Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer
File:                     D5AC9B9277A1EBF21D85A281540155F60527A721.cer (raw, json)
Hash identifier:          1UhIJANA2ntynZY47MWy35UaaGPe/NQOCd2z6Hf2QF8=
Subject key identifier:   D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       282F4D325265212C25BC59DDA6A98E836642F176
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 16:18:12 +0000
Certificate not after:    Tue 10 Dec 2024 16:23:12 +0000
Subordinate resources:    AS: 61776
                          IP: 143.208.136.0/22
                          IP: 200.196.136.0/22
                          IP: 2804:192c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2f:4d:32:52:65:21:2c:25:bc:59:dd:a6:a9:8e:83:66:42:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 16:18:12 2023 GMT
            Not After : Dec 10 16:23:12 2024 GMT
        Subject: CN=D5AC9B9277A1EBF21D85A281540155F60527A721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:3b:be:b2:4e:8a:92:0f:8e:03:89:2a:38:
                    27:c3:ed:58:23:4b:fc:d4:01:48:43:f9:49:9c:56:
                    a7:bc:fa:ef:b4:14:f4:bf:ca:e0:12:ca:6f:b3:ed:
                    c7:7f:c8:23:b5:a4:b8:43:09:9b:27:b6:ca:87:55:
                    6f:4f:8c:86:e8:35:2d:ba:eb:a3:7a:91:94:ad:b5:
                    24:1a:c2:c8:68:b3:3b:ee:7b:b8:cc:d7:34:1f:63:
                    00:17:28:51:b5:69:5a:73:11:19:e0:b9:61:14:63:
                    38:69:8d:09:69:79:57:64:f4:ef:52:9f:14:a2:83:
                    de:70:1d:3b:2b:3b:86:71:f2:bb:13:a6:15:8e:1c:
                    ac:53:f6:54:f5:51:99:2f:02:92:48:92:36:36:af:
                    02:32:1f:ca:9f:b6:6c:61:43:c0:05:2e:1b:7c:64:
                    75:09:40:7b:fc:b7:af:7e:f1:46:9b:12:e2:14:80:
                    eb:9e:ce:aa:6b:70:07:73:d0:42:ee:0c:39:c3:f3:
                    60:db:0a:30:20:59:9f:1b:c0:f7:91:5c:9b:a5:e9:
                    ee:95:3d:01:f0:73:f6:45:78:17:29:a5:58:22:72:
                    3c:5b:dd:47:0d:34:3f:f8:c9:bf:e5:45:9a:63:2b:
                    9a:69:87:c1:aa:9e:37:b8:bc:26:da:d9:4a:30:16:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22
                  200.196.136.0/22
                IPv6:
                  2804:192c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61776

    Signature Algorithm: sha256WithRSAEncryption
         57:32:4e:5c:4d:48:fa:63:78:91:35:e8:3f:55:e7:f5:01:77:
         57:27:bf:a2:30:1f:aa:c0:e9:8d:69:4f:39:ec:38:4f:4d:b5:
         2e:1c:60:f7:b6:4a:cc:4d:5f:49:7e:49:ca:fd:31:fd:79:2a:
         0e:dc:42:89:8e:13:a8:c0:b6:c9:78:42:c4:93:f9:9a:0c:38:
         d6:36:39:5e:0b:b9:77:39:9c:eb:91:6a:7e:30:33:be:e7:64:
         5a:8f:93:f6:a8:bf:ea:2d:55:8c:54:41:f9:bb:7b:7e:d4:6d:
         32:66:a4:9d:0b:cb:6f:52:9f:9c:fb:c0:0e:d5:8b:ee:c9:35:
         18:73:7f:31:d4:44:93:89:d2:22:e5:db:16:9e:21:3a:b1:61:
         40:b7:74:bc:46:0e:83:87:8f:ec:33:e2:a9:e1:ff:89:3d:b2:
         4e:3d:84:43:25:ef:b0:a3:38:ca:57:96:b1:e4:0e:98:cb:04:
         3d:99:11:fa:07:30:2a:93:4d:d1:2d:19:38:c2:c2:11:ed:46:
         5a:b8:06:74:87:3f:e5:bc:8f:f8:76:38:96:aa:3a:14:ed:f4:
         90:cb:56:f6:73:81:94:a3:00:a7:9a:02:21:3f:e2:76:1f:15:
         e0:23:96:cf:fc:4f:33:53:1f:d3:3a:ae:6b:25:3f:b6:36:65:
         80:a6:f3:bc
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUKC9NMlJlISwlvFndpqmOg2ZC8XYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTIxNjE4MTJaFw0yNDEyMTAxNjIzMTJaMDMxMTAvBgNV
BAMTKEQ1QUM5QjkyNzdBMUVCRjIxRDg1QTI4MTU0MDE1NUY2MDUyN0E3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVDu+sk6Kkg+OA4kqOCfD7Vgj
S/zUAUhD+UmcVqe8+u+0FPS/yuASym+z7cd/yCO1pLhDCZsntsqHVW9PjIboNS26
66N6kZSttSQawshoszvue7jM1zQfYwAXKFG1aVpzERnguWEUYzhpjQlpeVdk9O9S
nxSig95wHTsrO4Zx8rsTphWOHKxT9lT1UZkvApJIkjY2rwIyH8qftmxhQ8AFLht8
ZHUJQHv8t69+8UabEuIUgOuezqprcAdz0ELuDDnD82DbCjAgWZ8bwPeRXJul6e6V
PQHwc/ZFeBcppVgicjxb3UcNND/4yb/lRZpjK5pph8Gqnje4vCba2UowFjnZAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVrJuSd6Hr8h2F
ooFUAVX2BSenITAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84TUF5bVY5ODlzWDhrcUpTZktQYVd2RkphVkdMaXZqWWJu
VDlSdFdBdFJxZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alli
blQ5UnRXQXRScWYvMC9ENUFDOUI5Mjc3QTFFQkYyMUQ4NUEyODE1NDAxNTVGNjA1
MjdBNzIxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKP0IgDBALIxIgwDQQC
AAIwBwMFACgEGSwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPFQMA0GCSqGSIb3
DQEBCwUAA4IBAQBXMk5cTUj6Y3iRNeg/Vef1AXdXJ7+iMB+qwOmNaU857DhPTbUu
HGD3tkrMTV9JfknK/TH9eSoO3EKJjhOowLbJeELEk/maDDjWNjleC7l3OZzrkWp+
MDO+52Raj5P2qL/qLVWMVEH5u3t+1G0yZqSdC8tvUp+c+8AO1YvuyTUYc38x1EST
idIi5dsWniE6sWFAt3S8Rg6Dh4/sM+Kp4f+JPbJOPYRDJe+wozjKV5ax5A6YywQ9
mRH6BzAqk03RLRk4wsIR7UZauAZ0hz/lvI/4djiWqjoU7fSQy1b2c4GUowCnmgIh
P+J2HxXgI5bP/E8zUx/TOq5rJT+2NmWApvO8
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org