Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
File:                     1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer (raw, json)
Hash identifier:          PLJsSp6J5f+YpmOKAwu9p1uCh/WljfQ18a6mH9LDxXw=
Subject key identifier:   1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FF044511DDB2732D711AEB679A840D0C6E45B4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Feb 2023 10:55:58 +0000
Certificate not after:    Thu 22 Feb 2024 11:00:58 +0000
Subordinate resources:    AS: 28343
                          IP: 45.234.184.0/22
                          IP: 131.72.108.0/22
                          IP: 131.72.148.0/22
                          IP: 131.161.16.0/22
                          IP: 131.161.144.0/22
                          IP: 131.221.88.0/22
                          IP: 131.221.176.0/22
                          IP: 132.255.12.0/22
                          IP: 138.0.200.0/22
                          IP: 138.36.204.0/22
                          IP: 138.94.72.0/22
                          IP: 138.94.188.0/22
                          IP: 138.97.136.0/22
                          IP: 138.118.28.0/22
                          IP: 138.118.148.0/22
                          IP: 138.121.188.0/22
                          IP: 138.122.208.0/22
                          IP: 138.204.60.0/22
                          IP: 143.0.212.0/22
                          IP: 143.208.96.0/22
                          IP: 143.208.196.0/22
                          IP: 143.208.212.0/22
                          IP: 143.255.220.0/22
                          IP: 167.249.224.0/22
                          IP: 167.250.176.0/22
                          IP: 168.0.120.0/22
                          IP: 168.194.36.0/22
                          IP: 168.196.132.0/22
                          IP: 168.232.24.0/22
                          IP: 168.232.232.0/22
                          IP: 170.78.198.0/23
                          IP: 170.78.212.0/22
                          IP: 170.81.216.0/21
                          IP: 170.82.176.0/22
                          IP: 170.82.240.0/22
                          IP: 170.84.120.0/22
                          IP: 170.231.24.0/22
                          IP: 170.238.216.0/22
                          IP: 170.254.220.0/22
                          IP: 177.8.240.0/21
                          IP: 177.10.96.0/20
                          IP: 177.53.124.0/22
                          IP: 177.54.0.0/20
                          IP: 177.67.200.0/21
                          IP: 177.72.40.0/21
                          IP: 177.73.136.0/21
                          IP: 177.73.184.0/22
                          IP: 177.74.208.0/20
                          IP: 177.74.240.0/20
                          IP: 177.101.96.0/19
                          IP: 177.104.0.0/20
                          IP: 177.125.104.0/22
                          IP: 177.125.232.0/21
                          IP: 177.129.104.0/22
                          IP: 177.130.224.0/20
                          IP: 177.130.248.0/21
                          IP: 177.136.160.0/21
                          IP: 177.184.144.0/21
                          IP: 177.200.192.0/19
                          IP: 177.221.160.0/20
                          IP: 179.127.160.0/19
                          IP: 179.190.96.0/19
                          IP: 186.209.16.0/20
                          IP: 186.209.192.0/20
                          IP: 186.216.240.0/20
                          IP: 186.225.0.0/20
                          IP: 186.226.144.0/20
                          IP: 186.227.136.0/21
                          IP: 186.237.144.0/21
                          IP: 186.249.192.0/20
                          IP: 186.251.108.0/22
                          IP: 187.45.64.0/20
                          IP: 187.85.160.0/19
                          IP: 187.87.96.0/20
                          IP: 187.94.96.0/20
                          IP: 187.102.0.0/20
                          IP: 187.108.208.0/20
                          IP: 189.28.192.0/19
                          IP: 189.45.192.0/20
                          IP: 189.90.48.0/20
                          IP: 189.113.224.0/19
                          IP: 189.127.16.0/20
                          IP: 191.6.88.0/21
                          IP: 191.37.172.0/22
                          IP: 191.52.240.0/21
                          IP: 191.240.216.0/21
                          IP: 191.253.96.0/19
                          IP: 200.10.4.0/22
                          IP: 201.131.80.0/21
                          IP: 201.131.136.0/21
                          IP: 201.131.156.0/22
                          IP: 201.159.248.0/22
                          IP: 2804:c::/32
                          IP: 2804:30c::/32
                          IP: 2804:ed8::/32
                          IP: 2804:f58::/32
                          IP: 2804:fe4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f0:44:51:1d:db:27:32:d7:11:ae:b6:79:a8:40:d0:c6:e4:5b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 10:55:58 2023 GMT
            Not After : Feb 22 11:00:58 2024 GMT
        Subject: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:24:b2:e8:00:dc:c8:2d:42:5b:58:94:c6:
                    31:d3:c6:63:30:9d:7e:ce:35:2d:b0:73:a7:12:eb:
                    00:bf:9e:55:e4:47:5e:24:3b:40:7d:a4:05:9e:16:
                    72:2e:2d:b5:a1:f1:31:7c:b1:84:59:52:ed:29:76:
                    9e:c4:ce:52:73:b8:a8:6e:42:21:c3:97:75:51:e7:
                    6a:86:59:81:f0:16:8c:01:cb:ef:f6:01:d4:e3:6b:
                    1a:03:68:30:41:5a:ea:8a:21:e7:ad:13:54:9f:75:
                    fa:62:63:86:3e:a0:07:1f:cb:36:ed:f3:c0:d5:cc:
                    49:eb:49:22:29:62:dd:8d:77:f2:bc:aa:f5:98:b6:
                    37:88:83:b7:6b:83:09:ab:08:ee:e6:7c:08:65:5c:
                    a9:83:05:e9:4f:74:60:df:2d:5c:18:c8:be:f8:ac:
                    39:d7:36:d4:07:ed:0a:fa:24:19:2a:1f:74:ae:90:
                    21:52:65:12:8b:62:9e:ff:df:fb:8e:30:61:07:21:
                    aa:c4:6b:d3:81:c0:4c:a1:36:c4:09:1e:9f:c7:82:
                    81:91:ff:7e:de:2f:4d:64:c2:91:4e:cf:b8:2a:3e:
                    a7:8a:d5:53:c1:e9:21:45:6c:42:21:eb:14:82:ea:
                    64:29:d6:05:63:2f:c3:c9:24:77:73:8a:b2:07:87:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.184.0/22
                  131.72.108.0/22
                  131.72.148.0/22
                  131.161.16.0/22
                  131.161.144.0/22
                  131.221.88.0/22
                  131.221.176.0/22
                  132.255.12.0/22
                  138.0.200.0/22
                  138.36.204.0/22
                  138.94.72.0/22
                  138.94.188.0/22
                  138.97.136.0/22
                  138.118.28.0/22
                  138.118.148.0/22
                  138.121.188.0/22
                  138.122.208.0/22
                  138.204.60.0/22
                  143.0.212.0/22
                  143.208.96.0/22
                  143.208.196.0/22
                  143.208.212.0/22
                  143.255.220.0/22
                  167.249.224.0/22
                  167.250.176.0/22
                  168.0.120.0/22
                  168.194.36.0/22
                  168.196.132.0/22
                  168.232.24.0/22
                  168.232.232.0/22
                  170.78.198.0/23
                  170.78.212.0/22
                  170.81.216.0/21
                  170.82.176.0/22
                  170.82.240.0/22
                  170.84.120.0/22
                  170.231.24.0/22
                  170.238.216.0/22
                  170.254.220.0/22
                  177.8.240.0/21
                  177.10.96.0/20
                  177.53.124.0/22
                  177.54.0.0/20
                  177.67.200.0/21
                  177.72.40.0/21
                  177.73.136.0/21
                  177.73.184.0/22
                  177.74.208.0/20
                  177.74.240.0/20
                  177.101.96.0/19
                  177.104.0.0/20
                  177.125.104.0/22
                  177.125.232.0/21
                  177.129.104.0/22
                  177.130.224.0/20
                  177.130.248.0/21
                  177.136.160.0/21
                  177.184.144.0/21
                  177.200.192.0/19
                  177.221.160.0/20
                  179.127.160.0/19
                  179.190.96.0/19
                  186.209.16.0/20
                  186.209.192.0/20
                  186.216.240.0/20
                  186.225.0.0/20
                  186.226.144.0/20
                  186.227.136.0/21
                  186.237.144.0/21
                  186.249.192.0/20
                  186.251.108.0/22
                  187.45.64.0/20
                  187.85.160.0/19
                  187.87.96.0/20
                  187.94.96.0/20
                  187.102.0.0/20
                  187.108.208.0/20
                  189.28.192.0/19
                  189.45.192.0/20
                  189.90.48.0/20
                  189.113.224.0/19
                  189.127.16.0/20
                  191.6.88.0/21
                  191.37.172.0/22
                  191.52.240.0/21
                  191.240.216.0/21
                  191.253.96.0/19
                  200.10.4.0/22
                  201.131.80.0/21
                  201.131.136.0/21
                  201.131.156.0/22
                  201.159.248.0/22
                IPv6:
                  2804:c::/32
                  2804:30c::/32
                  2804:ed8::/32
                  2804:f58::/32
                  2804:fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28343

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:24:d0:91:0e:a5:cc:24:1d:e9:1a:98:21:4d:4a:5f:69:
         58:8e:3e:5b:ee:4b:fb:0d:05:85:f8:d1:ec:18:fe:30:9d:07:
         0e:b0:08:0c:53:2f:04:49:e4:c0:2c:c6:55:c8:c1:b8:46:05:
         36:a1:57:d3:03:0f:09:e9:55:2a:c7:b3:f5:0e:c6:68:9f:f4:
         c1:c4:62:26:b1:bd:ae:b9:33:63:c1:84:13:c5:cb:3a:81:87:
         09:d2:3f:5e:85:f7:99:eb:58:09:e8:74:c2:96:49:4c:80:cb:
         0d:ea:d7:d7:bc:d9:25:e1:e5:5f:44:69:a1:ad:ea:2a:fa:5e:
         b8:9f:4e:12:95:14:82:05:f7:45:73:ce:c7:12:4a:9a:dc:8e:
         3f:6f:41:59:dd:02:8a:57:d6:48:1c:30:84:76:56:1d:3c:3e:
         20:aa:44:16:87:7f:5c:c0:c1:65:e0:55:1a:c2:92:93:ef:eb:
         30:3b:6f:ad:2e:3b:c9:e5:9f:ea:c6:f5:b8:5f:1d:dc:2a:af:
         a3:0b:a1:3c:cb:30:9c:22:c1:3c:5e:e5:be:28:b3:e6:04:30:
         92:fe:97:31:bf:c1:cf:fd:db:3e:8e:b5:72:9a:75:51:a7:d0:
         e5:1f:bf:8c:c9:95:50:bb:5c:65:ca:03:52:df:14:cb:d4:f0:
         d9:1c:30:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org