Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9ECB245937F45A17B93466F3DA57B45CBC889DFA.cer
File:                     9ECB245937F45A17B93466F3DA57B45CBC889DFA.cer (raw, json)
Hash identifier:          QwlOMmxD+ACb7Y3qaqqaCWK/faZLDVq4qHH+GoFKGKI=
Subject key identifier:   9E:CB:24:59:37:F4:5A:17:B9:34:66:F3:DA:57:B4:5C:BC:88:9D:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20C5C3D16F128F0A4831B94ED4E79E9924717328
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/9ECB245937F45A17B93466F3DA57B45CBC889DFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Feb 2023 14:25:13 +0000
Certificate not after:    Mon 05 Feb 2024 14:30:13 +0000
Subordinate resources:    AS: 269148
                          IP: 45.180.200.0/22
                          IP: 2804:6024::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:c3:d1:6f:12:8f:0a:48:31:b9:4e:d4:e7:9e:99:24:71:73:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 14:25:13 2023 GMT
            Not After : Feb  5 14:30:13 2024 GMT
        Subject: CN=9ECB245937F45A17B93466F3DA57B45CBC889DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:83:65:09:4c:12:76:24:60:2c:e7:f1:35:
                    93:ab:76:15:09:39:72:2c:95:b9:52:89:e5:d5:0d:
                    34:f8:b7:bd:0b:11:a7:57:ba:49:b9:78:50:48:4b:
                    ed:cb:22:5a:b6:4c:47:28:af:70:cf:e7:68:e3:17:
                    1f:2b:1d:47:bc:04:63:7d:d1:c7:1b:5d:f5:c4:8c:
                    34:0b:44:88:6c:67:2a:6f:82:02:a3:54:2c:55:a1:
                    7a:80:4a:1e:d8:ff:03:72:35:0f:55:41:e7:03:b1:
                    71:db:05:3a:76:37:a9:c6:8f:a2:e3:41:64:4a:c5:
                    4c:c3:69:8e:15:cf:87:bf:3f:88:12:8f:3e:3d:b0:
                    79:8e:2f:4f:7c:e7:8f:b0:00:f9:17:0f:39:dc:c4:
                    a2:f8:93:ab:5f:9d:80:71:2c:19:97:ce:db:43:b5:
                    f9:04:1c:d8:fd:a6:0f:2c:e2:0b:2e:eb:22:2a:d9:
                    b2:82:71:1f:57:de:e4:da:b4:e8:8c:5f:b9:d7:e0:
                    9a:d7:47:c0:6b:53:c4:df:1b:59:46:6c:5d:2e:f6:
                    16:e9:96:13:12:9b:d9:36:f7:14:f0:ea:78:ab:d6:
                    f2:cc:72:dc:f9:66:1c:90:89:90:89:34:75:6d:89:
                    20:ee:a9:76:82:e0:80:a4:44:a9:57:5c:1b:d6:24:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:CB:24:59:37:F4:5A:17:B9:34:66:F3:DA:57:B4:5C:BC:88:9D:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/9ECB245937F45A17B93466F3DA57B45CBC889DFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.200.0/22
                IPv6:
                  2804:6024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269148

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:ba:82:ac:f4:4e:f0:33:c4:a8:ee:34:78:ea:dc:96:c2:
         6a:ff:5e:ac:b6:f7:9d:af:09:ec:3f:ff:c0:cd:a6:e8:cb:8c:
         15:ae:45:30:ea:69:5c:81:4a:90:a0:fa:3f:2c:7f:fa:ef:2b:
         c7:f9:d4:8f:d0:f0:10:b0:73:6e:5e:4c:b3:5e:9d:59:96:5c:
         c6:3d:fd:cf:a9:43:de:b9:9d:bd:dc:f3:fc:8b:e9:75:14:8b:
         c8:f5:14:c4:c9:52:ce:8c:4e:ba:b8:6f:a5:8c:d1:09:09:44:
         76:25:c1:4d:d9:a4:d6:73:f7:22:a0:e6:0f:39:b5:05:05:c2:
         2c:52:c6:14:69:11:f1:ec:20:a7:81:97:c5:f3:de:5c:f7:5a:
         00:d1:8c:d3:51:8a:43:88:e0:cb:99:79:16:27:b8:bc:3f:d7:
         60:ab:09:c8:b2:0c:92:46:b4:18:23:2f:a5:c7:27:d1:c2:be:
         52:51:30:e1:5f:d7:35:d5:b8:d9:a6:7c:fb:06:19:d2:bd:18:
         2d:a3:fd:1d:c2:dd:fe:8d:6b:1a:b8:d3:17:fb:0c:69:42:0f:
         c1:ab:16:1c:79:da:f4:82:05:7d:2d:b2:4b:ae:d6:39:3d:9a:
         9b:d6:6a:d7:00:b2:2d:52:2c:25:ec:23:f3:f3:c9:47:a4:ca:
         6a:4e:28:b2
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUIMXD0W8SjwpIMblO1OeemSRxcygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMDYxNDI1MTNaFw0yNDAyMDUxNDMwMTNaMDMxMTAvBgNV
BAMTKDlFQ0IyNDU5MzdGNDVBMTdCOTM0NjZGM0RBNTdCNDVDQkM4ODlERkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9I4NlCUwSdiRgLOfxNZOrdhUJ
OXIslblSieXVDTT4t70LEadXukm5eFBIS+3LIlq2TEcor3DP52jjFx8rHUe8BGN9
0ccbXfXEjDQLRIhsZypvggKjVCxVoXqASh7Y/wNyNQ9VQecDsXHbBTp2N6nGj6Lj
QWRKxUzDaY4Vz4e/P4gSjz49sHmOL09854+wAPkXDzncxKL4k6tfnYBxLBmXzttD
tfkEHNj9pg8s4gsu6yIq2bKCcR9X3uTatOiMX7nX4JrXR8BrU8TfG1lGbF0u9hbp
lhMSm9k29xTw6nir1vLMctz5ZhyQiZCJNHVtiSDuqXaC4ICkRKlXXBvWJLcnAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeyyRZN/RaF7k0
ZvPaV7RcvIid+jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85MlJjYVJadUpzVWZlQ0ZKbnhBQ0Y2ZURpUmZ5ejY2c2JB
aFMxUWpmQjNNaS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85MlJjYVJadUpzVWZlQ0ZKbnhBQ0Y2ZURpUmZ5ejY2c2JB
aFMxUWpmQjNNaS8wLzlFQ0IyNDU5MzdGNDVBMTdCOTM0NjZGM0RBNTdCNDVDQkM4
ODlERkEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi20yDANBAIAAjAHAwUA
KARgJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEG1wwDQYJKoZIhvcNAQELBQAD
ggEBAFmpuoKs9E7wM8So7jR46tyWwmr/Xqy2952vCew//8DNpujLjBWuRTDqaVyB
SpCg+j8sf/rvK8f51I/Q8BCwc25eTLNenVmWXMY9/c+pQ965nb3c8/yL6XUUi8j1
FMTJUs6MTrq4b6WM0QkJRHYlwU3ZpNZz9yKg5g85tQUFwixSxhRpEfHsIKeBl8Xz
3lz3WgDRjNNRikOI4MuZeRYnuLw/12CrCciyDJJGtBgjL6XHJ9HCvlJRMOFf1zXV
uNmmfPsGGdK9GC2j/R3C3f6Naxq40xf7DGlCD8GrFhx52vSCBX0tskuu1jk9mpvW
atcAsi1SLCXsI/PzyUekympOKLI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 20:03:59 2025 by rpki-client