Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer
File:                     1425E96015DE13B67E1065F8E62962A71308FD33.cer (raw, json)
Hash identifier:          dTg77MiUJRPEUqt65vIsqGUeOtFj9i6JVftl8593zws=
Subject key identifier:   14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F2580561FEAD8E3F472EF9DC5744338C7C905B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Sep 2023 17:15:10 +0000
Certificate not after:    Tue 10 Sep 2024 17:20:10 +0000
Subordinate resources:    AS: 264509
                          IP: 132.255.168.0/22
                          IP: 2804:20b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:25:80:56:1f:ea:d8:e3:f4:72:ef:9d:c5:74:43:38:c7:c9:05:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 12 17:15:10 2023 GMT
            Not After : Sep 10 17:20:10 2024 GMT
        Subject: CN=1425E96015DE13B67E1065F8E62962A71308FD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:c1:5c:04:5d:2f:47:b4:f9:ae:54:7f:cc:
                    68:1d:2f:ed:c5:f0:76:ed:e1:19:2c:a0:8f:87:2d:
                    4a:d4:36:7f:32:0e:85:37:2b:93:8e:c9:51:9d:b9:
                    59:fa:6f:e9:c0:3e:f6:43:e8:10:8d:ec:93:16:bd:
                    47:ba:5f:46:4d:17:b6:d2:26:97:e7:9d:4b:aa:25:
                    29:c5:43:15:6c:47:cd:20:3f:2f:c1:c9:3a:64:16:
                    b2:1a:1e:36:60:28:6c:26:1c:7e:19:07:7a:61:0a:
                    49:a9:d7:e6:2b:57:34:fe:33:64:00:10:36:4c:57:
                    6d:ab:07:65:77:61:3b:ed:03:93:a5:03:54:43:84:
                    3a:90:28:4a:2b:f6:be:22:f4:cd:94:ab:9d:af:09:
                    fe:60:83:38:bb:f5:fc:1b:f4:53:e1:9b:4d:73:55:
                    d2:3d:9e:74:9a:09:ce:1c:8c:0c:2b:1d:4f:c4:9c:
                    60:61:32:0f:9c:23:f9:bc:14:5d:ec:9f:cf:bd:d3:
                    92:73:2e:ee:8f:fa:d2:95:20:71:f4:0f:ae:79:63:
                    dd:94:5d:57:7c:e0:7d:d1:99:50:7d:0a:a6:11:11:
                    49:51:fc:b9:a9:7f:3f:1d:39:7e:8b:fa:5f:a7:31:
                    e0:48:04:8c:b2:37:d5:11:6e:66:eb:9e:fd:95:2c:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.168.0/22
                IPv6:
                  2804:20b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264509

    Signature Algorithm: sha256WithRSAEncryption
         35:40:5f:b0:b2:80:a4:46:4e:0e:29:a9:4c:b5:98:74:44:5b:
         ca:11:f7:cc:ed:b8:81:8f:45:43:f7:d5:f5:dc:98:43:d0:3b:
         16:10:22:03:70:c9:85:e3:83:e9:dd:a6:8f:36:c4:a6:e4:92:
         c1:e3:81:9d:8b:f3:00:87:27:50:e0:69:ae:ed:38:91:b5:ba:
         5d:67:c4:d7:ed:56:42:17:67:6c:d2:35:21:70:aa:48:ef:4d:
         f7:63:de:88:a3:b1:d4:d8:81:19:50:4e:b5:20:62:28:3b:fe:
         c8:7b:da:2a:cf:20:cb:05:aa:61:05:73:14:6b:99:d7:6b:6b:
         8b:6d:4c:8e:25:a3:3b:72:d2:cb:1a:5d:09:21:98:05:ad:f8:
         62:80:1c:55:79:a0:f0:b0:9a:92:3b:f4:e3:1e:81:c9:97:70:
         3b:d1:9f:be:19:6c:7c:88:3d:bb:51:30:a1:25:89:65:8e:d4:
         6b:f9:41:07:cb:24:a4:3c:49:62:30:c9:e7:ff:89:96:64:32:
         42:4b:d7:d1:e5:3f:89:92:49:12:3c:ba:79:c4:ed:8f:67:7c:
         d6:c9:ac:7b:7c:76:42:a6:f2:ee:d7:ba:5e:9c:fe:c4:cc:8e:
         79:d4:13:43:9d:70:e8:2a:ff:e7:db:f5:87:b0:7b:ce:2f:0e:
         c0:1e:de:90
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUHyWAVh/q2OP0cu+dxXRDOMfJBbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTIxNzE1MTBaFw0yNDA5MTAxNzIwMTBaMDMxMTAvBgNV
BAMTKDE0MjVFOTYwMTVERTEzQjY3RTEwNjVGOEU2Mjk2MkE3MTMwOEZEMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHcFcBF0vR7T5rlR/zGgdL+3F
8Hbt4RksoI+HLUrUNn8yDoU3K5OOyVGduVn6b+nAPvZD6BCN7JMWvUe6X0ZNF7bS
JpfnnUuqJSnFQxVsR80gPy/ByTpkFrIaHjZgKGwmHH4ZB3phCkmp1+YrVzT+M2QA
EDZMV22rB2V3YTvtA5OlA1RDhDqQKEor9r4i9M2Uq52vCf5ggzi79fwb9FPhm01z
VdI9nnSaCc4cjAwrHU/EnGBhMg+cI/m8FF3sn8+905JzLu6P+tKVIHH0D655Y92U
XVd84H3RmVB9CqYREUlR/Lmpfz8dOX6L+l+nMeBIBIyyN9URbmbrnv2VLAWvAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUJelgFd4Ttn4Q
ZfjmKWKnEwj9MzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zRzRlNXNVc0JyMkFIU3c3d2dOU2luVnh3V3hxblFvWkJq
NjZ4eDRrQlltQy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zRzRlNXNVc0JyMkFIU3c3d2dOU2luVnh3V3hxblFvWkJq
NjZ4eDRrQlltQy8wLzE0MjVFOTYwMTVERTEzQjY3RTEwNjVGOEU2Mjk2MkE3MTMw
OEZEMzMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoT/qDANBAIAAjAHAwUA
KAQgtDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECT0wDQYJKoZIhvcNAQELBQAD
ggEBADVAX7CygKRGTg4pqUy1mHREW8oR98ztuIGPRUP31fXcmEPQOxYQIgNwyYXj
g+ndpo82xKbkksHjgZ2L8wCHJ1Dgaa7tOJG1ul1nxNftVkIXZ2zSNSFwqkjvTfdj
3oijsdTYgRlQTrUgYig7/sh72irPIMsFqmEFcxRrmddra4ttTI4lozty0ssaXQkh
mAWt+GKAHFV5oPCwmpI79OMegcmXcDvRn74ZbHyIPbtRMKEliWWO1Gv5QQfLJKQ8
SWIwyef/iZZkMkJL19HlP4mSSRI8unnE7Y9nfNbJrHt8dkKm8u7Xul6c/sTMjnnU
E0OdcOgq/+fb9Yewe84vDsAe3pA=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org