Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
File:                     2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer (raw, json)
Hash identifier:          GG8TQIt6qz3HtMi/r9B73Jeh9RSS1Y/b+RNJJhSkk1E=
Subject key identifier:   2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F82DE833792A075FD73DE43C333B1FCAF33A2A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 May 2023 12:32:33 +0000
Certificate not after:    Tue 07 May 2024 12:37:33 +0000
Subordinate resources:    AS: 28634
                          IP: 177.105.128.0/20
                          IP: 179.96.128.0/19
                          IP: 189.90.96.0/20
                          IP: 201.62.64.0/19
                          IP: 2804:128::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:82:de:83:37:92:a0:75:fd:73:de:43:c3:33:b1:fc:af:33:a2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  9 12:32:33 2023 GMT
            Not After : May  7 12:37:33 2024 GMT
        Subject: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:99:69:c7:9d:b4:8d:67:3f:16:fd:34:cd:
                    27:8e:20:3b:e3:79:75:b2:55:10:be:84:10:6f:19:
                    c1:76:22:67:1d:8b:01:5f:88:b1:a6:68:4f:7b:dd:
                    3e:ac:99:7c:fe:4e:b7:b9:38:61:9e:1f:59:a6:70:
                    a4:b0:c5:84:0c:02:44:eb:49:cc:8c:f4:55:f8:8f:
                    7f:e6:2b:4d:16:77:62:ba:86:71:de:37:2c:bb:3f:
                    ef:b9:6c:69:21:27:3c:b9:35:45:2b:4e:49:88:d0:
                    75:0a:d9:81:c7:f9:f6:8b:ca:cb:53:83:0b:d2:76:
                    a0:76:b3:eb:b7:4e:8d:30:ac:66:46:90:94:db:25:
                    e7:dd:1f:67:03:8f:2d:8a:a7:40:2d:fd:8f:f1:64:
                    0c:14:7e:ca:c9:ba:12:a8:f4:82:ab:47:09:63:a5:
                    29:cf:bb:80:50:2c:36:42:dc:a2:32:ed:0c:80:e2:
                    b8:9f:0d:28:d7:99:9e:34:4c:27:55:ac:82:75:cf:
                    ee:4b:ee:5f:e5:15:e9:b6:6b:c6:41:73:84:8f:61:
                    6c:2e:e0:af:1d:b7:45:f1:54:d2:7e:92:fd:e7:86:
                    4b:7a:6a:41:d7:58:e4:2d:f8:3e:f6:ff:4d:1c:2a:
                    4a:8d:fc:c4:16:b8:a2:46:87:48:5b:d1:20:03:96:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.128.0/20
                  179.96.128.0/19
                  189.90.96.0/20
                  201.62.64.0/19
                IPv6:
                  2804:128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28634

    Signature Algorithm: sha256WithRSAEncryption
         88:53:db:e3:e7:ce:3a:3b:24:cf:a4:25:a7:45:5a:5f:a0:a7:
         0f:28:6d:42:18:21:8c:a5:04:a7:52:e5:ab:e5:30:fb:3a:29:
         16:5a:76:66:2b:2a:d1:ee:1e:b2:ea:c2:cc:f1:46:6d:49:ac:
         f2:df:5f:ff:d6:b5:d5:fb:dc:39:ea:dd:8d:24:02:15:7c:65:
         7b:df:cc:d3:b8:d0:e2:56:fa:e2:ef:a6:67:8b:63:85:2a:9e:
         1f:b7:40:56:b4:ab:97:da:db:ea:72:29:1e:d3:41:bd:17:65:
         1a:d3:de:b6:b5:0a:fc:05:14:9c:bf:44:c4:c4:8b:29:f3:26:
         cd:d0:d9:50:45:d4:27:16:eb:6e:17:01:df:a8:82:20:c3:41:
         25:2e:79:1b:4e:45:d8:7f:87:0b:6c:64:39:26:48:51:27:49:
         42:ec:78:14:a0:54:16:87:61:80:ae:3e:85:1a:dc:7d:e9:c2:
         cb:ce:2e:dc:ac:ec:e2:e4:df:99:ff:1d:ff:35:5b:30:ba:5e:
         7c:eb:c7:71:de:f8:72:12:95:b9:13:fa:92:dd:c0:e2:5a:fd:
         8b:69:82:fe:ae:8f:5a:21:a9:e0:e5:78:bd:fc:e6:a1:10:ee:
         ba:83:f8:a9:a9:3e:80:57:a6:4a:d2:fc:98:82:62:f1:84:03:
         44:d0:fa:41
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUf4LegzeSoHX9c95DwzOx/K8zoqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MDkxMjMyMzNaFw0yNDA1MDcxMjM3MzNaMDMxMTAvBgNV
BAMTKDJBMzgxMjREQTQyNTVGRTMyQjcwQjkxMUM3QzBBRDQyOTIxQ0ZDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPZlpx520jWc/Fv00zSeOIDvj
eXWyVRC+hBBvGcF2ImcdiwFfiLGmaE973T6smXz+Tre5OGGeH1mmcKSwxYQMAkTr
ScyM9FX4j3/mK00Wd2K6hnHeNyy7P++5bGkhJzy5NUUrTkmI0HUK2YHH+faLystT
gwvSdqB2s+u3To0wrGZGkJTbJefdH2cDjy2Kp0At/Y/xZAwUfsrJuhKo9IKrRwlj
pSnPu4BQLDZC3KIy7QyA4rifDSjXmZ40TCdVrIJ1z+5L7l/lFem2a8ZBc4SPYWwu
4K8dt0XxVNJ+kv3nhkt6akHXWOQt+D72/00cKkqN/MQWuKJGh0hb0SADlvWzAgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqOBJNpCVf4ytw
uRHHwK1Ckhz8qzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GS1F3Vm9BRHlFUDVLTjk2Zmh6aXFOSEFaUlhUa0RCcEFZ
MldxY0hoTVo1Zy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GS1F3Vm9BRHlFUDVLTjk2Zmh6aXFOSEFaUlhUa0RCcEFZ
MldxY0hoTVo1Zy8wLzJBMzgxMjREQTQyNTVGRTMyQjcwQjkxMUM3QzBBRDQyOTIx
Q0ZDQUIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBLFpgAMEBbNggAMEBL1a
YAMEBck+QDANBAIAAjAHAwUAKAQBKDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJv
2jANBgkqhkiG9w0BAQsFAAOCAQEAiFPb4+fOOjskz6Qlp0VaX6CnDyhtQhghjKUE
p1Llq+Uw+zopFlp2Zisq0e4esurCzPFGbUms8t9f/9a11fvcOerdjSQCFXxle9/M
07jQ4lb64u+mZ4tjhSqeH7dAVrSrl9rb6nIpHtNBvRdlGtPetrUK/AUUnL9ExMSL
KfMmzdDZUEXUJxbrbhcB36iCIMNBJS55G05F2H+HC2xkOSZIUSdJQux4FKBUFodh
gK4+hRrcfenCy84u3Kzs4uTfmf8d/zVbMLpefOvHcd74chKVuRP6kt3A4lr9i2mC
/q6PWiGp4OV4vfzmoRDuuoP4qak+gFemStL8mIJi8YQDRND6QQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 12:37:59 2025 by rpki-client