Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
File:                     F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer (raw, json)
Hash identifier:          v4LFm6nYn5aZ3gfkwu5td3efiy5qRLG9hZg+MWKCIUU=
Subject key identifier:   F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1DAB23D1DE859073563E27E9CF5269B60DC6ECE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 12:17:04 +0000
Certificate not after:    Thu 05 Mar 2026 12:22:04 +0000
Subordinate resources:    AS: 271544
                          IP: 179.63.116.0/22
                          IP: 2804:7d2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ab:23:d1:de:85:90:73:56:3e:27:e9:cf:52:69:b6:0d:c6:ec:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 12:17:04 2025 GMT
            Not After : Mar  5 12:22:04 2026 GMT
        Subject: CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:12:05:15:cd:95:ca:86:2d:42:83:dd:7e:
                    64:d1:37:74:c0:8f:7a:98:1f:e2:5a:35:84:33:49:
                    02:2a:fd:af:a5:54:e6:f3:fd:3c:ff:c8:97:20:0d:
                    53:b8:49:d8:3c:9b:28:72:a5:f0:ee:20:89:bc:f8:
                    90:f6:f4:e8:65:d3:78:f7:74:7a:29:da:d4:47:5d:
                    38:e5:47:89:38:0d:47:7f:ce:3f:14:da:92:3d:df:
                    17:9a:b9:cd:fc:5d:b2:15:03:3d:70:af:a4:1a:75:
                    88:79:06:78:66:4f:37:8f:93:2d:b4:a6:07:e7:d9:
                    cf:07:37:0e:b7:a9:e5:f7:b4:89:f3:62:7e:59:ea:
                    1c:f8:71:2f:31:e1:20:5f:35:51:5d:50:5e:c2:1c:
                    54:09:a3:98:c7:98:c1:ae:c0:69:7c:13:7e:e3:54:
                    9e:ce:53:e1:83:d7:77:5d:c5:6a:ff:e0:e7:e8:a5:
                    86:1c:5a:d6:5e:e9:e1:e3:d9:d9:3b:01:d5:52:0b:
                    e6:11:a5:42:c4:80:65:e8:88:eb:f7:a0:42:d5:25:
                    83:99:89:e4:22:fd:a9:ba:64:91:27:da:53:3a:b3:
                    f4:5d:0a:45:6b:46:16:84:e9:a4:f0:aa:bd:1f:61:
                    08:93:3e:e9:07:16:f0:5d:ed:7b:89:62:f6:8a:5a:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.116.0/22
                IPv6:
                  2804:7d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271544

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:91:56:24:1e:d9:4e:28:4f:0e:12:5e:0b:36:27:a1:49:
         e1:41:a4:92:8a:94:ef:ea:ee:35:07:2d:c2:dc:5a:aa:88:cc:
         7f:2c:0e:9d:0f:1e:ce:7d:74:d3:96:31:d2:a8:97:b4:78:af:
         c5:99:1d:e3:1a:cf:e1:23:99:79:8b:cf:f7:76:b9:e4:1c:0a:
         80:00:8e:31:59:c6:f2:c6:b0:aa:d3:8c:8f:02:df:c8:d8:54:
         d5:ae:88:04:99:b7:21:42:7c:33:e7:0d:7d:20:fe:80:41:cf:
         b1:f7:9e:2e:4f:ff:48:fa:16:cc:70:79:4b:dc:51:f7:68:07:
         0c:5e:eb:f7:b1:08:57:20:98:2e:c1:0e:c9:cb:87:41:e7:46:
         57:de:c2:f2:5c:76:ed:f6:84:76:8e:29:67:69:98:59:4c:ee:
         59:eb:fb:82:57:91:b6:cf:8e:66:66:b7:36:16:2f:14:25:cf:
         bb:4c:c9:6c:e3:20:a4:15:b8:ae:d9:8e:3e:95:8b:75:26:b1:
         19:57:14:ff:c4:2a:e0:0b:1c:ba:6b:fa:90:4c:43:4c:98:02:
         c6:76:50:12:1d:f6:65:38:a3:76:9f:fc:30:b2:4f:82:83:f7:
         7b:7e:a8:c2:b3:07:3d:8f:b8:2c:69:d2:76:ad:6f:56:4b:94:
         30:ee:ac:09
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUHasj0d6FkHNWPifpz1Jptg3G7OUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYxMjE3MDRaFw0yNjAzMDUxMjIyMDRaMDMxMTAvBgNV
BAMTKEYxQzZCN0M0NjA3NUI0MTQ0QzkwNEI1RjQ4M0VDMUZDMjlGOTc0RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WxIFFc2VyoYtQoPdfmTRN3TA
j3qYH+JaNYQzSQIq/a+lVObz/Tz/yJcgDVO4Sdg8myhypfDuIIm8+JD29Ohl03j3
dHop2tRHXTjlR4k4DUd/zj8U2pI93xeauc38XbIVAz1wr6QadYh5BnhmTzePky20
pgfn2c8HNw63qeX3tInzYn5Z6hz4cS8x4SBfNVFdUF7CHFQJo5jHmMGuwGl8E37j
VJ7OU+GD13ddxWr/4OfopYYcWtZe6eHj2dk7AdVSC+YRpULEgGXoiOv3oELVJYOZ
ieQi/am6ZJEn2lM6s/RdCkVrRhaE6aTwqr0fYQiTPukHFvBd7XuJYvaKWlKHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxxrfEYHW0FEyQ
S19IPsH8Kfl0/jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjlK
QkRtMWhHTkhURVMyZFJoeGIzYXlrTmtZTXdGSmNzclExQjlidjFmNkovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5
SkJEbTFoR05IVEVTMmRSaHhiM2F5a05rWU13Rkpjc3JRMUI5YnYxZjZKLzEvRjFD
NkI3QzQ2MDc1QjQxNDRDOTA0QjVGNDgzRUMxRkMyOUY5NzRGRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsz90MA0EAgACMAcDBQAoBH0sMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQkuDANBgkqhkiG9w0BAQsFAAOCAQEAgN2RViQe2U4oTw4S
Xgs2J6FJ4UGkkoqU7+ruNQctwtxaqojMfywOnQ8ezn1005Yx0qiXtHivxZkd4xrP
4SOZeYvP93a55BwKgACOMVnG8sawqtOMjwLfyNhU1a6IBJm3IUJ8M+cNfSD+gEHP
sfeeLk//SPoWzHB5S9xR92gHDF7r97EIVyCYLsEOycuHQedGV97C8lx27faEdo4p
Z2mYWUzuWev7gleRts+OZma3NhYvFCXPu0zJbOMgpBW4rtmOPpWLdSaxGVcU/8Qq
4Ascumv6kExDTJgCxnZQEh32ZTijdp/8MLJPgoP3e36owrMHPY+4LGnSdq1vVkuU
MO6sCQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:48:53 2025 by rpki-client