Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.cer
File:                     2F959A25F3A240E72E50647C8B05EE9AC5D7D554.cer (raw, json)
Hash identifier:          GdoZq0pXGybaTajO8JQ7kqAvrErT2b+pFAGT69l5Qwc=
Subject key identifier:   2F:95:9A:25:F3:A2:40:E7:2E:50:64:7C:8B:05:EE:9A:C5:D7:D5:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37DC022F0B9FC1FC002C1F8474698D04DD45B060
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Feb 2023 12:07:40 +0000
Certificate not after:    Fri 02 Feb 2024 12:12:40 +0000
Subordinate resources:    AS: 52872
                          IP: 168.0.236.0/22
                          IP: 168.197.136.0/22
                          IP: 177.128.192.0/21
                          IP: 2804:88c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:dc:02:2f:0b:9f:c1:fc:00:2c:1f:84:74:69:8d:04:dd:45:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  3 12:07:40 2023 GMT
            Not After : Feb  2 12:12:40 2024 GMT
        Subject: CN=2F959A25F3A240E72E50647C8B05EE9AC5D7D554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:88:0e:e4:c9:d6:14:a6:66:34:ef:da:ac:
                    e8:15:c5:06:17:ad:d7:88:6a:e7:9f:5e:34:6d:67:
                    df:9b:c7:9e:e4:05:89:d2:d8:f6:96:fc:c3:b3:9e:
                    a4:a3:cb:32:ef:55:b5:3e:95:38:71:a5:89:53:cb:
                    0a:13:f0:00:7f:fc:7a:c0:9f:63:4c:ef:4b:bb:9a:
                    d2:cb:ba:af:16:88:31:48:5e:c9:7e:c7:50:0c:c9:
                    5a:eb:a1:17:ed:44:f3:24:36:e5:ae:5d:76:14:93:
                    d6:3d:05:e8:db:38:0b:30:aa:2e:9f:c0:85:b9:1d:
                    3a:99:44:a4:45:b2:6e:7e:28:b9:15:16:84:e6:e4:
                    69:91:5a:09:0b:aa:c7:48:7e:af:ad:d1:b2:50:74:
                    64:9d:72:f7:4a:b9:c3:a4:c3:ea:e8:1a:74:67:fd:
                    f9:af:18:08:e4:04:4d:f1:bd:13:0b:77:9b:e4:26:
                    9e:f7:69:03:72:1d:79:17:6f:8d:4a:88:44:f4:95:
                    8c:cd:89:16:02:41:b7:ea:b7:14:b5:ce:4e:ba:88:
                    ab:ed:f4:2b:bd:be:56:c1:9f:14:54:ea:d5:05:b1:
                    b0:1b:11:b5:d3:19:98:1a:78:d6:f0:f4:49:d8:a4:
                    2e:40:3f:7f:26:71:96:0b:12:5e:b4:c5:4b:b0:21:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:95:9A:25:F3:A2:40:E7:2E:50:64:7C:8B:05:EE:9A:C5:D7:D5:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.236.0/22
                  168.197.136.0/22
                  177.128.192.0/21
                IPv6:
                  2804:88c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52872

    Signature Algorithm: sha256WithRSAEncryption
         0c:16:37:a5:d7:99:20:b2:e1:52:b2:de:1b:d5:51:b0:a5:4a:
         da:40:13:99:da:09:b3:97:2f:4d:dd:4a:21:11:09:eb:30:13:
         b8:98:0e:59:8d:a6:f0:84:e6:f3:ed:49:e5:14:b8:18:18:2a:
         5e:fd:56:76:0a:6c:9b:9a:85:80:a1:fb:ff:33:97:f2:4b:eb:
         ad:11:9b:5b:07:2d:cd:53:bb:68:4f:4e:dd:ee:ee:19:7f:56:
         b4:10:2e:31:f8:4d:6e:34:f4:83:34:d3:52:5f:50:8b:a5:f9:
         23:15:17:85:a0:7b:04:43:92:06:6e:13:45:40:d5:29:30:f4:
         4f:45:dc:58:e0:27:9c:ed:29:1a:da:8f:95:3d:2c:a6:0d:49:
         d1:92:0e:39:c9:ea:30:8f:23:ac:17:c4:00:48:b8:6d:b0:dd:
         04:4d:7e:55:9f:77:ea:a8:aa:f5:5d:ec:9c:ea:2d:a9:a0:0e:
         9c:16:ad:71:0f:e4:3b:76:7e:9d:66:4b:4b:5d:d9:45:d5:c5:
         6f:2e:cc:55:17:4d:36:3b:68:d6:36:fb:fa:2d:2a:57:2b:99:
         2c:01:df:3c:d6:71:ba:7c:1d:26:b1:ca:1f:ef:47:e3:37:f3:
         e2:0b:fd:57:87:b1:c8:c5:af:fd:c6:04:8f:96:9f:e7:da:ad:
         61:89:94:1e
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUN9wCLwufwfwALB+EdGmNBN1FsGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMDMxMjA3NDBaFw0yNDAyMDIxMjEyNDBaMDMxMTAvBgNV
BAMTKDJGOTU5QTI1RjNBMjQwRTcyRTUwNjQ3QzhCMDVFRTlBQzVEN0Q1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dIgO5MnWFKZmNO/arOgVxQYX
rdeIauefXjRtZ9+bx57kBYnS2PaW/MOznqSjyzLvVbU+lThxpYlTywoT8AB//HrA
n2NM70u7mtLLuq8WiDFIXsl+x1AMyVrroRftRPMkNuWuXXYUk9Y9BejbOAswqi6f
wIW5HTqZRKRFsm5+KLkVFoTm5GmRWgkLqsdIfq+t0bJQdGSdcvdKucOkw+roGnRn
/fmvGAjkBE3xvRMLd5vkJp73aQNyHXkXb41KiET0lYzNiRYCQbfqtxS1zk66iKvt
9Cu9vlbBnxRU6tUFsbAbEbXTGZgaeNbw9EnYpC5AP38mcZYLEl60xUuwIeavAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvlZol86JA5y5Q
ZHyLBe6axdfVVDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80eGNMV1hDN2hkUVRrSnJjYWJwVHFQNXdBMWhScEhadmZR
R1VuWEtkQUczVy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80eGNMV1hDN2hkUVRrSnJjYWJwVHFQNXdBMWhScEhadmZR
R1VuWEtkQUczVy8wLzJGOTU5QTI1RjNBMjQwRTcyRTUwNjQ3QzhCMDVFRTlBQzVE
N0Q1NTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAqgA7AMEAqjFiAMEA7GA
wDANBAIAAjAHAwUAKAQIjDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzogwDQYJ
KoZIhvcNAQELBQADggEBAAwWN6XXmSCy4VKy3hvVUbClStpAE5naCbOXL03dSiER
CeswE7iYDlmNpvCE5vPtSeUUuBgYKl79VnYKbJuahYCh+/8zl/JL660Rm1sHLc1T
u2hPTt3u7hl/VrQQLjH4TW409IM001JfUIul+SMVF4WgewRDkgZuE0VA1Skw9E9F
3FjgJ5ztKRraj5U9LKYNSdGSDjnJ6jCPI6wXxABIuG2w3QRNflWfd+qoqvVd7Jzq
LamgDpwWrXEP5Dt2fp1mS0td2UXVxW8uzFUXTTY7aNY2+/otKlcrmSwB3zzWcbp8
HSaxyh/vR+M38+IL/VeHscjFr/3GBI+Wn+farWGJlB4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:41 2025 by rpki-client