Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/519C326DF49D190F9C151CDA9DEB4C63E03E1730.cer
File:                     519C326DF49D190F9C151CDA9DEB4C63E03E1730.cer (raw, json)
Hash identifier:          MyU1Pl2zc6uFVVyBnkr4G5o8p2tEfrF/eRhOnTtJnKA=
Subject key identifier:   51:9C:32:6D:F4:9D:19:0F:9C:15:1C:DA:9D:EB:4C:63:E0:3E:17:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7702014399BB05624CEDD2D652A00F274A8A6AC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2iGRmo2Dky52Ux5mEf7hRfwiWrfbQKnmUYA5Ji3YZqku/0/519C326DF49D190F9C151CDA9DEB4C63E03E1730.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2iGRmo2Dky52Ux5mEf7hRfwiWrfbQKnmUYA5Ji3YZqku/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Apr 2023 12:07:26 +0000
Certificate not after:    Sat 30 Mar 2024 12:12:26 +0000
Subordinate resources:    AS: 270388
                          IP: 190.89.120.0/22
                          IP: 2804:6b40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:02:01:43:99:bb:05:62:4c:ed:d2:d6:52:a0:0f:27:4a:8a:6a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 12:07:26 2023 GMT
            Not After : Mar 30 12:12:26 2024 GMT
        Subject: CN=519C326DF49D190F9C151CDA9DEB4C63E03E1730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:ca:3c:72:9e:26:d4:e5:aa:f5:e4:a4:0e:
                    06:a5:b7:1e:e8:62:d9:8a:f2:b0:e5:7e:ab:38:a4:
                    5b:c1:fd:3d:c0:6e:03:4a:76:ab:03:a1:ec:61:ac:
                    94:e6:76:a4:02:c0:60:12:fc:30:44:55:da:4e:60:
                    af:1c:d4:00:eb:5e:6f:b2:8d:d7:92:73:ed:38:79:
                    43:ca:c1:c7:93:52:74:5f:69:b5:36:d4:67:6e:0a:
                    8e:08:6f:b8:46:75:2c:3e:fe:28:af:71:12:9f:9d:
                    10:ca:2c:57:78:88:0c:99:0b:62:e8:c3:18:94:9b:
                    7d:27:0e:95:1a:83:2d:6f:fb:08:f3:b0:47:41:89:
                    a2:06:1d:47:87:cc:fc:a7:4a:3c:6a:e4:f2:8d:49:
                    73:08:32:db:65:12:30:a4:c4:3a:94:10:d6:97:bd:
                    29:89:26:48:42:67:a8:3c:6c:71:8d:06:71:39:1b:
                    09:cf:5e:0a:ca:46:24:d2:f5:82:51:16:98:ca:e9:
                    21:d3:f0:77:3c:67:ca:cf:97:4a:14:a9:8c:a0:11:
                    bc:db:54:3e:07:9e:18:48:38:2e:99:d0:28:aa:b9:
                    e6:11:75:56:ea:4f:d8:f8:78:db:de:ed:1d:6c:2f:
                    20:33:59:a3:0e:a4:d8:82:c9:77:10:80:2f:e4:f9:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:9C:32:6D:F4:9D:19:0F:9C:15:1C:DA:9D:EB:4C:63:E0:3E:17:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2iGRmo2Dky52Ux5mEf7hRfwiWrfbQKnmUYA5Ji3YZqku/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2iGRmo2Dky52Ux5mEf7hRfwiWrfbQKnmUYA5Ji3YZqku/0/519C326DF49D190F9C151CDA9DEB4C63E03E1730.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.120.0/22
                IPv6:
                  2804:6b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270388

    Signature Algorithm: sha256WithRSAEncryption
         82:08:fa:ca:69:35:47:60:74:c9:e7:14:37:4a:f0:bb:aa:bc:
         a4:16:3e:f8:82:67:a1:3f:01:a3:36:31:be:18:c6:ba:59:c9:
         56:9e:49:92:a2:96:e9:4b:10:9f:6c:ac:76:aa:0d:1b:0a:3c:
         7c:1f:2d:33:47:c0:ae:51:07:97:09:95:00:df:b7:d1:ea:66:
         b5:be:56:45:88:37:68:c3:2f:57:5a:24:be:33:1c:1e:7a:85:
         2c:65:d4:58:03:6f:5c:2f:4b:34:a9:3d:ff:73:ea:f3:fc:87:
         eb:a5:f8:da:f0:f1:26:b6:d3:19:82:fa:bc:20:50:f4:ff:f6:
         8b:bd:fe:0c:06:ac:11:c6:5c:c2:5e:43:93:79:77:0b:ee:f2:
         34:10:32:4b:91:62:4a:5d:c8:db:01:a8:9b:a0:d0:d6:dd:35:
         58:bd:af:45:e9:eb:69:39:03:b6:96:68:ef:26:cf:6c:17:02:
         06:8d:c0:8e:76:49:68:13:e5:f6:08:a8:e3:69:c1:14:a0:30:
         4f:e9:60:3b:da:a6:d6:cf:59:ef:d6:ff:68:2e:12:00:cd:a6:
         c9:45:37:2b:96:a6:83:8d:d0:4d:4e:3b:06:a7:20:88:c1:aa:
         c8:45:34:42:66:0b:48:a6:a0:fc:13:60:72:29:63:f7:5a:29:
         73:16:b8:37
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUdwIBQ5m7BWJM7dLWUqAPJ0qKascwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MDExMjA3MjZaFw0yNDAzMzAxMjEyMjZaMDMxMTAvBgNV
BAMTKDUxOUMzMjZERjQ5RDE5MEY5QzE1MUNEQTlERUI0QzYzRTAzRTE3MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2a8o8cp4m1OWq9eSkDgaltx7o
YtmK8rDlfqs4pFvB/T3AbgNKdqsDoexhrJTmdqQCwGAS/DBEVdpOYK8c1ADrXm+y
jdeSc+04eUPKwceTUnRfabU21GduCo4Ib7hGdSw+/iivcRKfnRDKLFd4iAyZC2Lo
wxiUm30nDpUagy1v+wjzsEdBiaIGHUeHzPynSjxq5PKNSXMIMttlEjCkxDqUENaX
vSmJJkhCZ6g8bHGNBnE5GwnPXgrKRiTS9YJRFpjK6SHT8Hc8Z8rPl0oUqYygEbzb
VD4HnhhIOC6Z0CiqueYRdVbqT9j4eNve7R1sLyAzWaMOpNiCyXcQgC/k+QEVAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRnDJt9J0ZD5wV
HNqd60xj4D4XMDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yaUdSbW8yRGt5NTJVeDVtRWY3aFJmd2lXcmZiUUtubVVZ
QTVKaTNZWnFrdS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yaUdSbW8yRGt5NTJVeDVtRWY3aFJmd2lXcmZiUUtubVVZ
QTVKaTNZWnFrdS8wLzUxOUMzMjZERjQ5RDE5MEY5QzE1MUNEQTlERUI0QzYzRTAz
RTE3MzAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5ZeDANBAIAAjAHAwUA
KARrQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIDQwDQYJKoZIhvcNAQELBQAD
ggEBAIII+sppNUdgdMnnFDdK8LuqvKQWPviCZ6E/AaM2Mb4YxrpZyVaeSZKilulL
EJ9srHaqDRsKPHwfLTNHwK5RB5cJlQDft9HqZrW+VkWIN2jDL1daJL4zHB56hSxl
1FgDb1wvSzSpPf9z6vP8h+ul+Nrw8Sa20xmC+rwgUPT/9ou9/gwGrBHGXMJeQ5N5
dwvu8jQQMkuRYkpdyNsBqJug0NbdNVi9r0Xp62k5A7aWaO8mz2wXAgaNwI52SWgT
5fYIqONpwRSgME/pYDvaptbPWe/W/2guEgDNpslFNyuWpoON0E1OOwanIIjBqshF
NEJmC0imoPwTYHIpY/daKXMWuDc=
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:37:48 2025 by rpki-client