Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D346C590445537F8FD9B391572E421DA26112A3B.cer
File:                     D346C590445537F8FD9B391572E421DA26112A3B.cer (raw, json)
Hash identifier:          xNYEB1Bbf+LB3ULR1nnuuBU5NV5jbbc4Eom/eBBDNP0=
Subject key identifier:   D3:46:C5:90:44:55:37:F8:FD:9B:39:15:72:E4:21:DA:26:11:2A:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76091B23C5C53D50E1917C94E32C48D78812AFAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/D346C590445537F8FD9B391572E421DA26112A3B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 15:30:30 +0000
Certificate not after:    Mon 22 Apr 2024 15:35:30 +0000
Subordinate resources:    AS: 263433
                          IP: 177.91.80.0/21
                          IP: 2804:11b4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:09:1b:23:c5:c5:3d:50:e1:91:7c:94:e3:2c:48:d7:88:12:af:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 24 15:30:30 2023 GMT
            Not After : Apr 22 15:35:30 2024 GMT
        Subject: CN=D346C590445537F8FD9B391572E421DA26112A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:3d:83:2a:f7:b1:22:72:42:36:75:32:f7:
                    68:1a:48:28:44:26:15:ba:95:95:9e:70:e8:bb:d3:
                    db:5d:f0:a0:b3:14:f2:03:c6:82:c1:c0:93:77:fd:
                    3d:9d:13:ba:ec:39:4a:65:db:81:fe:a5:47:a0:8f:
                    f6:40:89:69:e0:75:f5:71:3c:fb:3d:19:a5:6e:ab:
                    e1:22:4d:f8:90:99:13:80:50:c7:08:7e:bd:fc:16:
                    07:e8:5f:49:3e:16:95:32:7e:8d:83:09:66:7a:ca:
                    2b:61:d2:be:18:cb:47:54:2e:7d:df:5e:25:94:ef:
                    43:20:4f:3f:f7:fd:97:5a:62:7e:ec:d8:b0:1e:61:
                    08:9c:f0:e5:41:f8:c1:ff:72:cb:cd:37:51:5d:c5:
                    a6:6c:7b:5c:7f:00:f7:83:b9:a3:9f:68:7a:bb:07:
                    79:c6:14:13:cf:8c:4c:e3:ac:30:74:ff:6e:fa:69:
                    33:9f:f9:52:e5:7c:91:db:6f:cb:89:f7:e7:5d:f3:
                    96:bc:38:e8:f2:e9:84:4e:cf:ed:39:63:4f:ee:16:
                    5e:18:f2:42:75:d5:b9:92:4b:d3:21:e5:24:f6:b6:
                    ee:5d:d3:a7:87:67:a7:7e:3f:15:04:a8:c3:a9:43:
                    0b:41:a4:58:b8:39:2f:52:08:c4:92:36:a3:2f:3e:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:46:C5:90:44:55:37:F8:FD:9B:39:15:72:E4:21:DA:26:11:2A:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/D346C590445537F8FD9B391572E421DA26112A3B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.80.0/21
                IPv6:
                  2804:11b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263433

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:06:55:d6:e5:ac:c8:76:5b:ac:20:b0:c0:11:4d:c6:2a:
         5a:c5:9d:fa:4b:23:de:82:09:65:ca:85:58:51:01:f9:f8:7a:
         71:db:8d:28:48:05:85:48:39:d6:cd:42:44:12:d3:e8:7f:e8:
         bd:3b:9c:51:10:08:2c:e9:b1:cc:82:96:26:c3:cb:50:b1:10:
         52:00:bd:e5:50:b2:b4:19:09:d5:7a:35:1b:d0:4c:d8:8b:51:
         fd:d8:e4:63:b2:13:15:bc:e8:e5:b5:a6:d7:22:35:61:a9:15:
         ed:d5:01:ba:92:84:90:cc:f7:c5:a4:76:27:bc:dd:9a:e6:49:
         8d:01:14:79:00:90:c1:85:db:e7:c0:eb:a3:61:e2:77:3f:71:
         87:b3:a5:f0:91:f4:8b:8a:72:5b:af:27:37:0d:09:d3:e5:b7:
         3e:dc:d8:63:c2:4a:07:2d:c5:82:4d:78:7f:56:92:d4:1b:20:
         d0:d7:76:e1:62:6c:dd:7b:1f:1d:d5:8d:b5:3e:55:a5:22:82:
         ed:15:27:78:37:df:a2:18:c4:13:75:3d:ab:06:67:dd:59:84:
         89:b9:68:86:da:d5:d5:28:6b:d6:fc:af:7a:ad:8a:ee:26:a3:
         74:4c:ff:79:07:d2:71:75:10:b7:51:df:5f:c6:40:d4:c7:4b:
         de:92:70:e3
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUdgkbI8XFPVDhkXyU4yxI14gSr6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MjQxNTMwMzBaFw0yNDA0MjIxNTM1MzBaMDMxMTAvBgNV
BAMTKEQzNDZDNTkwNDQ1NTM3RjhGRDlCMzkxNTcyRTQyMURBMjYxMTJBM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/j2DKvexInJCNnUy92gaSChE
JhW6lZWecOi709td8KCzFPIDxoLBwJN3/T2dE7rsOUpl24H+pUegj/ZAiWngdfVx
PPs9GaVuq+EiTfiQmROAUMcIfr38FgfoX0k+FpUyfo2DCWZ6yith0r4Yy0dULn3f
XiWU70MgTz/3/ZdaYn7s2LAeYQic8OVB+MH/csvNN1FdxaZse1x/APeDuaOfaHq7
B3nGFBPPjEzjrDB0/276aTOf+VLlfJHbb8uJ9+dd85a8OOjy6YROz+05Y0/uFl4Y
8kJ11bmSS9Mh5ST2tu5d06eHZ6d+PxUEqMOpQwtBpFi4OS9SCMSSNqMvPsOdAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTRsWQRFU3+P2b
ORVy5CHaJhEqOzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zeEx2ZVJmQVdGdGNtNmJveVNLWkw1YVEzU3pYWGZkc3k2
NkhkUm45UjU1Yi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zeEx2ZVJmQVdGdGNtNmJveVNLWkw1YVEzU3pYWGZkc3k2
NkhkUm45UjU1Yi8wL0QzNDZDNTkwNDQ1NTM3RjhGRDlCMzkxNTcyRTQyMURBMjYx
MTJBM0IubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7FbUDANBAIAAjAHAwUA
KAQRtDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBQkwDQYJKoZIhvcNAQELBQAD
ggEBAArlBlXW5azIdlusILDAEU3GKlrFnfpLI96CCWXKhVhRAfn4enHbjShIBYVI
OdbNQkQS0+h/6L07nFEQCCzpscyClibDy1CxEFIAveVQsrQZCdV6NRvQTNiLUf3Y
5GOyExW86OW1ptciNWGpFe3VAbqShJDM98Wkdie83ZrmSY0BFHkAkMGF2+fA66Nh
4nc/cYezpfCR9IuKcluvJzcNCdPltz7c2GPCSgctxYJNeH9WktQbINDXduFibN17
Hx3VjbU+VaUigu0VJ3g336IYxBN1PasGZ91ZhIm5aIba1dUoa9b8r3qtiu4mo3RM
/3kH0nF1ELdR31/GQNTHS96ScOM=
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:32:57 2025 by rpki-client