Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
File:                     D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer (raw, json)
Hash identifier:          uRqh+ap4iPth6C4KnIl6mViBa2y49TIxMTzbaMA9W8E=
Subject key identifier:   D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       12E663DF915EB3CC657F0CD5622D5DBF8E40E013
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 19:55:16 +0000
Certificate not after:    Wed 04 Mar 2026 20:00:16 +0000
Subordinate resources:    AS: 263900
                          IP: 138.204.148.0/22
                          IP: 2804:276c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e6:63:df:91:5e:b3:cc:65:7f:0c:d5:62:2d:5d:bf:8e:40:e0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 19:55:16 2025 GMT
            Not After : Mar  4 20:00:16 2026 GMT
        Subject: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:1e:a3:36:6d:f2:5a:0c:91:74:7a:7f:d6:
                    5a:60:31:26:7f:03:c3:ed:aa:8b:47:c7:68:89:df:
                    cd:c3:d3:2f:e5:54:0e:e4:9a:a3:89:a3:1b:ed:e2:
                    a0:b1:35:d0:52:a2:db:ca:56:fa:c5:3a:1b:4c:00:
                    c3:51:ed:bf:e4:83:85:03:21:26:ed:52:09:c9:4f:
                    d2:4d:09:ec:d8:f1:8c:42:f0:3f:15:17:9e:81:1b:
                    3f:31:cb:a8:fa:cf:67:b1:23:b4:81:e5:90:dc:31:
                    51:d6:32:c9:fc:3a:01:89:56:90:bd:34:2c:04:94:
                    17:51:10:d0:4c:98:ae:e2:8f:1f:d5:70:ec:63:cf:
                    2f:0a:b5:b8:48:db:ca:8b:6f:93:5f:9f:ad:98:01:
                    51:28:3a:ac:f3:42:d8:db:42:a1:ac:eb:8e:cb:03:
                    13:33:e9:d6:77:9e:9c:ee:ed:08:44:fa:41:14:11:
                    38:60:81:d3:41:7d:5a:a9:5a:27:36:59:6d:69:84:
                    bc:82:1f:99:3b:4c:ac:b5:05:d2:d2:5e:45:42:07:
                    0d:00:5f:44:8f:bd:b4:36:32:01:c7:c5:fc:c6:23:
                    21:67:05:8c:8a:c4:6f:f7:e0:b6:0b:3f:bc:84:80:
                    d2:38:56:e7:5a:dc:57:0d:0c:d7:9a:34:1d:7c:84:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/22
                IPv6:
                  2804:276c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263900

    Signature Algorithm: sha256WithRSAEncryption
         92:09:c0:cc:77:3d:55:66:d6:17:fa:23:24:09:8f:69:a2:31:
         3f:37:08:cd:ff:db:86:ba:cf:19:b7:9b:d9:2e:d6:ba:93:96:
         55:57:dd:a9:34:5d:69:cb:ca:71:03:be:c1:10:dc:15:dd:65:
         fa:aa:d5:a8:f2:0a:d0:dd:2c:23:65:0f:a4:c4:fd:a6:ae:4d:
         a6:5b:27:ee:f0:08:3f:e3:90:3f:29:7c:3f:81:a1:4a:96:c7:
         6d:86:2f:f3:e9:dc:97:ce:80:35:2f:01:58:2f:54:5f:31:aa:
         1a:67:75:80:31:2a:75:af:be:98:c4:d9:bd:58:0c:96:64:37:
         b2:8a:6f:d4:3d:97:5f:03:2e:3a:b5:68:26:30:36:33:6f:42:
         e9:95:cd:a1:aa:47:9c:32:be:b3:d3:5f:64:b4:d8:56:92:db:
         4b:93:0f:0e:b8:40:7e:b6:4e:92:c9:1e:e0:35:e8:9b:3c:10:
         a9:1d:d9:b9:6e:e7:bb:6d:21:56:e1:2a:93:26:e8:b2:b9:bd:
         03:f2:ee:b8:5d:0b:be:b8:fc:4e:03:18:81:d0:1e:c8:2f:dc:
         e0:b8:5e:e4:72:42:86:86:83:67:11:45:3f:9b:eb:bf:0c:23:
         c0:05:c1:bb:9f:00:35:bc:15:b8:6e:17:38:b5:26:e6:4a:f8:
         5a:46:ac:7f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEuZj35Fes8xlfwzVYi1dv45A4BMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxOTU1MTZaFw0yNjAzMDQyMDAwMTZaMDMxMTAvBgNV
BAMTKEQxMDhBNkE0OThCMzgzOUI0RjNGODA1QUNDQUU5MzRGOENGNzlEOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyh6jNm3yWgyRdHp/1lpgMSZ/
A8PtqotHx2iJ383D0y/lVA7kmqOJoxvt4qCxNdBSotvKVvrFOhtMAMNR7b/kg4UD
ISbtUgnJT9JNCezY8YxC8D8VF56BGz8xy6j6z2exI7SB5ZDcMVHWMsn8OgGJVpC9
NCwElBdRENBMmK7ijx/VcOxjzy8KtbhI28qLb5Nfn62YAVEoOqzzQtjbQqGs647L
AxMz6dZ3npzu7QhE+kEUEThggdNBfVqpWic2WW1phLyCH5k7TKy1BdLSXkVCBw0A
X0SPvbQ2MgHHxfzGIyFnBYyKxG/34LYLP7yEgNI4Vuda3FcNDNeaNB18hCJ/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRCKakmLODm08/
gFrMrpNPjPedkDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlJS
TVJacDd6Q1hNVVZVWlNXTnJzM3FzUG9QM2I3WE55QzlSanFtanY1dXovMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZS
Uk1SWnA3ekNYTVVWVVpTV05yczNxc1BvUDNiN1hOeUM5UmpxbWp2NXV6LzIvRDEw
OEE2QTQ5OEIzODM5QjRGM0Y4MDVBQ0NBRTkzNEY4Q0Y3OUQ5MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCisyUMA0EAgACMAcDBQAoBCdsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQG3DANBgkqhkiG9w0BAQsFAAOCAQEAkgnAzHc9VWbWF/oj
JAmPaaIxPzcIzf/bhrrPGbeb2S7WupOWVVfdqTRdacvKcQO+wRDcFd1l+qrVqPIK
0N0sI2UPpMT9pq5Nplsn7vAIP+OQPyl8P4GhSpbHbYYv8+ncl86ANS8BWC9UXzGq
Gmd1gDEqda++mMTZvVgMlmQ3sopv1D2XXwMuOrVoJjA2M29C6ZXNoapHnDK+s9Nf
ZLTYVpLbS5MPDrhAfrZOkske4DXomzwQqR3ZuW7nu20hVuEqkybosrm9A/LuuF0L
vrj8TgMYgdAeyC/c4Lhe5HJChoaDZxFFP5vrvwwjwAXBu58ANbwVuG4XOLUm5kr4
Wkasfw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:38:39 2025 by rpki-client