Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72D9D42F7D2DF211472D29F406E50CA72428589F.cer
File:                     72D9D42F7D2DF211472D29F406E50CA72428589F.cer (raw, json)
Hash identifier:          6N0+Xo1ZNShYZ1fTEE7HSTT3x/E7BkwZxQm1GC78asA=
Subject key identifier:   72:D9:D4:2F:7D:2D:F2:11:47:2D:29:F4:06:E5:0C:A7:24:28:58:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5EC18DBD76CA0C6049CE1B9FDEBC9345DC20EB1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/72D9D42F7D2DF211472D29F406E50CA72428589F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 12:29:43 +0000
Certificate not after:    Mon 03 Jun 2024 12:34:43 +0000
Subordinate resources:    AS: 53230
                          IP: 45.238.128.0/22
                          IP: 177.10.0.0/20
                          IP: 177.44.208.0/21
                          IP: 2804:2d0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c1:8d:bd:76:ca:0c:60:49:ce:1b:9f:de:bc:93:45:dc:20:eb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 12:29:43 2023 GMT
            Not After : Jun  3 12:34:43 2024 GMT
        Subject: CN=72D9D42F7D2DF211472D29F406E50CA72428589F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:cc:4e:5f:b5:86:50:53:57:76:b5:31:f1:
                    da:8e:b9:6b:e4:e9:f6:c2:6f:09:ed:ac:85:bd:26:
                    6c:1e:34:e3:d1:84:27:2f:12:41:22:97:a3:2f:a0:
                    7c:00:92:49:d8:ac:03:7b:8a:20:40:13:0d:79:af:
                    90:92:34:ea:10:e5:4e:18:7e:7a:f0:b1:5f:f0:88:
                    dd:ab:99:c8:47:9e:b9:95:27:0c:27:ef:a6:4b:b7:
                    76:51:73:d3:8f:4f:63:ea:9c:70:84:69:63:f0:20:
                    3b:72:31:56:55:02:6f:81:34:53:b0:84:4d:a9:c6:
                    f4:c0:34:ee:ce:43:c0:29:6f:f5:08:da:c1:c4:d0:
                    95:94:a5:90:7d:0f:cc:55:3e:46:e8:49:e5:08:44:
                    7b:00:e9:6f:6b:89:3b:99:ad:73:39:31:de:b2:1a:
                    74:49:42:30:b0:af:97:52:d4:d4:4e:1a:65:0f:f9:
                    4c:b0:b0:39:12:e4:e0:01:f6:db:27:88:00:0d:fd:
                    4d:68:07:50:20:08:0b:35:7e:b2:e8:e3:22:82:a7:
                    82:e1:fb:bc:49:38:2b:a4:e4:46:87:4f:4a:f2:4a:
                    b0:ce:99:34:46:0c:9c:54:b3:a4:31:97:31:39:1f:
                    33:fd:7c:70:d9:a2:92:77:43:b2:a6:51:d2:93:f1:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:D9:D4:2F:7D:2D:F2:11:47:2D:29:F4:06:E5:0C:A7:24:28:58:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/72D9D42F7D2DF211472D29F406E50CA72428589F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.128.0/22
                  177.10.0.0/20
                  177.44.208.0/21
                IPv6:
                  2804:2d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53230

    Signature Algorithm: sha256WithRSAEncryption
         03:97:88:49:9e:f7:2c:26:72:d1:91:dc:fa:e8:22:78:e6:f1:
         5a:fc:8b:48:3f:3d:dd:71:6c:bf:eb:85:2e:fe:c6:da:aa:4e:
         7f:f7:b3:26:39:b9:4c:25:6c:15:f5:02:17:c6:e3:f4:86:6f:
         4b:ff:21:92:10:70:f9:17:32:71:b2:c5:9b:8d:c8:c6:c2:2c:
         56:77:7a:96:1a:12:db:36:af:58:7f:dd:c2:50:c6:86:17:1f:
         ad:31:46:af:28:c9:1f:dc:54:d3:18:6e:a2:8b:26:f7:bd:2f:
         38:bc:c4:72:a7:9d:6d:02:ff:0b:20:83:71:1a:1b:51:9a:9e:
         30:a7:ba:6b:eb:ee:be:ca:6c:e7:46:e2:f6:c7:e2:ad:eb:f7:
         a6:8e:1f:a1:88:ff:f6:b8:ba:b8:c8:b1:ac:d4:db:ef:2c:89:
         f2:af:c1:6f:07:7d:0b:77:a4:50:90:6a:0b:94:73:d1:db:8c:
         cd:fb:39:c3:ed:fd:3e:f2:82:7e:7b:d8:31:cb:70:e7:9e:e0:
         ed:87:c1:c1:04:cc:5a:1c:2c:90:28:af:e1:15:06:5b:00:07:
         83:28:a1:fe:ac:3d:c3:b0:de:c6:f5:37:dc:55:82:1e:f0:01:
         5a:5b:4b:7b:49:d4:59:a8:93:96:ed:2e:70:3d:77:f6:72:c7:
         c7:7a:17:24
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUXsGNvXbKDGBJzhuf3ryTRdwg6xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MDUxMjI5NDNaFw0yNDA2MDMxMjM0NDNaMDMxMTAvBgNV
BAMTKDcyRDlENDJGN0QyREYyMTE0NzJEMjlGNDA2RTUwQ0E3MjQyODU4OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD28xOX7WGUFNXdrUx8dqOuWvk
6fbCbwntrIW9JmweNOPRhCcvEkEil6MvoHwAkknYrAN7iiBAEw15r5CSNOoQ5U4Y
fnrwsV/wiN2rmchHnrmVJwwn76ZLt3ZRc9OPT2PqnHCEaWPwIDtyMVZVAm+BNFOw
hE2pxvTANO7OQ8Apb/UI2sHE0JWUpZB9D8xVPkboSeUIRHsA6W9riTuZrXM5Md6y
GnRJQjCwr5dS1NROGmUP+UywsDkS5OAB9tsniAAN/U1oB1AgCAs1frLo4yKCp4Lh
+7xJOCuk5EaHT0rySrDOmTRGDJxUs6QxlzE5HzP9fHDZopJ3Q7KmUdKT8Z6rAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRy2dQvfS3yEUct
KfQG5QynJChYnzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HcGhpRG5SSnhoODJqQnlXQkZmaGhZRE0xZkNKTHl5MWtW
ZWlHQUEyV0ExNS8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3BoaURuUkp4aDgyakJ5V0JGZmhoWURNMWZDSkx5eTFr
VmVpR0FBMldBMTUvMS83MkQ5RDQyRjdEMkRGMjExNDcyRDI5RjQwNkU1MENBNzI0
Mjg1ODlGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAIt7oADBASxCgADBAOx
LNAwDQQCAAIwBwMFACgEAtAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM/uMA0G
CSqGSIb3DQEBCwUAA4IBAQADl4hJnvcsJnLRkdz66CJ45vFa/ItIPz3dcWy/64Uu
/sbaqk5/97MmOblMJWwV9QIXxuP0hm9L/yGSEHD5FzJxssWbjcjGwixWd3qWGhLb
Nq9Yf93CUMaGFx+tMUavKMkf3FTTGG6iiyb3vS84vMRyp51tAv8LIINxGhtRmp4w
p7pr6+6+ymznRuL2x+Kt6/emjh+hiP/2uLq4yLGs1NvvLInyr8FvB30Ld6RQkGoL
lHPR24zN+znD7f0+8oJ+e9gxy3DnnuDth8HBBMxaHCyQKK/hFQZbAAeDKKH+rD3D
sN7G9TfcVYIe8AFaW0t7SdRZqJOW7S5wPXf2csfHehck
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:52 2025 by rpki-client