Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
File:                     177D4EA4EE1B5E37126713304729EF44AB000434.cer (raw, json)
Hash identifier:          AZCpaocl9JKjKcCZ6fsByUigsOE6+1TwfcaE7YSerik=
Subject key identifier:   17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2159292EF44DED9804E67FB067ED33AA0684EEF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Dec 2021 18:17:00 +0000
Certificate not after:    Thu 29 Dec 2022 18:22:00 +0000
Subordinate resources:    AS: 28343
                          IP: 131.72.108.0/22
                          IP: 131.72.148.0/22
                          IP: 131.161.16.0/22
                          IP: 131.161.144.0/22
                          IP: 132.255.12.0/22
                          IP: 138.0.200.0/22
                          IP: 138.36.204.0/22
                          IP: 138.94.188.0/22
                          IP: 138.97.136.0/22
                          IP: 138.118.28.0/22
                          IP: 138.118.148.0/22
                          IP: 138.122.208.0/22
                          IP: 138.204.60.0/22
                          IP: 143.0.212.0/22
                          IP: 143.208.96.0/22
                          IP: 143.208.196.0/22
                          IP: 143.255.220.0/22
                          IP: 167.249.224.0/22
                          IP: 167.250.176.0/22
                          IP: 168.0.120.0/22
                          IP: 168.194.36.0/22
                          IP: 168.196.132.0/22
                          IP: 168.232.24.0/22
                          IP: 168.232.232.0/22
                          IP: 170.82.176.0/22
                          IP: 170.82.240.0/22
                          IP: 170.84.120.0/22
                          IP: 170.231.24.0/22
                          IP: 170.238.216.0/22
                          IP: 170.254.220.0/22
                          IP: 177.53.124.0/22
                          IP: 177.54.0.0/20
                          IP: 177.73.136.0/21
                          IP: 177.73.184.0/22
                          IP: 177.74.208.0/20
                          IP: 177.101.96.0/19
                          IP: 177.104.0.0/20
                          IP: 177.125.232.0/21
                          IP: 177.129.104.0/22
                          IP: 177.130.224.0/20
                          IP: 177.130.248.0/21
                          IP: 177.184.144.0/21
                          IP: 177.200.192.0/19
                          IP: 177.221.160.0/20
                          IP: 179.127.160.0/19
                          IP: 179.190.96.0/19
                          IP: 186.209.16.0/20
                          IP: 186.209.192.0/20
                          IP: 186.225.0.0/20
                          IP: 186.226.144.0/20
                          IP: 186.237.144.0/21
                          IP: 186.249.192.0/20
                          IP: 187.85.160.0/19
                          IP: 187.94.96.0/20
                          IP: 187.102.0.0/20
                          IP: 187.108.208.0/20
                          IP: 189.45.192.0/20
                          IP: 189.90.48.0/20
                          IP: 191.6.88.0/21
                          IP: 191.37.172.0/22
                          IP: 191.52.240.0/21
                          IP: 191.240.216.0/21
                          IP: 191.253.96.0/19
                          IP: 200.10.4.0/22
                          IP: 201.131.136.0/21
                          IP: 201.131.156.0/22
                          IP: 201.159.248.0/22
                          IP: 2804:c::/32
                          IP: 2804:30c::/32
                          IP: 2804:ed8::/32
                          IP: 2804:f58::/32
                          IP: 2804:fe4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:59:29:2e:f4:4d:ed:98:04:e6:7f:b0:67:ed:33:aa:06:84:ee:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 30 18:17:00 2021 GMT
            Not After : Dec 29 18:22:00 2022 GMT
        Subject: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:7b:25:8d:fc:a2:ae:17:94:81:55:c7:1d:
                    03:83:64:64:d8:a5:66:cc:5d:fa:97:4e:16:cf:02:
                    44:c7:07:bf:7e:88:7e:32:8b:88:b7:e4:51:2b:47:
                    9d:82:ae:9f:4b:0e:9c:8d:08:94:13:03:dd:45:e2:
                    65:94:81:74:22:5a:0e:7e:bb:3c:c9:7c:7f:78:9b:
                    56:02:b7:b5:3f:f8:fe:47:5a:a9:b6:b3:95:7e:c7:
                    e1:fb:ca:ee:61:ff:ad:bf:49:b5:4e:21:0c:f9:a0:
                    4a:e5:91:77:dd:d9:03:42:13:0e:e9:31:84:8e:dc:
                    cd:00:f9:34:8f:ee:9c:70:78:4f:5f:9b:a7:5c:b5:
                    0f:3f:c9:59:54:52:1f:a0:3a:74:17:11:0b:28:d9:
                    96:d2:49:41:70:44:8f:5c:0e:be:30:17:ec:a5:b5:
                    7e:86:4f:d8:a4:6f:67:f7:1f:29:5f:0f:a4:3a:0f:
                    61:49:99:e8:85:dd:f6:1f:cb:42:5d:5e:1e:1a:47:
                    ad:18:09:a8:73:df:e8:85:c3:f2:ca:e2:94:31:4a:
                    a9:5e:fe:2d:99:c0:e0:31:e7:74:31:50:42:dc:32:
                    a8:a6:be:94:ea:58:45:75:76:05:52:13:1d:40:a6:
                    7c:d4:69:a3:e9:ce:5a:2c:93:72:75:a9:ee:be:08:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.108.0/22
                  131.72.148.0/22
                  131.161.16.0/22
                  131.161.144.0/22
                  132.255.12.0/22
                  138.0.200.0/22
                  138.36.204.0/22
                  138.94.188.0/22
                  138.97.136.0/22
                  138.118.28.0/22
                  138.118.148.0/22
                  138.122.208.0/22
                  138.204.60.0/22
                  143.0.212.0/22
                  143.208.96.0/22
                  143.208.196.0/22
                  143.255.220.0/22
                  167.249.224.0/22
                  167.250.176.0/22
                  168.0.120.0/22
                  168.194.36.0/22
                  168.196.132.0/22
                  168.232.24.0/22
                  168.232.232.0/22
                  170.82.176.0/22
                  170.82.240.0/22
                  170.84.120.0/22
                  170.231.24.0/22
                  170.238.216.0/22
                  170.254.220.0/22
                  177.53.124.0/22
                  177.54.0.0/20
                  177.73.136.0/21
                  177.73.184.0/22
                  177.74.208.0/20
                  177.101.96.0/19
                  177.104.0.0/20
                  177.125.232.0/21
                  177.129.104.0/22
                  177.130.224.0/20
                  177.130.248.0/21
                  177.184.144.0/21
                  177.200.192.0/19
                  177.221.160.0/20
                  179.127.160.0/19
                  179.190.96.0/19
                  186.209.16.0/20
                  186.209.192.0/20
                  186.225.0.0/20
                  186.226.144.0/20
                  186.237.144.0/21
                  186.249.192.0/20
                  187.85.160.0/19
                  187.94.96.0/20
                  187.102.0.0/20
                  187.108.208.0/20
                  189.45.192.0/20
                  189.90.48.0/20
                  191.6.88.0/21
                  191.37.172.0/22
                  191.52.240.0/21
                  191.240.216.0/21
                  191.253.96.0/19
                  200.10.4.0/22
                  201.131.136.0/21
                  201.131.156.0/22
                  201.159.248.0/22
                IPv6:
                  2804:c::/32
                  2804:30c::/32
                  2804:ed8::/32
                  2804:f58::/32
                  2804:fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28343

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:d8:6c:cc:d3:14:f4:93:c2:5b:03:5b:5b:11:0e:3d:e7:
         bc:8c:72:ee:07:ae:54:34:31:68:6a:37:e7:1a:57:e8:bb:75:
         9e:72:11:8c:e2:fd:f5:68:ee:eb:4d:9c:08:0e:d7:66:32:77:
         73:f0:25:6d:f6:a1:9a:81:5e:bc:62:84:89:b7:bb:02:b2:7d:
         31:71:bf:09:1a:9c:8e:b3:77:25:77:49:d2:1d:7a:47:c6:04:
         86:a2:ad:f8:00:76:f1:72:25:c8:05:f8:a2:3f:9c:61:cb:ed:
         f5:a2:b4:af:28:f1:f3:ec:0a:99:d2:14:56:cd:cb:52:d8:92:
         95:6b:4e:c7:af:47:15:9a:82:2c:61:32:06:a4:09:d2:4f:36:
         07:6b:fc:9b:bc:4e:05:1e:c3:6e:76:4d:01:6b:bc:0f:d3:d6:
         1c:7f:dd:8c:48:60:e8:47:2a:21:db:07:11:a8:e2:84:4e:f5:
         98:e5:0d:c2:0f:08:9c:a7:8a:7d:2d:f4:de:89:da:ce:1e:bf:
         dc:b8:e5:6d:c2:93:1f:6a:07:a7:68:27:ec:3b:f5:e1:05:a0:
         9e:82:55:3f:2e:e7:15:6f:10:fd:d1:10:91:41:ad:97:4c:5b:
         ef:f5:10:d8:fd:83:20:26:25:32:7f:24:4c:70:c9:bf:a6:f7:
         f0:16:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org