Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1BFC073CF879391CD22CDA2DB4C81BE8AC8838EB.cer
File:                     1BFC073CF879391CD22CDA2DB4C81BE8AC8838EB.cer (raw, json)
Hash identifier:          vS9BaqDP4uo1gRyuZZUX1vg1HtnLss333NfsIJj+kBk=
Subject key identifier:   1B:FC:07:3C:F8:79:39:1C:D2:2C:DA:2D:B4:C8:1B:E8:AC:88:38:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       125078E57E9B0A16F46AC7C49D29BA38F467D7F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/0/1BFC073CF879391CD22CDA2DB4C81BE8AC8838EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 20:22:46 +0000
Certificate not after:    Thu 30 Jan 2025 20:27:46 +0000
Subordinate resources:    AS: 264533
                          IP: 132.255.232.0/22
                          IP: 2804:2118::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:50:78:e5:7e:9b:0a:16:f4:6a:c7:c4:9d:29:ba:38:f4:67:d7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 20:22:46 2024 GMT
            Not After : Jan 30 20:27:46 2025 GMT
        Subject: CN=1BFC073CF879391CD22CDA2DB4C81BE8AC8838EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:85:99:5b:52:d6:6f:df:13:76:24:0d:61:
                    03:ad:2a:e8:24:73:2c:85:33:4f:1a:4d:bb:74:d7:
                    70:2c:b0:6b:77:bd:92:5e:39:0a:70:6b:0d:c6:9e:
                    7e:fb:fc:0b:69:e4:61:8f:50:2b:4c:3b:3d:d2:32:
                    30:87:6a:2d:b4:d7:bd:26:76:ff:26:74:11:ca:f9:
                    f2:0e:6f:44:91:ad:e1:77:49:b0:09:aa:fa:31:07:
                    e9:f2:63:a9:d6:b4:14:4c:8d:ee:df:e2:27:eb:96:
                    3f:54:f6:13:9a:a2:12:e9:c1:b4:c6:3a:60:39:a0:
                    e0:2f:ae:8e:21:40:cc:e2:e2:af:be:9b:4f:1e:a0:
                    64:fe:24:f9:a6:90:64:3b:ff:a0:1e:0f:2f:1e:66:
                    09:0c:30:22:b4:73:46:c2:38:8e:c1:30:8f:1c:90:
                    92:e6:ef:70:ae:13:b0:cb:7b:fd:8a:ec:bf:40:a1:
                    14:cc:46:c3:24:e0:75:9a:1a:9a:70:5e:d5:8b:97:
                    8c:13:95:23:bc:0e:81:63:eb:c0:87:98:31:ce:c8:
                    f4:15:71:34:91:e8:0f:c3:e4:2f:e4:b0:0b:68:5e:
                    77:29:1d:ba:44:fb:7e:22:f9:af:50:22:ea:27:de:
                    2b:2d:07:61:cb:c7:0b:6d:4c:10:61:ea:ae:d8:38:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:FC:07:3C:F8:79:39:1C:D2:2C:DA:2D:B4:C8:1B:E8:AC:88:38:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/0/1BFC073CF879391CD22CDA2DB4C81BE8AC8838EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.232.0/22
                IPv6:
                  2804:2118::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264533

    Signature Algorithm: sha256WithRSAEncryption
         53:58:5a:08:91:3e:5f:08:ec:2d:1c:6c:d1:8d:44:0e:fb:84:
         9b:ae:82:61:8b:28:27:01:03:82:30:30:15:03:e0:08:b2:4b:
         89:1b:cd:d7:15:4c:08:e2:be:7a:b6:72:56:4a:ad:61:f8:2d:
         dd:77:ef:9b:42:ec:bf:73:7e:82:b4:eb:f6:f3:55:7e:50:cb:
         77:c6:1a:5d:63:36:1f:bf:c9:aa:75:d7:e8:31:4a:fa:ca:e0:
         98:7b:ea:33:be:35:0b:7c:2c:14:1e:cb:12:44:dc:ca:ed:26:
         eb:8e:ec:e6:76:7c:1f:d9:3d:e1:5a:ea:8a:80:8b:9b:24:c9:
         69:a6:7c:24:b6:ca:3e:44:c5:59:d2:9c:b2:56:fc:f7:4b:21:
         eb:f7:e2:a3:2b:d9:6d:d0:d0:16:66:f3:4f:d9:0d:4f:87:58:
         e1:14:c4:a5:d6:77:0b:59:b7:7a:e2:4c:f9:26:c7:55:a9:c2:
         91:79:f4:7d:94:91:bb:56:ec:11:da:c8:e3:13:79:59:d7:35:
         66:2e:1f:35:bd:46:d2:64:5c:6b:9d:f1:af:70:aa:38:c6:26:
         72:c0:db:94:a7:67:4d:c9:0b:f4:cb:ff:6d:87:32:2e:49:e4:
         bf:b2:f4:e1:cc:a2:73:65:f0:73:a2:b6:09:7e:61:53:c1:16:
         4a:3f:0a:e6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUElB45X6bChb0asfEnSm6OPRn1/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDEyMDIyNDZaFw0yNTAxMzAyMDI3NDZaMDMxMTAvBgNV
BAMTKDFCRkMwNzNDRjg3OTM5MUNEMjJDREEyREI0QzgxQkU4QUM4ODM4RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2IWZW1LWb98TdiQNYQOtKugk
cyyFM08aTbt013AssGt3vZJeOQpwaw3Gnn77/Atp5GGPUCtMOz3SMjCHai20170m
dv8mdBHK+fIOb0SRreF3SbAJqvoxB+nyY6nWtBRMje7f4ifrlj9U9hOaohLpwbTG
OmA5oOAvro4hQMzi4q++m08eoGT+JPmmkGQ7/6AeDy8eZgkMMCK0c0bCOI7BMI8c
kJLm73CuE7DLe/2K7L9AoRTMRsMk4HWaGppwXtWLl4wTlSO8DoFj68CHmDHOyPQV
cTSR6A/D5C/ksAtoXncpHbpE+34i+a9QIuon3istB2HLxwttTBBh6q7YOGc1AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb/Ac8+Hk5HNIs
2i20yBvorIg46zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbUpIRGR1WEJjRkZodkZwSDhSNjhtYWNHVFNGWmgxYzk3
bmR2eHBIb2tHeC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR21KSERkdVhCY0ZGaHZGcEg4UjY4bWFjR1RTRlpoMWM5
N25kdnhwSG9rR3gvMC8xQkZDMDczQ0Y4NzkzOTFDRDIyQ0RBMkRCNEM4MUJFOEFD
ODgzOEVCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKE/+gwDQQCAAIwBwMF
ACgEIRgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAlVMA0GCSqGSIb3DQEBCwUA
A4IBAQBTWFoIkT5fCOwtHGzRjUQO+4SbroJhiygnAQOCMDAVA+AIskuJG83XFUwI
4r56tnJWSq1h+C3dd++bQuy/c36CtOv281V+UMt3xhpdYzYfv8mqddfoMUr6yuCY
e+ozvjULfCwUHssSRNzK7Sbrjuzmdnwf2T3hWuqKgIubJMlppnwktso+RMVZ0pyy
Vvz3SyHr9+KjK9lt0NAWZvNP2Q1Ph1jhFMSl1ncLWbd64kz5JsdVqcKRefR9lJG7
VuwR2sjjE3lZ1zVmLh81vUbSZFxrnfGvcKo4xiZywNuUp2dNyQv0y/9thzIuSeS/
svThzKJzZfBzorYJfmFTwRZKPwrm
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:59:11 2025 by rpki-client