Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D845E15ADCDF898AEDBDC550E8E81C91064CD939.cer
File:                     D845E15ADCDF898AEDBDC550E8E81C91064CD939.cer (raw, json)
Hash identifier:          JkTrK9U+XRL1CAeY/ZTTCGTlzz8ZhO05iTRvLNWBcT8=
Subject key identifier:   D8:45:E1:5A:DC:DF:89:8A:ED:BD:C5:50:E8:E8:1C:91:06:4C:D9:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A9D7E41902B7AF3BAF5C956081E6E78C2016BF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Pg8zmr9HiBfFWXxmfnvujXdSema23s8UpQ8RSwCwJHw/0/D845E15ADCDF898AEDBDC550E8E81C91064CD939.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Pg8zmr9HiBfFWXxmfnvujXdSema23s8UpQ8RSwCwJHw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 21 Aug 2022 14:25:50 +0000
Certificate not after:    Sun 20 Aug 2023 14:30:50 +0000
Subordinate resources:    AS: 272457
                          IP: 2804:817c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9d:7e:41:90:2b:7a:f3:ba:f5:c9:56:08:1e:6e:78:c2:01:6b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 14:25:50 2022 GMT
            Not After : Aug 20 14:30:50 2023 GMT
        Subject: CN=D845E15ADCDF898AEDBDC550E8E81C91064CD939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:7a:39:11:56:d3:52:b5:d5:4e:3f:11:30:
                    8e:98:41:07:cc:16:dd:a2:e1:57:7a:60:5e:ef:d1:
                    cd:aa:2e:09:3b:6e:09:fc:b3:61:d3:55:65:ae:18:
                    96:b9:4b:7a:1e:c7:49:fb:3b:54:e1:42:87:2a:7c:
                    f8:51:cc:15:21:21:81:61:8d:aa:a3:67:ee:de:e5:
                    43:fb:86:f6:6d:c3:d5:bf:dd:07:0d:5d:83:23:bf:
                    4a:d3:6e:5a:63:34:3b:75:7c:f5:62:02:53:f5:ad:
                    b0:51:9f:04:68:8b:b1:46:b9:aa:af:08:a9:a2:24:
                    4f:65:b7:b4:e4:4e:eb:91:36:fc:08:7b:d0:40:a0:
                    57:d5:2a:08:c7:87:94:79:ff:82:25:50:3f:40:54:
                    db:7f:9f:fc:1c:7d:f1:09:52:0c:56:66:26:6d:39:
                    5e:ac:67:72:74:44:0d:9f:0e:27:f3:a6:3b:d0:a1:
                    1d:d9:52:e0:36:ba:35:75:d3:4b:a1:af:46:4f:b1:
                    d4:94:8e:a0:4c:40:47:d9:93:4b:d5:9c:17:96:5b:
                    e7:1a:c6:36:8d:11:f1:1b:c6:2d:6b:ea:75:00:85:
                    17:e7:51:7c:90:74:9a:55:a4:b6:e4:82:0b:9f:4e:
                    b9:25:69:04:88:38:54:03:b8:54:43:73:26:d3:24:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:45:E1:5A:DC:DF:89:8A:ED:BD:C5:50:E8:E8:1C:91:06:4C:D9:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Pg8zmr9HiBfFWXxmfnvujXdSema23s8UpQ8RSwCwJHw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Pg8zmr9HiBfFWXxmfnvujXdSema23s8UpQ8RSwCwJHw/0/D845E15ADCDF898AEDBDC550E8E81C91064CD939.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:817c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272457

    Signature Algorithm: sha256WithRSAEncryption
         4e:1c:87:8d:1e:26:f3:97:ef:54:3a:f8:b3:92:f0:9c:2c:e6:
         f1:59:a8:86:3a:5e:6b:e9:65:c7:8b:b0:86:bb:d9:7f:0c:f2:
         3f:1e:6e:17:ed:1e:22:3b:52:2f:df:5e:df:d2:01:58:7b:1f:
         be:6d:1d:49:1b:f1:d0:7d:90:ab:c0:39:35:3a:07:d3:77:29:
         d9:e8:42:98:28:8e:8f:d0:3b:13:3b:f7:bb:fd:df:2c:42:d6:
         88:9f:56:a4:65:3d:60:74:78:2a:b5:53:27:f4:e3:a1:85:e8:
         4a:b6:c5:62:5a:66:ac:d4:45:c0:14:8b:0b:17:71:4d:b7:11:
         cf:c3:ff:09:52:f4:26:ed:e6:cf:0d:5d:a0:1a:0b:cf:2d:80:
         05:99:bc:cb:9b:1e:7d:49:86:62:a4:dc:e1:77:27:2f:e8:b9:
         91:3a:46:ff:9a:ca:c6:5a:36:58:0f:95:55:8d:59:ba:56:95:
         0e:5b:52:7a:cb:d3:2f:15:3b:48:a1:47:79:5c:04:79:12:f6:
         fb:26:27:99:89:b2:95:bc:41:ad:93:bf:42:94:87:fe:69:0e:
         7d:1e:df:9e:51:b5:6f:f3:70:c0:66:6d:c7:04:d0:44:2e:f1:
         79:ae:8f:db:9c:57:a5:f7:74:8c:b3:e6:52:7b:23:6d:35:cd:
         a3:b7:f2:29
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUWp1+QZArevO69clWCB5ueMIBa/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MjExNDI1NTBaFw0yMzA4MjAxNDMwNTBaMDMxMTAvBgNV
BAMTKEQ4NDVFMTVBRENERjg5OEFFREJEQzU1MEU4RTgxQzkxMDY0Q0Q5MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0no5EVbTUrXVTj8RMI6YQQfM
Ft2i4Vd6YF7v0c2qLgk7bgn8s2HTVWWuGJa5S3oex0n7O1ThQocqfPhRzBUhIYFh
jaqjZ+7e5UP7hvZtw9W/3QcNXYMjv0rTblpjNDt1fPViAlP1rbBRnwRoi7FGuaqv
CKmiJE9lt7TkTuuRNvwIe9BAoFfVKgjHh5R5/4IlUD9AVNt/n/wcffEJUgxWZiZt
OV6sZ3J0RA2fDifzpjvQoR3ZUuA2ujV100uhr0ZPsdSUjqBMQEfZk0vVnBeWW+ca
xjaNEfEbxi1r6nUAhRfnUXyQdJpVpLbkggufTrklaQSIOFQDuFRDcybTJOuXAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYReFa3N+Jiu29
xVDo6ByRBkzZOTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82UGc4em1yOUhpQmZGV1h4bWZudnVqWGRTZW1hMjNzOFVw
UThSU3dDd0pIdy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82UGc4em1yOUhpQmZGV1h4bWZudnVqWGRTZW1hMjNzOFVw
UThSU3dDd0pIdy8wL0Q4NDVFMTVBRENERjg5OEFFREJEQzU1MEU4RTgxQzkxMDY0
Q0Q5MzkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEgXwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBChJMA0GCSqGSIb3DQEBCwUAA4IBAQBOHIeNHibzl+9U
OvizkvCcLObxWaiGOl5r6WXHi7CGu9l/DPI/Hm4X7R4iO1Iv317f0gFYex++bR1J
G/HQfZCrwDk1OgfTdynZ6EKYKI6P0DsTO/e7/d8sQtaIn1akZT1gdHgqtVMn9OOh
hehKtsViWmas1EXAFIsLF3FNtxHPw/8JUvQm7ebPDV2gGgvPLYAFmbzLmx59SYZi
pNzhdycv6LmROkb/msrGWjZYD5VVjVm6VpUOW1J6y9MvFTtIoUd5XAR5Evb7JieZ
ibKVvEGtk79ClIf+aQ59Ht+eUbVv83DAZm3HBNBELvF5ro/bnFel93SMs+ZSeyNt
Nc2jt/Ip
-----END CERTIFICATE-----
Generated at Thu Feb 20 01:21:44 2025 by rpki-client