Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD27EA7E3D9523CEFDD7D30AE8803F438001FB17.cer
File:                     FD27EA7E3D9523CEFDD7D30AE8803F438001FB17.cer (raw, json)
Hash identifier:          8Vu/5BEaxEdHki68AQc3kNZnzQeh37bwttxs004oKqo=
Subject key identifier:   FD:27:EA:7E:3D:95:23:CE:FD:D7:D3:0A:E8:80:3F:43:80:01:FB:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A672824D134FE034CD1787C77D445CD3CEAF715
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/FD27EA7E3D9523CEFDD7D30AE8803F438001FB17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 11:16:58 +0000
Certificate not after:    Tue 03 Sep 2024 11:21:58 +0000
Subordinate resources:    AS: 53046
                          AS: 61600
                          IP: 45.186.143.0/24
                          IP: 143.208.160.0/22
                          IP: 177.93.120.0/21
                          IP: 177.101.16.0/20
                          IP: 200.39.64.0/19
                          IP: 2801:80:330::/48
                          IP: 2801:80:37a0::/48
                          IP: 2804:1f04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:28:24:d1:34:fe:03:4c:d1:78:7c:77:d4:45:cd:3c:ea:f7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 11:16:58 2023 GMT
            Not After : Sep  3 11:21:58 2024 GMT
        Subject: CN=FD27EA7E3D9523CEFDD7D30AE8803F438001FB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:f7:66:45:18:39:0f:6f:ad:1d:1e:db:d9:
                    73:d5:9a:99:ed:f7:e1:1d:dc:90:41:d9:93:04:21:
                    c8:d2:34:13:db:d8:52:a3:a9:34:7c:db:2c:7b:cb:
                    20:cf:d4:ed:21:37:7a:c3:3e:7a:fb:78:59:c1:40:
                    4f:5e:68:de:79:73:0a:ba:7a:6d:34:28:b2:69:b4:
                    ea:bc:01:6a:df:54:e4:c9:76:df:a4:56:97:39:1b:
                    14:b0:03:98:a8:3a:84:b0:02:63:77:84:46:53:d2:
                    60:10:5a:c2:03:da:a5:b4:35:ff:4b:e9:02:cc:1b:
                    52:3f:5a:4d:ab:20:30:d6:ec:20:6a:63:c0:c3:a3:
                    2d:1c:e1:23:5e:f9:bf:b8:9d:bd:9c:56:bd:f9:5a:
                    8a:0e:79:6c:9e:bd:59:aa:c6:0f:0c:83:58:51:72:
                    17:2b:bb:79:08:73:cf:ad:71:3e:7d:72:f7:98:a6:
                    5e:83:db:88:85:a0:e6:3a:2a:26:b0:23:c0:a9:fb:
                    cd:df:d7:30:8b:db:85:ea:1b:80:8a:04:e6:6e:59:
                    54:a3:a6:93:ba:00:61:ab:54:b4:da:53:d6:d4:71:
                    11:b4:39:23:d0:d8:a4:5e:d1:35:84:31:b8:df:8f:
                    82:d8:66:eb:bf:43:9b:56:0a:d9:f8:e4:17:8e:52:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:27:EA:7E:3D:95:23:CE:FD:D7:D3:0A:E8:80:3F:43:80:01:FB:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/FD27EA7E3D9523CEFDD7D30AE8803F438001FB17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.143.0/24
                  143.208.160.0/22
                  177.93.120.0/21
                  177.101.16.0/20
                  200.39.64.0/19
                IPv6:
                  2801:80:330::/48
                  2801:80:37a0::/48
                  2804:1f04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53046
                  61600

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:7b:f4:24:6d:73:22:ff:0d:54:5a:9d:16:49:0a:d0:6d:
         e9:58:03:01:39:12:6e:6f:c5:02:18:a7:9c:6a:94:bf:fe:d4:
         0a:0b:24:b4:ff:e9:07:71:84:02:fd:95:68:90:69:6e:3f:27:
         1a:b7:04:92:fa:1d:1d:ff:69:f6:6c:a3:24:cb:76:8a:de:12:
         95:04:f4:1a:27:bc:b3:71:d3:46:db:21:99:b6:fd:59:f4:21:
         65:f3:a0:14:1d:d5:5d:b5:38:05:39:40:33:90:f3:92:f0:86:
         38:bf:34:56:40:fc:f2:77:42:7b:e1:26:8f:ae:9b:20:70:48:
         23:32:c2:89:66:6b:f7:38:b1:b3:7c:32:45:2d:de:9e:d6:50:
         76:01:9b:72:d2:2d:cb:c5:6b:ce:c3:f2:d6:d0:19:e6:8b:16:
         b6:5c:ce:4f:59:3a:a7:52:d9:3f:ea:7c:11:bb:ae:9c:13:3e:
         84:f6:72:81:30:0f:75:5b:c3:2f:0b:e1:4a:10:fc:72:e5:80:
         79:d4:71:e2:d7:13:26:e0:e2:03:54:20:0c:55:ff:93:4d:3f:
         6c:57:03:16:fa:3e:a1:2c:29:55:79:72:aa:01:ab:5f:3b:b5:
         4a:e0:92:04:b6:8e:55:95:5c:da:2d:cc:41:a0:7f:df:1f:43:
         5b:b8:ca:d1
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgIUKmcoJNE0/gNM0Xh8d9RFzTzq9xUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDUxMTE2NThaFw0yNDA5MDMxMTIxNThaMDMxMTAvBgNV
BAMTKEZEMjdFQTdFM0Q5NTIzQ0VGREQ3RDMwQUU4ODAzRjQzODAwMUZCMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDPdmRRg5D2+tHR7b2XPVmpnt
9+Ed3JBB2ZMEIcjSNBPb2FKjqTR82yx7yyDP1O0hN3rDPnr7eFnBQE9eaN55cwq6
em00KLJptOq8AWrfVOTJdt+kVpc5GxSwA5ioOoSwAmN3hEZT0mAQWsID2qW0Nf9L
6QLMG1I/Wk2rIDDW7CBqY8DDoy0c4SNe+b+4nb2cVr35WooOeWyevVmqxg8Mg1hR
chcru3kIc8+tcT59cveYpl6D24iFoOY6KiawI8Cp+83f1zCL24XqG4CKBOZuWVSj
ppO6AGGrVLTaU9bUcRG0OSPQ2KRe0TWEMbjfj4LYZuu/Q5tWCtn45BeOUgGLAgMB
AAGjggNKMIIDRjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9J+p+PZUjzv3X
0wrogD9DgAH7FzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82bmNHOXMyZ3VwWDhzRUxrblhqb1QyNjI4WFhWYW1GUnFn
bUJhTlhFbVVZUS8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNm5jRzlzMmd1cFg4c0VMa25Yam9UMjYyOFhYVmFtRlJx
Z21CYU5YRW1VWVEvMS9GRDI3RUE3RTNEOTUyM0NFRkREN0QzMEFFODgwM0Y0Mzgw
MDFGQjE3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwWAYIKwYBBQUHAQcBAf8ESTBHMCQEAgABMB4DBAAtuo8DBAKP0KADBAOx
XXgDBASxZRADBAXIJ0AwHwQCAAIwGQMHACgBAIADMAMHACgBAIA3oAMFACgEHwQw
HwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAM82AgMA8KAwDQYJKoZIhvcNAQELBQAD
ggEBAJjde/QkbXMi/w1UWp0WSQrQbelYAwE5Em5vxQIYp5xqlL/+1AoLJLT/6Qdx
hAL9lWiQaW4/Jxq3BJL6HR3/afZsoyTLdoreEpUE9BonvLNx00bbIZm2/Vn0IWXz
oBQd1V21OAU5QDOQ85Lwhji/NFZA/PJ3QnvhJo+umyBwSCMywolma/c4sbN8MkUt
3p7WUHYBm3LSLcvFa87D8tbQGeaLFrZczk9ZOqdS2T/qfBG7rpwTPoT2coEwD3Vb
wy8L4UoQ/HLlgHnUceLXEybg4gNUIAxV/5NNP2xXAxb6PqEsKVV5cqoBq187tUrg
kgS2jlWVXNotzEGgf98fQ1u4ytE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org