Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
File:                     F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer (raw, json)
Hash identifier:          J3qQ9IwPadQITJheUxhHPiCt5buQOLw+dlSrkwnFFa0=
Subject key identifier:   F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       550EE4CEA1658ABD129D4BE33E78BEC895548BB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 18:35:57 +0000
Certificate not after:    Thu 05 Mar 2026 18:40:57 +0000
Subordinate resources:    AS: 269262
                          IP: 45.182.8.0/22
                          IP: 2804:61e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0e:e4:ce:a1:65:8a:bd:12:9d:4b:e3:3e:78:be:c8:95:54:8b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 18:35:57 2025 GMT
            Not After : Mar  5 18:40:57 2026 GMT
        Subject: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:26:0c:c6:0f:55:89:a7:4e:75:c7:c6:0c:
                    e2:35:60:af:a1:07:44:18:94:4f:bb:02:d2:56:93:
                    f7:08:4a:58:94:d5:17:71:91:fa:ca:5a:2e:84:fb:
                    03:a9:fb:57:75:8d:3a:fc:7d:33:90:6f:ef:d3:93:
                    1f:96:a3:25:6f:70:46:94:af:99:87:27:08:e6:56:
                    e4:2a:0b:a1:dc:47:19:58:e3:f5:3f:8f:55:6c:72:
                    66:e0:ad:c1:a2:08:bd:14:cc:db:0b:63:81:d0:f0:
                    db:d6:eb:9d:84:df:a9:c5:79:b8:5e:0c:68:0d:8e:
                    45:59:9c:7f:43:98:33:08:3f:6d:c1:da:a7:4a:2b:
                    62:65:11:3f:d8:38:45:c0:6e:2f:af:fa:47:09:01:
                    75:b5:2f:0f:1f:59:f9:ec:f0:7b:5f:43:ab:eb:c2:
                    3f:89:d6:99:63:b0:4c:55:21:e4:67:7a:c8:8d:fe:
                    b7:44:43:a5:9f:60:1d:b2:66:72:94:d2:1f:48:70:
                    09:36:24:0d:74:50:44:dd:c6:50:e6:61:9a:da:f8:
                    5d:68:f1:83:ed:47:86:84:5c:85:7b:73:ff:6a:3b:
                    11:db:70:69:62:63:cf:de:56:be:28:98:8f:42:81:
                    77:d5:ec:68:23:7e:7d:d1:31:62:97:c4:a9:b7:71:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.8.0/22
                IPv6:
                  2804:61e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269262

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:f8:d0:93:19:eb:01:33:4d:e9:c5:01:0a:bb:1b:4d:ae:
         b9:7b:3c:82:e1:57:bc:2d:61:f2:c4:08:e6:a0:10:22:93:b4:
         58:4f:c5:b0:ea:11:54:c0:d1:f7:60:87:33:20:bd:f4:07:e8:
         41:52:78:00:ae:89:6d:c2:21:56:ea:15:8c:fe:eb:00:93:e1:
         da:80:7c:a5:58:ab:aa:25:72:ee:71:74:1c:22:94:aa:e6:2c:
         30:65:4c:6c:bb:df:9c:38:a4:ff:a8:04:d1:b5:91:c5:2c:5d:
         93:32:34:39:cd:fa:35:51:21:91:33:95:bf:97:93:d3:1d:57:
         cb:e4:9e:ca:38:f1:24:6b:7a:50:5f:06:40:b6:b9:8b:18:73:
         2e:6f:13:a8:fb:92:f8:7a:16:37:82:c5:6d:47:21:f4:91:44:
         b0:30:c2:96:2c:1f:68:33:81:9a:93:31:67:2b:c3:cf:3e:df:
         53:76:46:34:db:23:90:8b:b6:c2:35:ea:a2:88:63:24:21:25:
         d6:20:db:22:3b:48:66:cd:35:61:f4:c7:84:07:42:be:40:c9:
         5d:31:5a:66:53:e5:f6:19:ae:1e:72:b8:45:3d:c4:41:ee:d8:
         e8:ff:7a:c1:1b:07:f4:14:ff:3c:f0:e7:05:30:1b:3a:b2:8f:
         47:d8:5c:01
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUVQ7kzqFlir0SnUvjPni+yJVUi7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYxODM1NTdaFw0yNjAzMDUxODQwNTdaMDMxMTAvBgNV
BAMTKEYyQUFGRkEzNTk5QzA2RThFNjhBQjc3OTVGMERCOEYxQkM3QTdENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/SYMxg9ViadOdcfGDOI1YK+h
B0QYlE+7AtJWk/cISliU1RdxkfrKWi6E+wOp+1d1jTr8fTOQb+/Tkx+WoyVvcEaU
r5mHJwjmVuQqC6HcRxlY4/U/j1VscmbgrcGiCL0UzNsLY4HQ8NvW652E36nFebhe
DGgNjkVZnH9DmDMIP23B2qdKK2JlET/YOEXAbi+v+kcJAXW1Lw8fWfns8HtfQ6vr
wj+J1pljsExVIeRnesiN/rdEQ6WfYB2yZnKU0h9IcAk2JA10UETdxlDmYZra+F1o
8YPtR4aEXIV7c/9qOxHbcGliY8/eVr4omI9CgXfV7Ggjfn3RMWKXxKm3cY7zAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyqv+jWZwG6OaK
t3lfDbjxvHp9bjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVNk
YkNUYWl5c1I3ejhMRjRWZTI5Sm5WS0IxU1lXamN1bjVXVDg0VW9jbVkvMjCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVNk
YkNUYWl5c1I3ejhMRjRWZTI5Sm5WS0IxU1lXamN1bjVXVDg0VW9jbVkvMi9GMkFB
RkZBMzU5OUMwNkU4RTY4QUI3Nzk1RjBEQjhGMUJDN0E3RDZFLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIttggwDQQCAAIwBwMFACgEYeAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBvOMA0GCSqGSIb3DQEBCwUAA4IBAQB1sPjQkxnrATNN6cUB
CrsbTa65ezyC4Ve8LWHyxAjmoBAik7RYT8Ww6hFUwNH3YIczIL30B+hBUngArolt
wiFW6hWM/usAk+HagHylWKuqJXLucXQcIpSq5iwwZUxsu9+cOKT/qATRtZHFLF2T
MjQ5zfo1USGRM5W/l5PTHVfL5J7KOPEka3pQXwZAtrmLGHMubxOo+5L4ehY3gsVt
RyH0kUSwMMKWLB9oM4GakzFnK8PPPt9TdkY02yOQi7bCNeqiiGMkISXWINsiO0hm
zTVh9MeEB0K+QMldMVpmU+X2Ga4ecrhFPcRB7tjo/3rBGwf0FP888OcFMBs6so9H
2FwB
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:00:43 2025 by rpki-client