Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C59C959F078E431B9CFA56B9F699727769D35A1.cer
File:                     1C59C959F078E431B9CFA56B9F699727769D35A1.cer (raw, json)
Hash identifier:          FYAHB6AO1hf7O6ViZ/nqpX3DynOpZNykDUAh3zBfuAk=
Subject key identifier:   1C:59:C9:59:F0:78:E4:31:B9:CF:A5:6B:9F:69:97:27:76:9D:35:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       603589080F3C8ADDAB9969C41C4A64DF39579514
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/1C59C959F078E431B9CFA56B9F699727769D35A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Aug 2022 14:01:58 +0000
Certificate not after:    Tue 22 Aug 2023 14:06:58 +0000
Subordinate resources:    AS: 28146
                          AS: 28224
                          AS: 262333
                          AS: 262688
                          IP: 45.71.224.0/22
                          IP: 45.227.192.0/22
                          IP: 45.238.108.0/22
                          IP: 45.238.164.0/22
                          IP: 131.100.96.0/22
                          IP: 138.186.116.0/22
                          IP: 138.204.72.0/22
                          IP: 143.208.12.0/22
                          IP: 143.255.100.0/22
                          IP: 168.0.4.0/22
                          IP: 170.0.168.0/22
                          IP: 170.84.56.0/22
                          IP: 170.233.40.0/22
                          IP: 170.245.216.0/22
                          IP: 170.247.192.0/22
                          IP: 177.73.188.0/22
                          IP: 177.75.128.0/19
                          IP: 177.86.0.0/21
                          IP: 177.125.32.0/21
                          IP: 177.126.192.0/20
                          IP: 177.154.96.0/20
                          IP: 177.234.132.0/22
                          IP: 179.127.128.0/20
                          IP: 179.127.224.0/20
                          IP: 179.191.36.0/22
                          IP: 186.236.0.0 -- 186.236.47.255
                          IP: 186.250.88.0/22
                          IP: 187.45.96.0/19
                          IP: 187.87.208.0/20
                          IP: 189.126.48.0/20
                          IP: 191.36.132.0/22
                          IP: 200.229.176.0/20
                          IP: 2804:310::/32
                          IP: 2804:108c::/32
                          IP: 2804:1a80::/32
                          IP: 2804:1bd8::/32
                          IP: 2804:26e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:35:89:08:0f:3c:8a:dd:ab:99:69:c4:1c:4a:64:df:39:57:95:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 23 14:01:58 2022 GMT
            Not After : Aug 22 14:06:58 2023 GMT
        Subject: CN=1C59C959F078E431B9CFA56B9F699727769D35A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:cf:4f:a4:bc:e8:1a:a0:a4:ce:0b:6d:99:
                    ae:fe:70:99:26:ab:90:30:cb:a8:fd:a2:2d:06:a7:
                    3c:45:39:9c:87:32:bb:b9:9c:f2:04:4f:c6:6a:69:
                    b7:8e:fa:d8:12:ee:00:ce:09:73:70:fa:d2:af:dc:
                    34:ab:2d:30:51:59:cd:c2:a5:67:20:fd:bd:60:a3:
                    04:27:4b:33:73:de:f7:32:32:06:d7:cf:14:8a:76:
                    91:46:88:c8:6f:5f:96:f0:85:66:2e:48:1b:ce:df:
                    e7:b6:97:83:42:f3:d3:21:90:b9:d7:5e:d5:59:42:
                    24:e9:53:6a:16:03:c7:bc:a4:e2:27:a6:44:c1:4c:
                    96:48:11:89:4f:7f:62:a1:1c:2b:3e:29:5c:e2:85:
                    f0:52:78:cd:e2:2d:60:c5:32:f4:49:2e:c2:e7:89:
                    5d:98:7f:59:1b:93:10:40:a8:51:db:74:e9:c4:b2:
                    7d:22:34:73:84:96:95:9f:b0:c9:44:6c:f8:00:05:
                    20:fa:f2:5f:04:d5:f2:86:f4:46:a4:f8:b2:b3:0f:
                    7b:4e:8a:da:38:48:e9:a3:b0:6e:ec:68:f0:72:4a:
                    1e:b9:a1:6c:aa:0b:f8:ea:d0:2b:26:65:40:a9:36:
                    cc:4a:07:a3:7d:df:65:2d:21:89:81:66:91:04:29:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:59:C9:59:F0:78:E4:31:B9:CF:A5:6B:9F:69:97:27:76:9D:35:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/1C59C959F078E431B9CFA56B9F699727769D35A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.224.0/22
                  45.227.192.0/22
                  45.238.108.0/22
                  45.238.164.0/22
                  131.100.96.0/22
                  138.186.116.0/22
                  138.204.72.0/22
                  143.208.12.0/22
                  143.255.100.0/22
                  168.0.4.0/22
                  170.0.168.0/22
                  170.84.56.0/22
                  170.233.40.0/22
                  170.245.216.0/22
                  170.247.192.0/22
                  177.73.188.0/22
                  177.75.128.0/19
                  177.86.0.0/21
                  177.125.32.0/21
                  177.126.192.0/20
                  177.154.96.0/20
                  177.234.132.0/22
                  179.127.128.0/20
                  179.127.224.0/20
                  179.191.36.0/22
                  186.236.0.0-186.236.47.255
                  186.250.88.0/22
                  187.45.96.0/19
                  187.87.208.0/20
                  189.126.48.0/20
                  191.36.132.0/22
                  200.229.176.0/20
                IPv6:
                  2804:310::/32
                  2804:108c::/32
                  2804:1a80::/32
                  2804:1bd8::/32
                  2804:26e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28146
                  28224
                  262333
                  262688

    Signature Algorithm: sha256WithRSAEncryption
         19:24:5a:02:8c:aa:33:dd:07:6a:e0:19:51:f3:37:0a:e6:3e:
         ba:d7:26:ae:2d:c2:f3:f4:43:7f:1f:2c:1c:e2:aa:db:a6:20:
         56:6b:32:1b:a6:d0:4c:d9:af:30:b3:47:a0:2e:ff:17:a9:7a:
         15:7c:8b:91:74:c4:33:52:c9:d3:69:66:7b:e5:eb:f2:63:b9:
         2d:25:62:1a:d7:71:aa:f2:95:f0:fc:ad:fd:e8:dd:e9:2a:8c:
         3d:62:c4:9f:f7:1b:4b:34:84:f3:f9:77:96:94:3b:de:7a:33:
         58:a7:4e:c6:29:68:c2:ac:9f:13:ef:6e:32:49:77:93:e4:99:
         94:a0:de:a8:eb:ce:d1:8b:5d:10:d5:34:4c:e6:7b:da:28:75:
         bf:93:6c:e0:a8:5a:54:4d:08:28:19:11:8b:63:91:cd:21:41:
         f9:15:d0:8b:30:70:52:0d:82:7f:34:20:c4:59:ed:c5:07:46:
         0e:d4:09:9e:13:87:67:07:bf:b2:95:32:fc:a9:07:05:22:66:
         54:cc:d7:d9:8a:61:8d:ca:b5:03:22:12:36:41:a9:34:93:9f:
         d6:f4:45:00:cb:5d:43:72:6e:5e:2d:29:fc:54:64:cf:bc:e4:
         a7:d0:d3:43:e0:3a:2a:f8:7a:d4:44:7c:fa:1b:50:0a:c7:42:
         c9:2f:33:2c
-----BEGIN CERTIFICATE-----
MIIHADCCBeigAwIBAgIUYDWJCA88it2rmWnEHEpk3zlXlRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MjMxNDAxNThaFw0yMzA4MjIxNDA2NThaMDMxMTAvBgNV
BAMTKDFDNTlDOTU5RjA3OEU0MzFCOUNGQTU2QjlGNjk5NzI3NzY5RDM1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjmc9PpLzoGqCkzgttma7+cJkm
q5Awy6j9oi0GpzxFOZyHMru5nPIET8ZqabeO+tgS7gDOCXNw+tKv3DSrLTBRWc3C
pWcg/b1gowQnSzNz3vcyMgbXzxSKdpFGiMhvX5bwhWYuSBvO3+e2l4NC89MhkLnX
XtVZQiTpU2oWA8e8pOInpkTBTJZIEYlPf2KhHCs+KVzihfBSeM3iLWDFMvRJLsLn
iV2Yf1kbkxBAqFHbdOnEsn0iNHOElpWfsMlEbPgABSD68l8E1fKG9Eak+LKzD3tO
ito4SOmjsG7saPBySh65oWyqC/jq0CsmZUCpNsxKB6N932UtIYmBZpEEKVhdAgMB
AAGjggQKMIIEBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcWclZ8HjkMbnP
pWufaZcndp01oTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84RkRDaDZYNXlyS2Q3Q1lZdlpwREw5U3FTek1BQmpQYWE2
ZHMxS1JLNnFLNi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84RkRDaDZYNXlyS2Q3Q1lZdlpwREw5U3FTek1BQmpQYWE2
ZHMxS1JLNnFLNi8wLzFDNTlDOTU5RjA3OEU0MzFCOUNGQTU2QjlGNjk5NzI3NzY5
RDM1QTEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjCCAQ8GCCsGAQUFBwEHAQH/BIH/MIH8MIHOBAIAATCBxwMEAi1H4AMEAi3j
wAMEAi3ubAMEAi3upAMEAoNkYAMEAoq6dAMEAorMSAMEAo/QDAMEAo//ZAMEAqgA
BAMEAqoAqAMEAqpUOAMEAqrpKAMEAqr12AMEAqr3wAMEArFJvAMEBbFLgAMEA7FW
AAMEA7F9IAMEBLF+wAMEBLGaYAMEArHqhAMEBLN/gAMEBLN/4AMEArO/JDALAwMC
uuwDBAS67CADBAK6+lgDBAW7LWADBAS7V9ADBAS9fjADBAK/JIQDBATI5bAwKQQC
AAIwIwMFACgEAxADBQAoBBCMAwUAKAQagAMFACgEG9gDBQAoBCbgMCcGCCsGAQUF
BwEIAQH/BBgwFqAUMBICAm3yAgJuQAIDBAC9AgMEAiAwDQYJKoZIhvcNAQELBQAD
ggEBABkkWgKMqjPdB2rgGVHzNwrmPrrXJq4twvP0Q38fLBziqtumIFZrMhum0EzZ
rzCzR6Au/xepehV8i5F0xDNSydNpZnvl6/JjuS0lYhrXcarylfD8rf3o3ekqjD1i
xJ/3G0s0hPP5d5aUO956M1inTsYpaMKsnxPvbjJJd5PkmZSg3qjrztGLXRDVNEzm
e9oodb+TbOCoWlRNCCgZEYtjkc0hQfkV0IswcFINgn80IMRZ7cUHRg7UCZ4Th2cH
v7KVMvypBwUiZlTM19mKYY3KtQMiEjZBqTSTn9b0RQDLXUNybl4tKfxUZM+85KfQ
00PgOir4etREfPobUArHQskvMyw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org