Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.cer
File:                     F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.cer (raw, json)
Hash identifier:          dsPuCF0XDS+ln/D4Ffb32iCDQ2Skp6B814Cmd0lj8mQ=
Subject key identifier:   F2:CB:48:A6:1A:AA:AB:5F:64:93:BE:9B:14:1A:93:5A:7B:0B:DD:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       133B03FC9251916887BD90C3B23018563AF48FB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 21:48:35 +0000
Certificate not after:    Thu 05 Mar 2026 21:53:35 +0000
Subordinate resources:    AS: 267189
                          IP: 45.231.84.0/22
                          IP: 2804:4988::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3b:03:fc:92:51:91:68:87:bd:90:c3:b2:30:18:56:3a:f4:8f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 21:48:35 2025 GMT
            Not After : Mar  5 21:53:35 2026 GMT
        Subject: CN=F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:89:4d:27:8f:2a:60:30:fe:1a:85:4c:ea:
                    e1:b2:b1:2d:ba:2a:58:a4:01:aa:ca:14:d5:b8:c2:
                    da:6d:db:29:df:2c:58:89:c7:85:4e:a9:2e:3e:71:
                    0b:d9:39:21:ae:76:ae:26:49:4b:64:1b:f7:68:e6:
                    56:09:73:72:ea:76:78:34:8d:73:21:f6:eb:53:45:
                    1a:11:c9:14:29:df:5d:15:0f:9e:b5:19:35:dc:e6:
                    21:7a:2b:dc:4f:7f:5f:34:f4:a9:ef:72:7d:d6:08:
                    ff:43:a1:5e:b6:19:1b:34:f3:05:0b:e2:4e:0f:41:
                    b9:0b:3b:e5:68:ae:8e:44:44:ed:f6:b2:fa:e0:b9:
                    8f:12:b4:e2:21:80:8b:be:0b:5d:79:3b:ed:5e:71:
                    f5:62:19:29:05:f8:30:4e:1b:49:0f:70:40:08:75:
                    f8:9b:54:10:f2:3b:d5:b8:17:78:1b:ac:a9:04:69:
                    38:89:9d:0e:5d:f0:7c:ac:56:47:dd:9a:00:39:aa:
                    e5:a3:7c:a5:bf:c0:d8:b1:0f:c5:2b:98:e5:75:8c:
                    8b:92:2b:3e:2a:f5:54:df:f2:36:1c:ba:e8:ae:78:
                    85:c2:c5:91:b2:7e:e8:d2:3e:d6:57:b9:74:cf:7f:
                    47:25:e2:55:f6:cf:4f:93:38:c4:f3:bd:46:b3:e4:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:CB:48:A6:1A:AA:AB:5F:64:93:BE:9B:14:1A:93:5A:7B:0B:DD:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.84.0/22
                IPv6:
                  2804:4988::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267189

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:38:07:97:79:8c:66:34:9a:bd:90:88:6e:84:2b:36:94:
         ef:0e:08:48:0f:af:79:f6:89:93:2d:13:44:b6:39:8c:ca:cd:
         58:54:8a:d2:8f:ec:78:77:50:2b:a9:fd:2f:91:61:06:1b:53:
         f0:e5:99:ec:6c:18:e7:52:46:aa:75:5f:2a:22:87:f4:5e:f3:
         b7:c7:79:81:bf:1c:30:a8:ac:9f:da:25:37:4e:ff:f8:c7:35:
         60:04:2e:7a:aa:3a:8e:da:47:46:5f:a9:da:9a:b5:d5:bd:bd:
         61:f1:51:93:c9:c8:05:aa:dc:ec:c8:a2:4a:61:b5:41:d4:1c:
         ae:8b:0e:91:92:9e:51:df:7a:49:a1:c0:e4:0d:e5:ec:b0:b1:
         f7:15:e4:0d:b5:9f:b2:90:f9:16:12:8b:22:02:97:a2:bc:b4:
         e9:00:ba:d9:04:45:d0:7d:d9:8b:4a:39:13:00:ff:21:55:63:
         c9:19:bd:2d:76:3d:94:c0:ed:11:3f:91:04:32:9a:b4:62:49:
         4d:c4:35:fa:ac:bf:a4:95:bf:fb:d7:67:76:93:10:ac:60:53:
         f0:45:b8:71:95:5a:bb:e5:64:63:9f:81:c9:52:c1:89:88:4a:
         e7:b5:d6:88:e6:db:97:3e:c6:77:26:e2:2a:90:10:85:e6:54:
         90:65:f7:7b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEzsD/JJRkWiHvZDDsjAYVjr0j7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMTQ4MzVaFw0yNjAzMDUyMTUzMzVaMDMxMTAvBgNV
BAMTKEYyQ0I0OEE2MUFBQUFCNUY2NDkzQkU5QjE0MUE5MzVBN0IwQkREMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeYlNJ48qYDD+GoVM6uGysS26
KlikAarKFNW4wtpt2ynfLFiJx4VOqS4+cQvZOSGudq4mSUtkG/do5lYJc3Lqdng0
jXMh9utTRRoRyRQp310VD561GTXc5iF6K9xPf1809Knvcn3WCP9DoV62GRs08wUL
4k4PQbkLO+Voro5ERO32svrguY8StOIhgIu+C115O+1ecfViGSkF+DBOG0kPcEAI
dfibVBDyO9W4F3gbrKkEaTiJnQ5d8HysVkfdmgA5quWjfKW/wNixD8UrmOV1jIuS
Kz4q9VTf8jYcuuiueIXCxZGyfujSPtZXuXTPf0cl4lX2z0+TOMTzvUaz5CXhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyy0imGqqrX2ST
vpsUGpNaewvdHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUVQ
S3hCWVNZU2hOd1F4TkpXNlY1cEtIMWtXM0pQb0FhR3dyc2FLNUN5eEovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FF
UEt4QllTWVNoTndReE5KVzZWNXBLSDFrVzNKUG9BYUd3cnNhSzVDeXhKLzEvRjJD
QjQ4QTYxQUFBQUI1RjY0OTNCRTlCMTQxQTkzNUE3QjBCREQxQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLedUMA0EAgACMAcDBQAoBEmIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTtTANBgkqhkiG9w0BAQsFAAOCAQEAAI44B5d5jGY0mr2Q
iG6EKzaU7w4ISA+vefaJky0TRLY5jMrNWFSK0o/seHdQK6n9L5FhBhtT8OWZ7GwY
51JGqnVfKiKH9F7zt8d5gb8cMKisn9olN07/+Mc1YAQueqo6jtpHRl+p2pq11b29
YfFRk8nIBarc7MiiSmG1QdQcrosOkZKeUd96SaHA5A3l7LCx9xXkDbWfspD5FhKL
IgKXory06QC62QRF0H3Zi0o5EwD/IVVjyRm9LXY9lMDtET+RBDKatGJJTcQ1+qy/
pJW/+9dndpMQrGBT8EW4cZVau+VkY5+ByVLBiYhK57XWiObblz7GdybiKpAQheZU
kGX3ew==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:19 2025 by rpki-client