Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.cer
File:                     538E3016A58D538A8E37C13617C6A21BBA07AAED.cer (raw, json)
Hash identifier:          GAF5k1zqp71D7n6b+cFPfSMDWzrYcpRUX9cz9FlrvSI=
Subject key identifier:   53:8E:30:16:A5:8D:53:8A:8E:37:C1:36:17:C6:A2:1B:BA:07:AA:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DD4D1C5D6868F9C7241E31CA1797FA69C2F06F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Aug 2022 17:41:56 +0000
Certificate not after:    Mon 14 Aug 2023 17:46:56 +0000
Subordinate resources:    AS: 53019
                          IP: 177.70.160.0/20
                          IP: 2804:5dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d4:d1:c5:d6:86:8f:9c:72:41:e3:1c:a1:79:7f:a6:9c:2f:06:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 15 17:41:56 2022 GMT
            Not After : Aug 14 17:46:56 2023 GMT
        Subject: CN=538E3016A58D538A8E37C13617C6A21BBA07AAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:c6:d8:18:8c:b9:81:05:37:8e:57:33:24:
                    d2:de:fd:3f:ad:00:60:2b:69:43:da:ed:ac:7e:86:
                    cd:03:8d:5b:3a:8b:e8:38:7a:cf:3a:3e:16:a6:41:
                    74:78:4a:99:fc:95:8f:82:30:d9:01:0c:7e:02:d8:
                    81:b5:02:45:76:13:cc:59:1a:63:08:a0:64:23:79:
                    28:57:e2:ed:d3:33:22:26:d2:3c:5b:bc:12:0e:12:
                    4c:04:6e:02:05:b5:e0:b9:df:fc:cc:1e:07:97:54:
                    a6:05:c3:d2:f5:c7:1b:76:4c:ea:39:88:cf:22:82:
                    16:c5:b2:c6:62:9e:42:c0:1c:3f:a5:b0:5b:52:1d:
                    0b:2d:6c:27:0f:55:86:48:36:88:5a:4b:17:17:bd:
                    f1:fd:ba:ab:6d:89:9d:6b:c0:71:cf:c7:77:d6:70:
                    2e:e5:0a:34:3d:d6:e0:7d:a4:5e:73:00:d7:ee:71:
                    42:d6:1f:9c:bc:06:1c:4d:6b:ec:10:99:0c:4b:0a:
                    d8:43:84:c4:30:96:e9:ba:47:24:be:dd:68:bd:af:
                    8d:d5:85:93:39:c7:fe:98:aa:6d:1a:fe:70:a9:fe:
                    14:79:6d:48:cd:96:42:ce:2c:71:0c:19:c4:5e:e9:
                    6a:a6:b3:ea:ef:32:24:e9:87:97:1f:bb:56:c6:d6:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:8E:30:16:A5:8D:53:8A:8E:37:C1:36:17:C6:A2:1B:BA:07:AA:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.160.0/20
                IPv6:
                  2804:5dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53019

    Signature Algorithm: sha256WithRSAEncryption
         49:6e:49:1c:dd:c8:23:56:a3:eb:dd:2d:50:59:51:83:60:6a:
         ca:22:a3:13:dd:dc:a9:70:d3:fb:38:a4:8e:ab:46:c6:c9:11:
         38:8e:1e:dd:8e:ef:b8:a9:bd:ea:cf:95:f2:b9:ab:ed:57:cd:
         e9:8b:ce:f6:f4:74:09:30:91:c0:b0:54:44:ac:41:9a:4c:64:
         7d:05:da:6a:e0:3e:3c:4a:4c:20:fd:a2:58:da:c1:b1:a0:58:
         eb:c2:27:9b:10:1e:0f:6c:87:4b:9e:02:c1:f0:cd:c7:75:63:
         25:a1:99:48:b5:2f:30:5f:7f:10:8b:19:d2:a8:78:16:43:e1:
         93:e5:eb:5a:e8:4f:e4:21:e7:d6:e4:87:d4:b8:ec:e5:ff:e2:
         ca:d4:68:e6:15:4f:1f:74:02:d2:4a:13:75:ec:91:8a:df:f6:
         66:da:49:a6:e0:c5:d7:81:e2:93:5d:57:38:9d:c0:e6:a0:81:
         51:9f:44:58:32:1f:6a:ea:fc:54:66:96:85:a5:4c:ef:5a:b3:
         a8:a3:11:69:94:d4:a4:14:e4:df:00:9e:92:d3:44:ea:f4:f8:
         d0:53:fe:4b:f9:27:f2:b2:bf:8d:c1:32:ea:b6:ea:4c:f6:8a:
         76:31:b0:df:ef:90:fa:f7:aa:29:a9:b0:4e:ee:74:0b:6e:48:
         52:4f:bb:a1
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUTdTRxdaGj5xyQeMcoXl/ppwvBvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MTUxNzQxNTZaFw0yMzA4MTQxNzQ2NTZaMDMxMTAvBgNV
BAMTKDUzOEUzMDE2QTU4RDUzOEE4RTM3QzEzNjE3QzZBMjFCQkEwN0FBRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7sbYGIy5gQU3jlczJNLe/T+t
AGAraUPa7ax+hs0DjVs6i+g4es86PhamQXR4Spn8lY+CMNkBDH4C2IG1AkV2E8xZ
GmMIoGQjeShX4u3TMyIm0jxbvBIOEkwEbgIFteC53/zMHgeXVKYFw9L1xxt2TOo5
iM8ighbFssZinkLAHD+lsFtSHQstbCcPVYZINohaSxcXvfH9uqttiZ1rwHHPx3fW
cC7lCjQ91uB9pF5zANfucULWH5y8BhxNa+wQmQxLCthDhMQwlum6RyS+3Wi9r43V
hZM5x/6Yqm0a/nCp/hR5bUjNlkLOLHEMGcRe6Wqms+rvMiTph5cfu1bG1mZZAgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTjjAWpY1Tio43
wTYXxqIbugeq7TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8xdFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vw
a1hpY1M3cFFXLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvLzF0VDFNOTk2amdIRnJRakJ3cXBSQmFzc2Q2RWhVRnJDZXBr
WGljUzdwUVcvMC81MzhFMzAxNkE1OEQ1MzhBOEUzN0MxMzYxN0M2QTIxQkJBMDdB
QUVELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBASxRqAwDQQCAAIwBwMFACgE
BdwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM8bMA0GCSqGSIb3DQEBCwUAA4IB
AQBJbkkc3cgjVqPr3S1QWVGDYGrKIqMT3dypcNP7OKSOq0bGyRE4jh7dju+4qb3q
z5XyuavtV83pi8729HQJMJHAsFRErEGaTGR9Bdpq4D48Skwg/aJY2sGxoFjrwieb
EB4PbIdLngLB8M3HdWMloZlItS8wX38QixnSqHgWQ+GT5eta6E/kIefW5IfUuOzl
/+LK1GjmFU8fdALSShN17JGK3/Zm2kmm4MXXgeKTXVc4ncDmoIFRn0RYMh9q6vxU
ZpaFpUzvWrOooxFplNSkFOTfAJ6S00Tq9PjQU/5L+Sfysr+NwTLqtupM9op2MbDf
75D696opqbBO7nQLbkhST7uh
-----END CERTIFICATE-----
Generated at Sat May 3 12:37:44 2025 by rpki-client