Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.cer
File:                     549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.cer (raw, json)
Hash identifier:          e3SrGclA4E8KUWJubO6nRVXAfBn/dzHoQfwAaC6hZUM=
Subject key identifier:   54:9A:A4:43:20:EE:70:FF:5F:8C:4D:71:3A:4C:EA:37:28:E4:CC:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71FFDCAE297D010664989FBC2E294F4FBB5E0B1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 11:15:12 +0000
Certificate not after:    Tue 24 Dec 2024 11:20:12 +0000
Subordinate resources:    AS: 266211
                          IP: 45.229.164.0/22
                          IP: 192.144.100.0/22
                          IP: 2804:3c70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ff:dc:ae:29:7d:01:06:64:98:9f:bc:2e:29:4f:4f:bb:5e:0b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 11:15:12 2023 GMT
            Not After : Dec 24 11:20:12 2024 GMT
        Subject: CN=549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:d8:59:30:8f:13:0f:80:09:57:53:d1:58:
                    b6:a6:36:73:a4:2a:6e:e1:5b:80:22:d0:2a:ce:ef:
                    06:e9:fd:07:79:8a:56:ae:20:cb:27:7e:ba:a5:fd:
                    cc:43:49:52:8e:f0:9f:53:26:4c:82:1e:95:c7:bb:
                    f1:fe:53:be:da:36:f8:5a:41:54:1d:04:0e:35:54:
                    7b:23:34:52:0e:b4:f0:d5:06:97:31:cd:8c:89:ba:
                    e2:3f:38:cc:9c:36:9a:ea:a0:e9:6a:40:dc:50:79:
                    a5:64:0f:09:2d:ed:79:91:01:f7:bd:c7:04:e5:15:
                    c9:54:b1:de:32:2c:15:f8:ce:88:6b:80:f3:81:a2:
                    e9:8d:4d:08:19:ef:8c:84:70:54:b4:4f:a7:22:43:
                    cc:c8:20:0b:12:ad:2d:eb:f5:75:b1:c9:4c:37:25:
                    2f:d1:ff:d5:37:4f:12:f3:5f:04:91:5e:3f:47:51:
                    da:d9:0e:db:34:13:02:24:4b:a3:a1:ec:2e:c2:54:
                    d5:d2:67:3e:79:94:38:af:eb:bc:ab:69:1f:8c:8a:
                    ea:d6:91:b3:e9:c8:8b:ea:45:d7:4e:c8:74:6e:f8:
                    0c:d7:51:c0:a5:aa:52:f6:2e:06:be:02:96:fb:43:
                    5d:ff:e4:89:da:35:88:ab:83:86:d2:93:47:31:25:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:9A:A4:43:20:EE:70:FF:5F:8C:4D:71:3A:4C:EA:37:28:E4:CC:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.164.0/22
                  192.144.100.0/22
                IPv6:
                  2804:3c70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266211

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:81:92:dc:2c:11:38:5b:11:91:a1:f3:57:85:f4:f3:d4:
         ff:f8:55:c8:51:73:0d:01:81:c7:0a:88:90:cf:97:be:bf:6b:
         df:78:96:f1:83:5d:9a:ca:10:25:b2:16:23:92:e4:3d:c2:64:
         68:36:75:36:5a:f2:39:9b:68:04:5f:98:59:8b:22:aa:92:0c:
         ff:34:d7:70:bc:80:34:61:ba:ea:91:a2:b2:59:37:ab:0e:9e:
         2e:2e:6e:7b:53:d4:9b:6e:84:45:3c:3d:7a:c8:bd:39:9b:c4:
         6f:f7:90:d6:00:7d:6c:3a:42:f7:9b:77:83:53:06:7f:70:8e:
         24:31:5f:18:95:b6:b5:ed:05:f3:68:3e:aa:06:25:cb:ea:e5:
         ec:f7:33:13:5d:5a:79:3d:9b:c1:e7:e2:6a:cd:6f:6e:30:fa:
         42:8c:fa:5e:b3:78:ef:c1:33:41:a8:36:84:e8:c5:df:91:6d:
         27:af:b0:15:f5:01:4b:37:e1:1c:67:9d:e2:55:62:9e:de:dd:
         b1:df:12:1f:2f:d5:87:79:1c:4d:67:ac:da:f9:26:96:1a:3f:
         0b:e6:bd:05:be:ea:83:e3:65:28:3e:33:79:c2:10:00:40:16:
         6e:0c:d3:fd:a4:86:1c:5c:33:71:93:8e:6c:ee:36:03:d3:50:
         ac:02:a7:60
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUcf/cril9AQZkmJ+8LilPT7teCxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjYxMTE1MTJaFw0yNDEyMjQxMTIwMTJaMDMxMTAvBgNV
BAMTKDU0OUFBNDQzMjBFRTcwRkY1RjhDNEQ3MTNBNENFQTM3MjhFNENDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMg9hZMI8TD4AJV1PRWLamNnOk
Km7hW4Ai0CrO7wbp/Qd5ilauIMsnfrql/cxDSVKO8J9TJkyCHpXHu/H+U77aNvha
QVQdBA41VHsjNFIOtPDVBpcxzYyJuuI/OMycNprqoOlqQNxQeaVkDwkt7XmRAfe9
xwTlFclUsd4yLBX4zohrgPOBoumNTQgZ74yEcFS0T6ciQ8zIIAsSrS3r9XWxyUw3
JS/R/9U3TxLzXwSRXj9HUdrZDts0EwIkS6Oh7C7CVNXSZz55lDiv67yraR+MiurW
kbPpyIvqRddOyHRu+AzXUcClqlL2Lga+Apb7Q13/5InaNYirg4bSk0cxJbrtAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUmqRDIO5w/1+M
TXE6TOo3KOTM5zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BVkdIdjNnZlJ5QnJycXNGWUhaV2tlbkhqNllwbXdXMlpj
VVlTU2RjVTl4dy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BVkdIdjNnZlJ5QnJycXNGWUhaV2tlbkhqNllwbXdXMlpj
VVlTU2RjVTl4dy8wLzU0OUFBNDQzMjBFRTcwRkY1RjhDNEQ3MTNBNENFQTM3MjhF
NENDRTcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi3lpAMEAsCQZDANBAIA
AjAHAwUAKAQ8cDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMED+MwDQYJKoZIhvcN
AQELBQADggEBAH4+gZLcLBE4WxGRofNXhfTz1P/4VchRcw0BgccKiJDPl76/a994
lvGDXZrKECWyFiOS5D3CZGg2dTZa8jmbaARfmFmLIqqSDP8013C8gDRhuuqRorJZ
N6sOni4ubntT1JtuhEU8PXrIvTmbxG/3kNYAfWw6Qvebd4NTBn9wjiQxXxiVtrXt
BfNoPqoGJcvq5ez3MxNdWnk9m8Hn4mrNb24w+kKM+l6zeO/BM0GoNoToxd+RbSev
sBX1AUs34RxnneJVYp7e3bHfEh8v1Yd5HE1nrNr5JpYaPwvmvQW+6oPjZSg+M3nC
EABAFm4M0/2khhxcM3GTjmzuNgPTUKwCp2A=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org