Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.cer
File:                     D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.cer (raw, json)
Hash identifier:          D9p7BKHLb/QIvn4W46qcRZB3E3gAgQq3y8NzjNfSgQ8=
Subject key identifier:   D9:5F:80:6F:24:54:B9:E1:2E:86:8A:8E:30:9D:CB:7F:1F:2B:AA:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39C8304B9BCCBC9DCFE45CFEF44F262F386F35BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Jan 2025 12:09:50 +0000
Certificate not after:    Wed 21 Jan 2026 12:14:50 +0000
Subordinate resources:    AS: 269439
                          IP: 45.186.228.0/22
                          IP: 2804:64a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c8:30:4b:9b:cc:bc:9d:cf:e4:5c:fe:f4:4f:26:2f:38:6f:35:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 22 12:09:50 2025 GMT
            Not After : Jan 21 12:14:50 2026 GMT
        Subject: CN=D95F806F2454B9E12E868A8E309DCB7F1F2BAA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:bf:a8:c2:de:f7:57:4b:e8:be:7a:10:e4:
                    4c:60:d9:03:e6:ee:f6:c2:76:fe:3c:81:05:6a:90:
                    7f:eb:71:e5:50:41:47:72:9c:98:3f:ea:2e:d0:49:
                    fc:9d:43:7f:d6:5e:dd:0d:e0:d8:a3:d3:ed:3a:bf:
                    8d:5b:d1:85:a5:62:b9:c4:9b:b7:ea:ed:34:5d:76:
                    d5:42:c9:44:0c:3b:ba:76:73:d6:c8:91:29:0e:7b:
                    76:2a:1c:8b:29:2c:de:cc:71:92:77:5c:32:0f:c4:
                    6b:a6:0e:26:65:14:f9:07:f1:a5:91:59:46:74:10:
                    ad:e9:d5:27:1e:a3:8b:8e:20:e0:2d:cf:31:76:38:
                    e7:73:2c:5a:58:ae:0d:0d:e0:23:a8:60:ff:c5:e8:
                    40:69:44:0b:5c:a2:53:0d:7f:a0:04:63:49:53:73:
                    e3:02:b6:36:8f:c6:c2:69:2b:d5:04:40:5c:1b:25:
                    94:c1:99:39:43:36:a6:08:a9:79:2a:fb:a1:09:08:
                    7d:ed:53:c4:4d:35:e4:98:ad:eb:8e:f9:9b:5c:60:
                    9d:95:38:7c:ad:0f:65:52:45:42:0a:b3:f3:2c:7c:
                    2a:e4:30:ee:0c:d7:54:b0:d1:e4:ee:81:48:b8:b7:
                    54:e3:36:48:be:3e:d9:06:02:c5:5d:74:37:28:26:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:5F:80:6F:24:54:B9:E1:2E:86:8A:8E:30:9D:CB:7F:1F:2B:AA:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.228.0/22
                IPv6:
                  2804:64a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269439

    Signature Algorithm: sha256WithRSAEncryption
         d8:83:ae:c2:08:b4:de:ca:22:c1:4a:c8:ce:5b:e2:49:84:f8:
         9e:d7:19:bc:7f:6d:a8:15:70:97:92:6a:b2:a3:72:cc:39:45:
         19:79:9a:c3:56:f0:1f:65:4f:f5:f1:51:34:77:3a:ff:ec:39:
         26:77:07:5e:a3:74:ff:42:63:21:7b:4b:d9:e0:3a:9f:e3:ab:
         13:1a:14:13:e5:4d:8e:f5:c7:04:da:ce:10:92:f4:9b:a5:49:
         09:d9:44:d6:c4:a2:fc:28:cc:8a:d1:0d:60:df:2b:6f:43:c0:
         88:13:d2:59:de:b2:98:2c:1f:a0:47:0f:5b:77:c2:a8:b9:82:
         c0:d1:32:b0:d1:23:fe:81:31:a3:88:69:14:7b:63:4f:b2:b1:
         40:a8:0b:90:87:e3:47:84:47:3a:ea:5f:38:39:0e:5b:9f:7d:
         0f:5d:47:5f:86:cf:8d:4c:2e:8e:a3:d8:91:26:bf:47:47:4f:
         eb:08:ab:32:c4:49:a0:8f:ba:1f:d2:78:a4:c3:75:74:0b:47:
         0c:f6:44:1d:e7:04:d3:3d:5a:c9:7f:e9:ac:e1:b4:f9:af:25:
         47:9d:89:06:e0:6a:1a:56:23:9f:44:c6:98:d0:b9:af:3d:3a:
         d1:14:b8:6b:d7:f7:0d:a9:46:0d:82:fb:68:5e:20:07:75:6e:
         aa:c7:3f:2a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOcgwS5vMvJ3P5Fz+9E8mLzhvNb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjIxMjA5NTBaFw0yNjAxMjExMjE0NTBaMDMxMTAvBgNV
BAMTKEQ5NUY4MDZGMjQ1NEI5RTEyRTg2OEE4RTMwOURDQjdGMUYyQkFBNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHuL+owt73V0vovnoQ5Exg2QPm
7vbCdv48gQVqkH/rceVQQUdynJg/6i7QSfydQ3/WXt0N4Nij0+06v41b0YWlYrnE
m7fq7TRddtVCyUQMO7p2c9bIkSkOe3YqHIspLN7McZJ3XDIPxGumDiZlFPkH8aWR
WUZ0EK3p1Sceo4uOIOAtzzF2OOdzLFpYrg0N4COoYP/F6EBpRAtcolMNf6AEY0lT
c+MCtjaPxsJpK9UEQFwbJZTBmTlDNqYIqXkq+6EJCH3tU8RNNeSYreuO+ZtcYJ2V
OHytD2VSRUIKs/MsfCrkMO4M11Sw0eTugUi4t1TjNki+PtkGAsVddDcoJnx3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZX4BvJFS54S6G
io4wnct/HyuqRTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFlC
VUZDTmFBWW40RVVGNEJxUjc4NVBGaVlKZHlWalpRTFJkQmo1V1F4VVovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hZ
QlVGQ05hQVluNEVVRjRCcVI3ODVQRmlZSmR5VmpaUUxSZEJqNVdReFVaLzAvRDk1
RjgwNkYyNDU0QjlFMTJFODY4QThFMzA5RENCN0YxRjJCQUE0NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbrkMA0EAgACMAcDBQAoBGSgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQcfzANBgkqhkiG9w0BAQsFAAOCAQEA2IOuwgi03soiwUrI
zlviSYT4ntcZvH9tqBVwl5JqsqNyzDlFGXmaw1bwH2VP9fFRNHc6/+w5JncHXqN0
/0JjIXtL2eA6n+OrExoUE+VNjvXHBNrOEJL0m6VJCdlE1sSi/CjMitENYN8rb0PA
iBPSWd6ymCwfoEcPW3fCqLmCwNEysNEj/oExo4hpFHtjT7KxQKgLkIfjR4RHOupf
ODkOW599D11HX4bPjUwujqPYkSa/R0dP6wirMsRJoI+6H9J4pMN1dAtHDPZEHecE
0z1ayX/prOG0+a8lR52JBuBqGlYjn0TGmNC5rz060RS4a9f3DalGDYL7aF4gB3Vu
qsc/Kg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:34 2025 by rpki-client