Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
File:                     E1470F370CA043FEC72078800782F80E03725DD0.cer (raw, json)
Hash identifier:          UVp6yzDbzj+nTegGYuxl4qU/rlMd0OxH+OSg36Yep70=
Subject key identifier:   E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4AEEFE4D78AEBB445ED706099510A08C5C5E8478
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:56:12 +0000
Certificate not after:    Fri 06 Mar 2026 03:01:12 +0000
Subordinate resources:    AS: 52643
                          IP: 177.128.72.0/21
                          IP: 2804:3f00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ee:fe:4d:78:ae:bb:44:5e:d7:06:09:95:10:a0:8c:5c:5e:84:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:56:12 2025 GMT
            Not After : Mar  6 03:01:12 2026 GMT
        Subject: CN=E1470F370CA043FEC72078800782F80E03725DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:17:ca:e9:25:65:6d:ac:35:1c:a8:de:96:
                    e3:54:98:ef:72:a4:9b:df:17:97:8f:7b:d4:df:4a:
                    86:c7:98:00:15:12:c2:48:c3:60:04:cb:2b:49:84:
                    c0:54:5f:1e:b6:88:bc:3e:79:1c:d1:84:61:e1:09:
                    0a:4e:73:9b:d5:d5:65:3e:4b:86:ca:f2:d4:94:6e:
                    ec:52:0c:f1:1a:3e:ce:7c:26:9e:8e:69:32:a4:5c:
                    34:89:2c:72:13:fe:69:65:32:5d:85:96:50:92:f7:
                    84:2a:3a:c0:75:a9:f2:48:86:bf:19:d6:6b:7c:d0:
                    7d:11:14:bd:6f:23:7d:a1:e9:b6:61:db:15:f2:ea:
                    68:d9:6a:33:66:c6:c0:49:3b:4d:d5:ff:ef:cb:99:
                    3c:c8:c0:ae:55:9c:da:74:68:7b:9e:2b:cf:25:ba:
                    16:df:01:08:81:df:d3:e7:9b:61:2a:ce:1b:66:55:
                    55:0d:d1:ea:2b:64:e4:2a:6b:97:51:fc:d2:af:2f:
                    2a:c4:e2:b0:ec:78:a4:60:7e:a1:56:ad:c2:d7:fe:
                    94:51:e1:11:01:d9:b6:69:73:cd:b4:84:6a:09:d6:
                    82:f4:18:f3:ce:b3:23:8d:02:65:b8:2e:24:45:0b:
                    c1:ad:73:e5:3b:ea:e4:b5:17:b2:ec:5c:d8:13:1d:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.72.0/21
                IPv6:
                  2804:3f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52643

    Signature Algorithm: sha256WithRSAEncryption
         a7:af:10:50:69:cf:38:21:70:21:1b:9d:90:14:10:0a:34:ef:
         f9:37:a6:7e:ae:f9:c9:24:7a:87:2c:64:4d:6c:cc:9b:98:86:
         6c:d1:a8:67:37:8b:75:3c:88:c1:2d:d4:3e:c2:7a:4b:08:c0:
         90:93:1d:6b:3a:f6:8e:65:52:29:bf:7f:9d:6d:0b:46:ae:02:
         eb:7f:6f:4f:8b:22:ca:c8:f4:ff:8e:5e:64:04:7c:7f:e7:72:
         bf:cf:0f:03:dc:ea:f8:cf:de:d0:56:26:ea:23:36:0e:aa:01:
         b5:ba:4f:2e:c8:9e:fa:0f:0b:bc:34:3b:bf:d3:0f:48:6e:0c:
         e2:ed:f3:31:b3:b5:4b:bc:3c:5d:76:17:ff:65:b0:66:3f:c0:
         18:8b:15:f1:81:63:b2:e2:b0:d9:ab:31:fc:49:08:ae:32:12:
         6c:3a:5e:30:07:3a:ca:43:60:89:70:1d:04:14:90:cc:09:42:
         9e:ae:bd:43:e8:68:53:b2:87:87:8b:7a:e6:ed:51:05:e2:73:
         41:3e:87:cc:e9:4e:4a:bc:0b:c6:4d:a6:63:0a:2a:94:0b:7f:
         88:2f:f8:7e:8a:2f:c0:01:64:3f:83:e1:c8:89:b2:23:9d:04:
         19:bd:69:46:79:37:40:17:56:91:a8:68:26:fe:83:ee:d9:b2:
         b1:0f:a6:64
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUSu7+TXiuu0Re1wYJlRCgjFxehHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwMjU2MTJaFw0yNjAzMDYwMzAxMTJaMDMxMTAvBgNV
BAMTKEUxNDcwRjM3MENBMDQzRkVDNzIwNzg4MDA3ODJGODBFMDM3MjVERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDRfK6SVlbaw1HKjeluNUmO9y
pJvfF5ePe9TfSobHmAAVEsJIw2AEyytJhMBUXx62iLw+eRzRhGHhCQpOc5vV1WU+
S4bK8tSUbuxSDPEaPs58Jp6OaTKkXDSJLHIT/mllMl2FllCS94QqOsB1qfJIhr8Z
1mt80H0RFL1vI32h6bZh2xXy6mjZajNmxsBJO03V/+/LmTzIwK5VnNp0aHueK88l
uhbfAQiB39Pnm2EqzhtmVVUN0eorZOQqa5dR/NKvLyrE4rDseKRgfqFWrcLX/pRR
4REB2bZpc820hGoJ1oL0GPPOsyONAmW4LiRFC8Gtc+U76uS1F7LsXNgTHfPJAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThRw83DKBD/scg
eIAHgvgOA3Jd0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmdT
RzY2YjNOZEJkdzFSS3JLc1JrZ0hVVGtmb1hEMVY3RE5vOFdXc0Uyd20vMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmdT
RzY2YjNOZEJkdzFSS3JLc1JrZ0hVVGtmb1hEMVY3RE5vOFdXc0Uyd20vMS9FMTQ3
MEYzNzBDQTA0M0ZFQzcyMDc4ODAwNzgyRjgwRTAzNzI1REQwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAOxgEgwDQQCAAIwBwMFACgEPwAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAM2jMA0GCSqGSIb3DQEBCwUAA4IBAQCnrxBQac84IXAhG52Q
FBAKNO/5N6Z+rvnJJHqHLGRNbMybmIZs0ahnN4t1PIjBLdQ+wnpLCMCQkx1rOvaO
ZVIpv3+dbQtGrgLrf29PiyLKyPT/jl5kBHx/53K/zw8D3Or4z97QVibqIzYOqgG1
uk8uyJ76Dwu8NDu/0w9Ibgzi7fMxs7VLvDxddhf/ZbBmP8AYixXxgWOy4rDZqzH8
SQiuMhJsOl4wBzrKQ2CJcB0EFJDMCUKerr1D6GhTsoeHi3rm7VEF4nNBPofM6U5K
vAvGTaZjCiqUC3+IL/h+ii/AAWQ/g+HIibIjnQQZvWlGeTdAF1aRqGgm/oPu2bKx
D6Zk
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:32:18 2025 by rpki-client