Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
File:                     58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer (raw, json)
Hash identifier:          q3Mc2XfkEy+lFIGKlysURhPh6hdFSMCsw/o/S22p+LY=
Subject key identifier:   58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19561BDCDC6EFA7A53BA250313747C3D07F79A0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:47 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:47 +0000
Subordinate resources:    AS: 262499
                          IP: 177.66.152.0/22
                          IP: 2804:860::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:56:1b:dc:dc:6e:fa:7a:53:ba:25:03:13:74:7c:3d:07:f7:9a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:47 2024 GMT
            Not After : Apr  2 18:32:47 2025 GMT
        Subject: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:88:e4:a0:5d:f0:5f:67:b4:0d:5b:62:cc:
                    54:07:d0:40:c3:41:f8:bf:31:15:35:0a:57:2a:9c:
                    7c:67:70:d6:3b:a5:20:25:94:08:d5:e4:b0:bb:13:
                    45:fa:07:ca:1c:cd:e2:ff:39:f5:e7:a7:2b:16:ea:
                    13:19:19:fc:29:25:30:fb:ac:25:f0:a1:a2:86:95:
                    f1:5a:91:c9:8e:49:cf:b4:96:41:d3:97:09:d1:22:
                    07:b9:c5:2b:65:61:63:52:79:bb:ae:4a:4d:ef:72:
                    8f:ab:5d:e7:6e:05:34:49:ec:98:57:c7:35:61:c2:
                    eb:52:b9:5a:34:54:76:48:1a:50:f5:05:68:d1:fe:
                    82:87:37:e4:1d:26:56:93:bf:89:00:5c:b4:6f:de:
                    11:a2:21:9b:60:8f:40:e9:c2:24:06:9e:b3:f1:05:
                    19:71:b3:6d:c5:23:8d:c4:43:d1:7c:bb:fd:e5:ac:
                    83:9d:01:69:a3:9c:e2:59:a6:d4:31:21:55:a1:29:
                    6e:4d:15:1f:a4:34:9f:79:02:29:15:12:39:80:b8:
                    b7:b2:3f:aa:b4:61:d7:32:0e:b4:07:d6:a1:72:ce:
                    f5:dc:fb:5d:be:dd:d1:81:90:56:e5:71:67:4c:04:
                    be:df:b4:73:99:5b:67:e1:18:25:77:e6:4c:d9:b6:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.152.0/22
                IPv6:
                  2804:860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262499

    Signature Algorithm: sha256WithRSAEncryption
         35:80:13:3e:9d:8a:e7:1d:c4:19:c3:60:4e:dd:a1:e4:27:79:
         3f:08:9d:de:d9:dd:16:18:05:c4:a3:16:66:17:e4:f0:52:13:
         5d:7c:64:73:f8:9d:75:9c:0a:22:d5:74:d4:d7:3f:6d:76:2a:
         dc:97:89:81:d8:37:26:10:2e:a1:53:c7:59:d2:1a:35:c5:21:
         6f:3c:5e:70:03:ff:e1:69:89:5f:89:13:f6:1a:97:b0:d7:43:
         ab:4e:de:8e:6b:57:4b:56:8b:04:48:ad:8d:03:2c:43:13:7e:
         85:78:17:c1:de:f4:68:4e:af:14:4f:5d:11:9c:98:33:d4:c2:
         00:2e:c3:98:62:97:a5:09:64:41:64:de:20:91:ac:34:4a:75:
         86:ee:40:93:f7:ab:53:3b:31:b6:c2:c6:84:c2:9b:3b:e9:20:
         94:6f:ff:6f:b8:51:6a:c2:35:2c:c9:ef:bc:8f:54:52:96:dd:
         ee:1b:bc:a3:a6:ec:d2:8f:d1:86:3a:33:d2:da:b5:3c:0e:26:
         2e:01:8d:2e:bb:8a:39:ad:0e:45:0c:2a:27:e6:a1:d0:ed:bc:
         74:a0:db:4f:d6:30:b6:95:b0:39:48:a8:b3:b2:17:33:7d:3f:
         b5:1d:9b:a6:ef:86:44:4e:7c:21:48:50:96:d6:ae:ad:ea:8a:
         44:7b:3f:5a
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUGVYb3Nxu+npTuiUDE3R8PQf3mgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI3NDdaFw0yNTA0MDIxODMyNDdaMDMxMTAvBgNV
BAMTKDU4QTMyNkQ4NjQ2NTNEQUU4QkVGM0FDNDFEOEI5Q0I3MEVCREQxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjYjkoF3wX2e0DVtizFQH0EDD
Qfi/MRU1ClcqnHxncNY7pSAllAjV5LC7E0X6B8oczeL/OfXnpysW6hMZGfwpJTD7
rCXwoaKGlfFakcmOSc+0lkHTlwnRIge5xStlYWNSebuuSk3vco+rXeduBTRJ7JhX
xzVhwutSuVo0VHZIGlD1BWjR/oKHN+QdJlaTv4kAXLRv3hGiIZtgj0DpwiQGnrPx
BRlxs23FI43EQ9F8u/3lrIOdAWmjnOJZptQxIVWhKW5NFR+kNJ95AikVEjmAuLey
P6q0YdcyDrQH1qFyzvXc+12+3dGBkFblcWdMBL7ftHOZW2fhGCV35kzZtq5jAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRYoybYZGU9rovv
OsQdi5y3Dr3RyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDZ6
NUR1TDhBaW8zc1p0RUptc1BpZFdSSGdrSEwzdW5reHhjQ1RNeWRDQVkvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDZ6
NUR1TDhBaW8zc1p0RUptc1BpZFdSSGdrSEwzdW5reHhjQ1RNeWRDQVkvMS81OEEz
MjZEODY0NjUzREFFOEJFRjNBQzQxRDhCOUNCNzBFQkREMUM4Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKxQpgwDQQCAAIwBwMFACgECGAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBAFjMA0GCSqGSIb3DQEBCwUAA4IBAQA1gBM+nYrnHcQZw2BO
3aHkJ3k/CJ3e2d0WGAXEoxZmF+TwUhNdfGRz+J11nAoi1XTU1z9tdircl4mB2Dcm
EC6hU8dZ0ho1xSFvPF5wA//haYlfiRP2Gpew10OrTt6Oa1dLVosESK2NAyxDE36F
eBfB3vRoTq8UT10RnJgz1MIALsOYYpelCWRBZN4gkaw0SnWG7kCT96tTOzG2wsaE
wps76SCUb/9vuFFqwjUsye+8j1RSlt3uG7yjpuzSj9GGOjPS2rU8DiYuAY0uu4o5
rQ5FDCon5qHQ7bx0oNtP1jC2lbA5SKizshczfT+1HZum74ZETnwhSFCW1q6t6opE
ez9a
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:19:54 2025 by rpki-client