Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
File:                     734B66FA6878EDCF866CF08634B1680301F14295.cer (raw, json)
Hash identifier:          pNYYeJ00198ShLeyLyEgJEBBOO6lP7pLhqWXbiHucq0=
Subject key identifier:   73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       198F146CA3B19430899BBCD31048E613AA573F1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Jan 2025 12:23:25 +0000
Certificate not after:    Mon 12 Jan 2026 12:28:25 +0000
Subordinate resources:    AS: 53086
                          IP: 187.33.192.0/20
                          IP: 2804:4fe4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8f:14:6c:a3:b1:94:30:89:9b:bc:d3:10:48:e6:13:aa:57:3f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 12:23:25 2025 GMT
            Not After : Jan 12 12:28:25 2026 GMT
        Subject: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:be:b6:b0:6b:0c:33:57:b8:db:5c:08:d4:
                    c8:76:3b:f6:06:ea:56:4c:4c:92:e6:06:b4:3b:b7:
                    aa:3f:e3:6a:e8:10:7c:21:ed:b2:be:0a:50:1e:20:
                    4b:69:53:8d:f4:e8:b5:4f:37:17:b8:73:0e:3a:31:
                    c6:4f:a0:e4:c2:38:c0:a3:f8:8d:d9:77:e4:6b:ae:
                    1d:d7:d8:37:b7:b5:77:b6:cd:b0:c1:ac:5b:50:11:
                    f3:ad:4e:98:2a:1a:e0:26:56:f3:83:83:ea:d9:03:
                    6c:3b:25:39:d1:c7:8c:f2:c4:75:06:61:42:3c:5a:
                    a2:f8:78:ae:fb:7c:95:be:ba:24:50:a2:11:6a:2e:
                    36:7e:81:14:ce:c1:18:b1:d7:e6:61:8f:39:66:e9:
                    f2:22:84:1e:29:40:c8:86:6b:e5:17:f4:db:9c:e8:
                    7e:b6:6a:0b:e0:c8:38:6a:8f:25:65:a8:c7:5e:bd:
                    92:8b:bf:4f:45:64:dd:67:61:54:70:a6:79:24:02:
                    bb:ef:28:96:32:41:8f:e9:ae:88:74:e6:9e:e0:8e:
                    54:da:e6:37:35:26:43:cf:f6:70:83:59:8b:2f:41:
                    67:70:7e:f7:cb:06:59:50:12:68:e8:56:75:34:a1:
                    f8:af:8c:03:f0:df:56:d7:e2:16:1a:b4:35:0a:62:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.192.0/20
                IPv6:
                  2804:4fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53086

    Signature Algorithm: sha256WithRSAEncryption
         b4:9f:5b:cd:44:60:d7:e7:72:8d:ce:f5:0e:2c:99:5b:20:d8:
         64:85:00:5b:5c:88:e9:22:d5:9f:2c:a5:2e:6d:93:e5:9a:7b:
         28:ce:17:e1:ed:ab:91:31:a7:23:6a:37:84:61:20:e3:49:0d:
         17:1e:cf:ac:eb:ea:c7:bb:5e:31:68:98:11:cb:7b:5f:28:2f:
         18:60:a3:04:4c:d8:18:f7:c3:a5:6c:8b:76:80:5d:5b:02:3e:
         29:45:53:72:0c:ee:44:ea:a3:2a:0b:6a:ed:0c:6d:bc:5c:32:
         3c:77:e6:a8:1d:2f:3b:7c:51:b4:06:00:2b:8f:39:3e:fa:3b:
         c6:28:23:a9:86:ed:cb:51:22:0c:3e:19:39:26:55:4f:2d:3e:
         c8:63:7f:f0:6e:b3:c9:48:1f:af:cc:47:00:82:59:2b:3a:ed:
         a7:ed:45:a1:08:25:f6:eb:fd:92:c4:1e:54:dc:6a:2a:b0:0b:
         08:0c:80:84:f6:48:53:94:7a:00:19:c9:88:93:58:97:30:33:
         f8:00:73:9e:10:a5:2a:83:64:53:91:1d:ef:2e:b0:75:ee:44:
         25:ad:b5:80:31:09:2f:9a:57:d6:5d:24:30:18:02:e3:75:6e:
         6c:a5:f9:c2:f9:73:4d:88:0d:3e:c7:f4:93:75:ab:89:94:18:
         be:09:89:f8
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGY8UbKOxlDCJm7zTEEjmE6pXPx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMTMxMjIzMjVaFw0yNjAxMTIxMjI4MjVaMDMxMTAvBgNV
BAMTKDczNEI2NkZBNjg3OEVEQ0Y4NjZDRjA4NjM0QjE2ODAzMDFGMTQyOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAkr62sGsMM1e421wI1Mh2O/YG
6lZMTJLmBrQ7t6o/42roEHwh7bK+ClAeIEtpU4306LVPNxe4cw46McZPoOTCOMCj
+I3Zd+Rrrh3X2De3tXe2zbDBrFtQEfOtTpgqGuAmVvODg+rZA2w7JTnRx4zyxHUG
YUI8WqL4eK77fJW+uiRQohFqLjZ+gRTOwRix1+Zhjzlm6fIihB4pQMiGa+UX9Nuc
6H62agvgyDhqjyVlqMdevZKLv09FZN1nYVRwpnkkArvvKJYyQY/proh05p7gjlTa
5jc1JkPP9nCDWYsvQWdwfvfLBllQEmjoVnU0ofivjAPw31bX4hYatDUKYq+lAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRzS2b6aHjtz4Zs
8IY0sWgDAfFClTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXJk
WEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJCY3IvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vy
ZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzEvNzM0
QjY2RkE2ODc4RURDRjg2NkNGMDg2MzRCMTY4MDMwMUYxNDI5NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEuyHAMA0EAgACMAcDBQAoBE/kMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDPXjANBgkqhkiG9w0BAQsFAAOCAQEAtJ9bzURg1+dyjc71
DiyZWyDYZIUAW1yI6SLVnyylLm2T5Zp7KM4X4e2rkTGnI2o3hGEg40kNFx7PrOvq
x7teMWiYEct7XygvGGCjBEzYGPfDpWyLdoBdWwI+KUVTcgzuROqjKgtq7QxtvFwy
PHfmqB0vO3xRtAYAK485Pvo7xigjqYbty1EiDD4ZOSZVTy0+yGN/8G6zyUgfr8xH
AIJZKzrtp+1FoQgl9uv9ksQeVNxqKrALCAyAhPZIU5R6ABnJiJNYlzAz+ABznhCl
KoNkU5Ed7y6wde5EJa21gDEJL5pX1l0kMBgC43VubKX5wvlzTYgNPsf0k3WriZQY
vgmJ+A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:13 2025 by rpki-client