Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/655DAA0000C4D660408AA907F23CE376A2710991.cer
File:                     655DAA0000C4D660408AA907F23CE376A2710991.cer (raw, json)
Hash identifier:          UCiQtCi/DQSpdbZs6KLk3mvJa12VbLB3kUaEkiP9bRs=
Subject key identifier:   65:5D:AA:00:00:C4:D6:60:40:8A:A9:07:F2:3C:E3:76:A2:71:09:91
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FBF699D7F69F5DEE6ADDA54A27A1B51EBEDAA5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/655DAA0000C4D660408AA907F23CE376A2710991.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Sep 2023 13:51:01 +0000
Certificate not after:    Thu 19 Sep 2024 13:56:01 +0000
Subordinate resources:    AS: 271297
                          IP: 45.229.136.0/24
                          IP: 192.231.175.0/24
                          IP: 2804:794c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bf:69:9d:7f:69:f5:de:e6:ad:da:54:a2:7a:1b:51:eb:ed:aa:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 21 13:51:01 2023 GMT
            Not After : Sep 19 13:56:01 2024 GMT
        Subject: CN=655DAA0000C4D660408AA907F23CE376A2710991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:42:ca:31:23:f2:76:b5:5e:7e:43:40:c1:
                    3d:c2:4b:bd:65:37:b0:d7:1d:f8:73:02:bc:a8:dd:
                    b6:50:1b:fd:71:6f:17:30:a3:e3:12:94:63:2b:f7:
                    a6:85:b0:0b:5f:d1:05:c9:96:45:2e:79:15:66:ee:
                    c5:ae:af:c9:89:30:f9:5c:ac:9d:c0:b2:f4:f5:d6:
                    46:c3:bf:c9:5c:fc:87:02:92:21:ff:1c:63:61:ce:
                    46:15:c1:07:f1:28:43:61:9a:19:80:1c:53:17:05:
                    ca:e2:9d:48:7f:45:85:8c:a5:e3:98:de:c7:55:3a:
                    97:51:f5:ad:66:2d:a8:c8:c1:b5:a1:58:47:48:e3:
                    11:d0:35:48:8c:ed:3b:6b:6d:d9:5a:9f:24:f7:8b:
                    51:5a:92:d7:ae:e0:8c:a9:a4:63:2c:6c:96:ee:56:
                    b3:5e:b9:72:4f:94:bc:f4:1c:f9:c0:cd:5d:60:bf:
                    44:c4:45:36:90:f1:d6:39:d0:76:f5:6b:bc:7c:19:
                    96:c4:ac:3a:ca:9e:77:39:9c:96:b9:0b:00:ac:7e:
                    61:a2:e3:6c:26:39:a3:0c:76:56:36:9d:23:5a:67:
                    eb:60:7d:41:bf:53:62:0c:ed:c9:95:65:07:77:9a:
                    9b:43:3b:a9:cc:92:5d:aa:c7:20:52:7c:b8:fc:7e:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:5D:AA:00:00:C4:D6:60:40:8A:A9:07:F2:3C:E3:76:A2:71:09:91
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/655DAA0000C4D660408AA907F23CE376A2710991.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.136.0/24
                  192.231.175.0/24
                IPv6:
                  2804:794c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271297

    Signature Algorithm: sha256WithRSAEncryption
         98:17:09:b8:ca:83:72:0d:fc:29:02:f6:e2:94:3f:7b:31:93:
         6f:5d:4b:bb:d0:7b:bf:7e:d3:fa:2e:c6:1b:1f:da:75:8e:58:
         05:f6:76:a8:7b:11:1f:ba:ab:1f:06:69:ab:b4:64:46:3b:e7:
         91:a2:38:3f:d6:33:7d:ec:34:a0:e6:08:84:84:69:b7:b2:d0:
         81:0b:f5:d8:ab:7f:21:e7:b4:b6:b1:17:d9:ca:bf:c2:14:33:
         8e:bc:08:f3:99:18:20:48:d0:10:40:b3:b3:d3:c0:e3:2a:26:
         8f:7a:03:4f:b1:bf:4f:d0:47:11:f1:ed:4d:84:f7:45:1f:ae:
         25:82:e7:e5:7e:9b:f0:6a:9e:de:5f:f1:2f:05:38:44:63:3e:
         b8:7c:a9:54:dc:3d:3c:99:c3:e2:a2:77:f5:fd:66:6f:b3:f8:
         27:c7:3d:4d:fd:a5:99:0f:c1:4b:69:b6:71:03:b0:c5:9e:12:
         0c:fe:76:93:ef:81:4d:20:c9:dc:79:7b:67:a3:91:8f:18:2d:
         e2:94:24:76:7c:69:90:d1:4f:9f:37:91:db:dd:73:4c:a3:44:
         f8:33:7d:ec:50:fc:8b:31:39:e7:71:25:ed:ec:dc:fa:08:62:
         4f:31:be:9a:18:57:c3:81:d1:69:0a:f0:0e:f8:0b:eb:6c:19:
         80:94:5a:36
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUP79pnX9p9d7mrdpUonobUevtqlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjExMzUxMDFaFw0yNDA5MTkxMzU2MDFaMDMxMTAvBgNV
BAMTKDY1NURBQTAwMDBDNEQ2NjA0MDhBQTkwN0YyM0NFMzc2QTI3MTA5OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjULKMSPydrVefkNAwT3CS71l
N7DXHfhzAryo3bZQG/1xbxcwo+MSlGMr96aFsAtf0QXJlkUueRVm7sWur8mJMPlc
rJ3AsvT11kbDv8lc/IcCkiH/HGNhzkYVwQfxKENhmhmAHFMXBcrinUh/RYWMpeOY
3sdVOpdR9a1mLajIwbWhWEdI4xHQNUiM7TtrbdlanyT3i1Fakteu4IyppGMsbJbu
VrNeuXJPlLz0HPnAzV1gv0TERTaQ8dY50Hb1a7x8GZbErDrKnnc5nJa5CwCsfmGi
42wmOaMMdlY2nSNaZ+tgfUG/U2IM7cmVZQd3mptDO6nMkl2qxyBSfLj8fm9nAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlXaoAAMTWYECK
qQfyPON2onEJkTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83TVpFaW1uYVM1OUUyZUF3OGg0b1hLZWhyNUNZbW1NdEhY
a24xb3VBdGhkUS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRI
WGtuMW91QXRoZFEvMC82NTVEQUEwMDAwQzRENjYwNDA4QUE5MDdGMjNDRTM3NkEy
NzEwOTkxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAAt5YgDBADA568wDQQC
AAIwBwMFACgEeUwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCPBMA0GCSqGSIb3
DQEBCwUAA4IBAQCYFwm4yoNyDfwpAvbilD97MZNvXUu70Hu/ftP6LsYbH9p1jlgF
9naoexEfuqsfBmmrtGRGO+eRojg/1jN97DSg5giEhGm3stCBC/XYq38h57S2sRfZ
yr/CFDOOvAjzmRggSNAQQLOz08DjKiaPegNPsb9P0EcR8e1NhPdFH64lguflfpvw
ap7eX/EvBThEYz64fKlU3D08mcPionf1/WZvs/gnxz1N/aWZD8FLabZxA7DFnhIM
/naT74FNIMnceXtno5GPGC3ilCR2fGmQ0U+fN5Hb3XNMo0T4M33sUPyLMTnncSXt
7Nz6CGJPMb6aGFfDgdFpCvAO+AvrbBmAlFo2
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:09 2025 by rpki-client