Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
File:                     D2ADA57D8601634394F4D09E2D0517E3029FE940.cer (raw, json)
Hash identifier:          3SHMkLq2BKaYxgO83lzqeWvYUB61yKABM8DAKN0FYc4=
Subject key identifier:   D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58451138FD107F55537F75AFE592FCA21CD3A6FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 12:56:48 +0000
Certificate not after:    Tue 18 Feb 2025 13:01:48 +0000
Subordinate resources:    AS: 52759
                          AS: 61832
                          AS: 268018
                          IP: 45.165.228.0/22
                          IP: 45.236.68.0/22
                          IP: 138.122.84.0/22
                          IP: 170.81.192.0/22
                          IP: 177.38.200.0/21
                          IP: 177.39.56.0/21
                          IP: 177.53.216.0/21
                          IP: 177.66.120.0/22
                          IP: 177.72.0.0/21
                          IP: 179.96.216.0/21
                          IP: 187.60.240.0/20
                          IP: 187.84.64.0/20
                          IP: 191.6.8.0/21
                          IP: 201.148.100.0/22
                          IP: 2804:b3c::/32
                          IP: 2804:1a04::/32
                          IP: 2804:56b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:45:11:38:fd:10:7f:55:53:7f:75:af:e5:92:fc:a2:1c:d3:a6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 12:56:48 2024 GMT
            Not After : Feb 18 13:01:48 2025 GMT
        Subject: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:b1:74:82:c4:8e:91:08:43:2c:8b:ff:75:
                    16:57:ba:3c:4e:2e:00:27:9b:ae:46:72:22:eb:e0:
                    bb:5f:f2:64:9c:1f:d1:cd:96:75:da:11:8e:e3:2c:
                    66:18:d0:d8:83:26:8f:24:d2:90:fb:42:ea:60:16:
                    5b:7d:4f:5b:93:3e:75:ae:fa:fa:c0:d5:cf:09:a6:
                    a6:86:2f:2b:9d:6f:b1:e8:65:c7:73:a9:8f:5f:98:
                    0f:0c:b6:df:09:ec:5e:fa:98:2c:a1:97:0c:22:cf:
                    46:f9:f7:6c:fe:f5:68:bf:96:5a:d0:e7:83:8a:ff:
                    8a:0d:6a:72:35:c6:db:58:cc:e0:79:fe:7a:30:e7:
                    57:83:82:4c:42:cd:f7:5d:8e:36:5f:39:ba:21:1b:
                    44:ce:96:92:b5:15:1e:06:75:ca:a8:19:a3:8b:03:
                    c5:c3:ee:dd:86:eb:b8:5b:04:4d:d4:90:de:a3:6d:
                    36:d9:97:44:8f:e7:1f:1b:45:01:e5:ab:9f:cc:a3:
                    d8:99:08:99:d3:f0:45:7b:ce:df:11:4e:15:cd:91:
                    a5:be:1d:cc:a5:82:ed:2d:3a:49:a9:db:d8:85:19:
                    4e:ee:f6:4c:6c:17:b9:fb:83:c4:c6:ce:e4:7f:db:
                    12:54:7b:d3:08:36:23:60:97:12:2d:e8:62:4c:75:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.228.0/22
                  45.236.68.0/22
                  138.122.84.0/22
                  170.81.192.0/22
                  177.38.200.0/21
                  177.39.56.0/21
                  177.53.216.0/21
                  177.66.120.0/22
                  177.72.0.0/21
                  179.96.216.0/21
                  187.60.240.0/20
                  187.84.64.0/20
                  191.6.8.0/21
                  201.148.100.0/22
                IPv6:
                  2804:b3c::/32
                  2804:1a04::/32
                  2804:56b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52759
                  61832
                  268018

    Signature Algorithm: sha256WithRSAEncryption
         62:8a:74:84:b6:16:43:5d:c8:4a:93:bd:96:69:b5:f6:d0:3b:
         ef:ba:07:e3:9f:b2:87:91:d9:3f:b6:44:63:12:f9:b7:47:87:
         28:c4:e2:fb:44:65:b5:a1:91:d3:b9:ba:63:94:98:31:2d:6b:
         75:6c:2d:ec:4b:1f:48:3f:e0:fa:df:04:5e:fd:d7:36:67:d6:
         5b:d4:b4:18:e1:cf:7c:a7:29:65:0c:7b:3b:e4:a7:bf:f0:29:
         69:44:e7:6f:15:2e:9c:29:27:f8:94:2d:50:bd:b1:5b:39:bf:
         d6:f9:e3:e2:c3:9f:d7:05:08:a7:1b:b5:a1:bf:3d:b1:5b:ce:
         df:a9:4a:56:f4:d4:64:7f:14:c5:9f:c0:2d:54:b7:5f:a2:31:
         18:5b:41:8f:ec:af:bb:ba:a6:c4:58:43:6a:c5:71:23:3f:2e:
         94:e3:1e:89:81:3b:06:d0:b0:54:95:61:5a:51:53:c7:cc:87:
         94:15:43:40:06:31:7d:d3:9b:bf:ec:37:7a:3b:31:fe:2e:54:
         ba:65:28:51:8b:89:5c:f7:c1:df:87:5f:3f:1b:f3:cd:d1:74:
         cd:e4:f5:d4:7f:0e:ad:a4:a6:22:84:70:8f:e2:09:8e:ba:d4:
         df:80:1e:05:bf:f3:88:12:df:8a:11:2f:7c:a9:82:93:7c:c2:
         d4:de:5f:36
-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgIUWEUROP0Qf1VTf3Wv5ZL8ohzTpv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjAxMjU2NDhaFw0yNTAyMTgxMzAxNDhaMDMxMTAvBgNV
BAMTKEQyQURBNTdEODYwMTYzNDM5NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpbF0gsSOkQhDLIv/dRZXujxO
LgAnm65GciLr4Ltf8mScH9HNlnXaEY7jLGYY0NiDJo8k0pD7QupgFlt9T1uTPnWu
+vrA1c8JpqaGLyudb7HoZcdzqY9fmA8Mtt8J7F76mCyhlwwiz0b592z+9Wi/llrQ
54OK/4oNanI1xttYzOB5/now51eDgkxCzfddjjZfObohG0TOlpK1FR4GdcqoGaOL
A8XD7t2G67hbBE3UkN6jbTbZl0SP5x8bRQHlq5/Mo9iZCJnT8EV7zt8RThXNkaW+
Hcylgu0tOkmp29iFGU7u9kxsF7n7g8TGzuR/2xJUe9MINiNglxIt6GJMdccPAgMB
AAGjggOBMIIDfTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSraV9hgFjQ5T0
0J4tBRfjAp/pQDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DUld4d3FqOUtrQ1VqVXJRYTYxYzhabzFESG1IbXBUa1Q5
blVmamFmUWZ1cS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DUld4d3FqOUtrQ1VqVXJRYTYxYzhabzFESG1IbXBUa1Q5
blVmamFmUWZ1cS8wL0QyQURBNTdEODYwMTYzNDM5NEY0RDA5RTJEMDUxN0UzMDI5
RkU5NDAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjCBigYIKwYBBQUHAQcBAf8EezB5MFoEAgABMFQDBAItpeQDBAIt7EQDBAKK
elQDBAKqUcADBAOxJsgDBAOxJzgDBAOxNdgDBAKxQngDBAOxSAADBAOzYNgDBAS7
PPADBAS7VEADBAO/BggDBALJlGQwGwQCAAIwFQMFACgECzwDBQAoBBoEAwUAKARW
sDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMAzhcCAwDxiAIDBBbyMA0GCSqGSIb3
DQEBCwUAA4IBAQBiinSEthZDXchKk72WabX20Dvvugfjn7KHkdk/tkRjEvm3R4co
xOL7RGW1oZHTubpjlJgxLWt1bC3sSx9IP+D63wRe/dc2Z9Zb1LQY4c98pyllDHs7
5Ke/8ClpROdvFS6cKSf4lC1QvbFbOb/W+ePiw5/XBQinG7Whvz2xW87fqUpW9NRk
fxTFn8AtVLdfojEYW0GP7K+7uqbEWENqxXEjPy6U4x6JgTsG0LBUlWFaUVPHzIeU
FUNABjF905u/7Dd6OzH+LlS6ZShRi4lc98Hfh18/G/PN0XTN5PXUfw6tpKYihHCP
4gmOutTfgB4Fv/OIEt+KES98qYKTfMLU3l82
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org