Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94CAC44BDA01053E76C3DBCB0D46AA4A5991B005.cer
File:                     94CAC44BDA01053E76C3DBCB0D46AA4A5991B005.cer (raw, json)
Hash identifier:          fwj+QR7REU0vEfSMzfCNdXGKLySRol9ESpf9npCfcyc=
Subject key identifier:   94:CA:C4:4B:DA:01:05:3E:76:C3:DB:CB:0D:46:AA:4A:59:91:B0:05
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       401346AF527D200016ECFBB6D1BB45D5DF86F88F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/94CAC44BDA01053E76C3DBCB0D46AA4A5991B005.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 14:25:50 +0000
Certificate not after:    Thu 05 Dec 2024 14:30:50 +0000
Subordinate resources:    AS: 265904
                          IP: 131.196.44.0/22
                          IP: 2804:3fa4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:13:46:af:52:7d:20:00:16:ec:fb:b6:d1:bb:45:d5:df:86:f8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 14:25:50 2023 GMT
            Not After : Dec  5 14:30:50 2024 GMT
        Subject: CN=94CAC44BDA01053E76C3DBCB0D46AA4A5991B005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:b5:87:17:d4:eb:19:bd:73:94:0c:30:2f:
                    08:f8:91:82:fa:5e:b3:07:b0:4c:9f:51:79:9c:6b:
                    98:e2:88:24:4a:f9:7f:7e:27:63:34:22:0b:c2:dd:
                    7a:c6:99:0d:63:f4:70:29:2a:7e:43:fa:c3:ad:28:
                    c4:4c:d1:51:63:ff:d2:73:97:fb:14:00:a4:27:11:
                    25:96:70:5f:ec:56:6a:e0:ae:d8:14:ab:b3:0e:8c:
                    81:aa:21:78:45:64:12:2e:48:75:17:88:75:b6:5b:
                    6d:f9:a6:e2:3e:09:59:a6:35:48:ae:b9:8d:23:74:
                    cf:1b:d9:85:4c:e1:1c:60:6d:6d:be:0d:42:24:73:
                    3c:84:37:1d:5f:74:86:65:17:88:30:c0:6c:99:e7:
                    5f:58:1f:23:50:38:51:0d:eb:37:6f:ab:30:94:5a:
                    38:73:40:55:aa:f0:62:27:47:e4:81:50:71:42:ce:
                    84:a4:f6:50:62:c1:1b:5e:37:31:9e:ee:29:1c:07:
                    c1:34:a5:75:f3:7f:34:b8:2f:80:65:cf:ff:92:c0:
                    48:d9:f9:d3:f2:c8:f8:bc:a0:c3:4f:8f:3e:c5:7a:
                    64:c1:0e:d1:4a:8c:4d:80:5c:e5:54:54:2c:f3:f6:
                    03:c7:4b:2b:9d:6b:43:90:5d:27:b3:1c:42:a3:44:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:CA:C4:4B:DA:01:05:3E:76:C3:DB:CB:0D:46:AA:4A:59:91:B0:05
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/94CAC44BDA01053E76C3DBCB0D46AA4A5991B005.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.44.0/22
                IPv6:
                  2804:3fa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265904

    Signature Algorithm: sha256WithRSAEncryption
         8b:81:d3:93:79:54:ea:43:de:ba:9f:8a:c7:66:9c:e4:aa:5f:
         52:86:4e:9f:9a:22:88:8d:4f:0e:57:a9:c5:5d:5d:0f:53:af:
         20:68:23:7b:cb:55:77:a1:f7:01:6d:f2:f4:67:36:55:5a:64:
         f6:4b:f7:42:ec:93:27:98:b1:a6:44:fb:5f:0e:e4:f1:a3:6f:
         00:29:4d:e3:e8:5f:f3:eb:1b:8e:0b:ce:4a:e9:af:6b:0f:bf:
         41:a8:6a:07:8e:e0:12:bd:b6:d9:54:b6:e8:2f:a3:df:52:d7:
         6e:c1:71:cb:6f:c3:92:bb:e3:83:d9:49:ec:73:15:bf:19:28:
         3d:a9:90:8a:57:17:bd:82:a9:01:cb:f4:31:e9:61:01:c3:80:
         67:b1:99:84:6b:97:0d:e3:b3:ce:cf:20:8d:05:51:c9:cd:58:
         33:37:00:d9:d0:1a:7a:32:db:69:e8:e6:ed:89:d2:00:d7:18:
         d8:f6:d8:d3:4d:ae:61:f7:5f:75:92:64:f2:ef:a5:83:97:83:
         a3:8e:2e:0b:2b:29:bf:e5:24:29:3a:30:16:53:f1:77:7a:62:
         8d:68:b8:78:e8:5f:d3:9a:c2:64:6f:fb:2c:32:1e:5c:dc:f8:
         26:1b:9f:48:84:5e:4c:ea:e6:87:7a:df:d1:52:00:1a:d9:85:
         c3:f6:ae:70
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQBNGr1J9IAAW7Pu20btF1d+G+I8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDcxNDI1NTBaFw0yNDEyMDUxNDMwNTBaMDMxMTAvBgNV
BAMTKDk0Q0FDNDRCREEwMTA1M0U3NkMzREJDQjBENDZBQTRBNTk5MUIwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSHrWHF9TrGb1zlAwwLwj4kYL6
XrMHsEyfUXmca5jiiCRK+X9+J2M0IgvC3XrGmQ1j9HApKn5D+sOtKMRM0VFj/9Jz
l/sUAKQnESWWcF/sVmrgrtgUq7MOjIGqIXhFZBIuSHUXiHW2W235puI+CVmmNUiu
uY0jdM8b2YVM4RxgbW2+DUIkczyENx1fdIZlF4gwwGyZ519YHyNQOFEN6zdvqzCU
WjhzQFWq8GInR+SBUHFCzoSk9lBiwRteNzGe7ikcB8E0pXXzfzS4L4Blz/+SwEjZ
+dPyyPi8oMNPjz7FemTBDtFKjE2AXOVUVCzz9gPHSyuda0OQXSezHEKjRClvAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUysRL2gEFPnbD
28sNRqpKWZGwBTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdkRWRVk3ZHdBN2s3UGZ4VVB1cjYyaXQ1TmIzSzU0VUQ1
VUhrb0xGNVFHTS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdkRWRVk3ZHdBN2s3UGZ4VVB1cjYyaXQ1TmIzSzU0VUQ1
VUhrb0xGNVFHTS8wLzk0Q0FDNDRCREEwMTA1M0U3NkMzREJDQjBENDZBQTRBNTk5
MUIwMDUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoPELDANBAIAAjAHAwUA
KAQ/pDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDrAwDQYJKoZIhvcNAQELBQAD
ggEBAIuB05N5VOpD3rqfisdmnOSqX1KGTp+aIoiNTw5XqcVdXQ9TryBoI3vLVXeh
9wFt8vRnNlVaZPZL90LskyeYsaZE+18O5PGjbwApTePoX/PrG44Lzkrpr2sPv0Go
ageO4BK9ttlUtugvo99S127Bcctvw5K744PZSexzFb8ZKD2pkIpXF72CqQHL9DHp
YQHDgGexmYRrlw3js87PII0FUcnNWDM3ANnQGnoy22no5u2J0gDXGNj22NNNrmH3
X3WSZPLvpYOXg6OOLgsrKb/lJCk6MBZT8Xd6Yo1ouHjoX9OawmRv+ywyHlzc+CYb
n0iEXkzq5od639FSABrZhcP2rnA=
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:41:33 2025 by rpki-client