Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6E278641A3233EBBB23D4CF9DAF49E012F8F29F9.cer
File:                     6E278641A3233EBBB23D4CF9DAF49E012F8F29F9.cer (raw, json)
Hash identifier:          59JL62bX9aFyb3VM4J5OIvyMj5YtEXbtaj/h3/9Oa+g=
Subject key identifier:   6E:27:86:41:A3:23:3E:BB:B2:3D:4C:F9:DA:F4:9E:01:2F:8F:29:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C2A3AC2EDFBE0883E0FBBDC6C7F4F46F47DE506
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/6E278641A3233EBBB23D4CF9DAF49E012F8F29F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Apr 2023 12:54:49 +0000
Certificate not after:    Sat 13 Apr 2024 12:59:49 +0000
Subordinate resources:    AS: 263888
                          IP: 138.204.132.0/22
                          IP: 170.254.72.0/22
                          IP: 2804:2744::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2a:3a:c2:ed:fb:e0:88:3e:0f:bb:dc:6c:7f:4f:46:f4:7d:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 15 12:54:49 2023 GMT
            Not After : Apr 13 12:59:49 2024 GMT
        Subject: CN=6E278641A3233EBBB23D4CF9DAF49E012F8F29F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:9a:bc:68:52:9d:f3:43:28:5a:20:39:75:
                    51:3a:9c:b3:3a:66:ba:b3:d7:5f:1a:55:f8:96:67:
                    5e:cc:93:b3:17:91:25:9d:11:0b:e6:ec:e7:fa:d5:
                    27:11:55:9e:2d:4b:46:30:c2:95:a0:27:e9:b7:c6:
                    94:e2:b0:91:c2:2c:97:66:ad:9b:1d:c7:b4:1f:e2:
                    83:47:59:75:ba:79:84:4e:5c:5e:b3:2d:31:ee:47:
                    6b:ff:b4:cc:cc:97:d5:6e:84:f6:d8:23:cb:8d:c7:
                    c4:aa:64:ea:83:af:cc:65:01:23:f4:69:bd:a0:25:
                    b0:69:6c:ef:e0:41:e5:ce:9b:55:f1:a0:fe:be:83:
                    7a:08:2a:5c:05:e7:35:d3:8c:ae:cf:3c:94:ea:b1:
                    3c:e4:2d:f2:d6:06:4f:a3:5c:3f:40:1a:33:3b:5a:
                    1b:59:f8:03:bd:8b:2d:16:30:81:1b:33:e9:eb:58:
                    a9:82:78:31:35:b5:19:c8:8f:f8:8b:61:16:53:b7:
                    f1:9b:7b:ab:68:4a:9d:55:06:e6:e7:a2:9e:f2:41:
                    85:94:20:54:3d:b1:43:13:85:d8:e3:f0:a0:48:41:
                    6d:2b:a5:a2:a2:9a:97:0a:ab:e8:c9:a9:65:35:16:
                    10:04:2a:6f:99:bb:53:40:be:bb:5a:da:a6:0b:0e:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:27:86:41:A3:23:3E:BB:B2:3D:4C:F9:DA:F4:9E:01:2F:8F:29:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/6E278641A3233EBBB23D4CF9DAF49E012F8F29F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.132.0/22
                  170.254.72.0/22
                IPv6:
                  2804:2744::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263888

    Signature Algorithm: sha256WithRSAEncryption
         99:ba:f7:4e:1d:c6:ba:c3:3a:37:60:9d:bd:2b:5a:ee:61:d1:
         a4:71:0a:d1:39:3c:3b:6a:13:ac:a5:9e:b8:f1:c8:26:b9:dd:
         b4:24:90:80:c4:8a:d3:47:d3:60:93:44:31:c7:84:5d:a5:f1:
         47:d4:19:0a:7c:a0:dd:68:40:d5:92:32:a1:6d:9c:57:37:09:
         a4:3f:38:c5:43:3c:56:af:e4:b7:01:e5:73:32:ee:f7:f5:46:
         b0:9d:ef:5d:19:1f:7b:ed:a0:6b:e3:25:ba:2e:d5:20:cf:f1:
         52:94:70:22:32:0d:85:07:96:4d:87:cf:12:66:5f:c4:37:49:
         2e:31:bd:b9:71:a9:d8:12:f1:5c:e2:ff:04:19:9e:71:fc:36:
         cf:a9:08:cc:fa:b1:f2:11:24:48:91:ec:6f:58:94:1d:5e:fc:
         cd:8a:a5:93:3a:4e:23:ca:c9:92:11:47:34:00:82:92:f9:41:
         91:07:1f:f1:3b:3d:eb:0a:74:7a:29:7b:56:32:33:91:ac:2b:
         19:af:c8:7b:df:e9:86:2f:78:a5:d5:23:e5:71:e7:5f:7d:cb:
         6b:18:e2:a3:7c:b0:03:f2:2b:c0:5d:4c:a9:83:0d:c7:81:b3:
         88:c5:f5:ce:27:77:b0:70:95:3f:66:eb:be:dd:14:4d:da:ec:
         94:8b:c9:a3
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUTCo6wu374Ig+D7vcbH9PRvR95QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTUxMjU0NDlaFw0yNDA0MTMxMjU5NDlaMDMxMTAvBgNV
BAMTKDZFMjc4NjQxQTMyMzNFQkJCMjNENENGOURBRjQ5RTAxMkY4RjI5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCJq8aFKd80MoWiA5dVE6nLM6
Zrqz118aVfiWZ17Mk7MXkSWdEQvm7Of61ScRVZ4tS0YwwpWgJ+m3xpTisJHCLJdm
rZsdx7Qf4oNHWXW6eYROXF6zLTHuR2v/tMzMl9VuhPbYI8uNx8SqZOqDr8xlASP0
ab2gJbBpbO/gQeXOm1XxoP6+g3oIKlwF5zXTjK7PPJTqsTzkLfLWBk+jXD9AGjM7
WhtZ+AO9iy0WMIEbM+nrWKmCeDE1tRnIj/iLYRZTt/Gbe6toSp1VBubnop7yQYWU
IFQ9sUMThdjj8KBIQW0rpaKimpcKq+jJqWU1FhAEKm+Zu1NAvrta2qYLDi2BAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRuJ4ZBoyM+u7I9
TPna9J4BL48p+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84MWlWcVo5bjlSU0pTWWF6dzNycXl5Y1VieEoxVndHcmZh
YnNlMmt3VjJnVC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84MWlWcVo5bjlSU0pTWWF6dzNycXl5Y1VieEoxVndHcmZh
YnNlMmt3VjJnVC8wLzZFMjc4NjQxQTMyMzNFQkJCMjNENENGOURBRjQ5RTAxMkY4
RjI5RjkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAorMhAMEAqr+SDANBAIA
AjAHAwUAKAQnRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBtAwDQYJKoZIhvcN
AQELBQADggEBAJm6904dxrrDOjdgnb0rWu5h0aRxCtE5PDtqE6ylnrjxyCa53bQk
kIDEitNH02CTRDHHhF2l8UfUGQp8oN1oQNWSMqFtnFc3CaQ/OMVDPFav5LcB5XMy
7vf1RrCd710ZH3vtoGvjJbou1SDP8VKUcCIyDYUHlk2HzxJmX8Q3SS4xvblxqdgS
8Vzi/wQZnnH8Ns+pCMz6sfIRJEiR7G9YlB1e/M2KpZM6TiPKyZIRRzQAgpL5QZEH
H/E7PesKdHope1YyM5GsKxmvyHvf6YYveKXVI+Vx5199y2sY4qN8sAPyK8BdTKmD
DceBs4jF9c4nd7BwlT9m677dFE3a7JSLyaM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:09:19 2025 by rpki-client