Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
File:                     F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer (raw, json)
Hash identifier:          Dx7Jpt4vuO0+4hmLvS7Lh6EpzmnqO0XVnSM/aQOMjnM=
Subject key identifier:   F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C37C57C86E75891B9DE060E3C3636EA5C4D4451
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:36:23 +0000
Certificate not after:    Wed 04 Mar 2026 18:41:23 +0000
Subordinate resources:    AS: 266211
                          IP: 45.229.164.0/22
                          IP: 192.144.100.0/22
                          IP: 2804:3c70::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:37:c5:7c:86:e7:58:91:b9:de:06:0e:3c:36:36:ea:5c:4d:44:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:36:23 2025 GMT
            Not After : Mar  4 18:41:23 2026 GMT
        Subject: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:4b:71:47:2e:42:36:5e:37:2f:58:1b:72:
                    6c:9f:11:f2:e1:18:31:26:34:08:c4:14:54:b6:d1:
                    25:01:eb:44:62:f2:b1:e6:e2:ae:2c:8d:aa:10:0a:
                    aa:40:06:87:55:cc:3e:3f:fa:48:da:7c:f2:a4:45:
                    f9:c7:77:2d:13:18:ad:8c:6f:69:a2:78:48:87:d0:
                    2a:6f:46:1c:ce:63:b1:76:02:3d:cb:cf:50:d8:88:
                    34:2e:08:45:5c:1d:90:03:d9:c2:60:38:be:f0:64:
                    c0:31:f7:8e:39:d4:5c:d6:29:6d:f4:60:3a:2e:95:
                    5a:a5:5f:98:d8:8d:2e:41:c0:c6:8f:14:0c:8c:fb:
                    50:4f:6e:c4:51:da:1a:f3:64:a7:58:59:6d:db:32:
                    d9:32:03:85:44:f5:b1:54:9b:7c:d6:96:19:9d:56:
                    63:76:84:6a:fd:d5:6b:44:3e:5d:a3:e9:ea:7b:04:
                    d2:bc:ec:35:3f:e9:8f:0e:4d:23:29:42:d9:6f:f0:
                    de:cf:ed:cf:a4:fa:e4:15:92:3e:c5:f1:c2:57:1b:
                    10:8d:e4:d0:40:c0:93:d4:17:ab:63:de:ab:6f:77:
                    b2:01:42:8e:a0:21:b1:04:7e:22:cd:a7:ff:6d:c8:
                    74:ee:eb:76:b8:06:cf:5a:86:8d:39:f0:d7:8d:e3:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.164.0/22
                  192.144.100.0/22
                IPv6:
                  2804:3c70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266211

    Signature Algorithm: sha256WithRSAEncryption
         63:1e:3d:dd:88:52:d3:3e:4e:fa:85:1e:27:c6:d4:9c:71:97:
         6d:96:a0:a8:3c:c6:b7:f0:1b:1f:cd:72:c0:75:88:67:36:9f:
         ce:6d:17:d7:7c:9e:12:e4:18:32:dd:06:07:bc:e9:c8:ac:e6:
         83:bb:e5:11:1f:ad:b3:10:43:52:41:e9:5c:3b:60:a1:f3:38:
         32:a7:24:75:26:e0:86:4e:a0:79:55:c8:f0:01:0e:2f:bf:6d:
         e5:c5:f9:7c:b9:6d:2c:96:32:89:91:50:1a:06:ad:bc:cf:8b:
         0b:fe:a1:da:e2:1d:f5:fe:30:d6:33:d3:dd:1d:5a:e7:42:cb:
         84:6d:37:41:d5:21:79:86:be:06:5f:6b:f6:74:31:ed:87:eb:
         b0:38:f6:34:31:75:a5:ea:b3:17:0c:87:b4:0d:08:ca:7f:48:
         fa:33:3a:0f:9a:14:17:48:6b:e3:ed:15:19:7f:14:21:b8:79:
         dc:12:cd:49:bb:c6:9f:85:10:28:04:35:19:be:56:4b:a9:c0:
         a1:f7:8f:df:c0:c5:37:e0:55:69:72:28:cd:42:e3:68:fb:22:
         db:7a:88:91:65:ea:5a:3e:ec:d6:ce:dc:43:13:8b:6e:c3:bb:
         12:f0:e8:d3:be:99:20:8e:ff:64:17:c2:80:4f:a9:f0:dd:a1:
         b9:10:a2:9f
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUDDfFfIbnWJG53gYOPDY26lxNRFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM2MjNaFw0yNjAzMDQxODQxMjNaMDMxMTAvBgNV
BAMTKEY1QjNDQzY5NjNGMjkxRDExRjAxOTNCRDI3RkM0RTgzRDE0NTkyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYktxRy5CNl43L1gbcmyfEfLh
GDEmNAjEFFS20SUB60Ri8rHm4q4sjaoQCqpABodVzD4/+kjafPKkRfnHdy0TGK2M
b2mieEiH0CpvRhzOY7F2Aj3Lz1DYiDQuCEVcHZAD2cJgOL7wZMAx94451FzWKW30
YDoulVqlX5jYjS5BwMaPFAyM+1BPbsRR2hrzZKdYWW3bMtkyA4VE9bFUm3zWlhmd
VmN2hGr91WtEPl2j6ep7BNK87DU/6Y8OTSMpQtlv8N7P7c+k+uQVkj7F8cJXGxCN
5NBAwJPUF6tj3qtvd7IBQo6gIbEEfiLNp/9tyHTu63a4Bs9aho058NeN48vrAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1s8xpY/KR0R8B
k70n/E6D0UWSuTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVZH
SHYzZ2ZSeUJycnFzRllIWldrZW5IajZZcG13VzJaY1VZU1NkY1U5eHcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVZH
SHYzZ2ZSeUJycnFzRllIWldrZW5IajZZcG13VzJaY1VZU1NkY1U5eHcvMS9GNUIz
Q0M2OTYzRjI5MUQxMUYwMTkzQkQyN0ZDNEU4M0QxNDU5MkI5Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB
Af8EJTAjMBIEAgABMAwDBAIt5aQDBALAkGQwDQQCAAIwBwMFACgEPHAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDBA/jMA0GCSqGSIb3DQEBCwUAA4IBAQBjHj3diFLT
Pk76hR4nxtSccZdtlqCoPMa38BsfzXLAdYhnNp/ObRfXfJ4S5Bgy3QYHvOnIrOaD
u+URH62zEENSQelcO2Ch8zgypyR1JuCGTqB5VcjwAQ4vv23lxfl8uW0sljKJkVAa
Bq28z4sL/qHa4h31/jDWM9PdHVrnQsuEbTdB1SF5hr4GX2v2dDHth+uwOPY0MXWl
6rMXDIe0DQjKf0j6MzoPmhQXSGvj7RUZfxQhuHncEs1Ju8afhRAoBDUZvlZLqcCh
94/fwMU34FVpcijNQuNo+yLbeoiRZepaPuzWztxDE4tuw7sS8OjTvpkgjv9kF8KA
T6nw3aG5EKKf
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:03:58 2025 by rpki-client