Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
File:                     DD0CBBA83E82BACB16521E6328443385F92099E0.cer (raw, json)
Hash identifier:          Qsci7FToGYejHVAjpTy4uKNWefimg1s8dgs6z9xGQdM=
Subject key identifier:   DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       363C52A1A385D4A7B1A4580E34809115BFCBFE86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Feb 2025 19:27:43 +0000
Certificate not after:    Mon 16 Feb 2026 19:32:43 +0000
Subordinate resources:    AS: 266172
                          IP: 160.19.248.0/22
                          IP: 2804:3bd0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3c:52:a1:a3:85:d4:a7:b1:a4:58:0e:34:80:91:15:bf:cb:fe:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 17 19:27:43 2025 GMT
            Not After : Feb 16 19:32:43 2026 GMT
        Subject: CN=DD0CBBA83E82BACB16521E6328443385F92099E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:ff:0a:2a:24:51:5a:c3:20:de:69:44:7f:
                    10:fa:ea:af:7a:6a:a6:de:90:0b:7b:e0:f2:e1:73:
                    d5:55:ef:bd:7b:60:43:43:9d:c6:22:06:81:8e:ad:
                    03:78:93:e5:47:21:ce:cc:f2:be:8b:8f:b1:58:f3:
                    c7:4a:db:9b:c0:9a:d6:70:22:9a:02:b8:b0:30:f2:
                    20:b7:c7:1f:44:d9:13:d3:a3:c1:7f:dc:46:81:8f:
                    31:a6:6b:c2:1c:49:89:7a:27:d8:17:6a:38:b7:55:
                    a7:81:6b:5a:23:0c:4b:8f:50:76:9e:cb:1a:d3:dc:
                    09:a6:d1:76:61:13:18:35:68:9f:77:f6:14:ce:05:
                    73:ba:53:04:2f:2b:dc:e2:9b:84:19:42:44:94:1e:
                    74:1c:70:d5:a3:61:90:bb:46:f7:8d:07:d4:cc:0d:
                    be:0e:ac:39:87:2a:56:7b:2b:27:7c:b0:d8:71:49:
                    cd:bc:1b:8e:2c:30:5a:b4:f9:f2:da:44:52:7e:e9:
                    bc:56:c4:f3:f5:e9:c7:47:20:23:5d:1a:8c:e7:38:
                    67:32:e2:09:3b:bd:6f:5d:06:a4:b8:3d:92:d6:16:
                    dd:85:f1:9a:14:f9:fe:e3:48:20:a2:5d:28:9b:ab:
                    b7:dd:78:b4:35:be:12:2b:84:7e:5f:e7:bd:04:33:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.248.0/22
                IPv6:
                  2804:3bd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266172

    Signature Algorithm: sha256WithRSAEncryption
         29:5f:a7:12:01:8e:3e:81:7b:02:05:fb:d0:1a:fc:40:11:9b:
         bf:b8:5d:a3:74:e8:b8:b1:d2:cd:9b:61:f0:d7:21:9c:4a:54:
         56:c5:a3:eb:28:6d:f7:b9:b5:1f:f7:7d:21:ac:9b:10:8c:16:
         e3:fb:55:b9:6e:3e:f9:a6:7d:12:ee:94:b0:47:43:4c:dc:cb:
         95:8e:77:cc:6e:24:c8:3e:1e:0a:cc:73:52:ae:8c:cf:98:b9:
         c0:e5:2a:a7:e7:af:a4:76:6b:29:36:a9:f2:d8:38:69:59:a2:
         8f:4e:bc:e5:19:4b:ae:ee:35:c9:3a:f4:2e:56:bf:2c:ec:1c:
         8a:39:e2:2c:c6:97:bb:47:ca:58:98:ee:aa:6e:53:65:47:24:
         1e:05:ef:1d:1d:9c:de:f7:92:b2:7d:5b:1c:14:78:11:a0:50:
         0e:0e:fd:2d:be:e8:c0:bb:eb:b0:48:f4:11:a4:a1:20:52:10:
         f5:c2:0d:da:7e:76:c0:a8:4f:a3:99:89:8c:75:d1:8f:61:d5:
         ad:5d:c5:a5:78:37:07:e2:e3:e0:66:b9:12:09:55:c9:e8:81:
         9a:30:2f:28:bf:9a:0b:97:3b:7b:b5:44:85:e2:19:be:e7:70:
         85:51:be:02:4d:4f:56:eb:d7:f1:cb:ff:92:08:f2:d8:fe:13:
         3a:f7:cb:36
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUNjxSoaOF1KexpFgONICRFb/L/oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTcxOTI3NDNaFw0yNjAyMTYxOTMyNDNaMDMxMTAvBgNV
BAMTKEREMENCQkE4M0U4MkJBQ0IxNjUyMUU2MzI4NDQzMzg1RjkyMDk5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaVP8KKiRRWsMg3mlEfxD66q96
aqbekAt74PLhc9VV7717YENDncYiBoGOrQN4k+VHIc7M8r6Lj7FY88dK25vAmtZw
IpoCuLAw8iC3xx9E2RPTo8F/3EaBjzGma8IcSYl6J9gXaji3VaeBa1ojDEuPUHae
yxrT3Amm0XZhExg1aJ939hTOBXO6UwQvK9zim4QZQkSUHnQccNWjYZC7RveNB9TM
Db4OrDmHKlZ7Kyd8sNhxSc28G44sMFq0+fLaRFJ+6bxWxPP16cdHICNdGoznOGcy
4gk7vW9dBqS4PZLWFt2F8ZoU+f7jSCCiXSibq7fdeLQ1vhIrhH5f570EMz8jAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdDLuoPoK6yxZS
HmMoRDOF+SCZ4DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM05M
S3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4cDcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNO
TEt2VWNSeGdTRzVpdWpVUndYZ3RiZ1B3aXJmNTkzZnhEajh5eHlzOHA3LzAvREQw
Q0JCQTgzRTgyQkFDQjE2NTIxRTYzMjg0NDMzODVGOTIwOTlFMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCoBP4MA0EAgACMAcDBQAoBDvQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPvDANBgkqhkiG9w0BAQsFAAOCAQEAKV+nEgGOPoF7AgX7
0Br8QBGbv7hdo3TouLHSzZth8NchnEpUVsWj6yht97m1H/d9IaybEIwW4/tVuW4+
+aZ9Eu6UsEdDTNzLlY53zG4kyD4eCsxzUq6Mz5i5wOUqp+evpHZrKTap8tg4aVmi
j0685RlLru41yTr0Lla/LOwcijniLMaXu0fKWJjuqm5TZUckHgXvHR2c3veSsn1b
HBR4EaBQDg79Lb7owLvrsEj0EaShIFIQ9cIN2n52wKhPo5mJjHXRj2HVrV3FpXg3
B+Lj4Ga5EglVyeiBmjAvKL+aC5c7e7VEheIZvudwhVG+Ak1PVuvX8cv/kgjy2P4T
OvfLNg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:07:29 2025 by rpki-client