Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A27106BB066FBA864FDEC2697D76ABB80FAD7052.cer
File:                     A27106BB066FBA864FDEC2697D76ABB80FAD7052.cer (raw, json)
Hash identifier:          vm4f6xvicD/iOwiZqa7AMt62Q8sxr7bYY8X6J0llxto=
Subject key identifier:   A2:71:06:BB:06:6F:BA:86:4F:DE:C2:69:7D:76:AB:B8:0F:AD:70:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AB9546D026A3FB154A917A52A5773AC509F1532
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/A27106BB066FBA864FDEC2697D76ABB80FAD7052.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Apr 2022 18:07:37 +0000
Certificate not after:    Tue 04 Apr 2023 18:12:37 +0000
Subordinate resources:    AS: 269579
                          IP: 45.189.96.0/22
                          IP: 2804:66bc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b9:54:6d:02:6a:3f:b1:54:a9:17:a5:2a:57:73:ac:50:9f:15:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 18:07:37 2022 GMT
            Not After : Apr  4 18:12:37 2023 GMT
        Subject: CN=A27106BB066FBA864FDEC2697D76ABB80FAD7052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:3f:6a:39:37:19:7b:71:ca:ec:2f:35:04:
                    b9:c7:88:41:1a:00:fd:ce:4a:db:65:c9:61:32:6d:
                    5e:84:54:d7:69:37:f0:31:45:77:c5:bb:76:b5:d8:
                    3f:54:25:09:16:e2:e8:e5:0f:7e:50:74:64:c0:76:
                    ab:69:98:4c:c1:9f:76:86:04:ff:2e:01:a8:8c:4a:
                    74:1a:27:f0:78:d1:58:db:b6:d8:6c:5f:1e:86:03:
                    e8:0c:1e:aa:b5:86:95:01:b3:91:c4:08:82:96:3f:
                    84:e6:d2:1b:19:40:b2:3b:17:3f:22:4a:85:6d:de:
                    ce:4b:ce:3b:e6:07:a1:b6:e0:c3:35:e5:2f:8a:fe:
                    cc:03:1c:56:94:45:16:82:99:72:fb:84:7d:b9:5a:
                    4d:1d:4b:fc:fa:23:6d:0c:81:29:40:4d:0a:20:b0:
                    b0:92:3e:10:2b:12:80:a7:3c:2e:35:60:c8:35:cc:
                    0c:78:99:94:9b:6c:a1:7c:0d:34:d1:06:d4:35:c3:
                    43:db:0a:1b:99:bd:f8:16:cc:16:0a:f3:af:c7:da:
                    de:c5:c7:77:89:8a:31:ea:d7:b7:15:b5:db:0e:6d:
                    2b:30:32:74:b8:ab:b3:b6:3e:e9:0c:42:66:58:90:
                    ab:bb:d3:b8:32:60:56:00:53:02:8e:88:00:76:d7:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:71:06:BB:06:6F:BA:86:4F:DE:C2:69:7D:76:AB:B8:0F:AD:70:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/A27106BB066FBA864FDEC2697D76ABB80FAD7052.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.96.0/22
                IPv6:
                  2804:66bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269579

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:2e:1d:10:8e:2e:ad:a9:d1:02:4e:5a:cb:f2:d4:b7:89:
         2f:b0:a0:e7:90:4a:d4:35:4f:51:99:79:a0:13:6a:89:4c:16:
         9f:89:9f:97:ba:9b:80:1a:a6:17:ba:b2:6d:8d:2d:24:f2:8e:
         67:0f:49:0f:f3:c0:a7:5d:53:a2:f6:3e:d4:18:d9:1f:b5:b7:
         93:e3:1e:8a:23:0c:fc:9a:2f:06:cb:d7:2b:f9:34:3d:1c:5f:
         62:bb:d5:a9:b2:34:77:e1:bf:bd:e6:44:44:fe:52:8a:cb:05:
         f8:51:42:97:7e:e8:b2:28:b5:1a:a7:b5:76:05:b7:d1:71:3b:
         53:de:09:33:30:20:3b:c6:8f:ef:f5:f7:7d:bd:99:d0:f5:72:
         88:fd:32:92:17:09:e6:64:02:4d:95:e9:cd:91:ac:54:ec:e2:
         26:1f:c1:70:a0:42:0c:4c:4a:df:e1:03:cd:61:3a:d0:13:68:
         d4:2f:73:eb:a7:71:ae:93:42:42:17:a8:08:80:86:8e:9f:3e:
         84:76:23:d3:df:02:e6:d3:36:19:c2:43:7a:72:00:b0:aa:d8:
         56:4c:f9:cf:4f:b6:5f:8a:62:d1:98:56:cb:0b:4a:8f:3a:da:
         4c:5b:12:66:d4:40:48:e3:17:92:9e:e8:2c:4c:03:f1:b3:c7:
         04:c8:01:ed
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUWrlUbQJqP7FUqRelKldzrFCfFTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA0MDUxODA3MzdaFw0yMzA0MDQxODEyMzdaMDMxMTAvBgNV
BAMTKEEyNzEwNkJCMDY2RkJBODY0RkRFQzI2OTdENzZBQkI4MEZBRDcwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1D9qOTcZe3HK7C81BLnHiEEa
AP3OSttlyWEybV6EVNdpN/AxRXfFu3a12D9UJQkW4ujlD35QdGTAdqtpmEzBn3aG
BP8uAaiMSnQaJ/B40VjbtthsXx6GA+gMHqq1hpUBs5HECIKWP4Tm0hsZQLI7Fz8i
SoVt3s5LzjvmB6G24MM15S+K/swDHFaURRaCmXL7hH25Wk0dS/z6I20MgSlATQog
sLCSPhArEoCnPC41YMg1zAx4mZSbbKF8DTTRBtQ1w0PbChuZvfgWzBYK86/H2t7F
x3eJijHq17cVtdsObSswMnS4q7O2PukMQmZYkKu707gyYFYAUwKOiAB219VZAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSicQa7Bm+6hk/e
wml9dqu4D61wUjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GQjU4U2JZaEN4a3FzZU1WenM5QXE2UHBlUlQ0dUwxQVlr
NTF4dDRQc21Fai8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GQjU4U2JZaEN4a3FzZU1WenM5QXE2UHBlUlQ0dUwxQVlr
NTF4dDRQc21Fai8wL0EyNzEwNkJCMDY2RkJBODY0RkRFQzI2OTdENzZBQkI4MEZB
RDcwNTIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi29YDANBAIAAjAHAwUA
KARmvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHQswDQYJKoZIhvcNAQELBQAD
ggEBAGO7Lh0Qji6tqdECTlrL8tS3iS+woOeQStQ1T1GZeaATaolMFp+Jn5e6m4Aa
phe6sm2NLSTyjmcPSQ/zwKddU6L2PtQY2R+1t5PjHoojDPyaLwbL1yv5ND0cX2K7
1amyNHfhv73mRET+UorLBfhRQpd+6LIotRqntXYFt9FxO1PeCTMwIDvGj+/19329
mdD1coj9MpIXCeZkAk2V6c2RrFTs4iYfwXCgQgxMSt/hA81hOtATaNQvc+unca6T
QkIXqAiAho6fPoR2I9PfAubTNhnCQ3pyALCq2FZM+c9Ptl+KYtGYVssLSo862kxb
EmbUQEjjF5Ke6CxMA/GzxwTIAe0=
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:43 2025 by rpki-client