Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/66D1CF513762D93CCE6587E4C79051D233AA3F2B.cer
File:                     66D1CF513762D93CCE6587E4C79051D233AA3F2B.cer (raw, json)
Hash identifier:          WhftN6Lf38vWiTlXHy6xptGOsO4Vf4ZKANyqjIxb7mk=
Subject key identifier:   66:D1:CF:51:37:62:D9:3C:CE:65:87:E4:C7:90:51:D2:33:AA:3F:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BD44FAE125F524295E7E72307B1068899089955
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/66D1CF513762D93CCE6587E4C79051D233AA3F2B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Jan 2022 16:57:25 +0000
Certificate not after:    Mon 30 Jan 2023 17:02:25 +0000
Subordinate resources:    AS: 269075
                          IP: 45.179.108.0/22
                          IP: 2804:5f14::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d4:4f:ae:12:5f:52:42:95:e7:e7:23:07:b1:06:88:99:08:99:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 16:57:25 2022 GMT
            Not After : Jan 30 17:02:25 2023 GMT
        Subject: CN=66D1CF513762D93CCE6587E4C79051D233AA3F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:60:6e:5d:7c:1f:67:83:fe:5f:ce:0b:82:
                    7b:9f:5f:fd:60:3e:99:98:ba:57:07:51:e4:18:a6:
                    fb:1b:c0:d5:c2:44:f2:9b:ab:ac:dd:34:e1:e8:a9:
                    9e:5b:6d:66:27:c0:d3:b5:e2:06:92:31:58:66:0e:
                    c8:35:f9:47:bc:b4:e0:f9:29:a7:a4:92:c2:2a:68:
                    5c:a3:3a:76:ea:d4:71:87:a4:05:ee:b5:5f:08:41:
                    5c:91:97:fb:07:66:24:69:1d:ed:b5:54:77:38:ec:
                    d0:21:e6:2c:af:4b:d4:21:c5:ad:9e:54:ca:27:27:
                    c0:52:b8:44:e6:0a:86:e0:b8:82:e3:fc:2f:16:08:
                    e9:f8:52:75:0b:5d:55:58:95:2c:da:12:54:b3:30:
                    30:36:63:31:0c:4c:09:57:ae:f9:db:52:2e:ea:ca:
                    af:9f:b9:e3:97:b1:e8:e6:27:2e:ad:db:b7:6d:5e:
                    39:17:d3:aa:46:e6:f0:cb:95:97:88:3a:0f:4a:47:
                    4e:b7:4d:40:00:02:29:7c:97:4b:6b:45:e2:de:2f:
                    82:e6:1e:2b:d0:b8:28:98:7c:a4:ab:0a:9a:09:f1:
                    57:c7:ae:31:ba:a1:51:a7:b1:33:07:d4:34:17:bb:
                    dc:a3:76:e0:a5:df:1b:7e:f1:6d:35:d6:85:bc:27:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:D1:CF:51:37:62:D9:3C:CE:65:87:E4:C7:90:51:D2:33:AA:3F:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/66D1CF513762D93CCE6587E4C79051D233AA3F2B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.108.0/22
                IPv6:
                  2804:5f14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269075

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:d8:e5:88:0a:a5:f5:50:9a:12:52:a8:c7:72:5b:b6:97:
         15:99:d5:b8:45:8b:6c:97:c6:da:cb:f8:8c:bd:15:75:16:67:
         ae:e9:7f:ff:04:6d:62:ac:09:ae:e1:02:78:03:64:c3:84:dc:
         9f:0d:d4:91:1a:4f:a0:86:7f:57:63:a0:33:67:a1:04:d5:7f:
         f3:b7:6b:4b:f7:9b:e1:5f:da:04:81:2c:cb:2f:93:f2:82:b9:
         5c:26:5f:a8:f9:99:1b:b5:9d:ce:fc:73:53:73:24:6f:0c:ff:
         b0:9c:da:4f:94:c3:1a:81:ff:b1:06:e1:b9:69:d7:64:33:76:
         47:41:7e:0d:ca:13:4d:79:a9:b9:0a:0b:f2:95:e9:23:6c:ac:
         3d:a7:d4:46:be:cd:19:80:5c:7e:b6:63:b9:57:e4:5d:58:9b:
         48:a1:e8:cb:ed:d9:9b:ab:59:bb:58:a0:66:9c:2d:4a:5d:27:
         4d:ce:89:a5:03:ba:01:eb:5b:44:9b:8c:0c:a2:d3:fe:51:ab:
         b9:13:d9:74:87:3b:8a:9b:43:fe:57:81:6a:10:5b:ae:ea:00:
         22:bf:c1:96:32:9d:3d:63:27:c3:8f:2a:6b:1a:4a:67:a0:83:
         50:06:83:e2:95:fb:96:3a:cc:ea:71:36:4f:42:d3:14:73:9b:
         47:cf:fe:57
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUK9RPrhJfUkKV5+cjB7EGiJkImVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAxMzExNjU3MjVaFw0yMzAxMzAxNzAyMjVaMDMxMTAvBgNV
BAMTKDY2RDFDRjUxMzc2MkQ5M0NDRTY1ODdFNEM3OTA1MUQyMzNBQTNGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZ2BuXXwfZ4P+X84LgnufX/1g
PpmYulcHUeQYpvsbwNXCRPKbq6zdNOHoqZ5bbWYnwNO14gaSMVhmDsg1+Ue8tOD5
KaekksIqaFyjOnbq1HGHpAXutV8IQVyRl/sHZiRpHe21VHc47NAh5iyvS9Qhxa2e
VMonJ8BSuETmCobguILj/C8WCOn4UnULXVVYlSzaElSzMDA2YzEMTAlXrvnbUi7q
yq+fueOXsejmJy6t27dtXjkX06pG5vDLlZeIOg9KR063TUAAAil8l0trReLeL4Lm
HivQuCiYfKSrCpoJ8VfHrjG6oVGnsTMH1DQXu9yjduCl3xt+8W011oW8JxPDAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm0c9RN2LZPM5l
h+THkFHSM6o/KzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81Vzd1U1N4TU45SEhTREtGTFJaY2Y5UVA3dVA4bzY0YUpr
UXl6N0trR2JBcC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81Vzd1U1N4TU45SEhTREtGTFJaY2Y5UVA3dVA4bzY0YUpr
UXl6N0trR2JBcC8wLzY2RDFDRjUxMzc2MkQ5M0NDRTY1ODdFNEM3OTA1MUQyMzNB
QTNGMkIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2zbDANBAIAAjAHAwUA
KARfFDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGxMwDQYJKoZIhvcNAQELBQAD
ggEBADHm2OWICqX1UJoSUqjHclu2lxWZ1bhFi2yXxtrL+Iy9FXUWZ67pf/8EbWKs
Ca7hAngDZMOE3J8N1JEaT6CGf1djoDNnoQTVf/O3a0v3m+Ff2gSBLMsvk/KCuVwm
X6j5mRu1nc78c1NzJG8M/7Cc2k+UwxqB/7EG4blp12QzdkdBfg3KE015qbkKC/KV
6SNsrD2n1Ea+zRmAXH62Y7lX5F1Ym0ih6Mvt2ZurWbtYoGacLUpdJ03OiaUDugHr
W0SbjAyi0/5Rq7kT2XSHO4qbQ/5XgWoQW67qACK/wZYynT1jJ8OPKmsaSmegg1AG
g+KV+5Y6zOpxNk9C0xRzm0fP/lc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:08:58 2025 by rpki-client