Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
File:                     088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer (raw, json)
Hash identifier:          WOquHhCNWTLHn3NQBG33/nWbxLYQd91byaF8pkCM0eA=
Subject key identifier:   08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2743309A06E1F3E240FED93411A45FA1365142C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 15:06:13 +0000
Certificate not after:    Sat 06 Apr 2024 15:11:13 +0000
Subordinate resources:    AS: 268126
                          IP: 45.169.228.0/22
                          IP: 2804:5864::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:43:30:9a:06:e1:f3:e2:40:fe:d9:34:11:a4:5f:a1:36:51:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 15:06:13 2023 GMT
            Not After : Apr  6 15:11:13 2024 GMT
        Subject: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:24:1e:bc:7c:9d:95:0e:95:6a:fa:3e:05:ea:
                    4d:93:ba:c9:2d:21:9c:02:62:3f:7f:9d:64:30:04:
                    88:c2:e5:39:c2:f9:c3:14:57:b4:b1:8e:bf:79:eb:
                    e0:6f:72:52:c1:f4:71:0f:e7:d1:ee:29:84:76:63:
                    25:d0:52:d3:3f:dc:95:08:9f:90:28:ac:cb:b4:51:
                    6f:d3:52:59:88:97:17:1b:50:90:ee:5c:b4:a5:15:
                    69:4f:fd:47:5d:e3:d8:3c:d1:81:60:77:0a:f7:c6:
                    76:1e:4c:d4:05:6e:73:39:22:e5:d7:69:00:88:4e:
                    bc:22:70:13:3e:c2:c1:42:69:5c:6c:9d:ab:78:e0:
                    ad:e1:ed:d9:74:89:64:5a:9a:b9:86:fc:0a:e0:9b:
                    68:20:2c:2d:26:8e:1a:e3:62:cd:de:0a:92:ca:e4:
                    87:fa:37:93:b3:3a:13:34:9d:74:65:ea:90:ea:a3:
                    68:c8:4a:af:12:2e:94:46:45:16:41:ca:15:6d:c4:
                    22:24:b8:f7:6d:99:8d:93:63:ed:d2:08:d1:49:6e:
                    a6:8b:d0:86:eb:8f:22:e8:ef:3b:2f:11:b2:38:a2:
                    ce:8f:f4:a9:90:cf:ed:5c:93:6d:d1:12:50:c2:d6:
                    83:65:e8:24:a5:b0:47:bf:76:05:2d:c9:00:0b:f3:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22
                IPv6:
                  2804:5864::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268126

    Signature Algorithm: sha256WithRSAEncryption
         0f:44:88:0f:b2:b8:ce:a5:11:97:c7:f3:75:fb:64:d2:f1:ca:
         a7:e0:5b:82:84:1e:b5:fd:cb:ae:6c:62:08:de:90:58:8a:fe:
         e6:82:88:07:99:48:c9:0b:43:3f:e7:d2:13:09:e9:fd:58:88:
         19:87:9e:bd:24:b8:2d:22:9c:92:98:de:db:60:88:ab:1d:03:
         2b:be:a2:43:69:17:11:81:e8:dc:10:53:51:92:29:72:46:e4:
         b6:5d:91:53:b2:fa:cf:eb:82:ec:d2:00:3c:9d:7a:0b:90:db:
         53:f9:88:d0:11:2e:6c:68:6d:9d:ea:72:dd:90:ac:36:e3:f8:
         b3:bc:57:17:ee:9e:cd:36:77:e9:49:f4:0a:a0:b9:1e:53:e7:
         a2:6e:3c:17:06:74:48:4b:ac:6e:e6:07:f9:63:b2:8d:fe:d7:
         8a:8b:85:d5:a7:31:fc:eb:51:59:fb:36:51:1c:1e:a8:c5:08:
         23:f4:08:1c:d9:8b:b2:10:90:1b:98:37:30:25:8f:02:21:bc:
         a7:be:44:f3:b5:c7:47:f1:32:75:2d:b6:31:58:8f:67:dc:de:
         38:57:cc:de:22:8e:5d:a3:02:b7:02:9e:8a:66:01:83:60:8f:
         be:7e:56:54:c1:0e:0c:02:25:e7:1a:6f:3e:97:af:b9:98:0d:
         56:d4:99:64
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUJ0Mwmgbh8+JA/tk0EaRfoTZRQsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MDgxNTA2MTNaFw0yNDA0MDYxNTExMTNaMDMxMTAvBgNV
BAMTKDA4ODAxOURBQjExNjc2QzRFOTVEQjZENDVCN0M0QjFFNkFBMUNCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyJB68fJ2VDpVq+j4F6k2Tuskt
IZwCYj9/nWQwBIjC5TnC+cMUV7Sxjr956+BvclLB9HEP59HuKYR2YyXQUtM/3JUI
n5AorMu0UW/TUlmIlxcbUJDuXLSlFWlP/Udd49g80YFgdwr3xnYeTNQFbnM5IuXX
aQCITrwicBM+wsFCaVxsnat44K3h7dl0iWRamrmG/Argm2ggLC0mjhrjYs3eCpLK
5If6N5OzOhM0nXRl6pDqo2jISq8SLpRGRRZByhVtxCIkuPdtmY2TY+3SCNFJbqaL
0IbrjyLo7zsvEbI4os6P9KmQz+1ck23RElDC1oNl6CSlsEe/dgUtyQAL815jAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIgBnasRZ2xOld
ttRbfEseaqHLZDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81d01xZnpZUEhZcm1ja1ViUDFkdE1ReW44VHgzUXVoNTdO
U2EyRmdrVWFqQS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81d01xZnpZUEhZcm1ja1ViUDFkdE1ReW44VHgzUXVoNTdO
U2EyRmdrVWFqQS8wLzA4ODAxOURBQjExNjc2QzRFOTVEQjZENDVCN0M0QjFFNkFB
MUNCNjQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2p5DANBAIAAjAHAwUA
KARYZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF14wDQYJKoZIhvcNAQELBQAD
ggEBAA9EiA+yuM6lEZfH83X7ZNLxyqfgW4KEHrX9y65sYgjekFiK/uaCiAeZSMkL
Qz/n0hMJ6f1YiBmHnr0kuC0inJKY3ttgiKsdAyu+okNpFxGB6NwQU1GSKXJG5LZd
kVOy+s/rguzSADydeguQ21P5iNARLmxobZ3qct2QrDbj+LO8Vxfuns02d+lJ9Aqg
uR5T56JuPBcGdEhLrG7mB/ljso3+14qLhdWnMfzrUVn7NlEcHqjFCCP0CBzZi7IQ
kBuYNzAljwIhvKe+RPO1x0fxMnUttjFYj2fc3jhXzN4ijl2jArcCnopmAYNgj75+
VlTBDgwCJecabz6Xr7mYDVbUmWQ=
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:18:53 2025 by rpki-client