Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F7911F6B04656B731BC0B74D5BD51D45A31C674E.cer
File:                     F7911F6B04656B731BC0B74D5BD51D45A31C674E.cer (raw, json)
Hash identifier:          GXsrxsvj6nfKD1hPBypeUrAULqu8QSMF8qCNRyINy5k=
Subject key identifier:   F7:91:1F:6B:04:65:6B:73:1B:C0:B7:4D:5B:D5:1D:45:A3:1C:67:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54120C79B4CF69077C2D8578B99F314F2F0C0615
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/F7911F6B04656B731BC0B74D5BD51D45A31C674E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 12:46:54 +0000
Certificate not after:    Mon 01 Apr 2024 12:51:54 +0000
Subordinate resources:    AS: 263143
                          IP: 191.242.196.0/22
                          IP: 2804:1764::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:12:0c:79:b4:cf:69:07:7c:2d:85:78:b9:9f:31:4f:2f:0c:06:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 12:46:54 2023 GMT
            Not After : Apr  1 12:51:54 2024 GMT
        Subject: CN=F7911F6B04656B731BC0B74D5BD51D45A31C674E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:94:b3:1a:98:30:05:97:f8:79:6d:cf:1f:56:
                    a6:69:97:2f:60:63:d1:47:76:4a:8e:98:d4:72:4b:
                    66:12:06:a5:ad:f0:f4:6e:d3:31:9e:92:01:d6:5b:
                    44:f7:37:74:b6:b3:c3:b6:39:b3:b4:3c:8f:3e:5f:
                    a9:3c:9c:11:ab:c5:aa:7e:7b:f3:62:b4:83:0e:91:
                    fd:0d:52:c0:31:45:4f:0a:74:51:3b:fe:9d:37:55:
                    5d:62:f5:dd:62:28:64:5d:09:eb:11:eb:ec:ef:ea:
                    40:9b:1c:8d:ed:dd:6c:c8:b4:4e:4d:f1:4e:f9:8e:
                    be:38:02:dc:95:f5:fa:97:b0:7a:b2:e8:91:0a:24:
                    64:ef:77:9e:ee:9c:8c:96:30:6a:aa:9a:0a:3e:d2:
                    64:df:8e:a8:c9:5c:93:00:8c:65:72:0e:7a:ed:95:
                    55:b4:f5:9c:6a:99:1b:d9:b7:c6:92:05:2a:82:9a:
                    f0:54:62:fd:29:05:1f:bd:e1:89:89:e5:51:82:ab:
                    4a:12:c2:b8:18:7b:be:0c:db:2a:f4:40:06:82:1c:
                    04:26:8b:b7:d0:21:c8:3c:f9:b9:b8:86:a1:69:c6:
                    cf:01:26:7f:c8:bc:7f:d9:b4:a0:9f:dd:c7:e7:80:
                    a4:d3:54:cc:19:df:f6:be:00:a2:03:a7:8a:bb:bc:
                    24:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:91:1F:6B:04:65:6B:73:1B:C0:B7:4D:5B:D5:1D:45:A3:1C:67:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/F7911F6B04656B731BC0B74D5BD51D45A31C674E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/22
                IPv6:
                  2804:1764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263143

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:49:d1:89:04:90:e0:b0:9f:ca:f9:6c:54:41:08:e9:0b:
         a2:a4:13:36:48:19:a7:c8:e3:80:02:39:f0:d6:c9:57:17:b5:
         f3:27:20:a3:48:d3:9a:15:57:55:65:78:6a:a4:06:46:a8:e6:
         5f:02:10:6f:a5:4b:73:87:02:0f:5b:71:19:9d:5c:5b:3e:f1:
         9f:a9:c3:1a:d2:ef:d2:ac:47:6c:15:f0:76:b4:00:22:11:bf:
         11:d1:bd:88:92:0e:28:8a:ec:82:7f:4a:24:b3:41:26:e0:46:
         b3:50:c9:c7:99:86:ac:31:e7:6d:59:29:2d:79:91:e3:d9:8b:
         c8:9f:57:bc:5e:0d:09:e9:7c:ab:f2:a9:59:08:a6:39:4d:6b:
         e6:04:73:b8:7f:94:d8:31:99:33:42:40:ac:d0:a5:f1:cb:3f:
         9e:d4:ec:c4:06:9e:ee:1f:c1:ad:b0:55:1b:84:ae:c0:a7:0a:
         b0:92:8d:f7:c2:66:a3:38:9c:c2:ed:ef:7c:90:13:9e:16:40:
         9e:71:bb:87:5d:35:c1:7a:5b:38:a9:c6:58:d3:a5:6e:5f:8c:
         6e:58:ce:84:bb:a8:20:36:7e:e7:4b:b3:33:f0:ba:d4:09:2c:
         2d:64:75:50:ab:4a:a7:ee:53:4a:db:7d:0f:a8:12:1b:36:28:
         2b:20:43:27
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUVBIMebTPaQd8LYV4uZ8xTy8MBhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MDMxMjQ2NTRaFw0yNDA0MDExMjUxNTRaMDMxMTAvBgNV
BAMTKEY3OTExRjZCMDQ2NTZCNzMxQkMwQjc0RDVCRDUxRDQ1QTMxQzY3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0lLMamDAFl/h5bc8fVqZply9g
Y9FHdkqOmNRyS2YSBqWt8PRu0zGekgHWW0T3N3S2s8O2ObO0PI8+X6k8nBGrxap+
e/NitIMOkf0NUsAxRU8KdFE7/p03VV1i9d1iKGRdCesR6+zv6kCbHI3t3WzItE5N
8U75jr44AtyV9fqXsHqy6JEKJGTvd57unIyWMGqqmgo+0mTfjqjJXJMAjGVyDnrt
lVW09ZxqmRvZt8aSBSqCmvBUYv0pBR+94YmJ5VGCq0oSwrgYe74M2yr0QAaCHAQm
i7fQIcg8+bm4hqFpxs8BJn/IvH/ZtKCf3cfngKTTVMwZ3/a+AKIDp4q7vCTjAgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3kR9rBGVrcxvA
t01b1R1FoxxnTjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhB
WUdVMmVyalJ3LzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL3hwUXVnVTZZV1dYU3c3Ykg0NlFueG9xNUhpOVBIckgxaEFZ
R1UyZXJqUncvMC9GNzkxMUY2QjA0NjU2QjczMUJDMEI3NEQ1QkQ1MUQ0NUEzMUM2
NzRFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK/8sQwDQQCAAIwBwMFACgE
F2QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAPnMA0GCSqGSIb3DQEBCwUAA4IB
AQCeWknRiQSQ4LCfyvlsVEEI6QuipBM2SBmnyOOAAjnw1slXF7XzJyCjSNOaFVdV
ZXhqpAZGqOZfAhBvpUtzhwIPW3EZnVxbPvGfqcMa0u/SrEdsFfB2tAAiEb8R0b2I
kg4oiuyCf0oks0Em4EazUMnHmYasMedtWSkteZHj2YvIn1e8Xg0J6Xyr8qlZCKY5
TWvmBHO4f5TYMZkzQkCs0KXxyz+e1OzEBp7uH8GtsFUbhK7Apwqwko33wmajOJzC
7e98kBOeFkCecbuHXTXBels4qcZY06VuX4xuWM6Eu6ggNn7nS7Mz8LrUCSwtZHVQ
q0qn7lNK230PqBIbNigrIEMn
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:45 2025 by rpki-client