Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2C67754DE561137348B7BA0176260CFAF39B3B43.cer
File:                     2C67754DE561137348B7BA0176260CFAF39B3B43.cer (raw, json)
Hash identifier:          H3/L9uWXDxBn5zeIKxkOR5QzcFlRM6w0miDJi13D+iA=
Subject key identifier:   2C:67:75:4D:E5:61:13:73:48:B7:BA:01:76:26:0C:FA:F3:9B:3B:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67472D6DE29C69B96F9002DC365F11FFB06B36C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/2C67754DE561137348B7BA0176260CFAF39B3B43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Feb 2023 21:47:14 +0000
Certificate not after:    Mon 19 Feb 2024 21:52:14 +0000
Subordinate resources:    AS: 272578
                          IP: 45.173.21.0/24
                          IP: 2804:856c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:47:2d:6d:e2:9c:69:b9:6f:90:02:dc:36:5f:11:ff:b0:6b:36:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 21:47:14 2023 GMT
            Not After : Feb 19 21:52:14 2024 GMT
        Subject: CN=2C67754DE561137348B7BA0176260CFAF39B3B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:1b:15:3b:53:f5:93:77:89:e0:a9:d3:10:
                    26:80:94:f5:64:6c:5a:73:11:04:1f:0f:8f:ad:ef:
                    ad:4a:5d:10:9b:d9:9b:69:03:16:ff:63:f9:04:2d:
                    d0:46:02:f7:a5:7a:91:c2:14:17:c0:c5:ab:d0:f4:
                    5b:9e:89:29:39:e8:78:4d:c5:13:8c:f4:fd:60:ce:
                    25:6b:ac:4e:9c:9b:bc:44:aa:ff:12:e5:7b:3f:4a:
                    7f:c9:8e:fb:2e:2e:46:95:94:79:a7:3d:19:59:f4:
                    ef:4e:e2:5f:a1:4a:ef:79:38:e5:db:67:f2:b7:63:
                    cb:f5:c0:22:36:4a:ae:32:66:db:e8:ed:23:14:da:
                    04:d2:8b:44:6c:56:8a:90:8c:99:da:4f:ec:96:e9:
                    20:6c:72:1c:75:07:3f:34:aa:a7:08:b0:c3:72:28:
                    9a:87:1e:5e:39:0e:a1:5e:50:6b:b8:e0:e3:8c:72:
                    5c:ed:5b:c8:4c:19:86:18:18:81:a5:1e:23:5d:3a:
                    02:76:bc:19:0f:80:91:1b:ba:0c:27:3d:7b:90:3c:
                    f0:70:d8:9f:d9:37:c8:f1:5f:76:cb:75:08:91:e0:
                    69:c5:5f:5a:1c:d2:d9:0b:de:51:ab:c9:5e:c2:9b:
                    e6:f4:f7:d0:08:aa:eb:1c:35:54:e0:8c:7b:6b:14:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:67:75:4D:E5:61:13:73:48:B7:BA:01:76:26:0C:FA:F3:9B:3B:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/2C67754DE561137348B7BA0176260CFAF39B3B43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.21.0/24
                IPv6:
                  2804:856c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272578

    Signature Algorithm: sha256WithRSAEncryption
         28:3e:68:8d:1d:e6:90:2d:97:21:da:23:21:b3:42:05:81:d8:
         d9:03:e1:53:31:2a:a6:39:ad:45:3b:4f:dc:c7:8e:a7:b8:f3:
         3d:38:e9:20:12:b6:d6:9c:62:ac:21:0b:ce:57:9a:c5:14:71:
         82:00:60:21:35:39:5f:11:b3:1b:2b:fa:07:3b:16:fd:0f:68:
         0b:79:6a:cf:5b:2d:fe:88:c3:97:fa:c2:1e:f7:8c:78:0a:60:
         f1:1f:2a:08:d5:4b:81:86:fb:ab:4a:d6:1d:7b:a3:fc:02:89:
         a3:df:b8:60:57:d4:8a:74:69:e8:10:f8:a3:88:d3:dc:e5:0f:
         d1:78:e4:12:3e:0c:9b:5d:6c:ae:45:60:f1:8f:65:8d:75:ce:
         64:ed:f0:0f:61:63:f4:7c:41:cb:fe:7e:a1:17:85:d7:e2:ef:
         21:60:f0:d0:59:54:b6:d0:e6:63:88:17:80:df:9f:da:19:76:
         67:65:85:45:2c:f9:11:85:81:ad:72:19:fc:a8:4a:1b:5a:52:
         74:cb:2c:f8:36:36:b4:41:c1:f1:fd:08:47:64:a7:ed:1e:ee:
         8a:89:6c:aa:4c:e6:14:73:7d:d6:a5:6b:72:f9:30:e6:92:1c:
         ba:0c:f5:b0:cd:59:ba:10:eb:cc:a3:fc:47:37:ae:e4:19:6d:
         2b:05:d2:ef
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZ0ctbeKcablvkALcNl8R/7BrNskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMjAyMTQ3MTRaFw0yNDAyMTkyMTUyMTRaMDMxMTAvBgNV
BAMTKDJDNjc3NTRERTU2MTEzNzM0OEI3QkEwMTc2MjYwQ0ZBRjM5QjNCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7xsVO1P1k3eJ4KnTECaAlPVk
bFpzEQQfD4+t761KXRCb2ZtpAxb/Y/kELdBGAvelepHCFBfAxavQ9FueiSk56HhN
xROM9P1gziVrrE6cm7xEqv8S5Xs/Sn/JjvsuLkaVlHmnPRlZ9O9O4l+hSu95OOXb
Z/K3Y8v1wCI2Sq4yZtvo7SMU2gTSi0RsVoqQjJnaT+yW6SBschx1Bz80qqcIsMNy
KJqHHl45DqFeUGu44OOMclztW8hMGYYYGIGlHiNdOgJ2vBkPgJEbugwnPXuQPPBw
2J/ZN8jxX3bLdQiR4GnFX1oc0tkL3lGryV7Cm+b099AIquscNVTgjHtrFEMTAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsZ3VN5WETc0i3
ugF2Jgz685s7QzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EZEpnQWM5anJXdXlBcTFCNGtCVlVxWktwNDJxOWV2b0Fh
S296dEwzaWRUdi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EZEpnQWM5anJXdXlBcTFCNGtCVlVxWktwNDJxOWV2b0Fh
S296dEwzaWRUdi8wLzJDNjc3NTRERTU2MTEzNzM0OEI3QkEwMTc2MjYwQ0ZBRjM5
QjNCNDMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC2tFTANBAIAAjAHAwUA
KASFbDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKMIwDQYJKoZIhvcNAQELBQAD
ggEBACg+aI0d5pAtlyHaIyGzQgWB2NkD4VMxKqY5rUU7T9zHjqe48z046SASttac
YqwhC85XmsUUcYIAYCE1OV8Rsxsr+gc7Fv0PaAt5as9bLf6Iw5f6wh73jHgKYPEf
KgjVS4GG+6tK1h17o/wCiaPfuGBX1Ip0aegQ+KOI09zlD9F45BI+DJtdbK5FYPGP
ZY11zmTt8A9hY/R8Qcv+fqEXhdfi7yFg8NBZVLbQ5mOIF4Dfn9oZdmdlhUUs+RGF
ga1yGfyoShtaUnTLLPg2NrRBwfH9CEdkp+0e7oqJbKpM5hRzfdala3L5MOaSHLoM
9bDNWboQ68yj/Ec3ruQZbSsF0u8=
-----END CERTIFICATE-----
Generated at Wed Jun 18 15:37:38 2025 by rpki-client