Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
File:                     52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer (raw, json)
Hash identifier:          M1oL/EKmRon1Dd1DUUJzAlxYhPf0204qIi3n81+EE3k=
Subject key identifier:   52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0721DD72F9F233EC4DDCD106D3DADC73F762E2EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 Feb 2024 21:12:54 +0000
Certificate not after:    Sat 01 Feb 2025 21:17:54 +0000
Subordinate resources:    AS: 270684
                          IP: 45.228.12.0/22
                          IP: 200.187.104.0/22
                          IP: 2804:6fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:21:dd:72:f9:f2:33:ec:4d:dc:d1:06:d3:da:dc:73:f7:62:e2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  3 21:12:54 2024 GMT
            Not After : Feb  1 21:17:54 2025 GMT
        Subject: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:40:9f:f3:c3:39:84:82:41:d0:d9:ba:a9:
                    89:6f:cc:17:ef:bb:33:55:8a:f7:5f:fd:a3:7d:cd:
                    00:b5:e1:58:63:d7:74:c5:67:56:02:93:4c:e5:f8:
                    65:9a:1f:2b:e6:e7:9d:14:9b:e8:49:5b:cb:89:29:
                    40:ae:ed:ce:26:82:0a:e4:19:e6:a6:fe:58:44:c9:
                    13:52:ae:82:11:83:2a:23:5a:22:ee:cf:b2:09:c5:
                    06:d8:e0:d7:b2:fd:e2:f4:b3:c5:bb:8a:c7:20:8d:
                    23:25:ff:89:b0:4f:fc:a2:ed:7b:02:ae:4b:00:6b:
                    8e:b4:bc:93:5f:0b:ac:8a:8c:3a:85:bb:e8:da:fa:
                    26:8a:19:ed:1d:1b:4d:62:e7:b5:47:25:75:f6:e4:
                    a5:8b:b2:ec:f8:d8:be:e2:80:e5:d9:98:d7:3b:8a:
                    26:53:ae:17:4f:d8:35:e7:42:0f:ae:b1:8f:96:c2:
                    7d:11:c0:80:c1:0d:c8:9e:ac:37:7d:7f:2a:47:0b:
                    b0:b4:21:83:a7:42:44:8a:84:f0:79:d1:c2:52:b9:
                    ff:07:62:6b:aa:e3:93:54:39:d5:2b:d0:88:f3:8e:
                    03:61:22:83:41:89:50:70:b1:c3:de:c8:8d:e7:b1:
                    c8:19:26:7d:a7:eb:0d:98:88:71:78:5c:ec:d3:c9:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/22
                  200.187.104.0/22
                IPv6:
                  2804:6fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270684

    Signature Algorithm: sha256WithRSAEncryption
         5e:8d:dc:8f:72:b1:13:c8:ac:0a:5c:19:c3:64:f8:bf:9d:16:
         a7:08:82:bb:79:7f:9d:cd:ec:ee:0a:07:b8:03:da:4e:3d:07:
         8d:f7:12:a8:8a:d0:07:31:f3:fb:c4:31:2d:89:e4:29:6e:15:
         9e:b8:32:ea:aa:23:ad:0c:23:ab:28:2c:24:b1:44:8f:a6:66:
         db:fe:40:7b:02:c3:08:2b:9c:c6:68:8e:2b:b5:5f:d8:b9:b7:
         a2:e9:27:dd:d2:79:11:03:b2:3b:f0:28:a2:14:a2:c6:cd:d0:
         1d:fb:63:f9:f7:94:a1:3f:70:2c:1b:96:5e:a1:ed:2e:8d:6c:
         3d:07:43:06:35:3a:97:00:63:27:b8:dd:4a:a3:82:b0:38:0d:
         f2:f8:bd:95:cc:73:0d:c8:df:e2:c9:a8:a1:23:38:de:13:18:
         18:74:f5:aa:0a:1f:7b:7a:2b:ed:5a:27:20:45:7d:4c:fe:30:
         b2:30:22:e5:b1:21:ec:ce:00:93:37:59:73:f0:6e:72:7c:f8:
         34:ba:bc:da:d3:2b:d2:c5:8c:4e:4b:e4:8b:18:36:46:3d:a2:
         a0:d7:5d:86:e8:0d:24:48:af:54:ac:9d:ea:c7:0e:ae:73:04:
         d4:22:f1:a6:01:28:3b:46:29:39:20:99:c1:ae:d8:bb:85:cc:
         68:35:73:71
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUByHdcvnyM+xN3NEG09rcc/di4uowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDMyMTEyNTRaFw0yNTAyMDEyMTE3NTRaMDMxMTAvBgNV
BAMTKDUyQUM3QkVGQkZENEU1NzI2Nzg3MzI5MUFBOUE3NEU3OUU4MkIzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcaECf88M5hIJB0Nm6qYlvzBfv
uzNVivdf/aN9zQC14Vhj13TFZ1YCk0zl+GWaHyvm550Um+hJW8uJKUCu7c4mggrk
Geam/lhEyRNSroIRgyojWiLuz7IJxQbY4Ney/eL0s8W7iscgjSMl/4mwT/yi7XsC
rksAa460vJNfC6yKjDqFu+ja+iaKGe0dG01i57VHJXX25KWLsuz42L7igOXZmNc7
iiZTrhdP2DXnQg+usY+Wwn0RwIDBDcierDd9fypHC7C0IYOnQkSKhPB50cJSuf8H
Ymuq45NUOdUr0IjzjgNhIoNBiVBwscPeyI3nscgZJn2n6w2YiHF4XOzTyR4pAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSrHvvv9TlcmeH
MpGqmnTnnoKzGzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BWWFxNHVUUUtRekxkdXl4dFJ1cW5wZlQyUXdCd04yYzVv
Y0xRcFlCemk2di8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1
b2NMUXBZQnppNnYvMC81MkFDN0JFRkJGRDRFNTcyNjc4NzMyOTFBQTlBNzRFNzlF
ODJCMzFCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIt5AwDBALIu2gwDQQC
AAIwBwMFACgEb8gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCFcMA0GCSqGSIb3
DQEBCwUAA4IBAQBejdyPcrETyKwKXBnDZPi/nRanCIK7eX+dzezuCge4A9pOPQeN
9xKoitAHMfP7xDEtieQpbhWeuDLqqiOtDCOrKCwksUSPpmbb/kB7AsMIK5zGaI4r
tV/Yubei6Sfd0nkRA7I78CiiFKLGzdAd+2P595ShP3AsG5Zeoe0ujWw9B0MGNTqX
AGMnuN1Ko4KwOA3y+L2VzHMNyN/iyaihIzjeExgYdPWqCh97eivtWicgRX1M/jCy
MCLlsSHszgCTN1lz8G5yfPg0urza0yvSxYxOS+SLGDZGPaKg112G6A0kSK9UrJ3q
xw6ucwTUIvGmASg7Rik5IJnBrti7hcxoNXNx
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org