Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
File:                     CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer (raw, json)
Hash identifier:          +YVMKaw5y8GZC+DHRNOXON/l5S6++5i6qgeN+3tD0Rw=
Subject key identifier:   CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EF51E69FEAA8515B42CDC16B0A5EA74FE3DC4E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 23:43:39 +0000
Certificate not after:    Thu 05 Mar 2026 23:48:39 +0000
Subordinate resources:    AS: 52742
                          IP: 177.130.16.0/20
                          IP: 2804:cb0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f5:1e:69:fe:aa:85:15:b4:2c:dc:16:b0:a5:ea:74:fe:3d:c4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 23:43:39 2025 GMT
            Not After : Mar  5 23:48:39 2026 GMT
        Subject: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:9e:95:78:46:82:80:d3:75:5a:7f:1f:57:
                    5c:5b:fb:0d:e8:91:13:f5:d8:96:58:a8:7b:72:b0:
                    fc:2e:77:e2:44:1f:87:55:83:d4:d1:3f:77:98:34:
                    f1:ac:37:07:87:9a:45:14:18:b6:63:2a:17:b7:dd:
                    61:3f:35:b1:1c:c1:24:92:62:10:b3:4a:34:56:7d:
                    30:b3:23:f9:98:5f:95:60:ed:61:1c:f5:13:5c:ae:
                    4d:d9:16:a7:bf:cf:f1:4b:a0:dd:9e:6d:74:bd:5d:
                    88:51:bb:da:e7:cf:05:0d:aa:ee:70:ec:0b:ed:47:
                    a3:5f:4d:37:8b:77:7b:55:4d:0e:e3:c3:3c:85:f0:
                    d6:9a:4a:e5:4a:08:da:41:3a:84:9f:aa:ff:10:18:
                    b3:20:6d:8f:70:02:c2:5f:6f:6c:9b:66:3f:f6:c8:
                    c4:8d:c9:f1:10:6b:cb:d3:a5:15:85:3c:ab:d4:d4:
                    47:b8:7a:61:51:f3:d3:ec:aa:5c:7c:4e:b1:43:9c:
                    fc:07:a5:82:15:e4:ec:0a:a7:b1:ba:f4:49:10:26:
                    31:1b:15:0b:a0:3c:8b:30:12:26:de:2a:46:ef:d8:
                    56:25:24:20:51:50:28:81:1f:c7:0a:08:4e:fd:2a:
                    a1:97:c5:48:97:9b:4b:a5:5d:36:8b:de:6d:8d:ae:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.16.0/20
                IPv6:
                  2804:cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52742

    Signature Algorithm: sha256WithRSAEncryption
         40:e6:6d:b8:fb:de:05:a5:6b:ab:42:00:eb:09:ca:f1:ce:7e:
         ff:b1:da:92:e1:a6:8a:be:24:d6:f8:b9:16:68:c0:a9:1b:71:
         42:74:4f:ba:30:73:3c:b3:ec:b4:6f:43:61:56:61:5c:20:58:
         f1:c8:1d:01:0c:83:7c:7f:10:9a:25:e2:d3:f6:62:65:c6:ba:
         9d:66:80:8b:6f:10:a7:57:52:69:bb:fb:30:8e:93:91:7b:55:
         0a:14:ac:84:98:17:b6:c7:b4:a4:0c:0e:b0:bf:73:3e:b4:31:
         5b:47:cc:39:f5:0b:0d:2f:8e:e4:52:ca:ec:63:0e:e1:9d:60:
         0f:2d:fa:8a:49:54:e2:35:97:c5:51:93:ba:58:7d:c9:4d:e7:
         6b:20:b5:38:43:87:ed:af:4c:72:5b:ff:9a:34:09:a4:72:21:
         e3:38:b3:69:74:8c:10:a6:f3:52:e9:0c:90:58:c9:ef:21:2e:
         21:67:af:b0:00:a5:db:1e:49:07:54:0a:39:b3:c6:38:14:5c:
         f3:2c:99:91:0b:01:ca:5f:4a:52:07:00:83:0a:df:62:27:4f:
         67:02:cd:31:bc:dd:7f:f7:8a:9f:90:06:74:2d:f2:07:10:f6:
         d2:fb:51:66:3d:87:26:ac:be:34:3c:6e:62:73:67:08:31:2f:
         4d:1a:24:ce
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUDvUeaf6qhRW0LNwWsKXqdP49xOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMzQzMzlaFw0yNjAzMDUyMzQ4MzlaMDMxMTAvBgNV
BAMTKENGQjc1ODJGMjg2OTlGMzUxMDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+J6VeEaCgNN1Wn8fV1xb+w3o
kRP12JZYqHtysPwud+JEH4dVg9TRP3eYNPGsNweHmkUUGLZjKhe33WE/NbEcwSSS
YhCzSjRWfTCzI/mYX5Vg7WEc9RNcrk3ZFqe/z/FLoN2ebXS9XYhRu9rnzwUNqu5w
7AvtR6NfTTeLd3tVTQ7jwzyF8NaaSuVKCNpBOoSfqv8QGLMgbY9wAsJfb2ybZj/2
yMSNyfEQa8vTpRWFPKvU1Ee4emFR89Psqlx8TrFDnPwHpYIV5OwKp7G69EkQJjEb
FQugPIswEibeKkbv2FYlJCBRUCiBH8cKCE79KqGXxUiXm0ulXTaL3m2NrqYvAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPt1gvKGmfNRBp
yMdsyXFnv3uy7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkNu
ZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkNu
ZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9DRkI3
NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBASxghAwDQQCAAIwBwMFACgEDLAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAM4GMA0GCSqGSIb3DQEBCwUAA4IBAQBA5m24+94FpWurQgDr
Ccrxzn7/sdqS4aaKviTW+LkWaMCpG3FCdE+6MHM8s+y0b0NhVmFcIFjxyB0BDIN8
fxCaJeLT9mJlxrqdZoCLbxCnV1Jpu/swjpORe1UKFKyEmBe2x7SkDA6wv3M+tDFb
R8w59QsNL47kUsrsYw7hnWAPLfqKSVTiNZfFUZO6WH3JTedrILU4Q4ftr0xyW/+a
NAmkciHjOLNpdIwQpvNS6QyQWMnvIS4hZ6+wAKXbHkkHVAo5s8Y4FFzzLJmRCwHK
X0pSBwCDCt9iJ09nAs0xvN1/94qfkAZ0LfIHEPbS+1FmPYcmrL40PG5ic2cIMS9N
GiTO
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:19:58 2025 by rpki-client