Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7A1435776A5F02FBB242DAF5A3BFA82BA492E57.cer
File:                     D7A1435776A5F02FBB242DAF5A3BFA82BA492E57.cer (raw, json)
Hash identifier:          au1JAWNIfMr2Dqs6r6+DUAZs+QVyF6ysYTUXYGVASqs=
Subject key identifier:   D7:A1:43:57:76:A5:F0:2F:BB:24:2D:AF:5A:3B:FA:82:BA:49:2E:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B124A3CCCD081E165246473A80F1B1A3EC4708F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D7A1435776A5F02FBB242DAF5A3BFA82BA492E57.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 14:17:57 +0000
Certificate not after:    Wed 10 Apr 2024 14:22:57 +0000
Subordinate resources:    AS: 265080
                          IP: 170.233.120.0/22
                          IP: 2804:3278::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:12:4a:3c:cc:d0:81:e1:65:24:64:73:a8:0f:1b:1a:3e:c4:70:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 14:17:57 2023 GMT
            Not After : Apr 10 14:22:57 2024 GMT
        Subject: CN=D7A1435776A5F02FBB242DAF5A3BFA82BA492E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:3a:de:af:19:41:50:25:15:a8:48:f2:cb:
                    d0:4c:22:d5:06:4f:5d:26:77:9f:ba:22:ec:1e:82:
                    3e:d6:14:21:6e:2f:79:b8:89:43:cb:58:fc:39:f9:
                    60:8f:ad:17:fa:21:1d:d8:2c:df:f4:74:49:33:de:
                    d0:13:fc:af:d8:b0:11:16:c9:ad:1a:da:ea:7e:8d:
                    5f:e7:29:3f:cb:a7:38:3e:be:d2:8c:be:a4:e0:d2:
                    c4:79:6c:e7:3a:de:a8:b3:21:50:77:d4:57:53:72:
                    c4:c2:9b:05:ec:16:38:d3:bd:cc:aa:fe:1f:75:8d:
                    32:19:8b:b9:3e:89:1d:fa:fb:3b:c3:c4:33:bc:ec:
                    10:e7:c0:a5:00:f8:f2:27:4f:1b:44:51:c8:da:ab:
                    46:bd:ae:1c:f1:92:4e:3e:15:e6:82:55:2b:10:28:
                    81:d3:41:82:fc:c5:86:0f:b9:ab:45:3d:35:db:4b:
                    c4:51:32:8e:7f:8e:b4:97:85:64:e3:bb:26:61:1c:
                    80:d3:fe:65:7a:7a:e7:2d:7d:fc:5a:3b:89:3a:14:
                    e7:c4:ab:94:f9:09:05:bf:f1:6b:e1:3e:dc:ee:0c:
                    ff:6e:08:49:a5:28:a8:ca:ee:fd:d3:9c:f7:5d:d9:
                    39:38:63:74:40:79:95:eb:e1:4a:88:fe:53:47:d5:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:A1:43:57:76:A5:F0:2F:BB:24:2D:AF:5A:3B:FA:82:BA:49:2E:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D7A1435776A5F02FBB242DAF5A3BFA82BA492E57.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/22
                IPv6:
                  2804:3278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265080

    Signature Algorithm: sha256WithRSAEncryption
         23:ce:45:fb:62:36:ba:f3:be:cb:a3:77:31:c6:ac:d3:c8:78:
         dd:61:31:73:29:59:55:c8:f7:e6:13:5d:ac:a5:46:88:3b:89:
         d6:5c:6d:bb:fe:a2:88:2d:4b:e2:c5:02:20:16:64:36:f9:bc:
         e2:0a:59:55:fc:35:24:dd:77:bc:c9:e1:7d:10:b7:75:d5:0d:
         1d:fd:e7:be:6f:cf:b7:56:ee:7e:a7:aa:c9:f6:97:db:a0:b1:
         49:ed:e5:68:86:26:2c:31:a3:71:ba:0f:db:03:05:2c:bb:d2:
         d2:78:e2:4c:10:1b:ac:bc:5b:09:53:8f:a1:9e:ec:56:ec:fa:
         da:67:f4:b6:19:b2:10:28:e6:d1:02:51:da:80:c3:60:7e:89:
         76:83:44:86:11:08:ca:6a:64:96:de:f4:e6:bc:18:8c:1c:28:
         b8:5b:9f:a5:38:ed:0c:a1:c8:3f:6e:19:9c:c6:9e:ee:cd:3b:
         22:d5:6b:9b:bc:ab:f2:a5:83:d5:00:14:c8:74:b8:b0:30:12:
         b1:f9:a9:b2:c2:90:a2:8e:bf:7d:77:2c:87:6f:a2:69:fd:c5:
         80:22:63:0d:5f:2a:56:4c:e8:86:26:1d:70:4d:68:b9:28:23:
         13:61:6f:63:83:82:97:7d:05:37:23:2d:46:cd:27:d7:8c:cf:
         af:40:72:21
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUOxJKPMzQgeFlJGRzqA8bGj7EcI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTIxNDE3NTdaFw0yNDA0MTAxNDIyNTdaMDMxMTAvBgNV
BAMTKEQ3QTE0MzU3NzZBNUYwMkZCQjI0MkRBRjVBM0JGQTgyQkE0OTJFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPDrerxlBUCUVqEjyy9BMItUG
T10md5+6Iuwegj7WFCFuL3m4iUPLWPw5+WCPrRf6IR3YLN/0dEkz3tAT/K/YsBEW
ya0a2up+jV/nKT/Lpzg+vtKMvqTg0sR5bOc63qizIVB31FdTcsTCmwXsFjjTvcyq
/h91jTIZi7k+iR36+zvDxDO87BDnwKUA+PInTxtEUcjaq0a9rhzxkk4+FeaCVSsQ
KIHTQYL8xYYPuatFPTXbS8RRMo5/jrSXhWTjuyZhHIDT/mV6euctffxaO4k6FOfE
q5T5CQW/8WvhPtzuDP9uCEmlKKjK7v3TnPdd2Tk4Y3RAeZXr4UqI/lNH1YldAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXoUNXdqXwL7sk
La9aO/qCukkuVzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GRlhrTGthS1hIZXJYTHBmVUFzbzczNnJRRWVucU1waXY2
UWVoRndtVTF2Vy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GRlhrTGthS1hIZXJYTHBmVUFzbzczNnJRRWVucU1waXY2
UWVoRndtVTF2Vy8wL0Q3QTE0MzU3NzZBNUYwMkZCQjI0MkRBRjVBM0JGQTgyQkE0
OTJFNTcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrpeDANBAIAAjAHAwUA
KAQyeDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC3gwDQYJKoZIhvcNAQELBQAD
ggEBACPORftiNrrzvsujdzHGrNPIeN1hMXMpWVXI9+YTXaylRog7idZcbbv+oogt
S+LFAiAWZDb5vOIKWVX8NSTdd7zJ4X0Qt3XVDR39575vz7dW7n6nqsn2l9ugsUnt
5WiGJiwxo3G6D9sDBSy70tJ44kwQG6y8WwlTj6Ge7Fbs+tpn9LYZshAo5tECUdqA
w2B+iXaDRIYRCMpqZJbe9Oa8GIwcKLhbn6U47QyhyD9uGZzGnu7NOyLVa5u8q/Kl
g9UAFMh0uLAwErH5qbLCkKKOv313LIdvomn9xYAiYw1fKlZM6IYmHXBNaLkoIxNh
b2ODgpd9BTcjLUbNJ9eMz69AciE=
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:06:03 2025 by rpki-client