Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
File:                     254C729A5155256E1BAF89E48E06C4EBA96761EA.cer (raw, json)
Hash identifier:          n8bDXYy0A/S9zve8J6AH2F4xJgieoM77b/eJqbw1CRU=
Subject key identifier:   25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13625D41A872E914227DC4B4857C78E016D87A42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Apr 2024 13:22:48 +0000
Certificate not after:    Fri 25 Apr 2025 13:27:48 +0000
Subordinate resources:    AS: 271725
                          IP: 2804:8008::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:62:5d:41:a8:72:e9:14:22:7d:c4:b4:85:7c:78:e0:16:d8:7a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 26 13:22:48 2024 GMT
            Not After : Apr 25 13:27:48 2025 GMT
        Subject: CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:04:d8:88:ae:5d:89:73:94:69:a1:67:ba:
                    b9:76:1b:75:77:c3:95:cf:63:f1:eb:2d:b4:a1:c5:
                    89:49:36:45:e0:8d:00:13:8a:57:1b:2f:36:22:b4:
                    fe:e7:7f:b1:67:47:73:01:d3:06:72:9d:30:ec:31:
                    c9:5c:dc:4a:1c:bd:b6:31:f1:46:b0:b0:1a:c5:85:
                    92:0e:99:8d:ad:17:a7:b8:1e:30:74:33:8c:26:87:
                    04:cb:0c:45:6d:dc:6c:75:fa:58:44:55:43:45:92:
                    e9:15:e6:86:af:d9:51:ee:e1:d6:5b:20:0f:bd:90:
                    de:56:e5:af:dc:21:19:50:d3:93:36:a6:bb:5b:af:
                    b1:f5:2a:1f:43:c2:61:ed:2f:24:7c:c0:47:06:05:
                    2c:69:ff:4f:7b:bf:c3:7d:e1:be:c4:0f:04:2c:0f:
                    01:e8:c0:b5:19:65:69:80:24:94:1a:74:b7:db:33:
                    1e:91:bf:1b:be:86:a8:a5:37:74:c7:76:9c:1e:f2:
                    7c:96:5b:d1:1c:a5:45:06:e0:11:a7:2b:62:28:47:
                    64:7c:3a:3d:eb:03:ed:84:f8:97:c4:91:32:aa:f1:
                    1a:57:d7:fd:cb:42:b5:8e:c2:0a:a3:8a:34:39:6a:
                    b6:7d:cc:5c:36:3a:0a:d3:3a:b3:d2:fb:d1:f2:54:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271725

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:47:cb:cf:71:b6:d4:8a:b4:d0:92:30:48:e5:7a:40:a7:
         0d:81:ca:b9:28:45:4f:98:b3:62:55:b9:20:91:4a:9d:06:37:
         40:f4:43:e6:94:fc:b0:49:dc:fb:d4:d2:e4:5a:4b:44:08:bd:
         11:bc:9f:0d:c0:a5:8e:d3:d4:e0:8b:bc:82:74:80:fc:96:f0:
         be:24:22:15:ad:f4:c9:b1:c8:0b:35:e2:0e:64:bf:f2:7f:a8:
         5f:e8:82:53:dc:4b:74:c0:d3:18:5f:3a:d7:26:5d:1a:b7:f5:
         e3:75:50:2e:38:ef:51:a1:98:43:d2:f9:bf:1d:a6:58:52:c8:
         7a:34:77:20:20:77:f2:fd:34:c1:fe:b9:99:cd:32:6e:e9:61:
         e2:8f:b7:78:c5:2a:06:f2:2f:38:79:94:d1:4d:2d:59:01:85:
         16:7e:78:f1:dd:51:81:3e:af:82:e5:5f:f4:21:54:7f:69:b1:
         2d:76:e9:d2:42:a0:0b:e3:43:44:0d:b1:4b:26:0c:ad:60:27:
         f2:9d:52:a6:3e:d6:6a:38:95:e4:3c:d5:de:dc:cd:c3:2c:18:
         50:13:b7:68:0e:17:89:9a:b8:a2:eb:4f:a6:42:c7:1f:5a:ab:
         86:de:2b:07:9b:ad:7a:07:dc:22:58:8d:e4:ad:ef:81:77:9d:
         c3:20:da:e4
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUE2JdQahy6RQifcS0hXx44BbYekIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjYxMzIyNDhaFw0yNTA0MjUxMzI3NDhaMDMxMTAvBgNV
BAMTKDI1NEM3MjlBNTE1NTI1NkUxQkFGODlFNDhFMDZDNEVCQTk2NzYxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYATYiK5diXOUaaFnurl2G3V3
w5XPY/HrLbShxYlJNkXgjQATilcbLzYitP7nf7FnR3MB0wZynTDsMclc3EocvbYx
8UawsBrFhZIOmY2tF6e4HjB0M4wmhwTLDEVt3Gx1+lhEVUNFkukV5oav2VHu4dZb
IA+9kN5W5a/cIRlQ05M2prtbr7H1Kh9DwmHtLyR8wEcGBSxp/097v8N94b7EDwQs
DwHowLUZZWmAJJQadLfbMx6Rvxu+hqilN3THdpwe8nyWW9EcpUUG4BGnK2IoR2R8
Oj3rA+2E+JfEkTKq8RpX1/3LQrWOwgqjijQ5arZ9zFw2OgrTOrPS+9HyVKq/AgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlTHKaUVUlbhuv
ieSOBsTrqWdh6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2U3
Z0trWDlTNnh5aXgyWXFLclRIM0h4Yjl3M0N5U2FtMWFVQlhVa3VjRUEvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2U3
Z0trWDlTNnh5aXgyWXFLclRIM0h4Yjl3M0N5U2FtMWFVQlhVa3VjRUEvMC8yNTRD
NzI5QTUxNTUyNTZFMUJBRjg5RTQ4RTA2QzRFQkE5Njc2MUVBLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBIAIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQl
bTANBgkqhkiG9w0BAQsFAAOCAQEAtxlHy89xttSKtNCSMEjlekCnDYHKuShFT5iz
YlW5IJFKnQY3QPRD5pT8sEnc+9TS5FpLRAi9EbyfDcCljtPU4Iu8gnSA/JbwviQi
Fa30ybHICzXiDmS/8n+oX+iCU9xLdMDTGF861yZdGrf143VQLjjvUaGYQ9L5vx2m
WFLIejR3ICB38v00wf65mc0ybulh4o+3eMUqBvIvOHmU0U0tWQGFFn548d1RgT6v
guVf9CFUf2mxLXbp0kKgC+NDRA2xSyYMrWAn8p1Spj7WajiV5DzV3tzNwywYUBO3
aA4XiZq4outPpkLHH1qrht4rB5utegfcIliN5K3vgXedwyDa5A==
-----END CERTIFICATE-----