Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.cer
File:                     A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.cer (raw, json)
Hash identifier:          07FL0o9iG/ovFhINK2hCow/6Fr1Mp+ip+FnSJy/p0Ck=
Subject key identifier:   A1:F4:39:13:0C:25:78:4C:90:BE:BE:0E:BF:DB:30:B1:57:B8:FB:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16A7CA5ED92DF6A1AF56CB6744F6367017E2DC27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jun 2023 14:48:31 +0000
Certificate not after:    Thu 13 Jun 2024 14:53:31 +0000
Subordinate resources:    AS: 264137
                          IP: 138.97.96.0/22
                          IP: 170.0.220.0/22
                          IP: 2804:2304::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a7:ca:5e:d9:2d:f6:a1:af:56:cb:67:44:f6:36:70:17:e2:dc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 15 14:48:31 2023 GMT
            Not After : Jun 13 14:53:31 2024 GMT
        Subject: CN=A1F439130C25784C90BEBE0EBFDB30B157B8FBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:f3:f2:f7:de:f0:be:2b:41:d0:ab:d1:2a:
                    5a:3c:09:38:4c:cb:1b:52:7e:b0:bb:97:df:2d:e7:
                    7b:7f:47:55:13:d5:40:12:65:09:97:52:d1:c9:c7:
                    e7:b8:17:65:86:dc:46:9b:f8:50:3b:c8:df:b0:85:
                    7d:83:ec:d8:4f:24:c5:9c:e6:2b:3a:79:e2:60:04:
                    07:5e:f9:c3:e8:e3:10:5b:cd:bc:be:e0:05:e3:09:
                    39:62:10:d6:b0:06:e9:b6:2b:4f:81:7a:d8:8d:81:
                    c4:d5:d3:62:3b:0c:41:43:18:1e:03:13:23:96:2c:
                    00:5a:4f:d6:39:5d:fc:c4:3f:63:e5:65:1b:1e:ef:
                    fb:ad:f9:da:5e:23:f1:87:1c:01:dd:5f:d8:fe:9d:
                    a7:1b:e1:66:e1:68:d1:02:72:7d:7a:d4:52:e9:1e:
                    37:c1:20:a2:1d:11:47:32:3e:74:75:24:94:c5:29:
                    e0:52:4a:a3:27:0d:55:68:44:b0:35:d9:34:7e:1d:
                    d4:db:92:ca:20:41:38:66:43:35:51:3f:ef:4b:d3:
                    17:47:4a:ce:f6:af:ab:6a:e7:3a:a9:cc:03:c1:31:
                    70:60:b8:2a:30:a3:d8:5c:a2:5c:0e:ea:60:f8:b2:
                    fc:e0:15:73:b8:f0:d4:23:6c:10:0c:98:33:5b:01:
                    9e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:F4:39:13:0C:25:78:4C:90:BE:BE:0E:BF:DB:30:B1:57:B8:FB:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/22
                  170.0.220.0/22
                IPv6:
                  2804:2304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264137

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:cc:73:b4:1b:10:09:03:f4:b3:e5:3d:aa:3e:3a:a1:c3:
         2f:88:88:87:cf:24:3c:13:47:e2:07:a8:2a:af:f6:cf:a6:8a:
         e2:94:67:2f:86:f2:c8:62:93:80:cd:53:2b:f2:fa:ab:87:33:
         72:6a:6c:15:79:d4:24:b3:4e:58:19:0e:2d:05:8f:97:93:f9:
         f1:d7:51:87:9c:3a:1b:56:19:77:18:74:3f:1a:2a:c4:d9:7a:
         a3:31:65:c8:a8:ff:04:bd:d3:48:29:8c:89:c2:73:d0:50:59:
         21:d3:9f:25:69:d5:67:d4:90:ae:76:3a:56:8b:40:a9:bb:b4:
         0c:82:db:16:bc:13:20:3a:53:be:3d:60:0f:fb:88:a4:ed:26:
         51:43:48:85:17:a9:81:05:2b:5b:d4:6c:56:aa:69:c6:db:c7:
         f7:93:c4:70:ae:e3:07:9c:a1:c3:7e:bc:77:21:2b:52:15:3d:
         40:5f:e4:07:da:24:e4:5d:95:72:b1:d6:cc:36:37:2b:da:2e:
         17:0e:0a:1e:24:49:e2:ea:96:46:8e:ff:2c:60:7b:36:f1:69:
         3c:40:cc:30:64:15:f4:72:46:8f:de:40:73:5f:84:47:93:50:
         39:2c:c3:40:f8:69:42:9d:04:65:71:f0:ed:97:cf:8e:3f:5f:
         2f:4a:aa:54
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUFqfKXtkt9qGvVstnRPY2cBfi3CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MTUxNDQ4MzFaFw0yNDA2MTMxNDUzMzFaMDMxMTAvBgNV
BAMTKEExRjQzOTEzMEMyNTc4NEM5MEJFQkUwRUJGREIzMEIxNTdCOEZCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxvPy997wvitB0KvRKlo8CThM
yxtSfrC7l98t53t/R1UT1UASZQmXUtHJx+e4F2WG3Eab+FA7yN+whX2D7NhPJMWc
5is6eeJgBAde+cPo4xBbzby+4AXjCTliENawBum2K0+BetiNgcTV02I7DEFDGB4D
EyOWLABaT9Y5XfzEP2PlZRse7/ut+dpeI/GHHAHdX9j+nacb4WbhaNECcn161FLp
HjfBIKIdEUcyPnR1JJTFKeBSSqMnDVVoRLA12TR+HdTbksogQThmQzVRP+9L0xdH
Ss72r6tq5zqpzAPBMXBguCowo9hcolwO6mD4svzgFXO48NQjbBAMmDNbAZ4zAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSh9DkTDCV4TJC+
vg6/2zCxV7j73jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ETlF1WEFYVzE3eFI4NDF2OUJjNVFtNUZlNlhGQ3BDeGNu
WWVzcWFGbXRZdC8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ETlF1WEFYVzE3eFI4NDF2OUJjNVFtNUZlNlhGQ3BDeGNu
WWVzcWFGbXRZdC8xL0ExRjQzOTEzMEMyNTc4NEM5MEJFQkUwRUJGREIzMEIxNTdC
OEZCREUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAophYAMEAqoA3DANBAIA
AjAHAwUAKAQjBDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEB8kwDQYJKoZIhvcN
AQELBQADggEBAFQtzHO0GxAJA/Sz5T2qPjqhwy+IiIfPJDwTR+IHqCqv9s+miuKU
Zy+G8shik4DNUyvy+quHM3JqbBV51CSzTlgZDi0Fj5eT+fHXUYecOhtWGXcYdD8a
KsTZeqMxZcio/wS900gpjInCc9BQWSHTnyVp1WfUkK52OlaLQKm7tAyC2xa8EyA6
U749YA/7iKTtJlFDSIUXqYEFK1vUbFaqacbbx/eTxHCu4wecocN+vHchK1IVPUBf
5AfaJORdlXKx1sw2NyvaLhcOCh4kSeLqlkaO/yxgezbxaTxAzDBkFfRyRo/eQHNf
hEeTUDksw0D4aUKdBGVx8O2Xz44/Xy9KqlQ=
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:47 2025 by rpki-client