Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer
File:                     AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer (raw, json)
Hash identifier:          SwxZv7Od2sj4GZ4X50YgS8R1Y32kfRgS4AdJIBQqsQU=
Subject key identifier:   AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01AAAC6655141B8C4182130B652B2A3C5F555928
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Jan 2025 13:15:28 +0000
Certificate not after:    Wed 21 Jan 2026 13:20:28 +0000
Subordinate resources:    AS: 53163
                          IP: 177.137.176.0/20
                          IP: 187.1.112.0/20
                          IP: 2804:1030::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:aa:ac:66:55:14:1b:8c:41:82:13:0b:65:2b:2a:3c:5f:55:59:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 22 13:15:28 2025 GMT
            Not After : Jan 21 13:20:28 2026 GMT
        Subject: CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:fd:ff:b4:e8:c1:f2:87:7c:e2:b7:32:3a:
                    db:63:72:63:a1:a7:3f:7c:19:f6:47:0e:b3:d3:84:
                    85:95:0b:7b:a3:99:c9:34:00:75:a8:f4:61:02:a2:
                    43:9e:c7:12:b0:fd:fe:c2:26:5a:92:e3:0b:30:b7:
                    ac:fb:66:e7:20:0b:93:91:3d:a5:bb:0f:77:c1:c3:
                    0b:0e:c8:e8:03:8d:e9:93:98:2f:97:9f:51:34:b9:
                    48:55:2f:06:76:9c:78:88:86:da:a1:a4:95:8c:fe:
                    02:ed:62:16:c1:e4:ac:58:d3:ea:59:13:f7:7a:ca:
                    d5:a0:c2:e5:70:fa:64:35:de:3f:8f:11:28:35:31:
                    ce:1a:39:fd:db:21:37:f9:41:0c:ce:0f:87:24:45:
                    c3:43:f6:4d:19:32:27:15:0a:bf:5c:bb:9f:d3:9d:
                    ab:94:6e:bc:a9:2e:df:0e:eb:48:75:4a:e0:52:4a:
                    03:87:f6:b9:cd:09:82:95:94:2f:2d:ee:32:7c:7e:
                    28:2f:1e:d2:f7:a7:6d:11:cf:fa:df:a6:a8:f8:61:
                    d5:2a:4d:60:1e:3e:c9:7c:02:16:e4:ef:7c:bb:a9:
                    9c:d6:40:2d:7e:cd:79:ad:5a:e8:de:e4:21:59:f2:
                    bb:2f:10:50:87:6c:00:38:a6:3e:95:4c:53:3f:c1:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.176.0/20
                  187.1.112.0/20
                IPv6:
                  2804:1030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53163

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:b8:b4:1d:1a:83:ba:97:d0:1c:0d:61:ad:aa:96:d5:5d:
         b5:de:dd:dc:93:bb:f0:d8:ff:46:0a:4e:d4:52:26:64:1a:cc:
         02:11:e9:be:b9:22:92:b9:58:cb:c8:bf:ad:27:59:5b:fe:6c:
         c2:a3:56:64:69:de:b9:05:5f:5f:ce:c6:4a:00:99:9a:58:28:
         78:63:14:90:ef:d9:d1:c5:37:34:09:9c:4e:eb:da:29:91:27:
         a3:45:1f:1f:68:95:88:20:14:01:29:88:74:09:ce:cd:e1:2e:
         94:e9:f1:11:69:b8:03:7f:8f:59:f8:eb:81:a1:84:e2:3a:7e:
         9a:52:48:58:97:28:d1:a1:1e:b5:ed:9a:1d:98:ca:e3:d3:39:
         8d:0e:04:64:13:9e:fc:7e:2c:e0:11:8a:ba:81:0e:a6:4c:c8:
         45:fc:bf:4d:b9:79:6b:a1:fb:8a:b8:d0:cd:9f:31:33:52:0b:
         fe:92:98:71:99:89:99:fc:77:b3:f3:31:3c:ac:f0:31:6f:90:
         00:3a:c6:62:a9:af:29:da:6f:c2:42:6b:79:db:ff:30:75:5a:
         82:34:b2:51:08:dd:69:39:94:32:f7:7c:1f:63:a9:3e:20:44:
         34:43:49:72:ad:b3:c2:f2:e5:d5:ff:04:5f:29:73:49:29:2b:
         0e:9d:f4:8f
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUAaqsZlUUG4xBghMLZSsqPF9VWSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjIxMzE1MjhaFw0yNjAxMjExMzIwMjhaMDMxMTAvBgNV
BAMTKEFBNkJEQkE4QTc5ODhDMzk0OEFFRjE3QTk1MjQ1ODUxOUEwMjZCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2/3/tOjB8od84rcyOttjcmOh
pz98GfZHDrPThIWVC3ujmck0AHWo9GECokOexxKw/f7CJlqS4wswt6z7ZucgC5OR
PaW7D3fBwwsOyOgDjemTmC+Xn1E0uUhVLwZ2nHiIhtqhpJWM/gLtYhbB5KxY0+pZ
E/d6ytWgwuVw+mQ13j+PESg1Mc4aOf3bITf5QQzOD4ckRcND9k0ZMicVCr9cu5/T
nauUbrypLt8O60h1SuBSSgOH9rnNCYKVlC8t7jJ8figvHtL3p20Rz/rfpqj4YdUq
TWAePsl8Ahbk73y7qZzWQC1+zXmtWuje5CFZ8rsvEFCHbAA4pj6VTFM/wYuDAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqa9uop5iMOUiu
8XqVJFhRmgJrjjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnA2
VG1SQnBXb21pYUxwVmZ3ZTlNUDIxR3hwWEJpc0pNRHc1ZFZaWUU1aXQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zw
NlRtUkJwV29taWFMcFZmd2U5TVAyMUd4cFhCaXNKTUR3NWRWWllFNWl0LzAvQUE2
QkRCQThBNzk4OEMzOTQ4QUVGMTdBOTUyNDU4NTE5QTAyNkI4RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQEsYmwAwQEuwFwMA0EAgACMAcDBQAoBBAwMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDPqzANBgkqhkiG9w0BAQsFAAOCAQEAaqe4tB0a
g7qX0BwNYa2qltVdtd7d3JO78Nj/RgpO1FImZBrMAhHpvrkikrlYy8i/rSdZW/5s
wqNWZGneuQVfX87GSgCZmlgoeGMUkO/Z0cU3NAmcTuvaKZEno0UfH2iViCAUASmI
dAnOzeEulOnxEWm4A3+PWfjrgaGE4jp+mlJIWJco0aEete2aHZjK49M5jQ4EZBOe
/H4s4BGKuoEOpkzIRfy/Tbl5a6H7irjQzZ8xM1IL/pKYcZmJmfx3s/MxPKzwMW+Q
ADrGYqmvKdpvwkJredv/MHVagjSyUQjdaTmUMvd8H2OpPiBENENJcq2zwvLl1f8E
XylzSSkrDp30jw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:21:47 2025 by rpki-client