Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.cer
File:                     D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.cer (raw, json)
Hash identifier:          QRLcGq+cEjQialISqaPHEfYq0eDG7alxGqJlJ9WM2oE=
Subject key identifier:   D3:02:7D:83:97:E5:F8:E3:DA:AB:6E:CE:11:B0:23:90:F3:52:98:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36D01AD9B147D2A560BC4F0D1CA4C9EE5C62B65C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Jun 2023 17:36:38 +0000
Certificate not after:    Tue 25 Jun 2024 17:41:38 +0000
Subordinate resources:    AS: 267096
                          IP: 45.229.24.0/22
                          IP: 2804:4814::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d0:1a:d9:b1:47:d2:a5:60:bc:4f:0d:1c:a4:c9:ee:5c:62:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 27 17:36:38 2023 GMT
            Not After : Jun 25 17:41:38 2024 GMT
        Subject: CN=D3027D8397E5F8E3DAAB6ECE11B02390F35298C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:52:de:8b:11:f8:aa:09:d7:ab:43:0d:0a:
                    d9:87:0b:17:e4:b7:26:3d:58:a5:44:7c:24:3b:e1:
                    01:8d:7f:14:a5:ea:52:45:1f:a0:42:91:22:7e:36:
                    48:85:27:ca:99:6d:87:f3:bc:34:82:6c:8e:c9:55:
                    fb:c7:21:1f:52:17:d5:54:6c:e8:64:cb:45:8f:ed:
                    10:37:57:c0:10:c1:cd:a5:04:00:f6:ab:76:6c:ca:
                    11:52:df:ad:a8:b3:c9:19:72:76:8f:05:bf:7d:b5:
                    0f:be:d6:bd:36:25:c3:96:ad:17:b5:fd:83:79:1d:
                    01:b7:f5:a5:5c:54:d1:18:69:32:e4:11:42:a2:df:
                    ba:bb:90:7f:f3:88:d6:16:fe:2b:d2:ec:a7:c9:f8:
                    28:61:9d:8d:9a:4e:14:10:e7:a4:e2:38:c4:ad:cc:
                    98:c0:3a:48:3a:89:50:c7:0e:d0:77:36:0b:52:e7:
                    15:97:af:df:81:77:c6:66:07:a4:58:81:92:38:0e:
                    49:28:5b:a2:2f:c5:70:74:aa:0d:7b:71:de:b2:7e:
                    bf:b5:00:40:1e:80:f5:50:18:ab:8d:6a:51:b2:25:
                    78:9c:c7:c8:6e:b2:31:92:71:60:35:4e:be:81:58:
                    a4:5d:5b:f7:ba:4d:f9:09:2b:12:ae:86:90:7d:9d:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:02:7D:83:97:E5:F8:E3:DA:AB:6E:CE:11:B0:23:90:F3:52:98:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22
                IPv6:
                  2804:4814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267096

    Signature Algorithm: sha256WithRSAEncryption
         74:6e:b4:7e:64:07:9c:71:2d:c5:16:3a:e2:52:07:35:fe:5f:
         de:c6:60:2f:73:27:a4:41:55:75:b9:d1:71:29:00:0c:69:fb:
         da:11:7f:59:15:81:19:a7:1b:ef:99:83:2e:c7:f3:f0:b0:76:
         c3:65:9b:1b:30:db:6c:61:7e:fe:f6:0a:cc:e0:b1:16:6c:4f:
         5d:88:fe:ad:0e:19:be:cf:92:0a:ea:cb:c6:29:60:6e:8a:85:
         d6:3b:6b:2c:48:8a:0a:f3:90:2c:23:ad:48:e7:ec:bd:7e:9a:
         36:25:2e:51:ff:64:6a:f4:b0:bb:5c:ad:48:2d:ad:69:dc:b2:
         9f:6a:a0:b2:5b:e8:e2:02:e6:56:92:04:fb:c9:10:b9:ac:cf:
         ba:04:97:73:54:17:02:14:32:88:04:0d:b8:ca:f2:06:bd:6c:
         77:5f:76:20:cc:56:88:e0:f0:9a:d2:88:26:f0:b8:c9:fe:35:
         83:ed:47:81:e2:59:3f:56:03:6c:cd:4d:c2:05:e2:be:cb:d1:
         a2:de:7c:fd:c6:8d:c1:db:4d:33:3d:14:f3:d8:3b:da:2d:f2:
         76:49:b6:1a:f7:24:ac:14:d3:ea:06:10:55:e9:6a:48:ce:60:
         f9:86:77:47:06:78:c3:e1:8d:20:98:07:aa:74:e8:2b:eb:af:
         d1:34:bf:dd
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNtAa2bFH0qVgvE8NHKTJ7lxitlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjcxNzM2MzhaFw0yNDA2MjUxNzQxMzhaMDMxMTAvBgNV
BAMTKEQzMDI3RDgzOTdFNUY4RTNEQUFCNkVDRTExQjAyMzkwRjM1Mjk4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mFLeixH4qgnXq0MNCtmHCxfk
tyY9WKVEfCQ74QGNfxSl6lJFH6BCkSJ+NkiFJ8qZbYfzvDSCbI7JVfvHIR9SF9VU
bOhky0WP7RA3V8AQwc2lBAD2q3ZsyhFS362os8kZcnaPBb99tQ++1r02JcOWrRe1
/YN5HQG39aVcVNEYaTLkEUKi37q7kH/ziNYW/ivS7KfJ+ChhnY2aThQQ56TiOMSt
zJjAOkg6iVDHDtB3NgtS5xWXr9+Bd8ZmB6RYgZI4DkkoW6IvxXB0qg17cd6yfr+1
AEAegPVQGKuNalGyJXicx8husjGScWA1Tr6BWKRdW/e6TfkJKxKuhpB9ndGBAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTAn2Dl+X449qr
bs4RsCOQ81KYyDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82azhBMmVVdEJ3aTVrQTlQSjZ4cGFzekJTY2N5Y3JOcHQy
WkplQlJKNUpuNC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNms4QTJlVXRCd2k1a0E5UEo2eHBhc3pCU2NjeWNyTnB0
MlpKZUJSSjVKbjQvMC9EMzAyN0Q4Mzk3RTVGOEUzREFBQjZFQ0UxMUIwMjM5MEYz
NTI5OEM4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5RgwDQQCAAIwBwMF
ACgESBQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBNYMA0GCSqGSIb3DQEBCwUA
A4IBAQB0brR+ZAeccS3FFjriUgc1/l/exmAvcyekQVV1udFxKQAMafvaEX9ZFYEZ
pxvvmYMux/PwsHbDZZsbMNtsYX7+9grM4LEWbE9diP6tDhm+z5IK6svGKWBuioXW
O2ssSIoK85AsI61I5+y9fpo2JS5R/2Rq9LC7XK1ILa1p3LKfaqCyW+jiAuZWkgT7
yRC5rM+6BJdzVBcCFDKIBA24yvIGvWx3X3YgzFaI4PCa0ogm8LjJ/jWD7UeB4lk/
VgNszU3CBeK+y9Gi3nz9xo3B200zPRTz2DvaLfJ2SbYa9ySsFNPqBhBV6WpIzmD5
hndHBnjD4Y0gmAeqdOgr66/RNL/d
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:27:04 2025 by rpki-client