Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/95592B1AD441B67DD4D6C66C2646DD18511EC204.cer
File:                     95592B1AD441B67DD4D6C66C2646DD18511EC204.cer (raw, json)
Hash identifier:          +ydH9SeFtWwxUUCsM2orl7A6L3+noPSMkSXr95J/bD8=
Subject key identifier:   95:59:2B:1A:D4:41:B6:7D:D4:D6:C6:6C:26:46:DD:18:51:1E:C2:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31F6C9BC82A1729D5432B3F3AECD50AA96ED19CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/95592B1AD441B67DD4D6C66C2646DD18511EC204.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Dec 2022 14:33:33 +0000
Certificate not after:    Mon 18 Dec 2023 14:38:33 +0000
Subordinate resources:    AS: 263920
                          IP: 138.185.240.0/22
                          IP: 2804:27c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f6:c9:bc:82:a1:72:9d:54:32:b3:f3:ae:cd:50:aa:96:ed:19:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 14:33:33 2022 GMT
            Not After : Dec 18 14:38:33 2023 GMT
        Subject: CN=95592B1AD441B67DD4D6C66C2646DD18511EC204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:75:6f:b2:23:a8:6d:a0:b1:a9:1f:a0:79:
                    a4:76:12:22:45:44:0d:b1:11:6e:61:15:8d:3b:ee:
                    17:6d:c0:78:15:3f:e8:e4:dc:67:56:fb:b0:6a:8a:
                    bd:5c:67:33:1e:b6:ad:92:a7:3a:7f:d4:fa:0c:c2:
                    c3:5c:b3:28:35:86:a1:c6:74:0e:d0:92:c4:b3:15:
                    4a:9e:2b:92:90:af:38:47:50:a0:f4:1e:bc:66:fc:
                    99:c2:f7:af:c0:3a:39:14:11:8b:29:d3:03:48:cd:
                    76:e0:c2:4a:c2:d4:d8:7e:99:78:02:3f:4d:d3:1d:
                    4e:e7:c0:a3:54:a9:d3:fd:00:10:b3:a2:d7:9f:31:
                    e7:81:34:4c:74:77:c1:a0:9d:04:9b:6c:e1:d4:ea:
                    d1:6c:27:05:35:37:b4:db:ac:d1:b4:50:54:00:54:
                    82:57:01:71:e8:1d:9e:7d:87:e8:08:02:be:d4:43:
                    f7:cd:0c:65:eb:e2:76:e5:26:d0:f4:d4:28:51:f5:
                    64:f9:9b:e6:32:63:4e:bc:01:47:d9:a1:39:6e:dc:
                    8d:2c:0f:04:44:56:65:c2:0a:39:04:be:48:1a:dd:
                    d6:15:98:17:67:ef:03:83:aa:ba:ed:8e:91:86:c9:
                    b9:4a:60:10:d4:83:a5:22:09:f6:c0:9b:8f:db:9a:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:59:2B:1A:D4:41:B6:7D:D4:D6:C6:6C:26:46:DD:18:51:1E:C2:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/95592B1AD441B67DD4D6C66C2646DD18511EC204.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/22
                IPv6:
                  2804:27c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263920

    Signature Algorithm: sha256WithRSAEncryption
         b2:e1:9a:21:ba:8e:76:51:2e:77:c7:c3:c5:31:64:c4:af:68:
         ee:f5:1e:47:80:5c:d1:92:dd:ca:af:85:62:c3:1d:db:8b:c1:
         21:3c:5e:30:31:7d:15:5d:7b:15:4e:6e:0c:6f:5d:ed:52:5d:
         26:1f:25:e0:0c:2e:ee:c7:05:92:34:9d:a5:76:41:52:58:cb:
         db:13:b1:2d:2f:7c:53:ec:a7:ec:65:77:7a:27:e8:2e:4d:44:
         7e:2d:da:3d:c8:cd:46:e8:c4:46:bc:f2:cd:36:3f:06:16:cc:
         73:57:a7:36:65:24:33:37:e1:da:a8:ea:10:a7:70:09:84:73:
         18:ea:27:39:0f:09:06:eb:2b:66:79:36:36:5f:07:92:f2:54:
         4c:f2:4a:22:55:07:e8:1c:32:0b:2d:1e:04:00:07:10:76:12:
         aa:25:9d:af:78:37:43:5a:55:60:64:02:f1:b2:25:7e:4e:c1:
         44:a2:7d:66:fb:57:c3:98:e0:da:96:7c:6b:f9:42:00:af:b8:
         a7:22:e6:c2:13:b1:91:4c:27:c2:d8:a5:57:e0:f4:6d:d3:40:
         b4:48:02:00:a6:87:9e:d9:2f:26:53:49:17:7c:a8:d8:6f:18:
         e5:8f:3c:a8:43:35:a4:a1:7d:bc:03:85:a6:53:dd:dd:09:14:
         9a:66:ea:31
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUMfbJvIKhcp1UMrPzrs1QqpbtGc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMTkxNDMzMzNaFw0yMzEyMTgxNDM4MzNaMDMxMTAvBgNV
BAMTKDk1NTkyQjFBRDQ0MUI2N0RENEQ2QzY2QzI2NDZERDE4NTExRUMyMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNnVvsiOobaCxqR+geaR2EiJF
RA2xEW5hFY077hdtwHgVP+jk3GdW+7Bqir1cZzMetq2Spzp/1PoMwsNcsyg1hqHG
dA7QksSzFUqeK5KQrzhHUKD0Hrxm/JnC96/AOjkUEYsp0wNIzXbgwkrC1Nh+mXgC
P03THU7nwKNUqdP9ABCzotefMeeBNEx0d8GgnQSbbOHU6tFsJwU1N7TbrNG0UFQA
VIJXAXHoHZ59h+gIAr7UQ/fNDGXr4nblJtD01ChR9WT5m+YyY068AUfZoTlu3I0s
DwREVmXCCjkEvkga3dYVmBdn7wODqrrtjpGGyblKYBDUg6UiCfbAm4/bmmqhAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVWSsa1EG2fdTW
xmwmRt0YUR7CBDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FRjcyTUplMThzcEJBYkxOVkR1YzZCM0JpcENmTktudFFO
d3VoWkF3ZTg4by8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FRjcyTUplMThzcEJBYkxOVkR1YzZCM0JpcENmTktudFFO
d3VoWkF3ZTg4by8wLzk1NTkyQjFBRDQ0MUI2N0RENEQ2QzY2QzI2NDZERDE4NTEx
RUMyMDQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoq58DANBAIAAjAHAwUA
KAQnwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBvAwDQYJKoZIhvcNAQELBQAD
ggEBALLhmiG6jnZRLnfHw8UxZMSvaO71HkeAXNGS3cqvhWLDHduLwSE8XjAxfRVd
exVObgxvXe1SXSYfJeAMLu7HBZI0naV2QVJYy9sTsS0vfFPsp+xld3on6C5NRH4t
2j3IzUboxEa88s02PwYWzHNXpzZlJDM34dqo6hCncAmEcxjqJzkPCQbrK2Z5NjZf
B5LyVEzySiJVB+gcMgstHgQABxB2Eqolna94N0NaVWBkAvGyJX5OwUSifWb7V8OY
4NqWfGv5QgCvuKci5sITsZFMJ8LYpVfg9G3TQLRIAgCmh57ZLyZTSRd8qNhvGOWP
PKhDNaShfbwDhaZT3d0JFJpm6jE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:38:10 2025 by rpki-client