Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1B70029E902514AAE3490FDDE79F8023925115A4.cer
File:                     1B70029E902514AAE3490FDDE79F8023925115A4.cer (raw, json)
Hash identifier:          jyWveNZIynuVpFxBOZv36ugNV8VpQRY4Ni52uAfVT3A=
Subject key identifier:   1B:70:02:9E:90:25:14:AA:E3:49:0F:DD:E7:9F:80:23:92:51:15:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1EFA0524D4CA7003AF871903BC76E755E5979A14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/1B70029E902514AAE3490FDDE79F8023925115A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Apr 2022 21:29:12 +0000
Certificate not after:    Thu 27 Apr 2023 21:34:12 +0000
Subordinate resources:    AS: 265377
                          IP: 168.194.12.0/22
                          IP: 2804:3324::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fa:05:24:d4:ca:70:03:af:87:19:03:bc:76:e7:55:e5:97:9a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 28 21:29:12 2022 GMT
            Not After : Apr 27 21:34:12 2023 GMT
        Subject: CN=1B70029E902514AAE3490FDDE79F8023925115A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:28:db:14:1e:ca:50:25:84:5c:f4:61:a7:
                    ec:a8:d3:44:46:e9:63:7d:a0:ec:d8:ce:49:ef:4a:
                    9f:a8:d8:bf:31:d0:41:9c:09:8a:4d:ff:2e:be:dc:
                    49:0d:34:9c:c8:3b:5d:ff:e3:a4:c2:c3:db:bf:c7:
                    10:cc:a1:b1:0d:e8:7f:12:02:5b:c2:44:8f:27:11:
                    7f:01:84:c3:61:19:fa:02:80:25:40:5a:f8:f1:a0:
                    4a:3b:4d:ae:b7:58:81:5a:5c:c7:5b:96:52:b3:96:
                    e1:21:f3:69:80:5b:2f:09:9b:1b:40:2b:b1:3d:16:
                    9b:17:35:08:42:dd:46:40:8c:67:c8:07:32:98:ab:
                    11:20:59:83:54:bd:2d:fa:31:79:8b:84:06:a1:e2:
                    e6:68:dd:0e:1c:35:66:07:79:47:e8:1c:c7:f2:22:
                    c4:23:5b:76:c5:3e:74:b5:52:e8:af:e8:30:47:5e:
                    ef:4f:fc:73:b1:53:a3:ad:6f:11:50:cd:ab:91:f7:
                    85:1b:45:b5:13:83:cc:d8:64:5f:01:db:39:11:7c:
                    97:79:a4:d6:aa:f8:71:3b:ac:26:41:94:2f:6f:71:
                    9b:a9:bf:5e:0e:20:5a:41:94:57:d6:2c:bf:d9:1f:
                    4a:d6:85:95:95:49:2d:14:c3:04:90:4a:8c:6b:c3:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:70:02:9E:90:25:14:AA:E3:49:0F:DD:E7:9F:80:23:92:51:15:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/1B70029E902514AAE3490FDDE79F8023925115A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/22
                IPv6:
                  2804:3324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265377

    Signature Algorithm: sha256WithRSAEncryption
         64:b5:5e:58:31:16:e9:49:f2:e6:e7:6a:26:1f:7e:e0:d6:90:
         06:eb:23:30:fb:e1:4f:23:28:b9:47:59:06:c5:ea:4f:99:46:
         9e:01:9a:86:e4:f5:48:8d:66:dc:0f:68:41:46:5b:fc:5d:b8:
         c6:b5:d6:c6:86:8c:21:6c:82:e7:69:fd:dc:30:73:0c:73:bc:
         66:3c:ce:07:81:96:d6:54:9f:cc:69:21:0e:b4:d3:7c:76:12:
         0f:90:39:8c:de:be:03:dc:dd:12:48:30:85:18:8d:32:ee:cd:
         a0:d8:49:6d:36:80:6f:cf:c3:90:be:ba:61:89:04:36:e9:5f:
         41:7a:82:4b:47:5c:11:8d:f2:d0:3b:51:c7:9f:b8:2e:bc:80:
         5a:4a:c4:7d:08:fa:de:24:73:53:57:93:6c:65:7f:ae:ee:6d:
         aa:13:16:9d:36:63:71:87:eb:35:c5:d0:3e:64:19:29:52:d4:
         f0:6b:01:2f:df:b3:8c:1a:1c:c8:26:34:4a:68:88:29:23:34:
         43:6a:cd:94:1e:d3:80:69:1e:f1:a1:34:c5:9c:2c:0d:22:99:
         be:fa:31:2b:b0:39:fa:1e:05:fc:8f:6c:ae:86:bd:62:bb:40:
         df:70:0d:96:61:e3:83:cb:5b:d7:9b:2e:6b:b5:84:d6:1c:3a:
         9d:ff:94:47
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUHvoFJNTKcAOvhxkDvHbnVeWXmhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA0MjgyMTI5MTJaFw0yMzA0MjcyMTM0MTJaMDMxMTAvBgNV
BAMTKDFCNzAwMjlFOTAyNTE0QUFFMzQ5MEZEREU3OUY4MDIzOTI1MTE1QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEyjbFB7KUCWEXPRhp+yo00RG
6WN9oOzYzknvSp+o2L8x0EGcCYpN/y6+3EkNNJzIO13/46TCw9u/xxDMobEN6H8S
AlvCRI8nEX8BhMNhGfoCgCVAWvjxoEo7Ta63WIFaXMdbllKzluEh82mAWy8JmxtA
K7E9FpsXNQhC3UZAjGfIBzKYqxEgWYNUvS36MXmLhAah4uZo3Q4cNWYHeUfoHMfy
IsQjW3bFPnS1Uuiv6DBHXu9P/HOxU6OtbxFQzauR94UbRbUTg8zYZF8B2zkRfJd5
pNaq+HE7rCZBlC9vcZupv14OIFpBlFfWLL/ZH0rWhZWVSS0UwwSQSoxrwww/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbcAKekCUUquNJ
D93nn4AjklEVpDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IZTdiUFpxZWFyOFVrRXEzb2RmOVNFWlNZdmJROXVQNDQ0
cWhzNXFaYkpHUS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IZTdiUFpxZWFyOFVrRXEzb2RmOVNFWlNZdmJROXVQNDQ0
cWhzNXFaYkpHUS8wLzFCNzAwMjlFOTAyNTE0QUFFMzQ5MEZEREU3OUY4MDIzOTI1
MTE1QTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjCDDANBAIAAjAHAwUA
KAQzJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDKEwDQYJKoZIhvcNAQELBQAD
ggEBAGS1XlgxFulJ8ubnaiYffuDWkAbrIzD74U8jKLlHWQbF6k+ZRp4Bmobk9UiN
ZtwPaEFGW/xduMa11saGjCFsgudp/dwwcwxzvGY8zgeBltZUn8xpIQ6003x2Eg+Q
OYzevgPc3RJIMIUYjTLuzaDYSW02gG/Pw5C+umGJBDbpX0F6gktHXBGN8tA7Ucef
uC68gFpKxH0I+t4kc1NXk2xlf67ubaoTFp02Y3GH6zXF0D5kGSlS1PBrAS/fs4wa
HMgmNEpoiCkjNENqzZQe04BpHvGhNMWcLA0imb76MSuwOfoeBfyPbK6GvWK7QN9w
DZZh44PLW9ebLmu1hNYcOp3/lEc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org