Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1E6E214238ED3488EBE7014829AA179AE0AB374D.cer
File:                     1E6E214238ED3488EBE7014829AA179AE0AB374D.cer (raw, json)
Hash identifier:          buBUDJVU3vwNfOgw5MlCFEcDFn0erc+lu+uiUOnbLDo=
Subject key identifier:   1E:6E:21:42:38:ED:34:88:EB:E7:01:48:29:AA:17:9A:E0:AB:37:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F35575BD6A61484F38A5DE4D43BC8D419EA4DA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/1E6E214238ED3488EBE7014829AA179AE0AB374D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Oct 2022 16:54:52 +0000
Certificate not after:    Thu 12 Oct 2023 16:59:52 +0000
Subordinate resources:    AS: 264349
                          IP: 131.108.88.0/22
                          IP: 168.194.208.0/22
                          IP: 2804:1d20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:35:57:5b:d6:a6:14:84:f3:8a:5d:e4:d4:3b:c8:d4:19:ea:4d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 16:54:52 2022 GMT
            Not After : Oct 12 16:59:52 2023 GMT
        Subject: CN=1E6E214238ED3488EBE7014829AA179AE0AB374D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:b2:2a:1c:39:a4:db:86:a2:ef:e6:2a:90:
                    81:bf:6b:20:b4:73:ed:60:85:ef:2b:d4:d6:9c:59:
                    af:51:01:48:05:f8:fe:f3:68:b0:15:ac:67:74:6d:
                    06:a5:06:40:22:40:81:c9:a2:72:6b:57:72:ab:66:
                    6a:38:42:34:8a:6b:4c:55:82:bb:a3:df:42:5b:1a:
                    c1:46:da:3f:ea:fd:36:f9:94:1c:1a:29:6e:2e:54:
                    a2:50:63:11:ac:5d:52:80:36:99:5c:3b:0c:31:17:
                    21:46:30:43:5f:ab:4a:a7:5b:41:24:8a:46:aa:51:
                    d9:5a:4a:44:d4:86:21:e7:1b:b8:ba:42:63:d6:a2:
                    32:3c:fe:58:8b:21:45:d1:5a:40:f8:f5:c9:4e:9a:
                    cc:11:67:df:e6:4b:e0:3e:84:98:5c:52:65:79:cb:
                    bd:31:cc:fd:fa:f2:71:de:4a:74:a3:fb:93:3e:6d:
                    e7:f6:ca:10:55:c7:e3:8b:01:39:f2:ed:01:42:54:
                    1c:d0:52:35:58:c6:ca:e3:88:bd:f6:25:02:bf:b2:
                    63:30:61:ce:c9:e0:89:36:98:7b:08:da:e1:88:f8:
                    3b:16:ce:ef:cd:bd:bf:50:6e:bf:69:ed:ea:a6:80:
                    b3:e3:1d:27:0b:d9:28:c2:bd:cb:94:a4:d3:ab:e6:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:6E:21:42:38:ED:34:88:EB:E7:01:48:29:AA:17:9A:E0:AB:37:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/1E6E214238ED3488EBE7014829AA179AE0AB374D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.88.0/22
                  168.194.208.0/22
                IPv6:
                  2804:1d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264349

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:c9:24:42:8d:2e:e5:e9:a1:86:0b:64:17:19:ab:50:08:
         41:37:36:b8:1f:b2:42:e6:25:02:59:25:28:2e:ab:3c:a9:bc:
         d9:68:c0:7e:39:b5:ee:4f:5b:97:32:c0:c1:5c:fa:09:3b:f7:
         43:38:fc:4c:7f:15:c6:28:bd:4e:49:0a:df:ac:c4:cc:a8:86:
         5d:f9:4c:19:f2:52:d2:5c:0d:42:45:f7:fa:35:67:38:db:85:
         36:a7:69:94:1f:d6:7d:02:18:63:0f:5d:b4:53:b4:f7:8b:42:
         33:0f:ba:05:24:37:72:17:38:36:4e:39:27:46:8f:18:cb:69:
         e2:28:64:61:5d:4e:1a:39:69:05:ea:13:b7:0f:da:4d:2f:c1:
         e7:d7:af:35:e3:58:2b:0e:66:98:3f:d2:aa:8f:cb:59:3d:41:
         6a:89:3f:75:e6:94:89:74:84:83:6d:c7:11:ff:0e:30:db:1f:
         0b:e2:c6:65:d6:a4:41:18:0e:ef:c5:e4:b0:cd:b0:fb:62:00:
         0a:63:76:e4:42:b8:db:23:8b:5b:45:e4:5a:5e:a3:c6:48:00:
         68:39:3a:1a:da:4c:b1:bb:a8:8d:d2:08:88:ec:dc:eb:a1:ef:
         e1:ff:79:81:13:6c:d6:0e:1e:cb:38:d5:37:1f:e2:26:5a:57:
         8f:76:c8:9d
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUDzVXW9amFITzil3k1DvI1BnqTaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMTMxNjU0NTJaFw0yMzEwMTIxNjU5NTJaMDMxMTAvBgNV
BAMTKDFFNkUyMTQyMzhFRDM0ODhFQkU3MDE0ODI5QUExNzlBRTBBQjM3NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKLIqHDmk24ai7+YqkIG/ayC0
c+1ghe8r1NacWa9RAUgF+P7zaLAVrGd0bQalBkAiQIHJonJrV3KrZmo4QjSKa0xV
gruj30JbGsFG2j/q/Tb5lBwaKW4uVKJQYxGsXVKANplcOwwxFyFGMENfq0qnW0Ek
ikaqUdlaSkTUhiHnG7i6QmPWojI8/liLIUXRWkD49clOmswRZ9/mS+A+hJhcUmV5
y70xzP368nHeSnSj+5M+bef2yhBVx+OLATny7QFCVBzQUjVYxsrjiL32JQK/smMw
Yc7J4Ik2mHsI2uGI+DsWzu/Nvb9Qbr9p7eqmgLPjHScL2SjCvcuUpNOr5kKVAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQebiFCOO00iOvn
AUgpqhea4Ks3TTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FWXJqOFlBcEZpZ01haDNqbnF2d1J3YVEzZG1tc0h5R3pH
VzJ5MU1ZeUMzci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FWXJqOFlBcEZpZ01haDNqbnF2d1J3YVEzZG1tc0h5R3pH
VzJ5MU1ZeUMzci8wLzFFNkUyMTQyMzhFRDM0ODhFQkU3MDE0ODI5QUExNzlBRTBB
QjM3NEQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoNsWAMEAqjC0DANBAIA
AjAHAwUAKAQdIDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECJ0wDQYJKoZIhvcN
AQELBQADggEBAHEeySRCjS7l6aGGC2QXGatQCEE3NrgfskLmJQJZJSguqzypvNlo
wH45te5PW5cywMFc+gk790M4/Ex/FcYovU5JCt+sxMyohl35TBnyUtJcDUJF9/o1
ZzjbhTanaZQf1n0CGGMPXbRTtPeLQjMPugUkN3IXODZOOSdGjxjLaeIoZGFdTho5
aQXqE7cP2k0vwefXrzXjWCsOZpg/0qqPy1k9QWqJP3XmlIl0hINtxxH/DjDbHwvi
xmXWpEEYDu/F5LDNsPtiAApjduRCuNsji1tF5Fpeo8ZIAGg5OhraTLG7qI3SCIjs
3Ouh7+H/eYETbNYOHss41Tcf4iZaV492yJ0=
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:49:26 2025 by rpki-client