Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.cer
File:                     49278BC3CB075BA6C2EC6A4E88DB160150111010.cer (raw, json)
Hash identifier:          XDVn0ZGpXIIZJUZAp6kRp1+qMLHquof7BBc6NOnJMww=
Subject key identifier:   49:27:8B:C3:CB:07:5B:A6:C2:EC:6A:4E:88:DB:16:01:50:11:10:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66445762DCA506DEF3C79AABC6885417F6E86A9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Jan 2023 22:08:39 +0000
Certificate not after:    Mon 15 Jan 2024 22:13:39 +0000
Subordinate resources:    AS: 271350
                          IP: 181.189.64.0/22
                          IP: 2804:7a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:44:57:62:dc:a5:06:de:f3:c7:9a:ab:c6:88:54:17:f6:e8:6a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 22:08:39 2023 GMT
            Not After : Jan 15 22:13:39 2024 GMT
        Subject: CN=49278BC3CB075BA6C2EC6A4E88DB160150111010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:80:a3:a4:e0:db:e3:86:ee:34:0e:2c:25:
                    05:d7:3c:cf:7e:28:2a:37:f2:67:2c:75:0b:3e:0b:
                    a4:a6:09:90:69:53:c2:1b:1a:c3:f0:ec:be:60:6f:
                    f4:02:da:a1:f9:0b:3e:d0:55:17:96:1e:59:b4:7b:
                    f5:df:d5:b0:44:6c:26:0d:cc:f6:e1:d1:8c:e8:bb:
                    7a:27:c2:7b:34:27:4a:48:81:a5:90:16:26:17:d9:
                    da:20:e3:53:50:15:aa:73:71:30:c4:20:d7:f1:71:
                    25:c9:a0:66:fa:53:31:ac:35:0b:a3:e7:09:ec:9a:
                    43:13:ac:d1:6d:85:2d:03:ed:ae:53:97:be:49:44:
                    83:37:cd:6d:ca:5e:56:bb:96:df:0d:75:b7:45:bf:
                    6d:94:96:ce:7d:17:14:b8:7a:c4:26:34:58:dd:8b:
                    30:28:9f:e4:27:93:bf:e0:49:67:e4:c6:b1:79:9d:
                    9b:35:70:cd:94:3b:fd:ff:5f:d8:8e:0f:32:04:d8:
                    4f:5b:67:95:93:fb:d5:90:98:d4:67:c0:56:f9:37:
                    b2:49:e2:3a:13:b7:5e:52:1f:dc:bf:12:7d:c8:3e:
                    93:d6:0c:48:57:b2:e1:97:bf:50:f3:07:40:12:6c:
                    e8:0b:3d:f1:32:ef:ea:51:fa:c1:0a:68:8c:3a:ea:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:27:8B:C3:CB:07:5B:A6:C2:EC:6A:4E:88:DB:16:01:50:11:10:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.64.0/22
                IPv6:
                  2804:7a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271350

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:b7:65:c4:33:c6:41:3e:c5:24:24:7d:48:a1:2a:fa:a0:
         4e:5b:2d:ec:d9:5e:35:8d:24:6f:57:08:02:1e:9a:59:19:5f:
         d2:7d:6a:88:af:9e:29:c8:e0:43:87:45:6a:48:1c:ce:21:80:
         b3:6f:bc:3a:fd:e4:47:2d:27:a4:ea:3a:f7:3a:3f:73:12:45:
         3e:ba:fc:68:fb:98:10:7e:c0:1c:f0:db:d3:26:ed:7a:9c:a1:
         75:40:7a:5c:a7:a2:91:3f:1e:ea:4f:38:7f:39:e8:f5:19:db:
         e3:52:bd:f2:f4:16:a9:7c:80:fc:e7:01:7c:23:27:88:24:9b:
         3c:86:44:4c:9e:7b:3b:3d:69:8e:cd:ff:84:fb:60:07:fe:61:
         61:5d:96:df:8f:3d:31:ca:92:16:bd:cb:ed:fd:e1:18:e9:72:
         7d:47:78:56:fc:db:e2:14:c9:45:54:fc:ad:d6:c2:13:d4:e7:
         66:da:b0:f7:b5:23:a5:52:57:12:05:7b:57:7f:b0:50:6b:ec:
         88:7c:a7:53:b4:ea:dd:a8:f2:2e:e1:0e:35:37:98:d7:54:ed:
         8d:6f:f5:e7:f0:d4:f0:59:0d:55:db:98:3f:38:22:3c:48:87:
         aa:24:ac:b5:f7:2c:b8:9b:f4:a1:5a:9d:7a:38:c8:c9:db:f5:
         9d:dd:66:6f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZkRXYtylBt7zx5qrxohUF/boapowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMTYyMjA4MzlaFw0yNDAxMTUyMjEzMzlaMDMxMTAvBgNV
BAMTKDQ5Mjc4QkMzQ0IwNzVCQTZDMkVDNkE0RTg4REIxNjAxNTAxMTEwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCys4CjpODb44buNA4sJQXXPM9+
KCo38mcsdQs+C6SmCZBpU8IbGsPw7L5gb/QC2qH5Cz7QVReWHlm0e/Xf1bBEbCYN
zPbh0Yzou3onwns0J0pIgaWQFiYX2dog41NQFapzcTDEINfxcSXJoGb6UzGsNQuj
5wnsmkMTrNFthS0D7a5Tl75JRIM3zW3KXla7lt8NdbdFv22Uls59FxS4esQmNFjd
izAon+Qnk7/gSWfkxrF5nZs1cM2UO/3/X9iODzIE2E9bZ5WT+9WQmNRnwFb5N7JJ
4joTt15SH9y/En3IPpPWDEhXsuGXv1DzB0ASbOgLPfEy7+pR+sEKaIw66u+xAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJJ4vDywdbpsLs
ak6I2xYBUBEQEDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EczFrNkgybjZDeU5aUXZBVlFYSkdqZTVVYUpIdDE5WEJk
UlYzUERrTTdlbS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EczFrNkgybjZDeU5aUXZBVlFYSkdqZTVVYUpIdDE5WEJk
UlYzUERrTTdlbS8wLzQ5Mjc4QkMzQ0IwNzVCQTZDMkVDNkE0RTg4REIxNjAxNTAx
MTEwMTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArW9QDANBAIAAjAHAwUA
KAR6JDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEI/YwDQYJKoZIhvcNAQELBQAD
ggEBAEVOt2XEM8ZBPsUkJH1IoSr6oE5bLezZXjWNJG9XCAIemlkZX9J9aoivninI
4EOHRWpIHM4hgLNvvDr95EctJ6TqOvc6P3MSRT66/Gj7mBB+wBzw29Mm7XqcoXVA
elynopE/HupPOH856PUZ2+NSvfL0Fql8gPznAXwjJ4gkmzyGREyeezs9aY7N/4T7
YAf+YWFdlt+PPTHKkha9y+394Rjpcn1HeFb82+IUyUVU/K3WwhPU52basPe1I6VS
VxIFe1d/sFBr7Ih8p1O06t2o8i7hDjU3mNdU7Y1v9efw1PBZDVXbmD84IjxIh6ok
rLX3LLib9KFanXo4yMnb9Z3dZm8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org