Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
File:                     D25FB7A3641FB6992609C3E87677747FD5176120.cer (raw, json)
Hash identifier:          vNvf9RVWl95aXDiyZKSkjc78Ocfj7bYJyO7DZ2DvTWI=
Subject key identifier:   D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B4C7FBA0EEFDA5ADE4453A533DD8FA0AC32A630
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 20:05:46 +0000
Certificate not after:    Thu 20 Jul 2023 20:10:46 +0000
Subordinate resources:    AS: 262509
                          IP: 131.196.76.0/22
                          IP: 168.121.52.0/22
                          IP: 170.247.52.0/22
                          IP: 177.67.0.0/21
                          IP: 2804:558::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4c:7f:ba:0e:ef:da:5a:de:44:53:a5:33:dd:8f:a0:ac:32:a6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 20:05:46 2022 GMT
            Not After : Jul 20 20:10:46 2023 GMT
        Subject: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:d1:f1:83:11:bc:ed:08:6b:23:57:46:5e:
                    0c:50:d4:c3:0a:82:a3:4e:05:2a:fa:5f:a3:08:38:
                    f9:c8:c6:12:17:29:99:c0:9b:16:13:98:56:23:dd:
                    fd:10:ba:31:24:1f:4f:2f:89:5c:b1:e6:2d:74:a3:
                    27:c3:bf:6b:d1:1c:4c:1a:7c:05:8f:e4:5c:e6:46:
                    a5:a9:51:fa:21:17:0f:9f:78:19:93:3b:b4:dc:ce:
                    a1:56:ba:3c:7d:89:ab:df:52:a7:d0:b2:4c:76:fb:
                    b4:84:23:08:fd:7e:c7:11:e1:f6:20:5f:e9:2b:3b:
                    46:96:9c:a2:34:60:6d:0b:21:66:d6:ed:d7:f7:b2:
                    9b:fc:d4:ee:b6:26:5e:1a:7d:20:df:5a:29:71:f1:
                    c4:0d:dc:36:37:ce:e4:a7:b8:6a:81:71:5a:a2:1b:
                    20:e0:19:50:eb:46:34:b6:6a:17:de:81:e7:8d:e5:
                    e9:3c:fd:7e:b0:99:6b:f1:72:bf:89:2b:4b:9b:fd:
                    c9:18:38:e3:d5:72:8a:38:c9:e0:4d:60:7a:54:65:
                    de:dd:72:f4:8c:e4:34:b9:f4:36:be:f5:8a:3e:02:
                    82:21:27:00:63:ac:d5:de:6a:a8:ce:d7:e5:57:34:
                    5d:bc:66:06:e6:28:6f:4e:41:b2:1a:2c:8e:7a:a9:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22
                  168.121.52.0/22
                  170.247.52.0/22
                  177.67.0.0/21
                IPv6:
                  2804:558::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262509

    Signature Algorithm: sha256WithRSAEncryption
         b5:a0:10:65:43:e8:66:7b:f6:49:7c:98:8d:a8:92:5c:06:4f:
         d5:e4:8e:65:32:51:8c:9c:02:14:1f:87:e7:0d:55:13:b2:52:
         66:0b:81:d1:68:d8:ff:e5:fa:d9:0f:34:97:67:29:17:31:f1:
         8f:93:93:ac:a8:9f:29:4f:66:0c:84:a7:ca:a2:97:1a:9c:b3:
         7a:1f:da:bf:27:ea:a6:34:60:a5:40:f9:30:26:62:21:26:0e:
         90:d5:34:03:2f:8d:7d:82:9f:2e:0b:b7:84:29:21:c8:d0:48:
         0d:16:ec:61:85:9a:fb:13:6a:ab:25:49:e6:4e:9e:af:2a:d0:
         bd:4b:e2:45:74:b1:97:b5:8d:53:ae:fb:20:91:b1:0a:31:60:
         3f:22:8b:4f:6b:9f:89:bd:f1:22:60:0c:12:55:ed:bc:5a:0e:
         c5:68:1d:b7:ca:0e:77:bf:46:5e:c9:eb:45:c5:87:06:f5:f6:
         db:9c:18:14:ed:e2:82:40:33:8e:e9:93:73:36:16:04:1f:8c:
         3f:74:25:0e:58:d0:eb:98:d4:48:59:3c:24:6b:3f:2a:56:15:
         52:00:a2:c6:87:e6:00:26:3c:02:a8:62:95:01:3e:0f:a1:38:
         f9:91:ca:13:22:09:2f:af:47:02:98:25:b5:7a:7c:45:ce:f2:
         b4:24:1b:07
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUe0x/ug7v2lreRFOlM92PoKwypjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MjEyMDA1NDZaFw0yMzA3MjAyMDEwNDZaMDMxMTAvBgNV
BAMTKEQyNUZCN0EzNjQxRkI2OTkyNjA5QzNFODc2Nzc3NDdGRDUxNzYxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2dHxgxG87QhrI1dGXgxQ1MMK
gqNOBSr6X6MIOPnIxhIXKZnAmxYTmFYj3f0QujEkH08viVyx5i10oyfDv2vRHEwa
fAWP5FzmRqWpUfohFw+feBmTO7TczqFWujx9iavfUqfQskx2+7SEIwj9fscR4fYg
X+krO0aWnKI0YG0LIWbW7df3spv81O62Jl4afSDfWilx8cQN3DY3zuSnuGqBcVqi
GyDgGVDrRjS2ahfegeeN5ek8/X6wmWvxcr+JK0ub/ckYOOPVcoo4yeBNYHpUZd7d
cvSM5DS59Da+9Yo+AoIhJwBjrNXeaqjO1+VXNF28ZgbmKG9OQbIaLI56qempAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSX7ejZB+2mSYJ
w+h2d3R/1RdhIDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CYUJaS2FqM0tVV05FMXA4ZmhveUNMc3BuMlg5cHdNVTdQ
a1MyY2lBb25Qdi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CYUJaS2FqM0tVV05FMXA4ZmhveUNMc3BuMlg5cHdNVTdQ
a1MyY2lBb25Qdi8wL0QyNUZCN0EzNjQxRkI2OTkyNjA5QzNFODc2Nzc3NDdGRDUx
NzYxMjAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAoPETAMEAqh5NAMEAqr3
NAMEA7FDADANBAIAAjAHAwUAKAQFWDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
AW0wDQYJKoZIhvcNAQELBQADggEBALWgEGVD6GZ79kl8mI2oklwGT9XkjmUyUYyc
AhQfh+cNVROyUmYLgdFo2P/l+tkPNJdnKRcx8Y+Tk6yonylPZgyEp8qilxqcs3of
2r8n6qY0YKVA+TAmYiEmDpDVNAMvjX2Cny4Lt4QpIcjQSA0W7GGFmvsTaqslSeZO
nq8q0L1L4kV0sZe1jVOu+yCRsQoxYD8ii09rn4m98SJgDBJV7bxaDsVoHbfKDne/
Rl7J60XFhwb19tucGBTt4oJAM47pk3M2FgQfjD90JQ5Y0OuY1EhZPCRrPypWFVIA
osaH5gAmPAKoYpUBPg+hOPmRyhMiCS+vRwKYJbV6fEXO8rQkGwc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org