Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/34FDCB74EBB7A360FD58B43F52F3322E80475536.cer
File:                     34FDCB74EBB7A360FD58B43F52F3322E80475536.cer (raw, json)
Hash identifier:          um1IyMNlK40qptbjptHxx9XEbuejuTDON+SrQuAomJ8=
Subject key identifier:   34:FD:CB:74:EB:B7:A3:60:FD:58:B4:3F:52:F3:32:2E:80:47:55:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22A7610EF7FB067BAC2754741A02D39A0FB843CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/34FDCB74EBB7A360FD58B43F52F3322E80475536.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 13:00:11 +0000
Certificate not after:    Wed 29 Jan 2025 13:05:11 +0000
Subordinate resources:    AS: 263614
                          IP: 168.232.220.0/22
                          IP: 177.23.108.0/22
                          IP: 2804:1004::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a7:61:0e:f7:fb:06:7b:ac:27:54:74:1a:02:d3:9a:0f:b8:43:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 13:00:11 2024 GMT
            Not After : Jan 29 13:05:11 2025 GMT
        Subject: CN=34FDCB74EBB7A360FD58B43F52F3322E80475536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1c:56:1f:2d:8b:87:0c:8d:29:5b:ea:4f:e1:
                    b6:3a:65:37:60:28:e1:8d:fc:13:a0:df:ab:55:d6:
                    2f:49:24:ad:bb:72:86:4f:24:52:94:35:eb:56:0f:
                    a0:9a:64:ea:f0:b3:cc:f9:ef:c3:8c:10:17:53:63:
                    2b:0a:39:56:79:b6:1c:43:54:85:31:bc:71:5c:79:
                    85:ed:3e:c1:30:ac:40:96:7f:30:29:77:b0:70:7b:
                    66:28:93:27:98:b8:a7:df:d0:70:ea:39:80:8e:35:
                    5a:0a:fa:ba:26:7b:d4:66:a8:23:0e:1b:bc:37:df:
                    0e:1c:69:c3:04:6f:76:79:75:3f:3e:95:1b:f6:7e:
                    10:d8:bf:cd:7f:35:51:c8:42:c9:ac:84:53:95:a7:
                    e4:11:aa:25:7b:ab:24:39:96:70:94:cc:10:77:31:
                    00:1e:5b:c3:b9:7e:d9:83:aa:ef:6d:57:31:ae:98:
                    8a:1b:e0:3b:28:59:ab:a7:cc:30:9c:ea:b9:c3:21:
                    d8:3f:6e:7a:40:b7:ba:0e:73:b3:c8:51:b4:f3:f5:
                    79:27:d6:15:61:0b:30:95:e3:41:c4:f3:3b:b9:ef:
                    fd:67:50:f6:cf:50:1e:f9:5d:dc:cf:28:6e:9f:ad:
                    09:65:f4:89:fd:41:44:3e:d1:79:a6:71:69:09:bd:
                    a2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:FD:CB:74:EB:B7:A3:60:FD:58:B4:3F:52:F3:32:2E:80:47:55:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/34FDCB74EBB7A360FD58B43F52F3322E80475536.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.220.0/22
                  177.23.108.0/22
                IPv6:
                  2804:1004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263614

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:10:b1:f5:03:ae:02:18:d2:5a:83:7d:35:09:f2:10:59:
         8e:6c:6e:5b:2c:fc:8f:0c:f2:c7:04:95:06:16:27:d5:ae:ef:
         e4:4a:d5:6e:91:89:42:d0:21:a1:20:36:d1:d2:bc:a0:cf:ec:
         c6:d9:a6:e7:d0:15:0b:82:75:8a:ed:07:ce:b1:44:16:da:24:
         5a:86:0c:c4:ab:05:0e:51:1a:b1:2a:ac:ef:53:f9:58:78:27:
         01:f4:ad:07:31:e1:10:e4:f1:bc:08:97:f6:55:25:2c:08:aa:
         07:41:eb:ab:69:2e:b5:6e:92:e3:a0:03:05:9c:b8:99:51:90:
         9d:a9:7c:f3:05:bb:71:b5:df:eb:a0:7e:8a:10:f9:a2:ba:64:
         82:15:45:50:e6:0f:2e:97:f4:2e:88:a1:ce:c7:5f:05:ed:03:
         76:51:a2:75:b0:c6:7b:70:e8:45:f4:17:51:4b:f0:23:1e:55:
         9b:1f:48:71:6f:46:c4:a5:9e:6a:66:42:01:00:13:92:a3:f2:
         2f:78:b6:95:ac:f9:c2:66:ff:2d:7e:d3:78:e1:68:36:d0:1c:
         48:0c:df:c4:eb:0f:fe:fd:23:75:9f:29:13:1d:28:74:f2:ee:
         a7:49:5b:99:49:01:94:7d:97:9f:d3:ae:60:7d:96:8e:ca:a5:
         d0:98:65:4a
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUIqdhDvf7BnusJ1R0GgLTmg+4Q80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMzExMzAwMTFaFw0yNTAxMjkxMzA1MTFaMDMxMTAvBgNV
BAMTKDM0RkRDQjc0RUJCN0EzNjBGRDU4QjQzRjUyRjMzMjJFODA0NzU1MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6HFYfLYuHDI0pW+pP4bY6ZTdg
KOGN/BOg36tV1i9JJK27coZPJFKUNetWD6CaZOrws8z578OMEBdTYysKOVZ5thxD
VIUxvHFceYXtPsEwrECWfzApd7Bwe2YokyeYuKff0HDqOYCONVoK+rome9RmqCMO
G7w33w4cacMEb3Z5dT8+lRv2fhDYv81/NVHIQsmshFOVp+QRqiV7qyQ5lnCUzBB3
MQAeW8O5ftmDqu9tVzGumIob4DsoWaunzDCc6rnDIdg/bnpAt7oOc7PIUbTz9Xkn
1hVhCzCV40HE8zu57/1nUPbPUB75XdzPKG6frQll9In9QUQ+0XmmcWkJvaLRAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0/ct067ejYP1Y
tD9S8zIugEdVNjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82WjRQampQdWcyZGJyTmFtYjVmbTFMZ041TGlQUTlCWWFQ
NVV1M25ZSmo4dS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5Qllh
UDVVdTNuWUpqOHUvMC8zNEZEQ0I3NEVCQjdBMzYwRkQ1OEI0M0Y1MkYzMzIyRTgw
NDc1NTM2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKo6NwDBAKxF2wwDQQC
AAIwBwMFACgEEAQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAW+MA0GCSqGSIb3
DQEBCwUAA4IBAQAFGhCx9QOuAhjSWoN9NQnyEFmObG5bLPyPDPLHBJUGFifVru/k
StVukYlC0CGhIDbR0rygz+zG2abn0BULgnWK7QfOsUQW2iRahgzEqwUOURqxKqzv
U/lYeCcB9K0HMeEQ5PG8CJf2VSUsCKoHQeuraS61bpLjoAMFnLiZUZCdqXzzBbtx
td/roH6KEPmiumSCFUVQ5g8ul/QuiKHOx18F7QN2UaJ1sMZ7cOhF9BdRS/AjHlWb
H0hxb0bEpZ5qZkIBABOSo/IveLaVrPnCZv8tftN44Wg20BxIDN/E6w/+/SN1nykT
HSh08u6nSVuZSQGUfZef065gfZaOyqXQmGVK
-----END CERTIFICATE-----
Generated at Thu May 15 04:16:26 2025 by rpki-client