Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
File:                     EAC246C40D838133D032D3CB6AD738DDBFC47537.cer (raw, json)
Hash identifier:          WIE8BW8AzjQeBKd3tLbvLAAUGnZz5ecmt1xjtoC8Raw=
Subject key identifier:   EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       091E5B7814D881A79FAF2C222F509A248DC958E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
caRepository:             rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 03:05:39 +0000
Certificate not after:    Thu 05 Mar 2026 03:10:39 +0000
Subordinate resources:    AS: 262846
                          IP: 177.10.80.0/21
                          IP: 2804:396c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1e:5b:78:14:d8:81:a7:9f:af:2c:22:2f:50:9a:24:8d:c9:58:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 03:05:39 2025 GMT
            Not After : Mar  5 03:10:39 2026 GMT
        Subject: CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:9c:25:60:ee:cb:29:4e:3a:c5:c5:29:9d:
                    bf:d1:f9:a3:53:5b:27:a3:4c:0d:91:18:fd:2a:48:
                    29:80:05:31:ab:9a:22:cf:b4:3e:35:60:b8:aa:d9:
                    48:c3:e3:26:e6:b8:1c:49:b6:a8:67:e0:97:6d:04:
                    06:08:21:ee:40:ec:94:9a:c9:a8:8e:bd:64:88:af:
                    07:20:76:12:f2:45:17:6b:59:d6:94:38:38:c3:c9:
                    21:e2:23:ae:dc:d7:9f:37:d6:51:64:c6:39:7d:cc:
                    ed:27:73:2f:3e:35:07:c3:cd:f7:e5:52:48:e6:a6:
                    57:e9:a3:b9:db:54:9c:bd:e3:7e:5d:3f:9d:4e:e6:
                    9f:80:bb:9e:6f:54:42:85:43:15:0b:99:d3:d6:90:
                    91:16:9f:74:e4:4d:ea:a9:89:ad:31:bf:e6:35:75:
                    64:af:6e:98:6a:4b:bb:c5:85:ce:4c:fe:85:d9:89:
                    b3:61:e5:13:b4:cb:da:f7:c9:8c:89:e7:30:82:01:
                    d0:8c:ce:1c:98:b1:a7:40:b5:e8:50:6c:8c:cd:16:
                    13:93:df:8d:86:d0:d2:96:d9:31:3d:c5:f1:12:36:
                    07:89:14:67:f9:76:ed:d8:b8:0b:d9:cd:4b:5c:19:
                    fc:91:39:aa:36:e0:85:71:ca:74:d3:87:d4:e1:d6:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.80.0/21
                IPv6:
                  2804:396c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262846

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:88:ff:d8:87:78:f2:e4:09:8e:2d:41:62:9a:6c:fa:9b:
         20:d1:92:b8:04:e3:d8:27:e9:d6:75:54:c1:21:0d:06:8b:0d:
         ae:5a:72:0d:7c:ed:71:1b:da:7f:d6:60:68:eb:ed:a5:b5:ee:
         d6:6f:5b:c9:16:ea:0c:f0:bf:65:ce:25:b7:72:ee:22:99:2b:
         20:8f:27:54:51:6f:76:51:04:4d:e7:bd:fa:e4:89:58:4f:cd:
         d3:7d:82:25:03:2c:4b:b0:62:23:31:5e:11:cb:0c:bc:a5:50:
         9b:e8:6e:ad:b0:ae:ca:73:26:6f:bf:16:cf:4f:ae:7a:57:6e:
         de:69:6f:91:ee:1f:56:53:8b:d7:8d:43:7d:f7:74:93:d4:8d:
         d5:b7:48:56:0e:ba:8c:f6:a3:84:33:9a:87:06:f1:86:73:6e:
         6b:c7:a4:4a:70:19:e5:29:b8:50:6a:98:fc:52:9d:51:f1:d8:
         ab:1a:55:9c:d6:fa:4c:8e:d6:a7:02:d7:96:f2:fc:54:9d:fe:
         a2:23:09:73:da:40:36:52:9e:68:79:36:b2:19:4c:f0:04:84:
         57:59:cb:f2:bc:dd:67:74:33:15:2d:77:f3:5a:4c:8c:17:43:
         ab:a7:fe:65:a5:5d:b6:c9:1b:fc:0b:4a:22:d9:1c:25:c0:34:
         9a:f5:b6:bd
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCR5beBTYgaefrywiL1CaJI3JWOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYwMzA1MzlaFw0yNjAzMDUwMzEwMzlaMDMxMTAvBgNV
BAMTKEVBQzI0NkM0MEQ4MzgxMzNEMDMyRDNDQjZBRDczOEREQkZDNDc1MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjaJwlYO7LKU46xcUpnb/R+aNT
WyejTA2RGP0qSCmABTGrmiLPtD41YLiq2UjD4ybmuBxJtqhn4JdtBAYIIe5A7JSa
yaiOvWSIrwcgdhLyRRdrWdaUODjDySHiI67c15831lFkxjl9zO0ncy8+NQfDzffl
Ukjmplfpo7nbVJy9435dP51O5p+Au55vVEKFQxULmdPWkJEWn3TkTeqpia0xv+Y1
dWSvbphqS7vFhc5M/oXZibNh5RO0y9r3yYyJ5zCCAdCMzhyYsadAtehQbIzNFhOT
342G0NKW2TE9xfESNgeJFGf5du3YuAvZzUtcGfyROao24IVxynTTh9Th1h4lAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqwkbEDYOBM9Ay
08tq1zjdv8R1NzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzNv
M1lndUNvOGhvUnF6VkhidEpwamJGRjdOenZHQkNiUDhYUEZjd2dlY0QvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzMz
bzNZZ3VDbzhob1JxelZIYnRKcGpiRkY3Tnp2R0JDYlA4WFBGY3dnZWNELzEvRUFD
MjQ2QzQwRDgzODEzM0QwMzJEM0NCNkFENzM4RERCRkM0NzUzNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsQpQMA0EAgACMAcDBQAoBDlsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQCvjANBgkqhkiG9w0BAQsFAAOCAQEATrOI/9iHePLkCY4t
QWKabPqbINGSuATj2Cfp1nVUwSENBosNrlpyDXztcRvaf9ZgaOvtpbXu1m9byRbq
DPC/Zc4lt3LuIpkrII8nVFFvdlEETee9+uSJWE/N032CJQMsS7BiIzFeEcsMvKVQ
m+hurbCuynMmb78Wz0+ueldu3mlvke4fVlOL141Dffd0k9SN1bdIVg66jPajhDOa
hwbxhnNua8ekSnAZ5Sm4UGqY/FKdUfHYqxpVnNb6TI7WpwLXlvL8VJ3+oiMJc9pA
NlKeaHk2shlM8ASEV1nL8rzdZ3QzFS1381pMjBdDq6f+ZaVdtskb/AtKItkcJcA0
mvW2vQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:11 2025 by rpki-client