Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
File:                     259825BFF3ECA64245B68FAE07CEECBC25E35500.cer (raw, json)
Hash identifier:          dRjMYiyDSXvzCHy1EQGvdgKnSL7mZQwj/t07WH1rYiU=
Subject key identifier:   25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12A3CD9CBC4938EFA3478FC1C03DEEB9B0AF661B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 11 Dec 2022 18:34:53 +0000
Certificate not after:    Sun 10 Dec 2023 18:39:53 +0000
Subordinate resources:    AS: 262847
                          IP: 45.163.0.0/22
                          IP: 45.225.64.0/22
                          IP: 143.137.84.0/22
                          IP: 177.10.56.0/21
                          IP: 179.125.32.0/21
                          IP: 181.174.236.0/23
                          IP: 2804:2e8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a3:cd:9c:bc:49:38:ef:a3:47:8f:c1:c0:3d:ee:b9:b0:af:66:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 18:34:53 2022 GMT
            Not After : Dec 10 18:39:53 2023 GMT
        Subject: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5b:c6:36:b4:9f:c1:d5:5c:5e:2b:4a:3c:30:
                    29:88:e4:f2:2a:62:a7:ab:aa:e0:16:6f:6f:d4:c4:
                    4a:0c:2c:f1:87:91:5f:c9:8b:90:90:7b:6e:0c:4b:
                    86:a6:7a:4f:ba:52:6a:e3:82:cc:7e:97:d0:ca:da:
                    2e:2b:33:78:0a:72:eb:54:d1:a4:cc:3d:7c:7a:18:
                    6b:9b:05:d8:34:31:b7:56:f8:49:d8:30:38:7e:60:
                    9e:f0:86:fe:d1:b6:00:71:96:7f:4c:2a:53:fc:07:
                    7b:b7:7d:fa:01:32:0f:80:60:e1:b2:ac:73:1e:4c:
                    30:52:65:ce:67:8e:a0:bd:f7:4f:91:85:74:ae:82:
                    69:d5:2c:83:96:5e:31:f3:5d:f6:26:c9:19:f0:96:
                    d3:89:57:bc:e9:4f:1d:40:3a:55:f1:03:8c:8b:03:
                    a1:e0:81:30:86:d6:d5:d2:93:9b:af:94:fa:fd:a1:
                    13:7b:47:f6:b2:de:26:fb:cf:e8:17:b7:83:e1:0a:
                    d2:16:f6:8b:c7:3b:ca:55:c4:3e:58:f6:4a:91:e6:
                    2d:fa:92:c3:95:27:ea:dc:23:4f:63:88:5d:b3:01:
                    cb:51:b3:cb:01:80:79:c7:79:1a:de:31:85:f1:ea:
                    fd:92:88:ac:29:f9:02:79:22:25:62:80:9a:c3:ec:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.0.0/22
                  45.225.64.0/22
                  143.137.84.0/22
                  177.10.56.0/21
                  179.125.32.0/21
                  181.174.236.0/23
                IPv6:
                  2804:2e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262847

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:23:70:93:64:d4:2c:53:98:17:68:99:ac:a2:49:32:4c:
         4c:1e:4c:00:be:49:e8:25:1a:ee:d3:30:f1:8c:5f:11:53:9f:
         bd:bd:b1:10:d2:98:eb:5c:73:97:a8:b0:8a:b1:67:2c:aa:ff:
         ae:e0:15:f7:8b:cb:a7:f3:f8:02:7a:67:4b:2d:88:85:5b:53:
         ca:96:7a:1a:ff:03:6e:54:65:17:ed:e4:76:b9:b6:02:5a:f9:
         de:3e:39:99:48:9a:f4:3d:5a:70:63:4d:07:ee:d5:c9:92:bc:
         11:f3:0f:97:aa:89:42:13:f7:b8:1e:4b:81:6c:a5:40:26:24:
         e5:ed:da:68:a5:4c:50:ad:bf:8c:a2:f9:fd:bd:3b:b7:45:1a:
         3e:6f:ce:a1:62:a2:8d:02:3e:ae:0e:84:e6:4e:38:66:5e:67:
         de:9e:5a:c8:eb:92:20:b7:b8:c9:ba:72:e6:8d:43:e4:b4:7e:
         4b:83:e0:d7:03:d1:b2:67:bb:b1:8d:d4:e4:e8:a7:98:63:d8:
         3c:15:95:c2:29:20:84:86:80:6f:7c:66:d2:de:99:5b:0a:ea:
         90:15:82:39:b8:09:73:a3:bb:04:f5:97:5b:1f:45:80:b9:3a:
         d5:57:ee:9d:ba:b0:b8:32:33:08:b5:26:d1:2e:2d:73:6a:96:
         b5:5c:c8:8d
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUEqPNnLxJOO+jR4/BwD3uubCvZhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMTExODM0NTNaFw0yMzEyMTAxODM5NTNaMDMxMTAvBgNV
BAMTKDI1OTgyNUJGRjNFQ0E2NDI0NUI2OEZBRTA3Q0VFQ0JDMjVFMzU1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuW8Y2tJ/B1VxeK0o8MCmI5PIq
YqerquAWb2/UxEoMLPGHkV/Ji5CQe24MS4amek+6Umrjgsx+l9DK2i4rM3gKcutU
0aTMPXx6GGubBdg0MbdW+EnYMDh+YJ7whv7RtgBxln9MKlP8B3u3ffoBMg+AYOGy
rHMeTDBSZc5njqC990+RhXSugmnVLIOWXjHzXfYmyRnwltOJV7zpTx1AOlXxA4yL
A6HggTCG1tXSk5uvlPr9oRN7R/ay3ib7z+gXt4PhCtIW9ovHO8pVxD5Y9kqR5i36
ksOVJ+rcI09jiF2zActRs8sBgHnHeRreMYXx6v2SiKwp+QJ5IiVigJrD7C4vAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlmCW/8+ymQkW2
j64Hzuy8JeNVADAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zYkFiYlo2eDVGcndBNEo2YWQ2MUplb3R3ZFlDeFIzdnZk
RHVWN2hIR3FCZi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zYkFiYlo2eDVGcndBNEo2YWQ2MUplb3R3ZFlDeFIzdnZk
RHVWN2hIR3FCZi8wLzI1OTgyNUJGRjNFQ0E2NDI0NUI2OEZBRTA3Q0VFQ0JDMjVF
MzU1MDAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBMBggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEAi2jAAMEAi3hQAMEAo+J
VAMEA7EKOAMEA7N9IAMEAbWu7DANBAIAAjAHAwUAKAQC6DAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEAr8wDQYJKoZIhvcNAQELBQADggEBAH13I3CTZNQsU5gXaJms
okkyTEweTAC+SeglGu7TMPGMXxFTn729sRDSmOtcc5eosIqxZyyq/67gFfeLy6fz
+AJ6Z0stiIVbU8qWehr/A25UZRft5Ha5tgJa+d4+OZlImvQ9WnBjTQfu1cmSvBHz
D5eqiUIT97geS4FspUAmJOXt2milTFCtv4yi+f29O7dFGj5vzqFioo0CPq4OhOZO
OGZeZ96eWsjrkiC3uMm6cuaNQ+S0fkuD4NcD0bJnu7GN1OTop5hj2DwVlcIpIISG
gG98ZtLemVsK6pAVgjm4CXOjuwT1l1sfRYC5OtVX7p26sLgyMwi1JtEuLXNqlrVc
yI0=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:23:46 2025 by rpki-client