Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/78840852929E362A035EFB1CBC9353C34CDFE5F9.cer
File:                     78840852929E362A035EFB1CBC9353C34CDFE5F9.cer (raw, json)
Hash identifier:          8i5ZrKgdAre2tEzj5malclgjvy38cJPA9a7FRqjBuoA=
Subject key identifier:   78:84:08:52:92:9E:36:2A:03:5E:FB:1C:BC:93:53:C3:4C:DF:E5:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       691047A9235414DE64310AD6C0FD82973FE7A224
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/78840852929E362A035EFB1CBC9353C34CDFE5F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Jul 2022 16:45:14 +0000
Certificate not after:    Mon 03 Jul 2023 16:50:14 +0000
Subordinate resources:    AS: 270547
                          IP: 190.111.180.0/22
                          IP: 2804:6da8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:10:47:a9:23:54:14:de:64:31:0a:d6:c0:fd:82:97:3f:e7:a2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  4 16:45:14 2022 GMT
            Not After : Jul  3 16:50:14 2023 GMT
        Subject: CN=78840852929E362A035EFB1CBC9353C34CDFE5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:11:76:d6:41:18:93:00:c1:0d:a8:43:f3:
                    29:3c:8d:0a:4f:25:05:66:99:f0:62:98:62:db:e9:
                    61:5c:43:ef:f9:cb:15:86:74:ee:b8:5a:3d:8d:d8:
                    18:c8:25:17:b8:e1:4d:3d:26:b0:da:5f:18:0e:16:
                    c2:93:9c:76:68:31:e2:13:5a:4e:85:20:2f:28:35:
                    c0:b0:67:6d:d3:bf:89:f5:48:45:97:66:ae:6b:fc:
                    fa:d4:4e:ec:61:20:8b:5c:ae:95:54:95:b4:a1:3d:
                    ba:9a:dd:7e:27:80:ae:52:bf:93:57:0d:d2:0d:69:
                    59:b9:f5:69:78:18:fe:3a:0f:0f:0e:56:dd:77:45:
                    c8:b5:0a:f4:f2:4b:2e:c9:7b:66:04:c8:33:5c:01:
                    20:36:7c:eb:6e:9d:a2:14:5b:7a:74:15:04:c6:01:
                    99:99:20:e5:47:06:46:8f:37:a4:0b:58:93:df:e6:
                    bf:e2:d8:e7:fc:4f:9c:45:2e:a2:15:78:cb:a8:fc:
                    0c:1d:c4:df:4e:ea:12:fc:76:8e:25:49:1a:3c:d4:
                    f2:ef:17:a8:f3:9a:2b:8e:0d:49:7a:9d:d1:6a:f1:
                    bb:d7:a2:59:7f:45:6e:e8:25:7c:42:cb:eb:f7:c4:
                    00:0e:c5:4c:46:63:fc:1f:11:53:fc:2a:d3:e6:05:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:84:08:52:92:9E:36:2A:03:5E:FB:1C:BC:93:53:C3:4C:DF:E5:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/78840852929E362A035EFB1CBC9353C34CDFE5F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.180.0/22
                IPv6:
                  2804:6da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270547

    Signature Algorithm: sha256WithRSAEncryption
         9c:e2:d6:5e:48:9c:6d:69:51:16:19:cd:17:97:f6:6a:4d:7f:
         98:4f:51:0e:64:a9:c6:8c:f1:fb:fc:20:06:66:19:6e:41:f0:
         c9:02:05:b3:d0:9e:44:cb:93:04:72:2b:58:ce:dc:3a:27:65:
         fd:93:ef:42:e4:bd:ef:92:03:c4:f1:2d:b5:ce:88:7c:4a:14:
         51:5a:e4:12:f2:df:24:7a:d3:f9:0f:3b:67:26:37:83:f8:3a:
         91:25:d2:fa:71:d0:11:3d:7d:30:22:ad:bc:71:dc:be:8f:bf:
         36:bc:ad:b1:06:9c:ed:54:e5:4f:f9:d4:f2:ab:f2:2a:82:a3:
         fe:ec:af:eb:d4:c8:2d:7c:e1:cb:d8:63:bb:22:a6:4b:77:cf:
         e4:8f:76:fb:fd:fb:90:81:3f:94:72:25:fe:b5:a9:2d:24:63:
         6f:51:ef:43:5f:38:e0:4e:c3:61:7c:4d:44:e8:59:18:4f:4c:
         b4:f9:32:58:d3:66:5a:99:6a:fa:90:ba:f0:e7:9a:1f:6d:71:
         51:12:d3:08:74:cc:50:08:16:48:26:2e:38:ba:ea:86:c1:fe:
         25:94:f0:7d:71:b8:cc:80:4f:ec:bd:72:2a:8a:e8:6e:b8:0e:
         5f:e4:c8:d2:ee:b3:37:2a:36:0a:f8:7b:a0:21:87:01:fc:1b:
         8b:33:92:a4
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaRBHqSNUFN5kMQrWwP2Clz/noiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MDQxNjQ1MTRaFw0yMzA3MDMxNjUwMTRaMDMxMTAvBgNV
BAMTKDc4ODQwODUyOTI5RTM2MkEwMzVFRkIxQ0JDOTM1M0MzNENERkU1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGehF21kEYkwDBDahD8yk8jQpP
JQVmmfBimGLb6WFcQ+/5yxWGdO64Wj2N2BjIJRe44U09JrDaXxgOFsKTnHZoMeIT
Wk6FIC8oNcCwZ23Tv4n1SEWXZq5r/PrUTuxhIItcrpVUlbShPbqa3X4ngK5Sv5NX
DdINaVm59Wl4GP46Dw8OVt13Rci1CvTySy7Je2YEyDNcASA2fOtunaIUW3p0FQTG
AZmZIOVHBkaPN6QLWJPf5r/i2Of8T5xFLqIVeMuo/AwdxN9O6hL8do4lSRo81PLv
F6jzmiuODUl6ndFq8bvXoll/RW7oJXxCy+v3xAAOxUxGY/wfEVP8KtPmBYVXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4hAhSkp42KgNe
+xy8k1PDTN/l+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85b1BVQXd5VmdYc2tNTGNHSjJCNVp3THZ5Y3FDSmh6RWR0
dHVVSmI3MXNjMy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOW9QVUF3eVZnWHNrTUxjR0oyQjVad0x2eWNxQ0poekVk
dHR1VUpiNzFzYzMvMC83ODg0MDg1MjkyOUUzNjJBMDM1RUZCMUNCQzkzNTNDMzRD
REZFNUY5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+b7QwDQQCAAIwBwMF
ACgEbagwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCDTMA0GCSqGSIb3DQEBCwUA
A4IBAQCc4tZeSJxtaVEWGc0Xl/ZqTX+YT1EOZKnGjPH7/CAGZhluQfDJAgWz0J5E
y5MEcitYztw6J2X9k+9C5L3vkgPE8S21zoh8ShRRWuQS8t8ketP5DztnJjeD+DqR
JdL6cdARPX0wIq28cdy+j782vK2xBpztVOVP+dTyq/IqgqP+7K/r1MgtfOHL2GO7
IqZLd8/kj3b7/fuQgT+UciX+taktJGNvUe9DXzjgTsNhfE1E6FkYT0y0+TJY02Za
mWr6kLrw55ofbXFREtMIdMxQCBZIJi44uuqGwf4llPB9cbjMgE/svXIqiuhuuA5f
5MjS7rM3KjYK+HugIYcB/BuLM5Kk
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:36:58 2025 by rpki-client