Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
File:                     54C4052D39431D563CCB2D911DC264CD61964490.cer (raw, json)
Hash identifier:          JE06H2oV5BtH4VEyYWzmm69xA3v6MJyXvNzmAuNtHd8=
Subject key identifier:   54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2744FAAFDF9080CF7DFB871CCD38FE720E5FB83A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/54C4052D39431D563CCB2D911DC264CD61964490.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 16:21:13 +0000
Certificate not after:    Thu 06 Mar 2025 16:26:13 +0000
Subordinate resources:    AS: 265410
                          IP: 168.195.0.0/22
                          IP: 2804:33a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:44:fa:af:df:90:80:cf:7d:fb:87:1c:cd:38:fe:72:0e:5f:b8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 16:21:13 2024 GMT
            Not After : Mar  6 16:26:13 2025 GMT
        Subject: CN=54C4052D39431D563CCB2D911DC264CD61964490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:37:90:00:38:be:ff:07:20:41:f5:83:ad:
                    ed:15:76:ab:9d:eb:7c:d3:f3:08:ac:b6:b2:f6:24:
                    0f:75:9d:40:77:76:e8:f1:c4:a7:78:3f:53:81:32:
                    86:99:5e:00:7d:0a:53:97:08:00:49:12:3f:b7:7c:
                    d0:23:e2:86:c0:54:36:7a:91:8a:1e:4a:e2:23:6c:
                    82:3a:c6:01:48:1d:8e:0e:e4:85:ec:38:bc:bc:f9:
                    a5:7a:ac:67:14:22:0a:9f:ed:14:b4:cc:1a:31:a9:
                    9d:c9:61:ba:00:12:dc:33:7d:4c:db:29:9c:74:4d:
                    79:f3:6b:b1:8b:63:64:16:ad:50:03:f4:c3:af:08:
                    a8:6c:af:06:3b:b2:4f:2d:a8:60:e1:2e:96:f3:88:
                    74:2d:6d:8b:c7:21:b7:9b:e2:48:a6:19:3e:ef:fc:
                    9f:7f:4c:44:04:6b:72:64:d8:d9:26:4c:d1:df:67:
                    43:a9:03:be:27:e4:d0:14:06:ef:68:76:09:62:1f:
                    12:c1:4a:1e:f2:9b:00:bd:e7:a4:69:f0:4a:42:7d:
                    db:5a:15:66:1a:f9:fa:fb:75:30:e1:7b:d7:22:a4:
                    eb:89:cc:f0:a1:35:87:82:28:4d:45:79:c2:af:91:
                    11:d9:aa:58:eb:4f:43:ad:5d:bd:af:94:ba:cc:43:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/54C4052D39431D563CCB2D911DC264CD61964490.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.0.0/22
                IPv6:
                  2804:33a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265410

    Signature Algorithm: sha256WithRSAEncryption
         91:0f:f0:10:8b:82:f8:d5:8d:69:bb:de:11:84:77:a4:25:60:
         08:78:d6:96:95:7e:f1:87:30:23:c7:c7:fb:7d:a7:63:94:ca:
         70:1c:a2:5e:95:a5:5d:35:5e:ba:b7:fc:53:3c:3e:32:e2:1e:
         1f:9c:80:be:c2:d6:f1:10:f9:0f:6b:ae:bd:13:2b:cd:86:8e:
         74:e0:e3:1f:3a:d2:99:77:2b:53:4f:e1:11:71:13:a1:a8:e3:
         0a:a6:00:a4:bc:d8:ed:9f:48:d8:a6:dd:a9:79:1a:64:24:3b:
         92:9c:a0:2b:19:4a:e6:94:cd:ba:ef:f5:e0:c0:d9:23:d1:89:
         7f:8f:35:99:bb:60:2e:80:ef:34:29:a5:4d:64:8a:68:b6:ef:
         ac:d2:02:b2:65:01:15:6e:89:fe:9b:22:7f:13:12:f4:92:f0:
         b6:3b:c5:df:7b:0e:b2:5a:e9:28:ea:61:be:1a:47:8a:32:6f:
         93:b3:0b:09:93:be:7c:b2:9f:89:30:70:f2:54:70:2f:3d:bd:
         37:01:4f:48:26:9f:7e:39:ce:54:29:04:cd:a9:dc:08:10:a7:
         83:ec:09:80:5b:6d:7a:6d:e7:3f:eb:3d:30:cd:ee:bf:46:37:
         02:9c:c7:32:36:1e:ff:71:41:71:7f:e6:4b:a0:db:26:fe:c6:
         27:3c:f1:5f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJ0T6r9+QgM99+4cczTj+cg5fuDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDcxNjIxMTNaFw0yNTAzMDYxNjI2MTNaMDMxMTAvBgNV
BAMTKDU0QzQwNTJEMzk0MzFENTYzQ0NCMkQ5MTFEQzI2NENENjE5NjQ0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nzeQADi+/wcgQfWDre0Vdqud
63zT8wistrL2JA91nUB3dujxxKd4P1OBMoaZXgB9ClOXCABJEj+3fNAj4obAVDZ6
kYoeSuIjbII6xgFIHY4O5IXsOLy8+aV6rGcUIgqf7RS0zBoxqZ3JYboAEtwzfUzb
KZx0TXnza7GLY2QWrVAD9MOvCKhsrwY7sk8tqGDhLpbziHQtbYvHIbeb4kimGT7v
/J9/TEQEa3Jk2NkmTNHfZ0OpA74n5NAUBu9odgliHxLBSh7ymwC956Rp8EpCfdta
FWYa+fr7dTDhe9cipOuJzPChNYeCKE1FecKvkRHZqljrT0OtXb2vlLrMQ7C9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUxAUtOUMdVjzL
LZEdwmTNYZZEkDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zcVpqWkx6OHozb25xaVZLbjRZYVdFTHJQVFJlUVVGeUdQ
eHFCcTIyN0w2dy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM3FaalpMejh6M29ucWlWS240WWFXRUxyUFRSZVFVRnlH
UHhxQnEyMjdMNncvMC81NEM0MDUyRDM5NDMxRDU2M0NDQjJEOTExREMyNjRDRDYx
OTY0NDkwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKowwAwDQQCAAIwBwMF
ACgEM6gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAzCMA0GCSqGSIb3DQEBCwUA
A4IBAQCRD/AQi4L41Y1pu94RhHekJWAIeNaWlX7xhzAjx8f7fadjlMpwHKJelaVd
NV66t/xTPD4y4h4fnIC+wtbxEPkPa669EyvNho504OMfOtKZdytTT+ERcROhqOMK
pgCkvNjtn0jYpt2peRpkJDuSnKArGUrmlM267/XgwNkj0Yl/jzWZu2AugO80KaVN
ZIpotu+s0gKyZQEVbon+myJ/ExL0kvC2O8Xfew6yWuko6mG+GkeKMm+TswsJk758
sp+JMHDyVHAvPb03AU9IJp9+Oc5UKQTNqdwIEKeD7AmAW216bec/6z0wze6/RjcC
nMcyNh7/cUFxf+ZLoNsm/sYnPPFf
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org