Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4032DDD223BB8E68CD24EC7B4BA3972211F1839.cer
File:                     F4032DDD223BB8E68CD24EC7B4BA3972211F1839.cer (raw, json)
Hash identifier:          SXtSED0Mkeisv7PQ7xb5jizFzUxEgjXOKSqCQ7vN2tY=
Subject key identifier:   F4:03:2D:DD:22:3B:B8:E6:8C:D2:4E:C7:B4:BA:39:72:21:1F:18:39
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BD7D1C692CEA3B6D00496532C8789A957A8DB12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/F4032DDD223BB8E68CD24EC7B4BA3972211F1839.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Mar 2025 13:57:36 +0000
Certificate not after:    Wed 11 Mar 2026 14:02:36 +0000
Subordinate resources:    AS: 265337
                          IP: 168.181.140.0/22
                          IP: 2804:2e4c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d7:d1:c6:92:ce:a3:b6:d0:04:96:53:2c:87:89:a9:57:a8:db:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 13:57:36 2025 GMT
            Not After : Mar 11 14:02:36 2026 GMT
        Subject: CN=F4032DDD223BB8E68CD24EC7B4BA3972211F1839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:3d:31:ff:c5:7b:06:ff:65:bf:e6:44:06:
                    c4:28:9b:68:cd:8f:88:4d:91:bc:c4:a4:c2:55:e8:
                    24:5f:82:4c:f3:63:ab:24:f9:e0:bd:9d:59:1b:58:
                    d1:52:24:8c:fe:c0:f8:5d:59:00:76:e8:6f:c8:7e:
                    c9:8b:94:93:30:9e:57:56:71:ef:18:cd:af:1a:f7:
                    dd:8f:3c:6f:22:e8:ce:85:68:17:2e:b7:2b:84:f6:
                    cf:03:2c:b2:30:07:78:08:ad:9c:d7:4d:3e:62:71:
                    ad:02:37:4e:a7:4f:05:df:60:bd:36:f3:c5:f5:cb:
                    e8:c7:82:ff:07:ca:b8:3f:0b:16:09:d1:f2:48:14:
                    73:0e:f5:ea:57:cf:c4:b3:cb:98:b6:1d:7a:18:bf:
                    9f:52:ef:9d:6c:ec:0b:08:73:d1:26:be:c0:1d:6b:
                    76:d1:cc:a3:d2:08:81:60:2f:1b:d3:f4:41:e2:65:
                    95:4c:6e:fc:14:8c:c5:0e:d8:65:41:68:ef:c4:90:
                    0f:58:8c:66:5f:28:ed:53:4f:12:cd:33:5b:b1:f3:
                    b2:e2:2e:66:fa:48:ea:0c:9a:d0:80:16:c0:70:bf:
                    ad:2a:b5:6b:fb:c4:ab:b0:21:9e:49:ea:06:01:70:
                    95:e0:1f:2a:35:86:fa:96:d0:1c:45:2a:36:7f:82:
                    cb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:03:2D:DD:22:3B:B8:E6:8C:D2:4E:C7:B4:BA:39:72:21:1F:18:39
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/F4032DDD223BB8E68CD24EC7B4BA3972211F1839.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.140.0/22
                IPv6:
                  2804:2e4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265337

    Signature Algorithm: sha256WithRSAEncryption
         9e:1f:2c:5d:69:79:55:a8:d4:a8:34:96:d6:69:9e:c7:67:72:
         96:eb:ea:11:a3:ac:9b:d6:66:f0:3a:92:3d:c0:62:9c:64:33:
         6e:58:74:5f:56:ae:a7:5c:ce:43:70:8c:2b:bf:9c:31:c4:ec:
         dd:86:9c:ec:a1:fa:94:96:3b:3b:ad:fe:94:dc:d2:76:ae:06:
         79:3e:5c:b6:03:53:e4:be:61:74:81:5e:e3:d0:79:69:58:9f:
         97:39:ad:ce:04:ef:c0:aa:69:43:6e:b0:4c:40:c2:c6:45:f5:
         63:c2:e3:d2:51:91:cf:c7:1a:bb:25:ef:cf:4b:6d:73:fa:5b:
         30:52:3b:f0:f9:de:64:69:a3:0d:d4:bb:d3:df:db:e4:78:d2:
         2f:04:d4:2d:5f:a4:b9:e4:71:0f:0a:7f:6d:54:f7:ba:49:63:
         0d:c8:c6:fb:12:b4:6b:27:72:ea:3a:33:7e:f5:ed:e3:f1:9d:
         21:06:92:90:f7:08:75:58:82:cf:c5:f9:7a:c1:1d:36:e4:f5:
         60:18:98:23:72:2e:cb:be:19:eb:e5:cd:44:59:02:5a:58:d6:
         95:5d:10:ea:c6:aa:6c:35:c6:df:d2:99:df:df:0a:05:51:3e:
         26:50:e0:a4:6d:26:cb:bc:4e:df:01:1a:7a:94:13:45:ed:45:
         14:86:af:6b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUe9fRxpLOo7bQBJZTLIeJqVeo2xIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMTIxMzU3MzZaFw0yNjAzMTExNDAyMzZaMDMxMTAvBgNV
BAMTKEY0MDMyREREMjIzQkI4RTY4Q0QyNEVDN0I0QkEzOTcyMjExRjE4MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvD0x/8V7Bv9lv+ZEBsQom2jN
j4hNkbzEpMJV6CRfgkzzY6sk+eC9nVkbWNFSJIz+wPhdWQB26G/IfsmLlJMwnldW
ce8Yza8a992PPG8i6M6FaBcutyuE9s8DLLIwB3gIrZzXTT5ica0CN06nTwXfYL02
88X1y+jHgv8Hyrg/CxYJ0fJIFHMO9epXz8Szy5i2HXoYv59S751s7AsIc9EmvsAd
a3bRzKPSCIFgLxvT9EHiZZVMbvwUjMUO2GVBaO/EkA9YjGZfKO1TTxLNM1ux87Li
Lmb6SOoMmtCAFsBwv60qtWv7xKuwIZ5J6gYBcJXgHyo1hvqW0BxFKjZ/gsvLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0Ay3dIju45ozS
Tse0ujlyIR8YOTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1ZM
R2pGTVdoYTllWjNSQ1dHNkVyN3R2OGVDdjJFd2E3QnZESGI1S3JWQWEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NW
TEdqRk1XaGE5ZVozUkNXRzZFcjd0djhlQ3YyRXdhN0J2REhiNUtyVkFhLzAvRjQw
MzJEREQyMjNCQjhFNjhDRDI0RUM3QjRCQTM5NzIyMTFGMTgzOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqLWMMA0EAgACMAcDBQAoBC5MMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMeTANBgkqhkiG9w0BAQsFAAOCAQEAnh8sXWl5VajUqDSW
1mmex2dyluvqEaOsm9Zm8DqSPcBinGQzblh0X1aup1zOQ3CMK7+cMcTs3Yac7KH6
lJY7O63+lNzSdq4GeT5ctgNT5L5hdIFe49B5aViflzmtzgTvwKppQ26wTEDCxkX1
Y8Lj0lGRz8cauyXvz0ttc/pbMFI78PneZGmjDdS709/b5HjSLwTULV+kueRxDwp/
bVT3ukljDcjG+xK0aydy6jozfvXt4/GdIQaSkPcIdViCz8X5esEdNuT1YBiYI3Iu
y74Z6+XNRFkCWljWlV0Q6saqbDXG39KZ398KBVE+JlDgpG0my7xO3wEaepQTRe1F
FIavaw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:30 2025 by rpki-client