Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
File:                     B47D107EFD0532BC4E23E667ABA118817A663654.cer (raw, json)
Hash identifier:          sStgLPL8F+nj+lvIXFD/jXLU5KeFWzkFLyUZoEm/AxE=
Subject key identifier:   B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A020535C684BA6A249521D20BE2E9702B9EFBC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Dec 2021 20:44:36 +0000
Certificate not after:    Fri 09 Dec 2022 20:49:36 +0000
Subordinate resources:    AS: 16735
                          AS: 53006
                          IP: 168.197.20.0/22
                          IP: 170.84.32.0/22
                          IP: 177.69.0.0/16
                          IP: 177.106.0.0/16
                          IP: 177.126.96.0/20
                          IP: 177.191.0.0/16
                          IP: 179.104.0.0/16
                          IP: 179.108.96.0/19
                          IP: 179.126.0.0/16
                          IP: 186.210.0.0/16
                          IP: 187.32.0.0/16
                          IP: 187.44.96.0/19
                          IP: 187.72.0.0/16
                          IP: 189.15.0.0/16
                          IP: 189.37.0.0/17
                          IP: 189.38.96.0/20
                          IP: 189.39.0.0/18
                          IP: 189.41.0.0/16
                          IP: 189.112.0.0/16
                          IP: 191.54.0.0/15
                          IP: 200.146.192.0/18
                          IP: 200.160.112.0/20
                          IP: 200.170.128.0/18
                          IP: 200.187.160.0/19
                          IP: 200.225.192.0/18
                          IP: 200.233.128.0/17
                          IP: 201.16.128.0/17
                          IP: 201.48.0.0/16
                          IP: 201.49.96.0/19
                          IP: 201.55.96.0/19
                          IP: 2001:1290::/31
                          IP: 2804:620::/32
                          IP: 2804:808::/32
                          IP: 2804:1e68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:02:05:35:c6:84:ba:6a:24:95:21:d2:0b:e2:e9:70:2b:9e:fb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 10 20:44:36 2021 GMT
            Not After : Dec  9 20:49:36 2022 GMT
        Subject: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:cb:8d:e1:0d:9c:a2:11:fd:84:c1:c4:06:
                    ec:1b:3e:85:ed:11:a1:46:ad:6f:e3:42:eb:6b:61:
                    0d:38:6b:1f:f8:f6:30:62:16:1e:da:12:81:78:b1:
                    1f:8d:bf:e1:4e:0d:fb:97:a5:0f:2b:4a:03:d4:63:
                    7e:26:9a:3d:cf:89:4b:2a:bd:fe:1d:b4:ef:a5:ce:
                    c3:d9:b0:18:b1:c3:13:29:cb:a6:7e:56:48:1d:59:
                    4a:08:9e:d4:1d:c6:74:d6:ec:0e:4f:81:fb:72:41:
                    f2:e0:e6:c6:34:d8:41:41:46:3d:a9:6e:19:29:49:
                    cc:13:75:7f:68:0f:0d:34:3c:a3:b8:91:0e:17:ba:
                    7e:99:d8:2b:5b:da:76:57:f4:65:b8:99:ce:95:13:
                    cb:3b:4f:da:1f:b6:cb:91:b9:6e:7c:5f:07:5b:19:
                    b4:08:da:80:d9:bc:ff:e8:3b:c3:6e:5a:d7:4f:9f:
                    1b:08:93:3e:6d:58:47:e1:6b:72:7b:6b:e2:a8:55:
                    ad:cf:a4:c1:ad:98:c4:f8:99:57:b3:82:5c:95:75:
                    7a:ce:2a:9b:b6:3d:6c:5a:a5:ac:86:73:96:e1:19:
                    b3:1f:29:87:59:c0:0c:39:49:ed:63:10:f4:7f:88:
                    ef:f7:a8:e9:e1:2c:3c:9d:aa:03:71:cd:f2:96:4f:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.20.0/22
                  170.84.32.0/22
                  177.69.0.0/16
                  177.106.0.0/16
                  177.126.96.0/20
                  177.191.0.0/16
                  179.104.0.0/16
                  179.108.96.0/19
                  179.126.0.0/16
                  186.210.0.0/16
                  187.32.0.0/16
                  187.44.96.0/19
                  187.72.0.0/16
                  189.15.0.0/16
                  189.37.0.0/17
                  189.38.96.0/20
                  189.39.0.0/18
                  189.41.0.0/16
                  189.112.0.0/16
                  191.54.0.0/15
                  200.146.192.0/18
                  200.160.112.0/20
                  200.170.128.0/18
                  200.187.160.0/19
                  200.225.192.0/18
                  200.233.128.0/17
                  201.16.128.0/17
                  201.48.0.0/16
                  201.49.96.0/19
                  201.55.96.0/19
                IPv6:
                  2001:1290::/31
                  2804:620::/32
                  2804:808::/32
                  2804:1e68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16735
                  53006

    Signature Algorithm: sha256WithRSAEncryption
         ab:cd:d1:d8:23:f2:9e:d0:75:56:12:4a:4b:c4:6c:15:12:7e:
         ce:2c:ae:9e:b7:00:4b:29:0c:4a:cf:d2:5b:47:4a:90:7d:d6:
         8f:ef:03:ad:50:0e:71:90:8b:37:fb:6a:fd:c9:9d:38:da:68:
         95:44:c9:ad:ca:01:b3:ea:7e:b5:a6:77:28:8d:fb:3c:da:6a:
         08:56:42:49:a7:2f:cc:6c:68:3a:74:0b:e2:b3:61:77:6d:e0:
         77:de:3f:fe:34:76:97:79:6e:ff:fc:6b:a0:a1:de:4c:76:00:
         a6:80:9d:f7:e2:2d:00:1b:5e:71:20:c4:7e:d6:36:7f:b6:18:
         f0:bc:24:3f:13:85:cf:75:8d:81:57:d0:e8:e7:6d:44:16:fc:
         1e:dd:7d:5e:d7:2c:af:23:a0:cb:78:c9:9e:87:ca:fd:26:c1:
         2e:1a:de:ca:3e:1f:0f:48:a1:ce:76:60:2f:f2:fa:67:ed:49:
         2b:3c:de:84:0e:33:59:a0:c0:c3:74:e5:aa:ea:b7:20:88:61:
         9e:3b:46:cf:d9:24:f6:8b:86:5a:06:68:f0:70:75:35:28:4f:
         58:45:a3:bb:cc:0f:a6:b4:69:fb:53:ef:c2:e0:a3:20:f0:1f:
         9d:39:bb:54:88:d7:f9:7b:52:86:05:da:df:8f:53:28:70:fd:
         96:0a:21:87
-----BEGIN CERTIFICATE-----
MIIGzzCCBbegAwIBAgIUWgIFNcaEumoklSHSC+LpcCue+8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEyMTAyMDQ0MzZaFw0yMjEyMDkyMDQ5MzZaMDMxMTAvBgNV
BAMTKEI0N0QxMDdFRkQwNTMyQkM0RTIzRTY2N0FCQTExODgxN0E2NjM2NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9usuN4Q2cohH9hMHEBuwbPoXt
EaFGrW/jQutrYQ04ax/49jBiFh7aEoF4sR+Nv+FODfuXpQ8rSgPUY34mmj3PiUsq
vf4dtO+lzsPZsBixwxMpy6Z+VkgdWUoIntQdxnTW7A5PgftyQfLg5sY02EFBRj2p
bhkpScwTdX9oDw00PKO4kQ4Xun6Z2Ctb2nZX9GW4mc6VE8s7T9oftsuRuW58Xwdb
GbQI2oDZvP/oO8NuWtdPnxsIkz5tWEfha3J7a+KoVa3PpMGtmMT4mVezglyVdXrO
Kpu2PWxapayGc5bhGbMfKYdZwAw5Se1jEPR/iO/3qOnhLDydqgNxzfKWTwExAgMB
AAGjggPZMIID1TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0fRB+/QUyvE4j
5meroRiBemY2VDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rna01XMXhYWUZDR3NNV3d4
aWJ6dEd6cW1GOC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rna01XMXhYWUZDR3NNV3d4
aWJ6dEd6cW1GOC8wL0I0N0QxMDdFRkQwNTMyQkM0RTIzRTY2N0FCQTExODgxN0E2
NjM2NTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjCB6AYIKwYBBQUHAQcBAf8EgdgwgdUwga4EAgABMIGnAwQCqMUUAwQCqlQg
AwMAsUUDAwCxagMEBLF+YAMDALG/AwMAs2gDBAWzbGADAwCzfgMDALrSAwMAuyAD
BAW7LGADAwC7SAMDAL0PAwQHvSUAAwQEvSZgAwQGvScAAwMAvSkDAwC9cAMDAb82
AwQGyJLAAwQEyKBwAwQGyKqAAwQFyLugAwQGyOHAAwQHyOmAAwQHyRCAAwMAyTAD
BAXJMWADBAXJN2AwIgQCAAIwHAMFASABEpADBQAoBAYgAwUAKAQICAMFACgEHmgw
HgYIKwYBBQUHAQgBAf8EDzANoAswCQICQV8CAwDPDjANBgkqhkiG9w0BAQsFAAOC
AQEAq83R2CPyntB1VhJKS8RsFRJ+ziyunrcASykMSs/SW0dKkH3Wj+8DrVAOcZCL
N/tq/cmdONpolUTJrcoBs+p+taZ3KI37PNpqCFZCSacvzGxoOnQL4rNhd23gd94/
/jR2l3lu//xroKHeTHYApoCd9+ItABtecSDEftY2f7YY8LwkPxOFz3WNgVfQ6Odt
RBb8Ht19XtcsryOgy3jJnofK/SbBLhreyj4fD0ihznZgL/L6Z+1JKzzehA4zWaDA
w3Tlquq3IIhhnjtGz9kk9ouGWgZo8HB1NShPWEWju8wPprRp+1PvwuCjIPAfnTm7
VIjX+XtShgXa349TKHD9lgohhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org