Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.cer
File:                     E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.cer (raw, json)
Hash identifier:          eZIZUA/A1BBc+tz5QBNQSciuclYccEr9JKgDBhXAN2A=
Subject key identifier:   E6:BB:34:27:C1:6E:46:B4:B4:CC:FA:03:3D:4E:B2:41:71:4F:97:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EA1C3D8E593E9C43F2C922FCC72286F632EBCF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 06:39:49 +0000
Certificate not after:    Fri 06 Mar 2026 06:44:49 +0000
Subordinate resources:    AS: 269490
                          IP: 45.187.240.0/22
                          IP: 2804:6570::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a1:c3:d8:e5:93:e9:c4:3f:2c:92:2f:cc:72:28:6f:63:2e:bc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 06:39:49 2025 GMT
            Not After : Mar  6 06:44:49 2026 GMT
        Subject: CN=E6BB3427C16E46B4B4CCFA033D4EB241714F97D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:c0:d5:33:91:75:99:55:b0:99:5d:f6:fe:
                    df:f3:a4:74:20:f5:ac:73:e5:a2:a0:4d:f0:c6:a0:
                    6e:61:5d:9c:66:0d:f5:a2:49:cc:7c:ff:da:a2:1a:
                    86:f6:c2:44:51:cd:2f:68:00:e6:d7:60:5b:be:33:
                    90:61:37:ce:62:40:d3:d4:f0:fc:52:bc:c9:b2:30:
                    71:9c:cd:44:7b:8b:e2:29:14:91:58:d3:c0:2e:ad:
                    2c:bb:89:3b:d6:29:e0:b7:b0:26:76:7d:aa:7a:7f:
                    46:a1:7a:23:be:cf:8a:83:35:8d:92:66:07:3d:af:
                    c8:00:20:bc:ae:9b:37:66:72:ba:8c:18:46:3e:f7:
                    12:fa:cf:78:ca:fb:75:73:e2:f7:e0:8a:b2:22:f5:
                    8d:b8:ee:57:52:bd:02:82:de:24:b1:8a:f1:72:5b:
                    8e:4c:b8:e3:7b:2c:96:e5:f0:3a:6e:45:67:89:e1:
                    55:d5:e6:b1:6f:24:e0:c6:43:1d:5a:4c:50:e0:04:
                    77:b2:fe:29:c9:8b:a3:47:4e:75:0a:55:e8:b1:ae:
                    55:87:f9:8c:8e:e4:0b:cb:1e:42:51:38:50:42:45:
                    5d:be:19:77:d3:4a:11:cb:63:03:92:1f:5d:b8:0a:
                    df:59:32:ad:1d:76:a3:9e:b5:3c:9e:dc:12:20:a4:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:BB:34:27:C1:6E:46:B4:B4:CC:FA:03:3D:4E:B2:41:71:4F:97:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.240.0/22
                IPv6:
                  2804:6570::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269490

    Signature Algorithm: sha256WithRSAEncryption
         af:0d:d6:2f:e9:48:12:44:df:61:fc:f3:90:62:f4:bc:bc:b5:
         72:ff:35:04:71:97:51:df:9c:64:49:64:dc:36:0d:e6:c2:da:
         2f:40:02:b9:5d:a9:08:18:2e:86:49:65:80:6e:45:d7:82:02:
         85:2c:08:f2:e1:0e:79:04:82:e3:9f:ff:98:3e:9f:86:14:55:
         ac:e7:3d:03:a4:a2:98:8b:73:7c:6d:50:0d:1e:7a:0b:6d:d0:
         98:e2:43:eb:b4:f6:8f:de:3d:f0:94:c6:d4:f5:87:98:42:76:
         84:79:12:0e:85:ee:94:12:70:73:c9:9f:9d:c1:fc:9a:88:4e:
         b3:3b:1e:1f:56:aa:c3:72:1c:9f:88:37:22:91:3e:db:17:b6:
         27:ae:5b:54:ce:33:11:7c:fd:d9:f2:95:39:5b:64:3e:57:b4:
         8c:ce:76:4f:5b:84:f1:d1:5f:21:fa:1a:7a:57:07:56:59:96:
         05:7e:68:c1:52:32:47:e9:e7:12:58:3c:06:c5:7f:f2:d4:e2:
         46:fe:bd:87:3a:f2:01:64:d8:3b:03:c3:63:6e:e9:26:96:c4:
         d8:ba:eb:d4:e5:1d:db:03:06:a6:ea:35:07:f1:ad:20:be:94:
         70:a1:1a:73:e9:29:1d:15:d8:90:ab:49:30:f6:4a:55:de:73:
         3b:e8:e7:22
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDqHD2OWT6cQ/LJIvzHIob2MuvPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwNjM5NDlaFw0yNjAzMDYwNjQ0NDlaMDMxMTAvBgNV
BAMTKEU2QkIzNDI3QzE2RTQ2QjRCNENDRkEwMzNENEVCMjQxNzE0Rjk3RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQPMDVM5F1mVWwmV32/t/zpHQg
9axz5aKgTfDGoG5hXZxmDfWiScx8/9qiGob2wkRRzS9oAObXYFu+M5BhN85iQNPU
8PxSvMmyMHGczUR7i+IpFJFY08AurSy7iTvWKeC3sCZ2fap6f0aheiO+z4qDNY2S
Zgc9r8gAILyumzdmcrqMGEY+9xL6z3jK+3Vz4vfgirIi9Y247ldSvQKC3iSxivFy
W45MuON7LJbl8DpuRWeJ4VXV5rFvJODGQx1aTFDgBHey/inJi6NHTnUKVeixrlWH
+YyO5AvLHkJROFBCRV2+GXfTShHLYwOSH124Ct9ZMq0ddqOetTye3BIgpC2rAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTmuzQnwW5GtLTM
+gM9TrJBcU+X0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRG4z
RkF4UE5RN1BmUG9rTDJveFF5Q1NFTFo1TkoyeDZHa01Vb3RORThGUlUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ru
M0ZBeFBOUTdQZlBva0wyb3hReUNTRUxaNU5KMng2R2tNVW90TkU4RlJVLzEvRTZC
QjM0MjdDMTZFNDZCNEI0Q0NGQTAzM0Q0RUIyNDE3MTRGOTdEMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbvwMA0EAgACMAcDBQAoBGVwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQcsjANBgkqhkiG9w0BAQsFAAOCAQEArw3WL+lIEkTfYfzz
kGL0vLy1cv81BHGXUd+cZElk3DYN5sLaL0ACuV2pCBguhkllgG5F14IChSwI8uEO
eQSC45//mD6fhhRVrOc9A6SimItzfG1QDR56C23QmOJD67T2j9498JTG1PWHmEJ2
hHkSDoXulBJwc8mfncH8mohOszseH1aqw3Icn4g3IpE+2xe2J65bVM4zEXz92fKV
OVtkPle0jM52T1uE8dFfIfoaelcHVlmWBX5owVIyR+nnElg8BsV/8tTiRv69hzry
AWTYOwPDY27pJpbE2Lrr1OUd2wMGpuo1B/GtIL6UcKEac+kpHRXYkKtJMPZKVd5z
O+jnIg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:21:34 2025 by rpki-client