Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
File:                     2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer (raw, json)
Hash identifier:          zSQHUY7TWEKaQZeeG1bZ6r4kegZ+w5fn47VtKnUePNE=
Subject key identifier:   2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       559308DEEE79C14ABCCD61A5B2F16892469CA68E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:43:05 +0000
Certificate not after:    Wed 02 Apr 2025 22:48:05 +0000
Subordinate resources:    AS: 28186
                          IP: 138.117.176.0/22
                          IP: 177.8.224.0/20
                          IP: 177.21.0.0/19
                          IP: 177.23.80.0/21
                          IP: 177.136.112.0/20
                          IP: 187.44.128.0/17
                          IP: 189.89.128.0/18
                          IP: 201.55.192.0/22
                          IP: 2804:204::/32
                          IP: 2804:24dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:93:08:de:ee:79:c1:4a:bc:cd:61:a5:b2:f1:68:92:46:9c:a6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:43:05 2024 GMT
            Not After : Apr  2 22:48:05 2025 GMT
        Subject: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:40:47:26:6d:7f:2c:85:40:23:1b:1d:45:
                    f1:a1:80:6f:fb:80:fe:c1:a0:d7:a8:96:46:42:f4:
                    9c:27:6a:a0:8e:3d:57:1b:80:ef:67:76:67:bf:e2:
                    c7:74:fe:d5:5c:3d:e1:3c:ab:7a:ac:36:59:b0:db:
                    55:3e:7e:b5:81:02:0d:36:86:be:28:9b:81:81:48:
                    c0:6f:5d:36:5d:63:9f:b3:47:54:34:36:8e:2a:11:
                    a5:7c:39:3c:e5:eb:5e:ae:6b:b6:d6:33:2f:65:ab:
                    ab:8e:32:49:d8:dc:66:b7:73:76:9d:e7:d0:a1:de:
                    8d:0c:07:3e:47:42:f6:48:b1:d9:e3:2e:9a:1a:bb:
                    1e:9b:50:c0:5c:11:b8:0c:cc:b2:02:64:49:d0:71:
                    47:e9:ae:96:8a:7f:42:ef:02:81:25:8e:03:a6:e6:
                    4e:4b:2a:d9:ef:67:ff:21:c1:de:3f:60:64:8b:b0:
                    14:89:2b:1b:dc:f5:b7:95:53:97:2c:df:d6:98:af:
                    90:0c:77:b3:1f:5f:3e:f8:48:b7:90:32:81:25:8f:
                    7e:a0:2d:16:3c:2a:10:8c:09:6a:f5:81:72:8c:ec:
                    9b:97:66:4a:c8:71:10:bc:b0:18:35:2f:35:f6:c6:
                    4a:9d:d6:dc:d6:a3:5a:32:12:85:22:ef:61:67:1d:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.176.0/22
                  177.8.224.0/20
                  177.21.0.0/19
                  177.23.80.0/21
                  177.136.112.0/20
                  187.44.128.0/17
                  189.89.128.0/18
                  201.55.192.0/22
                IPv6:
                  2804:204::/32
                  2804:24dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28186

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:ff:4e:42:50:d7:3d:46:50:a7:6f:82:48:4e:01:7c:f0:
         ed:37:ba:b7:93:a3:67:1b:fc:f0:20:0a:37:e1:f0:70:70:55:
         ac:e3:ae:ab:2e:f1:9a:0f:b9:ac:b8:71:30:d2:fa:f8:f7:3e:
         d1:1d:78:14:04:fe:1a:62:92:66:dd:a1:02:09:35:17:83:a2:
         bb:58:f6:fe:b2:a5:09:db:b7:2b:d6:3b:9e:aa:cd:7e:6f:18:
         49:8a:81:a7:75:7a:40:d6:2d:34:f1:93:aa:9f:4a:37:b0:11:
         39:a3:71:84:71:2b:91:9b:3f:b2:f6:0a:c3:ae:2d:8e:7b:2f:
         9f:d4:6b:77:74:0c:2a:47:04:11:56:0e:89:cb:78:ea:d6:50:
         a3:e0:2d:b8:99:88:a8:aa:83:b0:3a:01:0c:f5:21:d5:62:4a:
         cf:5f:68:1a:6f:6d:d8:1d:d8:8e:c1:12:c3:a3:3b:35:8d:62:
         67:ee:7f:86:3b:a5:16:7e:1e:60:6f:58:f7:12:d2:b2:ac:5a:
         e4:2f:00:35:54:a1:16:f9:3d:0b:b6:94:c7:1b:97:a8:43:da:
         8d:09:5d:50:59:30:c3:7f:17:e0:4c:5a:83:bf:37:a1:cf:05:
         4a:77:c4:ad:fd:0b:9d:30:61:bc:1a:ff:c2:17:21:89:88:be:
         da:86:1d:95
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUVZMI3u55wUq8zWGlsvFokkacpo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMjQzMDVaFw0yNTA0MDIyMjQ4MDVaMDMxMTAvBgNV
BAMTKDJFODFGMjk1NkU1QzE5NThDMUY1MzhBMUFBQTk5OTREQ0I4M0RBMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6EBHJm1/LIVAIxsdRfGhgG/7
gP7BoNeolkZC9JwnaqCOPVcbgO9ndme/4sd0/tVcPeE8q3qsNlmw21U+frWBAg02
hr4om4GBSMBvXTZdY5+zR1Q0No4qEaV8OTzl616ua7bWMy9lq6uOMknY3Ga3c3ad
59Ch3o0MBz5HQvZIsdnjLpoaux6bUMBcEbgMzLICZEnQcUfprpaKf0LvAoEljgOm
5k5LKtnvZ/8hwd4/YGSLsBSJKxvc9beVU5cs39aYr5AMd7MfXz74SLeQMoElj36g
LRY8KhCMCWr1gXKM7JuXZkrIcRC8sBg1LzX2xkqd1tzWo1oyEoUi72FnHR37AgMB
AAGjggNqMIIDZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQugfKVblwZWMH1
OKGqqZlNy4PaITAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOE5U
ZUFyWW5aNHBWY2lXYjRKbnJoczZWTDRpTFlkeEg0eUZRR1ZoZTlFdnkvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhO
VGVBclluWjRwVmNpV2I0Sm5yaHM2Vkw0aUxZZHhINHlGUUdWaGU5RXZ5LzEvMkU4
MUYyOTU2RTVDMTk1OEMxRjUzOEExQUFBOTk5NERDQjgzREEyMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEH
AQH/BFAwTjA2BAIAATAwAwQCinWwAwQEsQjgAwQFsRUAAwQDsRdQAwQEsYhwAwQH
uyyAAwQGvVmAAwQCyTfAMBQEAgACMA4DBQAoBAIEAwUAKAQk3DAZBggrBgEFBQcB
CAEB/wQKMAigBjAEAgJuGjANBgkqhkiG9w0BAQsFAAOCAQEArQH/TkJQ1z1GUKdv
gkhOAXzw7Te6t5OjZxv88CAKN+HwcHBVrOOuqy7xmg+5rLhxMNL6+Pc+0R14FAT+
GmKSZt2hAgk1F4Oiu1j2/rKlCdu3K9Y7nqrNfm8YSYqBp3V6QNYtNPGTqp9KN7AR
OaNxhHErkZs/svYKw64tjnsvn9Rrd3QMKkcEEVYOict46tZQo+AtuJmIqKqDsDoB
DPUh1WJKz19oGm9t2B3YjsESw6M7NY1iZ+5/hjulFn4eYG9Y9xLSsqxa5C8ANVSh
Fvk9C7aUxxuXqEPajQldUFkww38X4Exag783oc8FSnfErf0LnTBhvBr/whchiYi+
2oYdlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:26 2025 by rpki-client