Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.cer
File:                     7235DC8F1FE80A9FE856387FC24A1B149B50E301.cer (raw, json)
Hash identifier:          EJREfqbq7vjul2+aXiDax7KgT8s4y7XpH9ReMD1XR9U=
Subject key identifier:   72:35:DC:8F:1F:E8:0A:9F:E8:56:38:7F:C2:4A:1B:14:9B:50:E3:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2544331F757672FF1DCE08211290A72E4158CD4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Jul 2022 18:15:14 +0000
Certificate not after:    Mon 10 Jul 2023 18:20:14 +0000
Subordinate resources:    AS: 269456
                          IP: 45.187.52.0/22
                          IP: 2804:64e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:44:33:1f:75:76:72:ff:1d:ce:08:21:12:90:a7:2e:41:58:cd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 18:15:14 2022 GMT
            Not After : Jul 10 18:20:14 2023 GMT
        Subject: CN=7235DC8F1FE80A9FE856387FC24A1B149B50E301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:09:04:13:f1:a9:b5:2a:bf:43:e4:ea:d3:
                    d7:e2:0a:f5:2f:38:67:84:dd:4d:45:9a:c0:71:02:
                    d9:d3:a1:7b:9d:a0:52:02:c8:96:68:d6:aa:3f:ed:
                    d7:97:9b:05:8d:fb:d8:39:22:a0:f1:a9:89:43:0c:
                    1e:59:19:dd:be:9d:1a:c6:30:72:23:0c:41:2a:96:
                    df:a1:8e:60:ae:96:c8:c4:5e:3f:e4:38:2f:8f:9e:
                    b5:30:c5:70:87:b6:b8:0c:eb:c7:4c:1c:60:55:a4:
                    38:df:f3:98:1c:8d:fe:a7:bd:0d:c4:5f:33:51:f3:
                    78:b1:46:bd:2f:3c:a2:26:b2:a0:d7:0f:b4:c3:16:
                    0d:a6:62:9d:c6:e2:37:6f:01:7f:91:24:a4:d2:63:
                    a2:34:a5:02:9a:ab:fb:ac:2d:de:ec:bf:a4:90:0f:
                    b0:1b:73:a8:12:5d:da:4d:a8:20:d8:3c:fc:44:f0:
                    96:11:2c:86:ae:13:2b:ce:a5:b1:d0:25:35:a8:7f:
                    a5:d6:47:00:4f:60:ac:6c:a4:08:07:15:30:91:0e:
                    96:ee:23:69:0f:16:f0:40:1d:48:08:53:ab:87:f6:
                    ec:c8:27:36:c7:74:48:97:35:14:4b:17:61:f3:c8:
                    a4:37:60:49:4a:d9:62:c0:7f:1b:11:42:4b:35:77:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:35:DC:8F:1F:E8:0A:9F:E8:56:38:7F:C2:4A:1B:14:9B:50:E3:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.52.0/22
                IPv6:
                  2804:64e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269456

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:70:fb:b2:d6:13:86:69:d7:54:14:22:d5:50:95:50:94:
         b8:7f:fb:d8:52:35:d4:d1:e1:e7:59:ad:4f:05:ee:1e:2e:a7:
         37:8e:d3:32:6a:9f:a3:3d:d6:de:02:ee:55:ca:56:bc:2d:50:
         42:b6:ce:8a:7c:cb:d9:3e:7a:c6:a3:5c:8b:60:7a:0b:cb:7d:
         be:8d:1b:bf:e9:45:34:d5:bc:7c:f1:5f:3f:a1:52:eb:4e:ef:
         0f:6a:d1:58:8a:03:a0:9d:d2:20:3f:4c:94:74:a8:f1:c2:74:
         20:68:d4:7d:7d:47:5f:1b:b3:90:bf:2f:63:a6:30:3c:2f:a8:
         ad:4d:06:41:fd:94:db:b8:b0:6f:d0:65:32:1a:55:28:a8:1f:
         36:93:59:de:7a:fe:52:5e:79:b0:0b:ce:a7:0a:34:e0:8a:dc:
         c4:e0:37:54:93:b1:03:46:66:9a:ef:02:fa:ab:21:16:d6:f6:
         31:06:a3:8b:8b:6e:70:3d:e9:4c:70:85:1d:8c:28:75:8a:ca:
         b2:68:4e:b6:29:30:8b:bb:9c:5d:26:2c:36:be:d5:98:05:a6:
         a4:44:92:1b:90:1f:25:4e:fc:e8:cd:81:d6:aa:46:59:50:68:
         c0:d8:72:ba:5b:20:46:84:94:fb:4f:de:b0:7c:ea:fb:36:34:
         60:73:22:82
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJUQzH3V2cv8dzgghEpCnLkFYzUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MTExODE1MTRaFw0yMzA3MTAxODIwMTRaMDMxMTAvBgNV
BAMTKDcyMzVEQzhGMUZFODBBOUZFODU2Mzg3RkMyNEExQjE0OUI1MEUzMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtgkEE/GptSq/Q+Tq09fiCvUv
OGeE3U1FmsBxAtnToXudoFICyJZo1qo/7deXmwWN+9g5IqDxqYlDDB5ZGd2+nRrG
MHIjDEEqlt+hjmCulsjEXj/kOC+PnrUwxXCHtrgM68dMHGBVpDjf85gcjf6nvQ3E
XzNR83ixRr0vPKImsqDXD7TDFg2mYp3G4jdvAX+RJKTSY6I0pQKaq/usLd7sv6SQ
D7Abc6gSXdpNqCDYPPxE8JYRLIauEyvOpbHQJTWof6XWRwBPYKxspAgHFTCRDpbu
I2kPFvBAHUgIU6uH9uzIJzbHdEiXNRRLF2HzyKQ3YElK2WLAfxsRQks1d54dAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRyNdyPH+gKn+hW
OH/CShsUm1DjATAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IcEppTUxkNzdva2U5aVRTRG5rVTFIeWdYS3FkN1gyZHQ5
enF5UEQxaFh1Ui8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSHBKaU1MZDc3b2tlOWlUU0Rua1UxSHlnWEtxZDdYMmR0
OXpxeVBEMWhYdVIvMC83MjM1REM4RjFGRTgwQTlGRTg1NjM4N0ZDMjRBMUIxNDlC
NTBFMzAxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItuzQwDQQCAAIwBwMF
ACgEZOQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBByQMA0GCSqGSIb3DQEBCwUA
A4IBAQAnynD7stYThmnXVBQi1VCVUJS4f/vYUjXU0eHnWa1PBe4eLqc3jtMyap+j
PdbeAu5Vyla8LVBCts6KfMvZPnrGo1yLYHoLy32+jRu/6UU01bx88V8/oVLrTu8P
atFYigOgndIgP0yUdKjxwnQgaNR9fUdfG7OQvy9jpjA8L6itTQZB/ZTbuLBv0GUy
GlUoqB82k1neev5SXnmwC86nCjTgitzE4DdUk7EDRmaa7wL6qyEW1vYxBqOLi25w
PelMcIUdjCh1isqyaE62KTCLu5xdJiw2vtWYBaakRJIbkB8lTvzozYHWqkZZUGjA
2HK6WyBGhJT7T96wfOr7NjRgcyKC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org