Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/471A7ADD455C68D25753DE159530C83B00C46E39.cer
File:                     471A7ADD455C68D25753DE159530C83B00C46E39.cer (raw, json)
Hash identifier:          VfYVcV3iLQqWRNE6ji3IuUtz7Db7dRnEfM8k48M9Gh0=
Subject key identifier:   47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11339BE4A08D80DB99E7D1EEF86AF266DCAE70FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/471A7ADD455C68D25753DE159530C83B00C46E39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Jul 2022 10:57:33 +0000
Certificate not after:    Fri 21 Jul 2023 11:02:33 +0000
Subordinate resources:    AS: 271412
                          IP: 207.248.16.0/22
                          IP: 2804:7b20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:33:9b:e4:a0:8d:80:db:99:e7:d1:ee:f8:6a:f2:66:dc:ae:70:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 10:57:33 2022 GMT
            Not After : Jul 21 11:02:33 2023 GMT
        Subject: CN=471A7ADD455C68D25753DE159530C83B00C46E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:53:06:d2:4e:a4:21:a8:58:c3:3f:0c:e1:
                    19:cb:1c:19:0b:f3:ba:47:9b:08:cf:5a:18:09:2d:
                    01:c4:02:67:0c:46:c9:c6:3a:f4:66:04:2d:95:7e:
                    df:45:18:a2:97:30:2d:a0:15:45:ee:84:08:4b:d2:
                    ad:1c:b7:be:9e:12:85:0e:e1:85:5d:b6:04:92:cd:
                    43:53:35:5e:7a:7a:69:7b:23:f3:a8:a4:bf:6e:5d:
                    a4:7b:2f:35:4c:18:54:2a:19:57:72:f3:19:d5:9d:
                    55:9d:69:bb:b5:ea:aa:39:30:18:3c:cf:17:28:e7:
                    6d:1b:97:50:59:36:b2:75:05:3e:d6:8e:14:7f:49:
                    06:7d:02:ca:e3:8d:80:ae:89:30:31:1e:57:7d:c3:
                    ba:7c:e2:45:85:07:53:e6:75:3d:91:69:db:0d:a1:
                    28:f4:06:55:04:22:1b:10:e7:53:a1:90:3f:66:42:
                    2a:6f:ab:0f:bd:d8:7b:7f:6a:69:1b:58:d6:8c:59:
                    a7:50:0a:71:71:bc:a1:ef:cb:e7:25:33:bc:d3:ec:
                    0f:b7:e7:a1:68:bc:42:b4:3a:45:76:4a:8f:ee:05:
                    94:48:68:f9:c4:94:76:0f:96:b1:93:fd:3c:21:23:
                    d2:a1:74:57:11:19:c9:dd:4f:06:6f:55:0f:26:7f:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/471A7ADD455C68D25753DE159530C83B00C46E39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.16.0/22
                IPv6:
                  2804:7b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271412

    Signature Algorithm: sha256WithRSAEncryption
         22:ee:0d:39:af:9a:1d:c6:14:c0:57:be:f0:da:63:7a:0e:eb:
         55:1e:ce:1f:60:5d:04:76:fa:70:26:b4:28:36:7f:fe:f5:68:
         8e:75:89:7e:38:0c:a4:3c:2b:e4:b7:61:f3:36:6b:ae:d3:24:
         9b:5e:b0:62:ad:f7:80:1b:05:ea:96:08:56:07:bc:19:98:04:
         d5:64:b0:6f:d2:8a:4f:09:59:86:98:3b:30:46:2c:ec:4f:f5:
         6c:d2:fa:08:d0:08:11:ed:8f:87:8e:c8:2d:83:0e:8a:6b:17:
         1c:e8:f5:4a:af:b4:e2:dd:a6:c9:e0:58:74:6a:a7:17:8d:35:
         50:77:5d:f6:5a:86:a9:b2:00:a6:5f:32:d1:48:1b:bb:d6:42:
         f8:f8:c4:57:b0:59:d3:22:05:79:85:31:c8:d8:5e:fb:56:00:
         43:2c:9e:36:cc:03:31:b7:a5:f5:ab:68:8b:73:de:5f:a9:b5:
         6c:e3:6d:6e:27:93:3c:10:a4:e4:8e:cf:28:6a:43:18:d6:8c:
         55:39:d5:18:b0:a5:b7:e8:8c:32:c0:bc:04:86:86:ca:d3:b5:
         72:ab:b2:8a:f6:2d:fd:e6:9b:ea:05:0a:55:77:b8:6d:65:b1:
         92:04:ce:ff:d0:76:9c:33:97:a5:3d:fb:44:aa:57:22:2b:4b:
         2a:67:27:5e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUETOb5KCNgNuZ59Hu+GryZtyucP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MjIxMDU3MzNaFw0yMzA3MjExMTAyMzNaMDMxMTAvBgNV
BAMTKDQ3MUE3QURENDU1QzY4RDI1NzUzREUxNTk1MzBDODNCMDBDNDZFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNlMG0k6kIahYwz8M4RnLHBkL
87pHmwjPWhgJLQHEAmcMRsnGOvRmBC2Vft9FGKKXMC2gFUXuhAhL0q0ct76eEoUO
4YVdtgSSzUNTNV56eml7I/OopL9uXaR7LzVMGFQqGVdy8xnVnVWdabu16qo5MBg8
zxco520bl1BZNrJ1BT7WjhR/SQZ9AsrjjYCuiTAxHld9w7p84kWFB1PmdT2RadsN
oSj0BlUEIhsQ51OhkD9mQipvqw+92Ht/amkbWNaMWadQCnFxvKHvy+clM7zT7A+3
56FovEK0OkV2So/uBZRIaPnElHYPlrGT/TwhI9KhdFcRGcndTwZvVQ8mf42XAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHGnrdRVxo0ldT
3hWVMMg7AMRuOTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85TlFBYkg2cUJVNHhEWFRQREpyQU1NZjFuM1lWOEM3Q0Vp
S2Rlc1d0YzllQi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOU5RQWJINnFCVTR4RFhUUERKckFNTWYxbjNZVjhDN0NF
aUtkZXNXdGM5ZUIvMC80NzFBN0FERDQ1NUM2OEQyNTc1M0RFMTU5NTMwQzgzQjAw
QzQ2RTM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALP+BAwDQQCAAIwBwMF
ACgEeyAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCQ0MA0GCSqGSIb3DQEBCwUA
A4IBAQAi7g05r5odxhTAV77w2mN6DutVHs4fYF0EdvpwJrQoNn/+9WiOdYl+OAyk
PCvkt2HzNmuu0ySbXrBirfeAGwXqlghWB7wZmATVZLBv0opPCVmGmDswRizsT/Vs
0voI0AgR7Y+Hjsgtgw6Kaxcc6PVKr7Ti3abJ4Fh0aqcXjTVQd132WoapsgCmXzLR
SBu71kL4+MRXsFnTIgV5hTHI2F77VgBDLJ42zAMxt6X1q2iLc95fqbVs421uJ5M8
EKTkjs8oakMY1oxVOdUYsKW36IwywLwEhobK07Vyq7KK9i395pvqBQpVd7htZbGS
BM7/0HacM5elPftEqlciK0sqZyde
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:27 2025 by rpki-client