Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
File:                     9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer (raw, json)
Hash identifier:          Q0Yx2aQ3n/4qj+gP5TzbvYd60GzQbqiIc01zxdP1XxQ=
Subject key identifier:   9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       021A4D4CF434517B984D9ACAF3340E675D71F59F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 03:32:48 +0000
Certificate not after:    Fri 04 Apr 2025 03:37:48 +0000
Subordinate resources:    AS: 267328
                          IP: 45.233.152.0/22
                          IP: 2804:4bc4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1a:4d:4c:f4:34:51:7b:98:4d:9a:ca:f3:34:0e:67:5d:71:f5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 03:32:48 2024 GMT
            Not After : Apr  4 03:37:48 2025 GMT
        Subject: CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:48:2f:e5:18:4e:e3:2e:97:5e:0e:cd:9f:
                    45:91:51:fa:a0:43:a6:58:c4:86:01:cb:66:ba:16:
                    bc:8f:af:de:76:29:7a:85:d2:f3:f1:6b:9d:5a:69:
                    55:b6:a5:84:70:45:4b:15:bf:ac:5d:9d:a7:0c:c7:
                    84:d8:9a:20:8c:04:a6:6e:a1:26:ce:f8:64:9f:98:
                    b3:de:72:38:fc:16:92:4a:22:b5:43:1b:26:60:50:
                    ae:e3:6c:cc:20:a0:03:ed:51:cf:63:13:92:d4:b0:
                    57:84:60:90:8c:45:d7:6f:54:ac:84:85:81:55:3c:
                    87:9a:67:4d:2e:ab:cb:5b:5a:4f:1d:67:f2:b9:50:
                    90:bc:6e:39:ff:bb:34:e0:9b:de:50:40:c6:4f:6a:
                    95:bb:be:48:66:8b:78:3a:08:a0:23:27:35:d6:a0:
                    e5:e7:3f:8a:5f:93:ae:31:42:6d:75:4e:a4:19:e5:
                    70:ef:90:14:00:6c:12:bc:e7:51:a2:94:b3:46:7e:
                    4a:c1:a7:0c:5a:49:12:38:66:9a:65:f3:23:0c:8c:
                    16:dd:6c:41:71:95:21:20:b8:6d:8d:77:c3:ae:0f:
                    b0:5a:39:8f:63:59:c2:89:32:7c:49:1e:13:d9:e5:
                    a4:25:d6:12:54:5a:a1:ba:54:bb:2e:10:80:14:94:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.152.0/22
                IPv6:
                  2804:4bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267328

    Signature Algorithm: sha256WithRSAEncryption
         a0:b5:28:10:f2:a9:e3:f9:a7:cb:ad:e4:86:dc:f9:1c:a4:59:
         b6:b4:16:57:8a:4c:f1:d1:96:6b:0b:70:06:a7:e3:8e:ed:2a:
         d5:31:86:8b:a8:42:83:af:db:04:b8:57:11:75:93:30:2f:23:
         a3:f0:be:c0:01:04:31:74:f4:fd:cb:90:19:bd:7f:f5:1b:9f:
         6b:c5:64:33:bb:d9:f9:d3:d1:53:58:1f:42:2c:8c:4e:56:7a:
         cf:70:b8:d5:1f:58:5d:86:da:2c:3e:bf:b3:52:86:ea:44:e5:
         20:8f:62:ba:6b:f4:62:38:2b:cf:fa:35:03:0e:75:61:62:eb:
         6c:09:06:7a:99:38:74:a6:3e:e0:3e:a2:a6:16:d6:ce:1a:df:
         ce:72:05:4d:a7:91:8b:f5:53:db:37:a8:a8:a8:a3:2a:ca:4c:
         fe:13:20:35:d4:f7:89:c3:ce:28:55:e3:19:1e:f1:ac:5e:80:
         92:4c:b8:47:80:fa:08:c8:25:d3:fd:9a:a1:55:4e:a8:c8:5c:
         a7:a1:14:57:05:85:2d:fe:0f:d1:21:56:1e:5e:6c:a8:c2:67:
         a0:b9:c4:f0:1d:81:0f:7a:da:00:46:d3:77:ca:32:af:c4:6f:
         46:d3:ee:5c:02:ca:59:85:88:4d:b1:eb:55:fb:22:56:3e:73:
         d6:9b:88:09
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUAhpNTPQ0UXuYTZrK8zQOZ11x9Z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDUwMzMyNDhaFw0yNTA0MDQwMzM3NDhaMDMxMTAvBgNV
BAMTKDlBQTY5MzIyNEU3ODVGM0QwMzc2RkEwMUNDRDQ2RTdBN0RBNENFNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9akgv5RhO4y6XXg7Nn0WRUfqg
Q6ZYxIYBy2a6FryPr952KXqF0vPxa51aaVW2pYRwRUsVv6xdnacMx4TYmiCMBKZu
oSbO+GSfmLPecjj8FpJKIrVDGyZgUK7jbMwgoAPtUc9jE5LUsFeEYJCMRddvVKyE
hYFVPIeaZ00uq8tbWk8dZ/K5UJC8bjn/uzTgm95QQMZPapW7vkhmi3g6CKAjJzXW
oOXnP4pfk64xQm11TqQZ5XDvkBQAbBK851GilLNGfkrBpwxaSRI4Zppl8yMMjBbd
bEFxlSEguG2Nd8OuD7BaOY9jWcKJMnxJHhPZ5aQl1hJUWqG6VLsuEIAUlJTtAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSappMiTnhfPQN2
+gHM1G56faTOYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNURZ
WkdiUDhyZk1KWDlNY0xnU2ZDQUw4WUZTYWRFd3NnSDVaUGEyQmhnQVUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVE
WVpHYlA4cmZNSlg5TWNMZ1NmQ0FMOFlGU2FkRXdzZ0g1WlBhMkJoZ0FVLzEvOUFB
NjkzMjI0RTc4NUYzRDAzNzZGQTAxQ0NENDZFN0E3REE0Q0U2MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLemYMA0EAgACMAcDBQAoBEvEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQUQDANBgkqhkiG9w0BAQsFAAOCAQEAoLUoEPKp4/mny63k
htz5HKRZtrQWV4pM8dGWawtwBqfjju0q1TGGi6hCg6/bBLhXEXWTMC8jo/C+wAEE
MXT0/cuQGb1/9Rufa8VkM7vZ+dPRU1gfQiyMTlZ6z3C41R9YXYbaLD6/s1KG6kTl
II9iumv0Yjgrz/o1Aw51YWLrbAkGepk4dKY+4D6iphbWzhrfznIFTaeRi/VT2zeo
qKijKspM/hMgNdT3icPOKFXjGR7xrF6Akky4R4D6CMgl0/2aoVVOqMhcp6EUVwWF
Lf4P0SFWHl5sqMJnoLnE8B2BD3raAEbTd8oyr8RvRtPuXALKWYWITbHrVfsiVj5z
1puICQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:12 2025 by rpki-client