Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A7B1776301727403AE1367F02CFA54208A6EA820.cer
File:                     A7B1776301727403AE1367F02CFA54208A6EA820.cer (raw, json)
Hash identifier:          My2S+oCl5oEYdBiwODeHYFa6CStzpmV9RlFi4uYHvyc=
Subject key identifier:   A7:B1:77:63:01:72:74:03:AE:13:67:F0:2C:FA:54:20:8A:6E:A8:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27E1C5A334603C22E32F4B73B8596F9D8B9547C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/A7B1776301727403AE1367F02CFA54208A6EA820.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Oct 2021 21:25:54 +0000
Certificate not after:    Thu 20 Oct 2022 21:30:54 +0000
Subordinate resources:    AS: 262293
                          IP: 131.161.132.0/22
                          IP: 138.94.108.0/22
                          IP: 143.202.240.0/22
                          IP: 168.232.152.0/22
                          IP: 170.80.176.0/22
                          IP: 177.154.192.0/19
                          IP: 179.107.224.0/19
                          IP: 2804:a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e1:c5:a3:34:60:3c:22:e3:2f:4b:73:b8:59:6f:9d:8b:95:47:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 21 21:25:54 2021 GMT
            Not After : Oct 20 21:30:54 2022 GMT
        Subject: CN=A7B1776301727403AE1367F02CFA54208A6EA820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:a1:d8:37:87:52:9d:c7:2b:bc:53:a6:47:
                    b7:ba:25:43:28:75:dc:da:2a:53:fe:4d:8f:a6:d3:
                    55:ce:4c:35:1f:4c:90:09:17:1a:0c:3d:e6:5d:75:
                    7a:3b:1f:97:26:ca:48:e5:6c:7f:dc:8f:54:82:74:
                    ff:63:29:82:33:b4:67:6d:41:a3:ea:3a:d6:f6:8c:
                    20:ab:8b:2b:e1:97:60:2e:ab:b6:6d:45:30:90:43:
                    e2:6d:c3:43:0d:1b:74:ff:c4:bc:98:4a:22:f7:19:
                    05:ae:2b:1a:eb:94:5c:68:dc:87:0f:b6:d7:2d:eb:
                    37:7d:48:28:12:2c:17:05:64:d0:c3:6d:04:45:9f:
                    56:03:82:3c:c7:7f:97:2b:c7:96:2e:0e:03:a2:12:
                    81:5c:eb:f1:67:9a:1a:a7:33:bb:ae:75:3a:d0:ca:
                    0b:12:d8:0f:46:90:0e:2d:1f:c5:16:b9:73:ed:66:
                    b4:ed:f9:ac:1a:a9:2b:d4:a2:4d:96:14:f5:66:0c:
                    c7:0f:dd:63:0a:09:23:63:06:8e:1b:84:4b:da:4e:
                    3a:e0:9f:54:14:87:9f:87:80:8b:67:4d:7f:09:fe:
                    f0:48:cc:13:80:e5:61:59:db:7b:14:80:9f:19:d2:
                    9a:75:ac:bd:19:84:78:62:eb:4b:8a:c5:53:e3:05:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:B1:77:63:01:72:74:03:AE:13:67:F0:2C:FA:54:20:8A:6E:A8:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/A7B1776301727403AE1367F02CFA54208A6EA820.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/22
                  138.94.108.0/22
                  143.202.240.0/22
                  168.232.152.0/22
                  170.80.176.0/22
                  177.154.192.0/19
                  179.107.224.0/19
                IPv6:
                  2804:a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262293

    Signature Algorithm: sha256WithRSAEncryption
         b7:8d:43:db:9e:7a:9f:f8:6f:88:49:37:fe:67:c9:3c:8a:7c:
         4d:0b:2e:06:ce:c4:21:03:24:a4:8c:03:88:4b:ff:18:16:a8:
         df:23:24:db:18:30:4d:ab:71:33:2a:af:be:29:27:91:02:12:
         24:b8:fb:4d:b4:ca:5c:75:89:8f:bb:1e:e5:07:96:c5:8b:45:
         a0:b0:22:43:9a:fd:a7:ef:f6:8e:ec:f0:04:9b:21:60:8d:c1:
         5c:23:7c:74:ef:d4:92:be:c6:55:8d:db:83:b8:30:34:86:63:
         f9:72:0a:13:d7:a6:cb:f8:fa:01:cf:9f:d6:cc:4b:8a:a6:b0:
         e8:e2:c9:cd:22:72:94:3c:85:22:b9:1b:5e:b3:1b:a8:12:95:
         d5:1d:3f:92:2b:0a:f1:28:05:ea:85:c1:44:9e:0a:ed:13:af:
         2e:25:4a:cf:59:d3:a1:8c:78:23:cc:be:10:9f:9b:19:c7:50:
         37:a8:04:d1:7a:57:61:a4:9d:3b:f9:d2:da:f2:ff:81:09:9c:
         f3:f7:94:12:cf:bb:cf:f5:aa:e2:05:ed:7c:c1:98:f9:c2:cb:
         45:0e:d8:14:b5:22:d7:dd:32:c2:b7:a1:26:f8:6a:20:c3:d7:
         03:18:d3:80:bf:6a:2c:41:1a:e1:b4:a3:84:c4:66:9f:92:56:
         a7:fa:64:72
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUJ+HFozRgPCLjL0tzuFlvnYuVR8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEwMjEyMTI1NTRaFw0yMjEwMjAyMTMwNTRaMDMxMTAvBgNV
BAMTKEE3QjE3NzYzMDE3Mjc0MDNBRTEzNjdGMDJDRkE1NDIwOEE2RUE4MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmaHYN4dSnccrvFOmR7e6JUMo
ddzaKlP+TY+m01XOTDUfTJAJFxoMPeZddXo7H5cmykjlbH/cj1SCdP9jKYIztGdt
QaPqOtb2jCCriyvhl2Auq7ZtRTCQQ+Jtw0MNG3T/xLyYSiL3GQWuKxrrlFxo3IcP
ttct6zd9SCgSLBcFZNDDbQRFn1YDgjzHf5crx5YuDgOiEoFc6/FnmhqnM7uudTrQ
ygsS2A9GkA4tH8UWuXPtZrTt+awaqSvUok2WFPVmDMcP3WMKCSNjBo4bhEvaTjrg
n1QUh5+HgItnTX8J/vBIzBOA5WFZ23sUgJ8Z0pp1rL0ZhHhi60uKxVPjBf77AgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnsXdjAXJ0A64T
Z/As+lQgim6oIDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BenJ5QTUzdnJndFF3eEVOQWN3NHM5eEVmUXZyaHpUR1RL
bjdXVlhMRGRIaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdU
S243V1ZYTERkSGgvMC9BN0IxNzc2MzAxNzI3NDAzQUUxMzY3RjAyQ0ZBNTQyMDhB
NkVBODIwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAKDoYQDBAKKXmwDBAKP
yvADBAKo6JgDBAKqULADBAWxmsADBAWza+AwDQQCAAIwBwMFACgECoAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDBACVMA0GCSqGSIb3DQEBCwUAA4IBAQC3jUPbnnqf
+G+ISTf+Z8k8inxNCy4GzsQhAySkjAOIS/8YFqjfIyTbGDBNq3EzKq++KSeRAhIk
uPtNtMpcdYmPux7lB5bFi0WgsCJDmv2n7/aO7PAEmyFgjcFcI3x079SSvsZVjduD
uDA0hmP5cgoT16bL+PoBz5/WzEuKprDo4snNInKUPIUiuRtesxuoEpXVHT+SKwrx
KAXqhcFEngrtE68uJUrPWdOhjHgjzL4Qn5sZx1A3qATReldhpJ07+dLa8v+BCZzz
95QSz7vP9ariBe18wZj5wstFDtgUtSLX3TLCt6Em+Gogw9cDGNOAv2osQRrhtKOE
xGafklan+mRy
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org