Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer
File:                     2576B728EF25561749172CD23BA7CC6840DF5628.cer (raw, json)
Hash identifier:          hvpPboUFOIhL0Gik14Ko9xQyCwq9jy/UQ7kpJF52lFo=
Subject key identifier:   25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FA0516A537267E213E8CD2700A60C1F5ED7D332
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:21:12 +0000
Certificate not after:    Tue 21 May 2024 09:26:12 +0000
Subordinate resources:    AS: 266476
                          IP: 170.83.196.0/22
                          IP: 2804:386c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a0:51:6a:53:72:67:e2:13:e8:cd:27:00:a6:0c:1f:5e:d7:d3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:21:12 2023 GMT
            Not After : May 21 09:26:12 2024 GMT
        Subject: CN=2576B728EF25561749172CD23BA7CC6840DF5628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:3f:a1:d7:c5:96:5d:98:e8:bd:d2:f5:85:
                    8e:7f:fc:e1:b9:95:b9:50:c8:00:01:aa:90:57:8c:
                    58:84:a6:38:53:ad:c4:41:01:0a:fd:d7:15:d6:fd:
                    49:af:9e:f3:a3:0a:2c:b1:bb:ed:11:c9:a9:eb:23:
                    7c:6e:79:4d:d6:62:e2:99:af:08:7a:e3:64:e2:f6:
                    ff:a1:87:c7:b9:7d:11:62:0a:d1:60:6b:43:9c:90:
                    29:d9:e4:99:a1:70:67:62:f1:7f:e4:55:65:71:e0:
                    1b:6a:28:46:e9:f0:60:d8:c0:16:da:de:eb:1c:1e:
                    39:17:06:10:57:da:e8:d9:0d:7e:9d:ca:b7:4c:b1:
                    14:c0:59:9f:db:16:7a:e8:f3:7c:17:c0:3b:01:6a:
                    76:b8:88:4f:fa:22:1d:20:39:86:4b:0c:96:20:81:
                    20:60:d7:c1:ca:11:ec:d8:b3:a2:c7:e3:d5:f5:96:
                    46:e8:ed:fb:26:e3:d0:63:08:c1:2e:c9:2d:a9:32:
                    5e:18:4f:1e:c9:75:2c:de:7c:cd:1a:4b:e5:39:b7:
                    68:6f:c4:f6:17:98:92:ec:d2:5c:f8:7b:6c:ed:d6:
                    39:7b:7e:60:11:15:50:83:ef:60:f2:49:17:da:01:
                    6a:30:5d:fa:0e:3a:c6:f6:e8:3c:4e:eb:b1:21:01:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.196.0/22
                IPv6:
                  2804:386c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266476

    Signature Algorithm: sha256WithRSAEncryption
         25:97:bf:4b:47:94:ed:92:ce:59:91:88:5b:71:04:70:85:b4:
         0b:35:0a:de:49:78:4e:07:ab:85:5f:75:b8:6a:c6:12:8a:a8:
         29:31:1f:5d:38:74:e4:e5:ac:3d:49:10:82:f9:fc:c5:c8:49:
         d2:e7:f5:fe:89:dd:5f:19:c7:99:f5:6a:ba:2a:82:a5:07:1b:
         26:09:1c:91:af:a7:42:d7:2d:24:06:1a:9e:e1:b2:9c:60:07:
         bd:87:a0:d1:0f:fd:4e:9f:02:d5:f2:36:19:b4:6e:e0:70:f2:
         1b:30:3f:8c:1c:6c:b2:17:94:20:70:9c:0c:1d:86:8f:f7:76:
         1f:52:0b:c2:8f:87:bb:1f:f9:34:74:60:6a:a7:9d:bd:0d:67:
         63:ee:01:07:80:79:9a:72:3a:83:3d:94:ab:8d:5f:76:03:09:
         0a:b7:b0:cb:ef:a7:88:02:48:2b:65:fb:c7:ed:cd:8f:3b:f6:
         16:0c:0f:ed:ca:be:5f:88:fa:3c:57:ac:d6:9b:d7:e7:db:17:
         2f:2f:c9:e9:95:e1:a0:a9:a8:03:45:ac:58:69:c6:76:f4:7c:
         e7:e8:a2:26:c6:85:04:4e:81:d5:a4:a2:b8:1a:8f:05:7a:17:
         5a:a4:b9:3e:fa:96:eb:2f:1f:56:7f:29:23:d5:6e:96:e6:4b:
         e8:e7:af:0d
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUT6BRalNyZ+IT6M0nAKYMH17X0zIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjMwOTIxMTJaFw0yNDA1MjEwOTI2MTJaMDMxMTAvBgNV
BAMTKDI1NzZCNzI4RUYyNTU2MTc0OTE3MkNEMjNCQTdDQzY4NDBERjU2MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavj+h18WWXZjovdL1hY5//OG5
lblQyAABqpBXjFiEpjhTrcRBAQr91xXW/UmvnvOjCiyxu+0RyanrI3xueU3WYuKZ
rwh642Ti9v+hh8e5fRFiCtFga0OckCnZ5JmhcGdi8X/kVWVx4BtqKEbp8GDYwBba
3uscHjkXBhBX2ujZDX6dyrdMsRTAWZ/bFnro83wXwDsBana4iE/6Ih0gOYZLDJYg
gSBg18HKEezYs6LH49X1lkbo7fsm49BjCMEuyS2pMl4YTx7JdSzefM0aS+U5t2hv
xPYXmJLs0lz4e2zt1jl7fmARFVCD72DySRfaAWowXfoOOsb26DxO67EhAVi5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQldrco7yVWF0kX
LNI7p8xoQN9WKDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9COVFKeTRyRDdZc1Byc1JRUU5DWThzYUFhMmhxTlF5eWdx
UkIzekZwZFhycC8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQjlRSnk0ckQ3WXNQcnNSUVFOQ1k4c2FBYTJocU5ReXln
cVJCM3pGcGRYcnAvMS8yNTc2QjcyOEVGMjU1NjE3NDkxNzJDRDIzQkE3Q0M2ODQw
REY1NjI4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqU8QwDQQCAAIwBwMF
ACgEOGwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBDsMA0GCSqGSIb3DQEBCwUA
A4IBAQAll79LR5Ttks5ZkYhbcQRwhbQLNQreSXhOB6uFX3W4asYSiqgpMR9dOHTk
5aw9SRCC+fzFyEnS5/X+id1fGceZ9Wq6KoKlBxsmCRyRr6dC1y0kBhqe4bKcYAe9
h6DRD/1OnwLV8jYZtG7gcPIbMD+MHGyyF5QgcJwMHYaP93YfUgvCj4e7H/k0dGBq
p529DWdj7gEHgHmacjqDPZSrjV92AwkKt7DL76eIAkgrZfvH7c2PO/YWDA/tyr5f
iPo8V6zWm9fn2xcvL8npleGgqagDRaxYacZ29Hzn6KImxoUEToHVpKK4Go8Fehda
pLk++pbrLx9Wfykj1W6W5kvo568N
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org