Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.cer
File:                     0235C205EEA5BA52A9BB0B493973047D04CAAFB3.cer (raw, json)
Hash identifier:          pcCqEaTwjEPFdxnzoWPj8maahpbTVNducFYEQqrFv+k=
Subject key identifier:   02:35:C2:05:EE:A5:BA:52:A9:BB:0B:49:39:73:04:7D:04:CA:AF:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E258049242D6780D5B6F3124611D80768E3A54A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 14:55:17 +0000
Certificate not after:    Tue 09 Apr 2024 15:00:17 +0000
Subordinate resources:    AS: 266974
                          IP: 45.225.244.0/22
                          IP: 2804:4630::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:80:49:24:2d:67:80:d5:b6:f3:12:46:11:d8:07:68:e3:a5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 14:55:17 2023 GMT
            Not After : Apr  9 15:00:17 2024 GMT
        Subject: CN=0235C205EEA5BA52A9BB0B493973047D04CAAFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:45:d9:4a:6d:85:39:27:f3:9c:7c:25:76:
                    fc:fd:0b:89:96:ce:d0:1e:fb:53:e8:c4:a9:f3:e2:
                    62:f0:a1:7e:3e:91:55:8e:c9:bf:2a:d1:24:6f:7b:
                    87:0e:aa:58:e6:51:50:25:de:b3:4e:32:74:9b:f7:
                    21:5a:59:eb:88:60:ec:24:20:de:b2:14:23:26:d0:
                    34:31:85:67:95:b9:51:1c:a5:46:8c:d9:b7:63:6c:
                    94:2c:c7:80:0d:d6:45:8b:b6:09:d4:81:73:09:46:
                    06:d6:bc:8c:e8:34:4e:ed:d2:83:d4:a4:4b:10:e9:
                    05:59:da:a0:bf:06:fc:0d:ff:62:54:aa:b9:e2:31:
                    de:04:a1:6b:c3:f8:d0:f0:ea:a8:78:e0:13:65:38:
                    92:63:d5:4a:4a:01:a6:5e:3a:50:ef:a7:54:55:c3:
                    7b:70:a4:f2:41:ff:50:cf:1e:3a:b3:ad:35:b6:5a:
                    e6:b3:90:05:79:46:c5:d4:13:e5:c2:18:45:85:02:
                    7a:c1:c0:be:ee:1e:5b:a7:5e:33:63:a3:e7:f6:35:
                    0f:96:e9:4c:74:61:aa:4f:33:0c:33:63:67:f3:64:
                    7e:85:35:b7:30:44:11:f7:96:4f:44:cc:f0:d9:6a:
                    96:80:6d:3d:48:2a:ff:e8:8a:03:ad:32:93:31:8e:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:35:C2:05:EE:A5:BA:52:A9:BB:0B:49:39:73:04:7D:04:CA:AF:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.244.0/22
                IPv6:
                  2804:4630::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266974

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:77:81:28:cf:b1:a0:b3:ed:f8:3d:9d:c8:72:37:c9:06:
         82:db:90:e3:a3:e1:b4:03:4d:03:8d:44:cb:af:f1:a5:c1:05:
         3c:81:fd:be:fe:c1:eb:98:e6:bd:31:b7:5d:c6:12:46:44:39:
         e8:3d:aa:04:70:3c:be:c3:f4:fd:6f:5c:c7:58:cc:f4:16:16:
         6a:e2:46:cf:61:cd:17:48:53:8e:ad:40:c8:19:3a:e6:94:03:
         99:75:86:e2:d2:ab:ef:3d:85:de:17:81:32:49:da:5e:53:7a:
         67:0f:18:21:f0:c6:6f:f4:30:38:84:be:f6:71:36:a8:b3:d4:
         fd:47:58:a7:6d:8b:0d:fd:61:92:9c:c2:f0:33:fc:41:53:e2:
         c8:7e:9d:05:9d:21:0f:e1:06:9f:85:4a:7f:fb:14:b3:20:51:
         a2:72:00:ab:17:fe:8c:36:40:11:88:94:64:4c:28:d5:cd:9d:
         bf:1e:34:06:f8:cd:43:6c:4d:a9:40:9a:40:88:d3:c4:13:7a:
         f6:71:35:22:3f:67:0e:79:15:04:b1:f3:58:e4:51:f4:b2:c2:
         6d:5d:3c:bd:e8:32:50:f7:18:2c:30:8e:bf:84:08:d1:bc:38:
         d7:8d:14:5c:c7:aa:2e:8d:36:da:45:a8:32:7f:5f:2b:ce:7d:
         5d:ef:7e:01
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIULiWASSQtZ4DVtvMSRhHYB2jjpUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTExNDU1MTdaFw0yNDA0MDkxNTAwMTdaMDMxMTAvBgNV
BAMTKDAyMzVDMjA1RUVBNUJBNTJBOUJCMEI0OTM5NzMwNDdEMDRDQUFGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WEXZSm2FOSfznHwldvz9C4mW
ztAe+1PoxKnz4mLwoX4+kVWOyb8q0SRve4cOqljmUVAl3rNOMnSb9yFaWeuIYOwk
IN6yFCMm0DQxhWeVuVEcpUaM2bdjbJQsx4AN1kWLtgnUgXMJRgbWvIzoNE7t0oPU
pEsQ6QVZ2qC/BvwN/2JUqrniMd4EoWvD+NDw6qh44BNlOJJj1UpKAaZeOlDvp1RV
w3twpPJB/1DPHjqzrTW2WuazkAV5RsXUE+XCGEWFAnrBwL7uHlunXjNjo+f2NQ+W
6Ux0YapPMwwzY2fzZH6FNbcwRBH3lk9EzPDZapaAbT1IKv/oigOtMpMxjlOdAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCNcIF7qW6Uqm7
C0k5cwR9BMqvszAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FSERhY3ZVcUxyVFlad0ZBZENoS2dQNXhBZkcxRnlmREhl
ckVVOXlEYUFqcS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FSERhY3ZVcUxyVFlad0ZBZENoS2dQNXhBZkcxRnlmREhl
ckVVOXlEYUFqcS8wLzAyMzVDMjA1RUVBNUJBNTJBOUJCMEI0OTM5NzMwNDdEMDRD
QUFGQjMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3h9DANBAIAAjAHAwUA
KARGMDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEt4wDQYJKoZIhvcNAQELBQAD
ggEBABzdd4Eoz7Ggs+34PZ3IcjfJBoLbkOOj4bQDTQONRMuv8aXBBTyB/b7+weuY
5r0xt13GEkZEOeg9qgRwPL7D9P1vXMdYzPQWFmriRs9hzRdIU46tQMgZOuaUA5l1
huLSq+89hd4XgTJJ2l5TemcPGCHwxm/0MDiEvvZxNqiz1P1HWKdtiw39YZKcwvAz
/EFT4sh+nQWdIQ/hBp+FSn/7FLMgUaJyAKsX/ow2QBGIlGRMKNXNnb8eNAb4zUNs
TalAmkCI08QTevZxNSI/Zw55FQSx81jkUfSywm1dPL3oMlD3GCwwjr+ECNG8ONeN
FFzHqi6NNtpFqDJ/XyvOfV3vfgE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org