Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFEF848617C702C05FA4F4D381B99C4A2A303DB8.cer
File:                     DFEF848617C702C05FA4F4D381B99C4A2A303DB8.cer (raw, json)
Hash identifier:          r8XKfYOWP/ezsHbEkpz4rmlAzvECoXuQroEU4pBNPBY=
Subject key identifier:   DF:EF:84:86:17:C7:02:C0:5F:A4:F4:D3:81:B9:9C:4A:2A:30:3D:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44C7131249F20452AC1594249D7E432AD958222C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/DFEF848617C702C05FA4F4D381B99C4A2A303DB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 17:10:25 +0000
Certificate not after:    Fri 01 Nov 2024 17:15:25 +0000
Subordinate resources:    AS: 262452
                          IP: 177.52.216.0/22
                          IP: 2804:3f94::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c7:13:12:49:f2:04:52:ac:15:94:24:9d:7e:43:2a:d9:58:22:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 17:10:25 2023 GMT
            Not After : Nov  1 17:15:25 2024 GMT
        Subject: CN=DFEF848617C702C05FA4F4D381B99C4A2A303DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:57:f7:ea:31:96:28:61:eb:21:dd:fd:d4:
                    41:3a:f6:75:00:22:6e:7a:1d:73:6f:52:d6:c9:e1:
                    90:22:23:97:f9:54:8d:fc:a0:54:78:22:c6:c1:e0:
                    a0:fe:e3:99:8f:d5:94:c9:6e:e0:8a:f7:cc:66:74:
                    e6:3b:00:5f:eb:17:91:4d:8e:20:ee:67:30:87:d9:
                    9a:48:66:d5:21:23:25:49:5b:db:47:6c:70:30:a1:
                    10:3a:94:19:be:a6:c6:13:b1:fc:ea:25:6f:94:69:
                    4d:9e:9d:87:eb:79:df:d6:ed:8a:be:bb:64:b0:53:
                    aa:2c:e7:db:1b:4b:dc:81:61:53:2a:c5:29:7b:8c:
                    06:e2:9b:72:22:66:5c:84:eb:ec:5c:bb:d5:82:63:
                    a7:7e:a4:07:e9:5c:24:38:d5:73:c5:71:fd:10:18:
                    14:b4:be:a3:10:0c:ab:64:27:46:6e:82:44:ec:7b:
                    09:74:d6:34:d4:fc:71:c4:cc:fb:b4:e5:0a:84:65:
                    e1:e8:61:a0:8f:29:fa:3c:2c:88:ca:76:9b:da:2e:
                    a1:60:ca:f9:1e:15:ab:f1:66:22:ff:a2:8f:82:f1:
                    a0:32:68:f0:90:7e:ea:8b:13:42:9e:39:f9:5d:8d:
                    4e:15:45:80:d0:02:76:e5:25:7d:b4:a9:72:4b:90:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:EF:84:86:17:C7:02:C0:5F:A4:F4:D3:81:B9:9C:4A:2A:30:3D:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/DFEF848617C702C05FA4F4D381B99C4A2A303DB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.216.0/22
                IPv6:
                  2804:3f94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262452

    Signature Algorithm: sha256WithRSAEncryption
         01:b4:10:7d:46:fe:21:b1:39:7a:58:e7:79:7c:41:b7:43:f7:
         22:87:e0:bd:1c:c2:5c:6f:6a:e6:f1:39:9a:b2:dd:1e:f9:a4:
         97:5a:06:e7:d8:1c:58:b0:93:81:e0:99:88:c1:23:19:de:bc:
         78:2a:aa:09:4a:96:67:86:3c:52:b0:26:02:fd:89:64:21:53:
         ec:d5:40:3f:e4:53:c5:26:e2:27:a8:ab:01:ea:1f:05:a0:4c:
         75:d0:f5:b1:bb:0f:63:60:74:50:74:ef:cb:7d:b3:0a:67:8a:
         85:f1:ce:35:95:0b:69:fc:bb:49:69:59:83:77:e5:90:ce:83:
         7d:f3:76:59:c9:59:0d:dd:6e:7d:9f:4b:f5:eb:37:12:89:d4:
         0f:3d:f3:13:75:4e:8a:6e:8d:cf:a9:11:58:50:14:d9:42:6d:
         cc:68:06:b4:fe:4e:c4:69:c0:23:69:cf:13:47:20:0f:12:38:
         b4:5c:73:b6:48:a7:7a:49:94:ef:70:9a:79:fc:d0:d7:c5:73:
         8b:e5:ff:a4:7f:87:54:ef:b4:be:2c:f6:7a:96:f7:57:b2:be:
         a6:2a:a4:26:0b:69:78:fb:34:50:b6:41:f8:3c:39:1c:41:39:
         a4:0a:da:6b:a8:fd:7f:4d:36:2f:3a:1a:0c:0e:5f:e9:49:6a:
         83:71:f4:bb
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIURMcTEknyBFKsFZQknX5DKtlYIiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDMxNzEwMjVaFw0yNDExMDExNzE1MjVaMDMxMTAvBgNV
BAMTKERGRUY4NDg2MTdDNzAyQzA1RkE0RjREMzgxQjk5QzRBMkEzMDNEQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wlf36jGWKGHrId391EE69nUA
Im56HXNvUtbJ4ZAiI5f5VI38oFR4IsbB4KD+45mP1ZTJbuCK98xmdOY7AF/rF5FN
jiDuZzCH2ZpIZtUhIyVJW9tHbHAwoRA6lBm+psYTsfzqJW+UaU2enYfred/W7Yq+
u2SwU6os59sbS9yBYVMqxSl7jAbim3IiZlyE6+xcu9WCY6d+pAfpXCQ41XPFcf0Q
GBS0vqMQDKtkJ0ZugkTsewl01jTU/HHEzPu05QqEZeHoYaCPKfo8LIjKdpvaLqFg
yvkeFavxZiL/oo+C8aAyaPCQfuqLE0KeOfldjU4VRYDQAnblJX20qXJLkIVDAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTf74SGF8cCwF+k
9NOBuZxKKjA9uDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81a0Y3dUdzZWdHRTEzMnZWaWE3NEhUNVphRUJRUWlac1l3
aGZ3Mk5mY21tZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNWtGN3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZ
d2hmdzJOZmNtbWYvMC9ERkVGODQ4NjE3QzcwMkMwNUZBNEY0RDM4MUI5OUM0QTJB
MzAzREI4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxNNgwDQQCAAIwBwMF
ACgEP5QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAE0MA0GCSqGSIb3DQEBCwUA
A4IBAQABtBB9Rv4hsTl6WOd5fEG3Q/cih+C9HMJcb2rm8Tmast0e+aSXWgbn2BxY
sJOB4JmIwSMZ3rx4KqoJSpZnhjxSsCYC/YlkIVPs1UA/5FPFJuInqKsB6h8FoEx1
0PWxuw9jYHRQdO/LfbMKZ4qF8c41lQtp/LtJaVmDd+WQzoN983ZZyVkN3W59n0v1
6zcSidQPPfMTdU6Kbo3PqRFYUBTZQm3MaAa0/k7EacAjac8TRyAPEji0XHO2SKd6
SZTvcJp5/NDXxXOL5f+kf4dU77S+LPZ6lvdXsr6mKqQmC2l4+zRQtkH4PDkcQTmk
CtprqP1/TTYvOhoMDl/pSWqDcfS7
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:30:01 2025 by rpki-client