Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer
File:                     5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer (raw, json)
Hash identifier:          uAIET5sCYsGgXVOiEqF6Z/FzQZmWNnOqtiwNkw0wMf4=
Subject key identifier:   5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       534C3011D9747AD3698D0856916869CCD17F9DFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:10:23 +0000
Certificate not after:    Thu 03 Apr 2025 00:15:23 +0000
Subordinate resources:    AS: 61610
                          IP: 187.87.28.0/22
                          IP: 200.225.48.0/21
                          IP: 2804:8ae0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4c:30:11:d9:74:7a:d3:69:8d:08:56:91:68:69:cc:d1:7f:9d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:10:23 2024 GMT
            Not After : Apr  3 00:15:23 2025 GMT
        Subject: CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:b1:68:78:a6:0b:f4:46:21:c1:41:62:39:
                    04:b1:7a:bb:72:24:94:e4:2f:49:07:69:41:3b:d1:
                    8e:f1:90:69:91:2d:ba:df:45:73:59:17:5a:c0:9b:
                    3a:2d:5a:de:0b:4d:cb:30:3b:5f:f7:1d:f7:23:67:
                    1e:9e:5e:c4:fd:fc:17:68:d5:c9:5b:37:dc:e6:82:
                    18:d3:ce:6b:c5:f2:46:c9:4f:04:5d:78:b6:58:5d:
                    8b:7a:28:fc:54:9a:01:16:56:f9:7e:20:7a:ab:1b:
                    a0:8b:41:a6:ad:00:39:87:8f:fe:63:75:ce:69:51:
                    34:2d:a9:78:37:45:d6:7d:e5:17:8f:e6:9e:36:f4:
                    21:86:32:7c:3f:a8:00:37:91:38:3f:39:86:7b:7a:
                    28:61:be:23:ce:c3:04:0a:a2:a8:ba:6b:ce:15:6d:
                    66:70:df:45:1b:9c:4a:1c:dc:11:eb:99:15:90:49:
                    a0:01:1a:17:7e:63:3e:02:ac:fe:c3:48:91:2d:86:
                    c4:66:76:a0:7c:b9:c3:77:6c:ba:35:1e:d1:24:07:
                    eb:99:d8:6d:06:4a:38:07:5f:eb:2d:8f:01:0e:d6:
                    5a:bb:ef:63:8f:af:42:15:9f:92:66:e1:6c:e9:93:
                    10:f4:f9:35:14:91:25:56:1e:2e:13:49:f4:bf:0a:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.28.0/22
                  200.225.48.0/21
                IPv6:
                  2804:8ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61610

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:38:74:3b:76:27:3e:06:5a:0c:b9:1c:7d:67:b5:92:e1:
         b3:06:0c:3f:ac:7d:f2:d5:5a:fb:30:48:4d:ff:87:a6:fa:b5:
         78:86:c9:7a:1f:23:65:e2:04:68:76:08:11:02:fa:71:21:29:
         99:10:5f:ab:73:aa:8b:bf:3d:57:89:d1:57:56:bc:3b:1c:12:
         26:af:f9:de:48:3d:a6:83:d5:a5:47:68:0c:61:70:bc:28:53:
         e8:11:7d:47:2b:dc:b9:95:9f:c0:80:cc:9f:12:0b:be:d4:21:
         ab:8b:c1:6e:5e:af:3d:14:57:47:b3:ee:8e:e3:0d:c1:1f:80:
         70:93:32:4a:40:ad:3b:86:b4:1f:7a:77:cf:f2:be:f4:95:81:
         0a:67:f1:9f:c6:43:89:43:4c:14:3c:88:66:2d:9e:a9:46:5e:
         8e:34:ec:02:b1:4b:3b:dd:bc:e4:e0:78:7e:8f:6a:89:ba:93:
         a6:dd:97:7a:1c:ff:06:ec:42:8f:8f:1b:83:a1:58:f9:1f:3e:
         e7:11:8f:be:55:49:f5:27:f0:7f:89:dc:ad:68:8a:41:6d:d8:
         f2:f0:c6:84:55:c8:ac:7c:f3:d3:e3:fa:a6:16:d3:ae:0f:b5:
         4c:06:ca:4c:ba:72:cf:50:74:00:4f:28:7e:3a:8c:1e:3d:c1:
         34:83:c3:de
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUU0wwEdl0etNpjQhWkWhpzNF/nf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMDEwMjNaFw0yNTA0MDMwMDE1MjNaMDMxMTAvBgNV
BAMTKDVBNjhCODhFMDI3RTVBMTJEQzY5RUFFQUFDMjAxMUVEMUQyODI1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9P7FoeKYL9EYhwUFiOQSxerty
JJTkL0kHaUE70Y7xkGmRLbrfRXNZF1rAmzotWt4LTcswO1/3HfcjZx6eXsT9/Bdo
1clbN9zmghjTzmvF8kbJTwRdeLZYXYt6KPxUmgEWVvl+IHqrG6CLQaatADmHj/5j
dc5pUTQtqXg3RdZ95ReP5p429CGGMnw/qAA3kTg/OYZ7eihhviPOwwQKoqi6a84V
bWZw30UbnEoc3BHrmRWQSaABGhd+Yz4CrP7DSJEthsRmdqB8ucN3bLo1HtEkB+uZ
2G0GSjgHX+stjwEO1lq772OPr0IVn5Jm4WzpkxD0+TUUkSVWHi4TSfS/CpFvAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaaLiOAn5aEtxp
6uqsIBHtHSglojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODV0
QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1
dEFtNW55TEx2U3JVZGdSdDQ0VFBZNXZSOXFUYnl6Rk1SRFVhVFZOdUZXLzEvNUE2
OEI4OEUwMjdFNUExMkRDNjlFQUVBQUMyMDExRUQxRDI4MjVBMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCu1ccAwQDyOEwMA0EAgACMAcDBQAoBIrgMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDwqjANBgkqhkiG9w0BAQsFAAOCAQEAnFI4dDt2
Jz4GWgy5HH1ntZLhswYMP6x98tVa+zBITf+Hpvq1eIbJeh8jZeIEaHYIEQL6cSEp
mRBfq3Oqi789V4nRV1a8OxwSJq/53kg9poPVpUdoDGFwvChT6BF9RyvcuZWfwIDM
nxILvtQhq4vBbl6vPRRXR7PujuMNwR+AcJMySkCtO4a0H3p3z/K+9JWBCmfxn8ZD
iUNMFDyIZi2eqUZejjTsArFLO9285OB4fo9qibqTpt2Xehz/BuxCj48bg6FY+R8+
5xGPvlVJ9Sfwf4ncrWiKQW3Y8vDGhFXIrHzz0+P6phbTrg+1TAbKTLpyz1B0AE8o
fjqMHj3BNIPD3g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:59:58 2025 by rpki-client