Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6FC99B9DA17E401A25DA0CD6946AC08029C3A3F.cer
File:                     D6FC99B9DA17E401A25DA0CD6946AC08029C3A3F.cer (raw, json)
Hash identifier:          DBdVdTPSHPHrczxaQv2faRAJUVPUJ2Q5+hJSidJUNqk=
Subject key identifier:   D6:FC:99:B9:DA:17:E4:01:A2:5D:A0:CD:69:46:AC:08:02:9C:3A:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       280DA897D9D77AE623C8D323AFA280ABDB24588B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/1/D6FC99B9DA17E401A25DA0CD6946AC08029C3A3F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:54:48 +0000
Certificate not after:    Wed 02 Apr 2025 18:59:48 +0000
Subordinate resources:    AS: 263038
                          IP: 177.23.40.0/21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0d:a8:97:d9:d7:7a:e6:23:c8:d3:23:af:a2:80:ab:db:24:58:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:54:48 2024 GMT
            Not After : Apr  2 18:59:48 2025 GMT
        Subject: CN=D6FC99B9DA17E401A25DA0CD6946AC08029C3A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:a0:06:af:5b:7c:1e:9b:4a:b2:d0:7e:c7:
                    88:bf:77:94:58:12:ae:98:ee:97:0a:4f:30:a8:8d:
                    49:2e:12:d2:ac:f1:6c:c4:66:06:48:0b:ea:4e:31:
                    3f:c6:16:e2:fa:4f:dc:10:5d:0b:f0:66:8c:de:f5:
                    35:84:4c:aa:34:6b:43:8c:a6:6c:0e:8e:fd:05:1b:
                    2a:f0:c6:0a:26:13:67:29:22:fd:78:42:a2:ff:e4:
                    3e:80:4f:bd:f8:52:9f:3f:c5:bc:ab:02:71:f8:8d:
                    00:47:ac:c9:15:74:94:1f:d9:18:4f:4f:df:58:ee:
                    75:cd:de:e8:38:fb:57:2a:22:19:78:aa:38:c9:62:
                    1d:8c:e0:85:3d:bf:70:3c:27:43:45:02:a6:2d:66:
                    19:d4:4a:e0:26:51:d1:7d:d9:38:d8:34:23:08:7c:
                    f8:1d:64:0c:ac:5c:29:e3:af:32:bd:64:bf:9f:db:
                    a3:c1:e2:18:2f:97:19:59:a0:c9:7f:6e:97:19:8a:
                    41:3e:7f:f5:cb:ec:e6:1e:e3:e7:c4:7e:da:54:3f:
                    a5:23:9b:81:25:ab:fb:da:f8:7b:96:db:ea:ab:3c:
                    ba:b2:17:34:c0:80:af:56:aa:46:6a:da:37:5c:3f:
                    47:7c:ef:03:21:e8:b8:ed:40:2e:1c:96:6d:db:8f:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:FC:99:B9:DA:17:E4:01:A2:5D:A0:CD:69:46:AC:08:02:9C:3A:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/1/D6FC99B9DA17E401A25DA0CD6946AC08029C3A3F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.40.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263038

    Signature Algorithm: sha256WithRSAEncryption
         a2:72:10:af:60:52:50:a4:c2:78:9c:a7:48:2f:c7:d8:06:d9:
         20:af:32:6e:ea:86:f7:9d:8d:4b:3d:9f:87:15:a9:3c:d1:c0:
         15:6c:84:9f:64:d5:13:3d:9c:b8:75:32:cd:57:33:c1:60:2f:
         66:05:7a:b7:5d:8a:8b:59:e1:4e:fa:ac:69:4f:a8:fc:35:12:
         74:a8:e3:4c:73:a7:f6:87:18:52:40:f4:83:bc:c9:b0:ee:51:
         ea:09:c1:db:7a:bf:28:58:7d:23:45:2e:ee:af:d9:20:ef:43:
         05:68:df:cf:e0:c5:37:f1:29:97:15:de:0e:01:93:e8:e4:fc:
         e5:d2:cf:03:d9:3d:f8:59:f1:7f:03:4a:ac:0e:4e:43:55:65:
         aa:df:81:a9:66:54:e8:ec:1b:27:c2:a0:96:4c:8b:46:64:50:
         9d:29:7c:f5:2b:a8:18:8d:ac:93:cc:ca:bf:51:84:6d:77:32:
         6f:35:94:de:44:b4:07:98:6f:bd:b7:43:5f:70:86:1a:db:51:
         c3:d5:25:ce:2f:e3:ba:c0:6f:5b:4c:e8:d7:0e:b9:6e:b1:45:
         e8:1e:d6:ca:70:5b:a8:a1:4a:1e:4f:c9:78:d9:85:e9:ab:7a:
         70:1b:ba:a9:b1:26:b1:36:65:1c:d2:93:1f:26:f2:3b:86:55:
         6a:5d:c6:91
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUKA2ol9nXeuYjyNMjr6KAq9skWIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODU0NDhaFw0yNTA0MDIxODU5NDhaMDMxMTAvBgNV
BAMTKEQ2RkM5OUI5REExN0U0MDFBMjVEQTBDRDY5NDZBQzA4MDI5QzNBM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzqAGr1t8HptKstB+x4i/d5RY
Eq6Y7pcKTzCojUkuEtKs8WzEZgZIC+pOMT/GFuL6T9wQXQvwZoze9TWETKo0a0OM
pmwOjv0FGyrwxgomE2cpIv14QqL/5D6AT734Up8/xbyrAnH4jQBHrMkVdJQf2RhP
T99Y7nXN3ug4+1cqIhl4qjjJYh2M4IU9v3A8J0NFAqYtZhnUSuAmUdF92TjYNCMI
fPgdZAysXCnjrzK9ZL+f26PB4hgvlxlZoMl/bpcZikE+f/XL7OYe4+fEftpUP6Uj
m4Elq/va+HuW2+qrPLqyFzTAgK9WqkZq2jdcP0d87wMh6LjtQC4clm3bj9RpAgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTW/Jm52hfkAaJd
oM1pRqwIApw6PzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUpk
NWZwa2plRG1pMXR6MnFZMUJldDZySFJpQ2ZBV1ZRZDY0Z3I2TVlLMm0vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVK
ZDVmcGtqZURtaTF0ejJxWTFCZXQ2ckhSaUNmQVdWUWQ2NGdyNk1ZSzJtLzEvRDZG
Qzk5QjlEQTE3RTQwMUEyNURBMENENjk0NkFDMDgwMjlDM0EzRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsRcoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQD
fjANBgkqhkiG9w0BAQsFAAOCAQEAonIQr2BSUKTCeJynSC/H2AbZIK8ybuqG952N
Sz2fhxWpPNHAFWyEn2TVEz2cuHUyzVczwWAvZgV6t12Ki1nhTvqsaU+o/DUSdKjj
THOn9ocYUkD0g7zJsO5R6gnB23q/KFh9I0Uu7q/ZIO9DBWjfz+DFN/EplxXeDgGT
6OT85dLPA9k9+FnxfwNKrA5OQ1Vlqt+BqWZU6OwbJ8KglkyLRmRQnSl89SuoGI2s
k8zKv1GEbXcybzWU3kS0B5hvvbdDX3CGGttRw9Ulzi/jusBvW0zo1w65brFF6B7W
ynBbqKFKHk/JeNmF6at6cBu6qbEmsTZlHNKTHybyO4ZVal3GkQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:04:30 2025 by rpki-client