Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.cer
File:                     DD5D181A738CA0A83292F9454205D4B5A4E33992.cer (raw, json)
Hash identifier:          ZCqOSEt8l/lcn4BsBzBDKswDJqgN4U9PRMyaAVP8iOw=
Subject key identifier:   DD:5D:18:1A:73:8C:A0:A8:32:92:F9:45:42:05:D4:B5:A4:E3:39:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4AFBECB6E5DC0CF9AD72881C9ADD2313B0B00B27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 19:16:13 +0000
Certificate not after:    Wed 04 Mar 2026 19:21:13 +0000
Subordinate resources:    AS: 269552
                          IP: 45.188.252.0/22
                          IP: 2804:6658::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fb:ec:b6:e5:dc:0c:f9:ad:72:88:1c:9a:dd:23:13:b0:b0:0b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 19:16:13 2025 GMT
            Not After : Mar  4 19:21:13 2026 GMT
        Subject: CN=DD5D181A738CA0A83292F9454205D4B5A4E33992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:9c:b7:59:5f:df:e0:c5:96:d2:8f:15:29:
                    57:2d:fd:06:b3:5b:a2:0c:87:5b:54:d7:cb:36:9d:
                    ca:f7:0c:34:bd:37:bb:ed:31:eb:e7:94:93:af:39:
                    be:ed:af:9f:fd:3d:d5:5b:a6:2d:99:61:89:0f:2c:
                    81:fb:c2:78:07:15:15:99:69:bf:ea:6c:0c:17:09:
                    14:e8:8c:26:8f:6e:52:61:3f:ba:1c:c9:de:24:48:
                    3d:26:bf:8c:bd:61:e4:df:98:63:63:06:75:4c:e7:
                    17:19:3d:dd:5a:d0:66:6c:ab:cc:e9:d7:6a:bf:73:
                    65:32:ce:e6:97:55:6e:2d:3d:be:4a:b8:a7:62:ef:
                    c7:cc:64:af:f8:2e:63:e8:10:ef:4b:3f:18:35:f2:
                    e0:d8:3d:44:31:60:55:cf:a6:fa:7e:dd:76:5f:aa:
                    40:9c:c5:2d:ee:d3:98:29:f4:c1:d1:25:32:2f:62:
                    83:ac:00:e1:25:7a:bb:77:14:a4:ac:8f:a6:b4:b3:
                    2a:62:35:1e:b3:20:fa:68:7f:39:25:df:59:06:f4:
                    0f:96:6e:81:a4:66:fb:c1:8b:36:92:f4:73:49:3c:
                    a2:82:e7:b4:cd:b5:5c:46:1b:a7:c4:ee:6d:1c:98:
                    b3:16:f3:98:94:73:1d:72:c4:4b:92:9f:16:d7:a1:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:5D:18:1A:73:8C:A0:A8:32:92:F9:45:42:05:D4:B5:A4:E3:39:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.252.0/22
                IPv6:
                  2804:6658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269552

    Signature Algorithm: sha256WithRSAEncryption
         d5:9c:8d:d7:55:c7:6a:37:f7:71:31:5e:3f:2f:63:60:31:60:
         ea:41:a3:fb:f2:a2:9f:68:87:fe:24:8e:b3:80:4b:e8:c0:e0:
         2a:47:a8:3c:02:66:81:33:6e:6c:f8:c1:f2:cb:e6:9a:7b:9f:
         83:a3:1a:b1:81:bc:32:23:cd:c6:d6:cc:58:79:22:07:3c:ed:
         eb:7b:e7:7b:0b:42:bb:a5:ba:af:c5:4e:2e:ab:ad:e5:98:95:
         10:97:9d:16:71:cb:df:8c:80:cb:82:8d:f7:45:ee:90:ce:63:
         27:17:6a:ee:5e:3a:3d:32:74:2a:a7:76:f8:d7:56:7b:24:7c:
         45:e9:63:15:e4:59:9f:b6:ba:fa:41:e7:9a:bb:58:c7:34:d3:
         bb:e4:48:96:b3:b5:12:92:97:40:c8:0b:6b:d9:67:46:08:3c:
         15:46:50:29:b7:a1:14:60:08:1e:55:5c:09:bb:60:d4:7b:ed:
         40:2c:f4:c6:40:2f:f4:57:af:69:7d:50:e5:65:eb:b2:ca:40:
         32:14:1e:da:a3:ec:b7:8b:40:02:95:e4:dc:ab:16:9b:28:97:
         7b:50:ba:61:c5:5b:20:6c:ad:5c:58:b7:ac:59:1b:cf:b7:c6:
         24:3a:50:fa:9e:06:a2:8f:9e:ba:cc:ed:1c:cb:63:cb:ba:93:
         48:1b:26:c5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSvvstuXcDPmtcogcmt0jE7CwCycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxOTE2MTNaFw0yNjAzMDQxOTIxMTNaMDMxMTAvBgNV
BAMTKERENUQxODFBNzM4Q0EwQTgzMjkyRjk0NTQyMDVENEI1QTRFMzM5OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJU5y3WV/f4MWW0o8VKVct/Qaz
W6IMh1tU18s2ncr3DDS9N7vtMevnlJOvOb7tr5/9PdVbpi2ZYYkPLIH7wngHFRWZ
ab/qbAwXCRTojCaPblJhP7ocyd4kSD0mv4y9YeTfmGNjBnVM5xcZPd1a0GZsq8zp
12q/c2UyzuaXVW4tPb5KuKdi78fMZK/4LmPoEO9LPxg18uDYPUQxYFXPpvp+3XZf
qkCcxS3u05gp9MHRJTIvYoOsAOElert3FKSsj6a0sypiNR6zIPpofzkl31kG9A+W
boGkZvvBizaS9HNJPKKC57TNtVxGG6fE7m0cmLMW85iUcx1yxEuSnxbXoeh5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdXRgac4ygqDKS
+UVCBdS1pOM5kjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmpt
ZkpmcTVrbXRYVGVQRWVSZGdFakg0NExuVGNwVEFmSkpHY0NpNlJnb2svMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJq
bWZKZnE1a210WFRlUEVlUmRnRWpINDRMblRjcFRBZkpKR2NDaTZSZ29rLzEvREQ1
RDE4MUE3MzhDQTBBODMyOTJGOTQ1NDIwNUQ0QjVBNEUzMzk5Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbz8MA0EAgACMAcDBQAoBGZYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQc8DANBgkqhkiG9w0BAQsFAAOCAQEA1ZyN11XHajf3cTFe
Py9jYDFg6kGj+/Kin2iH/iSOs4BL6MDgKkeoPAJmgTNubPjB8svmmnufg6MasYG8
MiPNxtbMWHkiBzzt63vnewtCu6W6r8VOLqut5ZiVEJedFnHL34yAy4KN90XukM5j
Jxdq7l46PTJ0Kqd2+NdWeyR8ReljFeRZn7a6+kHnmrtYxzTTu+RIlrO1EpKXQMgL
a9lnRgg8FUZQKbehFGAIHlVcCbtg1HvtQCz0xkAv9FevaX1Q5WXrsspAMhQe2qPs
t4tAApXk3KsWmyiXe1C6YcVbIGytXFi3rFkbz7fGJDpQ+p4Goo+eusztHMtjy7qT
SBsmxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:25:38 2025 by rpki-client