Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.cer (raw, json)
Hash identifier:          2rum/KZJx23FDHeUgz2p60RGJ8sJq3QVvQ+IaLaCDDs=
Subject key identifier:   D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B05D60C03B35998F740229C6109CD54BF46D1E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 10:53:06 +0000
Certificate not after:    Fri 06 Mar 2026 10:58:06 +0000
Subordinate resources:    AS: 269647
                          IP: 45.190.136.0/22
                          IP: 2804:67bc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:05:d6:0c:03:b3:59:98:f7:40:22:9c:61:09:cd:54:bf:46:d1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 10:53:06 2025 GMT
            Not After : Mar  6 10:58:06 2026 GMT
        Subject: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:45:7e:30:f5:9c:26:b6:45:1b:33:42:ce:
                    19:7f:6d:67:a8:40:36:68:00:d5:7d:bf:36:70:8a:
                    36:e5:42:35:30:e4:e5:1d:cd:17:44:d2:c5:9f:0d:
                    8d:59:0b:f2:ad:a7:da:52:b0:c3:0e:2d:d0:f0:2a:
                    ef:cd:4e:59:2c:b2:58:88:2f:7a:92:65:9e:52:2f:
                    b4:63:0e:14:e4:23:0d:55:aa:fa:a0:01:ee:07:de:
                    9a:5f:06:e2:82:3a:62:d9:a9:a9:90:c9:52:d4:44:
                    74:42:20:da:23:82:55:fa:ac:1f:bd:83:f5:fd:13:
                    89:cc:9d:7b:ac:5a:a4:c3:18:8f:da:9e:bf:d9:1a:
                    d6:d7:20:08:55:51:82:47:fe:24:f0:64:53:e6:f0:
                    8f:f4:dc:95:d2:05:81:fa:b3:15:15:e7:ad:30:f1:
                    7f:b4:de:7f:b9:20:2b:4d:fa:b4:50:e3:25:78:fb:
                    62:39:6d:81:f5:75:48:9e:40:e2:29:31:ab:96:c5:
                    74:44:5a:95:e7:ed:73:18:69:93:89:85:9e:84:cc:
                    35:76:9d:85:2a:87:4e:b3:72:c0:97:fe:1d:15:54:
                    73:4b:b6:25:5d:4a:b4:94:b1:2a:78:ed:2c:8e:8f:
                    1b:2b:e1:5f:7f:03:5f:a7:0c:4f:46:5b:8a:2d:69:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.136.0/22
                IPv6:
                  2804:67bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269647

    Signature Algorithm: sha256WithRSAEncryption
         14:40:be:68:13:af:0f:f4:c4:87:bb:08:1a:9d:3d:f3:8c:61:
         12:8d:27:4c:dc:4c:6f:fc:e2:4d:62:1c:0b:da:f1:71:48:e8:
         14:30:90:08:3c:10:4b:b9:07:b0:79:6d:12:6c:a8:6c:fc:fd:
         67:bc:3a:27:f7:a1:b2:85:28:c4:ed:ff:aa:61:77:99:33:1e:
         37:0e:d9:7d:21:e8:0e:ef:81:2a:01:3d:21:45:9a:13:e6:cf:
         88:9a:24:6c:7e:6a:a9:27:9d:9e:7d:cb:a6:da:23:00:8a:c1:
         8c:3f:a7:02:c6:13:47:6f:92:f6:a7:0e:8d:a5:0b:a0:12:39:
         f8:f7:fb:9d:11:3f:b4:13:0a:85:70:5a:66:44:d4:97:57:53:
         8c:27:ca:65:34:95:02:7f:47:8d:20:73:4a:6f:5e:85:24:cf:
         3d:0a:c3:a3:e3:d0:cb:2d:12:67:3d:c4:2b:d1:6f:82:1d:ab:
         44:93:99:5f:24:8e:16:92:c5:ed:79:8d:be:2a:e8:44:1c:68:
         f3:d6:cc:42:a9:3a:07:0d:5c:bb:a8:3d:17:8e:d6:67:cd:3b:
         e0:d3:f3:d5:29:f3:1b:fb:1a:8f:8f:bf:06:0c:89:b6:37:da:
         5f:7c:5d:db:d1:d5:b0:31:ca:44:a8:c6:13:75:ac:67:52:a8:
         81:24:0a:8b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUewXWDAOzWZj3QCKcYQnNVL9G0eEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcxMDUzMDZaFw0yNjAzMDYxMDU4MDZaMDMxMTAvBgNV
BAMTKEQ5NUY3OEU2MzAzOTg0NzdFOUJBRTk3NkIzRUFFREIwMDU5OTk0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOh0V+MPWcJrZFGzNCzhl/bWeo
QDZoANV9vzZwijblQjUw5OUdzRdE0sWfDY1ZC/Ktp9pSsMMOLdDwKu/NTlkssliI
L3qSZZ5SL7RjDhTkIw1VqvqgAe4H3ppfBuKCOmLZqamQyVLURHRCINojglX6rB+9
g/X9E4nMnXusWqTDGI/anr/ZGtbXIAhVUYJH/iTwZFPm8I/03JXSBYH6sxUV560w
8X+03n+5ICtN+rRQ4yV4+2I5bYH1dUieQOIpMauWxXREWpXn7XMYaZOJhZ6EzDV2
nYUqh06zcsCX/h0VVHNLtiVdSrSUsSp47SyOjxsr4V9/A1+nDE9GW4otab2zAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZX3jmMDmEd+m6
6Xaz6u2wBZmU2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFRG
OFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBRTDUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhU
RjhXWEdIV2VQZHpGTTlBM2p1OFRlZzVDUlBzNExxVUtjV3pWYXFwUUw1LzEvRDk1
Rjc4RTYzMDM5ODQ3N0U5QkFFOTc2QjNFQUVEQjAwNTk5OTREQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb6IMA0EAgACMAcDBQAoBGe8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdTzANBgkqhkiG9w0BAQsFAAOCAQEAFEC+aBOvD/TEh7sI
Gp0984xhEo0nTNxMb/ziTWIcC9rxcUjoFDCQCDwQS7kHsHltEmyobPz9Z7w6J/eh
soUoxO3/qmF3mTMeNw7ZfSHoDu+BKgE9IUWaE+bPiJokbH5qqSednn3LptojAIrB
jD+nAsYTR2+S9qcOjaULoBI5+Pf7nRE/tBMKhXBaZkTUl1dTjCfKZTSVAn9HjSBz
Sm9ehSTPPQrDo+PQyy0SZz3EK9Fvgh2rRJOZXySOFpLF7XmNviroRBxo89bMQqk6
Bw1cu6g9F47WZ8074NPz1SnzG/saj4+/BgyJtjfaX3xd29HVsDHKRKjGE3WsZ1Ko
gSQKiw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:25:53 2025 by rpki-client