Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/387BDD0A750BD5B7F8B30B5C1CE2F2FB1AC3052C.cer
File:                     387BDD0A750BD5B7F8B30B5C1CE2F2FB1AC3052C.cer (raw, json)
Hash identifier:          PhSdLShdmXF3ReD47ViH3bAXJKqBfL8QAzcsXokWrqU=
Subject key identifier:   38:7B:DD:0A:75:0B:D5:B7:F8:B3:0B:5C:1C:E2:F2:FB:1A:C3:05:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65230622C5A1720A137B5DBC0D00197B32F0A583
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/387BDD0A750BD5B7F8B30B5C1CE2F2FB1AC3052C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Mar 2023 13:17:04 +0000
Certificate not after:    Mon 04 Mar 2024 13:22:04 +0000
Subordinate resources:    AS: 269479
                          IP: 45.187.136.0/22
                          IP: 2804:6544::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:23:06:22:c5:a1:72:0a:13:7b:5d:bc:0d:00:19:7b:32:f0:a5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 13:17:04 2023 GMT
            Not After : Mar  4 13:22:04 2024 GMT
        Subject: CN=387BDD0A750BD5B7F8B30B5C1CE2F2FB1AC3052C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:a0:26:ba:a9:38:1b:46:08:18:60:e6:99:
                    3c:16:97:46:6d:02:ec:c0:aa:01:02:43:b8:bc:d3:
                    27:69:97:01:4b:b7:fe:33:e9:82:26:58:38:dc:b5:
                    5b:ff:40:be:ee:7a:e7:88:f6:07:8c:c2:27:35:63:
                    64:2e:9a:15:4c:28:47:2e:12:f8:1b:43:28:ec:7f:
                    0f:33:e4:44:db:f5:99:d6:d7:c3:95:94:9f:41:fe:
                    1f:6e:88:e0:51:ee:00:45:da:59:d6:4b:f6:3f:03:
                    f8:11:60:b0:0f:ce:a0:68:08:ed:a2:17:98:72:f4:
                    fe:f4:32:bf:2e:14:38:e3:65:e6:05:29:38:a0:75:
                    8a:a9:ad:a4:4b:eb:5c:42:6f:e8:a4:e5:f8:fd:56:
                    8e:1b:68:f6:1d:06:bf:35:e7:25:d9:97:76:dc:fb:
                    c1:fc:a5:48:7d:e9:55:ff:e6:a2:24:cf:6e:15:99:
                    92:24:b4:41:2a:1a:56:0a:ce:b8:5d:db:8f:34:51:
                    4e:99:3b:27:61:43:0b:f5:d4:34:e6:3b:dc:ad:61:
                    ac:e3:ce:07:89:69:2e:50:c0:7a:24:d7:03:9c:af:
                    a8:b8:b9:2f:51:39:7e:16:8b:a7:89:cb:6f:15:a1:
                    e4:78:3f:a5:17:09:02:c8:42:24:07:df:6e:d5:46:
                    f6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:7B:DD:0A:75:0B:D5:B7:F8:B3:0B:5C:1C:E2:F2:FB:1A:C3:05:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/387BDD0A750BD5B7F8B30B5C1CE2F2FB1AC3052C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.136.0/22
                IPv6:
                  2804:6544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269479

    Signature Algorithm: sha256WithRSAEncryption
         ab:45:8a:96:9e:de:43:e5:63:6f:7a:8d:5b:aa:dd:c0:85:95:
         9a:13:7b:13:fc:06:a5:40:8a:c7:1f:7f:87:2b:81:d0:fa:e5:
         55:4a:99:e0:d8:02:90:2f:54:94:c1:76:be:ee:2b:4d:78:25:
         e7:20:b0:07:19:25:1c:04:82:7d:3a:8f:86:97:9a:ca:da:ee:
         44:f7:06:9b:e7:5f:7e:3f:e9:a5:42:ab:9a:88:f2:96:27:fb:
         44:4e:f6:bd:0d:36:75:0c:49:16:bd:10:98:02:75:5f:66:fa:
         8d:79:a4:9a:f6:b5:94:96:11:2f:db:49:9a:15:34:b7:16:2d:
         a3:ca:0f:b5:41:51:02:33:9a:54:14:15:78:ab:cb:91:4e:4a:
         da:cb:d7:47:a0:c0:32:16:60:52:65:af:f8:01:fb:ac:65:2e:
         3c:11:62:24:cb:d2:02:3c:61:19:da:07:9b:f0:85:2d:8e:48:
         c7:53:69:65:a0:5e:b6:3c:eb:80:ca:c0:35:41:63:37:c9:4a:
         8a:02:45:a6:92:df:d6:95:f2:3e:76:ed:d9:9a:6f:19:e6:65:
         8e:ae:f9:bb:a4:48:a8:68:6e:05:6e:25:f8:55:47:f8:3e:78:
         85:f5:3e:0d:9f:0a:c8:5f:2a:2f:80:68:81:2f:07:6a:ec:dc:
         4e:b3:d7:6d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZSMGIsWhcgoTe128DQAZezLwpYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDYxMzE3MDRaFw0yNDAzMDQxMzIyMDRaMDMxMTAvBgNV
BAMTKDM4N0JERDBBNzUwQkQ1QjdGOEIzMEI1QzFDRTJGMkZCMUFDMzA1MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDKAmuqk4G0YIGGDmmTwWl0Zt
AuzAqgECQ7i80ydplwFLt/4z6YImWDjctVv/QL7ueueI9geMwic1Y2QumhVMKEcu
EvgbQyjsfw8z5ETb9ZnW18OVlJ9B/h9uiOBR7gBF2lnWS/Y/A/gRYLAPzqBoCO2i
F5hy9P70Mr8uFDjjZeYFKTigdYqpraRL61xCb+ik5fj9Vo4baPYdBr815yXZl3bc
+8H8pUh96VX/5qIkz24VmZIktEEqGlYKzrhd2480UU6ZOydhQwv11DTmO9ytYazj
zgeJaS5QwHok1wOcr6i4uS9ROX4Wi6eJy28VoeR4P6UXCQLIQiQH327VRvZZAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4e90KdQvVt/iz
C1wc4vL7GsMFLDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zRGNVZzVtUTlNU2lubU1USGhVTWZxcEJtaUd3eExKZXNX
c0VuUFllWG9Zcy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zRGNVZzVtUTlNU2lubU1USGhVTWZxcEJtaUd3eExKZXNX
c0VuUFllWG9Zcy8wLzM4N0JERDBBNzUwQkQ1QjdGOEIzMEI1QzFDRTJGMkZCMUFD
MzA1MkMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi27iDANBAIAAjAHAwUA
KARlRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHKcwDQYJKoZIhvcNAQELBQAD
ggEBAKtFipae3kPlY296jVuq3cCFlZoTexP8BqVAiscff4crgdD65VVKmeDYApAv
VJTBdr7uK014JecgsAcZJRwEgn06j4aXmsra7kT3BpvnX34/6aVCq5qI8pYn+0RO
9r0NNnUMSRa9EJgCdV9m+o15pJr2tZSWES/bSZoVNLcWLaPKD7VBUQIzmlQUFXir
y5FOStrL10egwDIWYFJlr/gB+6xlLjwRYiTL0gI8YRnaB5vwhS2OSMdTaWWgXrY8
64DKwDVBYzfJSooCRaaS39aV8j527dmabxnmZY6u+bukSKhobgVuJfhVR/g+eIX1
Pg2fCshfKi+AaIEvB2rs3E6z120=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:20 2025 by rpki-client