Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8F0427D606216B6EBB3E3F4EF473B346F5678EF2.cer
File:                     8F0427D606216B6EBB3E3F4EF473B346F5678EF2.cer (raw, json)
Hash identifier:          MzVZBd1oKJ86z8pySD41HjiT52y3rJOs3PWi4/idni0=
Subject key identifier:   8F:04:27:D6:06:21:6B:6E:BB:3E:3F:4E:F4:73:B3:46:F5:67:8E:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       09201BEFE0CBB8DDD7410C74AADF6F9B1E212452
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/8F0427D606216B6EBB3E3F4EF473B346F5678EF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 19:21:16 +0000
Certificate not after:    Tue 03 Dec 2024 19:26:16 +0000
Subordinate resources:    AS: 270382
                          IP: 190.111.128.0/22
                          IP: 2804:6b28::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:20:1b:ef:e0:cb:b8:dd:d7:41:0c:74:aa:df:6f:9b:1e:21:24:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 19:21:16 2023 GMT
            Not After : Dec  3 19:26:16 2024 GMT
        Subject: CN=8F0427D606216B6EBB3E3F4EF473B346F5678EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:53:14:0b:f9:90:3a:10:8a:b0:d2:33:cf:
                    47:b5:be:96:c7:2f:06:60:46:88:c0:4b:23:0b:79:
                    54:80:81:07:47:f1:be:6f:96:5d:f0:7d:0e:65:7b:
                    9d:53:11:0c:4d:fb:2c:b9:99:7f:b9:98:f0:d8:94:
                    11:b7:39:2c:22:c4:ea:d2:5c:6e:c1:a9:d1:f7:f1:
                    b6:40:6b:f6:01:bd:fb:41:ad:8a:53:aa:b3:7e:e2:
                    3c:2d:4b:f1:c9:b0:9f:f5:9b:51:2d:b0:31:60:d1:
                    fb:7e:fc:6a:d6:05:62:96:e8:0b:df:a1:79:f7:09:
                    a1:78:4c:29:d8:47:06:d8:f4:64:b3:34:12:1c:f7:
                    59:cb:61:72:b0:1a:fe:66:c4:3a:26:e0:14:b8:7b:
                    84:52:cc:93:1a:4f:a8:d2:dd:f7:93:84:a9:05:46:
                    ca:61:41:5a:c0:38:45:21:ec:fe:6d:fb:e8:44:4e:
                    5f:ea:f8:50:9e:bd:6b:d4:3e:b1:85:50:77:6e:8b:
                    85:73:78:c1:bc:23:c3:22:b7:b2:93:a3:91:b7:fd:
                    95:14:0a:34:63:70:ab:61:53:af:cf:3c:e0:58:1e:
                    05:03:77:13:b4:d5:2f:4c:b9:dd:cc:ce:59:7e:8a:
                    66:34:e1:c7:da:1e:8c:0b:fe:e2:4d:74:9c:45:02:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:04:27:D6:06:21:6B:6E:BB:3E:3F:4E:F4:73:B3:46:F5:67:8E:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/8F0427D606216B6EBB3E3F4EF473B346F5678EF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/22
                IPv6:
                  2804:6b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270382

    Signature Algorithm: sha256WithRSAEncryption
         64:0c:38:49:fb:5f:18:ed:f4:78:20:a5:d0:99:36:77:4b:6c:
         83:08:a6:85:fe:be:bb:e6:73:fe:34:d1:89:69:af:03:d9:de:
         aa:04:04:37:b4:ea:b3:29:d1:8b:94:6b:57:70:74:d8:0f:2b:
         64:31:9f:fe:ce:e4:ba:fc:2e:7e:bf:0a:1d:b3:d3:cb:09:be:
         76:33:01:cf:dd:ed:68:14:41:38:e3:2f:5d:39:ae:b9:a3:27:
         b8:cb:0b:9f:75:f1:2b:20:f7:8a:ab:d0:d5:ea:2b:6d:97:33:
         00:29:d5:04:ab:b1:62:fd:aa:e5:12:35:08:de:4a:16:f4:65:
         31:d6:0d:0b:37:e1:5f:8e:90:ab:ee:4e:7c:d9:ea:a6:de:be:
         ea:55:0f:46:c8:6b:47:4f:8e:54:56:7a:d3:1a:1d:32:49:9a:
         88:ff:17:c8:67:48:19:e0:e9:15:45:3a:a7:ec:88:3a:a5:f3:
         dc:bd:c5:d1:c2:9c:19:d5:35:4e:0c:20:e8:50:74:e2:93:d7:
         f8:ff:ed:27:f9:30:bc:ee:d8:34:93:d4:43:b2:68:5b:25:8e:
         0c:f1:5d:1f:a8:da:9c:c3:5c:68:f2:2d:f0:1b:4d:a6:00:a0:
         bd:5e:f9:ba:64:4a:79:ae:f5:f8:4a:d6:8a:30:08:ab:ca:f6:
         fd:7f:45:a2
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUCSAb7+DLuN3XQQx0qt9vmx4hJFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDUxOTIxMTZaFw0yNDEyMDMxOTI2MTZaMDMxMTAvBgNV
BAMTKDhGMDQyN0Q2MDYyMTZCNkVCQjNFM0Y0RUY0NzNCMzQ2RjU2NzhFRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm51MUC/mQOhCKsNIzz0e1vpbH
LwZgRojASyMLeVSAgQdH8b5vll3wfQ5le51TEQxN+yy5mX+5mPDYlBG3OSwixOrS
XG7BqdH38bZAa/YBvftBrYpTqrN+4jwtS/HJsJ/1m1EtsDFg0ft+/GrWBWKW6Avf
oXn3CaF4TCnYRwbY9GSzNBIc91nLYXKwGv5mxDom4BS4e4RSzJMaT6jS3feThKkF
RsphQVrAOEUh7P5t++hETl/q+FCevWvUPrGFUHdui4VzeMG8I8Mit7KTo5G3/ZUU
CjRjcKthU6/PPOBYHgUDdxO01S9Mud3Mzll+imY04cfaHowL/uJNdJxFAvZVAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPBCfWBiFrbrs+
P070c7NG9WeO8jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EV1JrTnlWNmtMTGNGYXg5bXRRUVg5THlUOGlRdUVaWllB
aHdEWlpENnVQbS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRFdSa055VjZrTExjRmF4OW10UVFYOUx5VDhpUXVFWlpZ
QWh3RFpaRDZ1UG0vMC84RjA0MjdENjA2MjE2QjZFQkIzRTNGNEVGNDczQjM0NkY1
Njc4RUYyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+b4AwDQQCAAIwBwMF
ACgEaygwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCAuMA0GCSqGSIb3DQEBCwUA
A4IBAQBkDDhJ+18Y7fR4IKXQmTZ3S2yDCKaF/r675nP+NNGJaa8D2d6qBAQ3tOqz
KdGLlGtXcHTYDytkMZ/+zuS6/C5+vwods9PLCb52MwHP3e1oFEE44y9dOa65oye4
ywufdfErIPeKq9DV6ittlzMAKdUEq7Fi/arlEjUI3koW9GUx1g0LN+FfjpCr7k58
2eqm3r7qVQ9GyGtHT45UVnrTGh0ySZqI/xfIZ0gZ4OkVRTqn7Ig6pfPcvcXRwpwZ
1TVODCDoUHTik9f4/+0n+TC87tg0k9RDsmhbJY4M8V0fqNqcw1xo8i3wG02mAKC9
Xvm6ZEp5rvX4StaKMAiryvb9f0Wi
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:59:11 2025 by rpki-client