpgsCrhhmrk5NsmcnbGEePrKyvhBcMrbN5vEEzB1QxTIkdD
UQUg5cRLvBbsoFZTCJliJZBTtUelKS/FZzH6ogqCzWPjIojR2Xdz4M+laR5eh5/k
QGMc/A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:35 2025 by rpki-client