Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0654E2C9F140E607B0E745E98D2557A14F35FEE1.cer
File:                     0654E2C9F140E607B0E745E98D2557A14F35FEE1.cer (raw, json)
Hash identifier:          mzxZrul8D3/QmWPJHuX6Hr55BNkM13J+MZzhaOYMNOM=
Subject key identifier:   06:54:E2:C9:F1:40:E6:07:B0:E7:45:E9:8D:25:57:A1:4F:35:FE:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A24D0057399971F598560146B470AE14B6AF49C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/0654E2C9F140E607B0E745E98D2557A14F35FEE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 16:22:23 +0000
Certificate not after:    Wed 15 May 2024 16:27:23 +0000
Subordinate resources:    AS: 266049
                          IP: 45.4.144.0/22
                          IP: 2804:39c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:24:d0:05:73:99:97:1f:59:85:60:14:6b:47:0a:e1:4b:6a:f4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 17 16:22:23 2023 GMT
            Not After : May 15 16:27:23 2024 GMT
        Subject: CN=0654E2C9F140E607B0E745E98D2557A14F35FEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:86:4c:78:25:9c:a8:e9:c0:dd:08:04:0a:
                    da:89:aa:5a:c7:c5:9a:e5:02:d7:fb:f1:f3:d0:b1:
                    2f:85:a5:77:e8:5d:06:6f:9c:32:75:ab:c0:6c:9a:
                    bd:24:b7:ec:d6:87:13:c0:34:f8:83:09:f0:a8:3e:
                    f9:fd:a4:8e:e9:d1:2d:f2:97:f7:53:2e:8b:f9:97:
                    16:3b:26:0e:76:92:9f:75:38:6d:33:5c:b4:4e:b9:
                    d5:ab:0e:ec:57:64:49:53:a7:20:37:00:e5:8b:93:
                    c0:55:db:46:05:73:59:8c:0a:0f:96:4b:e6:14:01:
                    94:76:fc:b6:f0:c7:ac:75:8b:54:f0:72:d3:ce:98:
                    99:e9:6f:3c:7f:cc:cb:9b:14:b2:ee:c6:3d:8c:41:
                    cb:0b:a9:19:65:f4:28:67:6a:89:49:13:89:72:36:
                    9f:54:88:f5:15:5d:bf:5d:1a:77:ae:8e:ee:62:5a:
                    9c:5b:e2:1f:6d:3a:61:e0:5b:20:42:89:82:2c:9a:
                    37:d1:d6:52:81:88:8d:74:9f:6a:13:ee:af:5e:c8:
                    91:02:be:59:b5:43:51:62:74:62:50:55:1f:22:60:
                    b8:d5:e5:78:af:21:d5:2e:f0:3d:49:4d:c8:03:be:
                    48:9d:de:71:f9:90:7d:38:52:ef:0f:ec:9b:84:9b:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:54:E2:C9:F1:40:E6:07:B0:E7:45:E9:8D:25:57:A1:4F:35:FE:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/0654E2C9F140E607B0E745E98D2557A14F35FEE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.144.0/22
                IPv6:
                  2804:39c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266049

    Signature Algorithm: sha256WithRSAEncryption
         96:28:93:7e:ea:4c:d6:39:61:9a:a6:0b:63:a5:83:5a:8b:46:
         e1:9f:a1:81:f3:8b:95:28:1d:bb:8e:67:8a:e0:ed:4c:b0:3d:
         c6:2a:97:45:ee:92:31:d8:df:ea:41:4b:da:73:ed:27:12:61:
         b7:75:44:35:e6:7f:9a:97:25:a5:4c:d6:f0:dc:c2:2f:1d:50:
         2d:44:60:0a:ac:db:d8:1f:bb:f8:fa:4a:84:a3:b2:da:47:f0:
         5d:fb:7f:c9:40:57:6a:67:33:0d:ad:9e:b8:4f:7b:c9:e2:81:
         94:c4:24:27:0c:c0:64:9c:12:c1:d9:a5:4a:d6:d2:9a:d7:04:
         f7:cf:4b:e6:4a:ca:89:6d:07:80:fb:b3:f8:1a:66:70:48:8f:
         4a:09:5a:2f:4b:e3:87:a0:6c:d6:60:09:7d:8f:c1:3d:19:46:
         15:61:46:07:6e:07:9d:c7:59:1b:cf:45:06:c7:08:37:11:5d:
         4d:8f:cc:90:e3:c2:06:80:fc:ce:c2:a1:be:74:2e:88:a5:e6:
         db:a5:ec:26:eb:4a:36:db:ae:0b:23:a5:c9:49:ba:1b:81:ac:
         cc:a4:67:d8:e5:49:cb:68:a1:65:f9:1b:be:33:1d:37:46:75:
         10:43:c1:eb:5a:6a:11:16:79:dc:68:3b:0f:22:8a:29:ac:10:
         f8:51:08:11
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSiTQBXOZlx9ZhWAUa0cK4Utq9JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTcxNjIyMjNaFw0yNDA1MTUxNjI3MjNaMDMxMTAvBgNV
BAMTKDA2NTRFMkM5RjE0MEU2MDdCMEU3NDVFOThEMjU1N0ExNEYzNUZFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2IZMeCWcqOnA3QgECtqJqlrH
xZrlAtf78fPQsS+FpXfoXQZvnDJ1q8Bsmr0kt+zWhxPANPiDCfCoPvn9pI7p0S3y
l/dTLov5lxY7Jg52kp91OG0zXLROudWrDuxXZElTpyA3AOWLk8BV20YFc1mMCg+W
S+YUAZR2/Lbwx6x1i1TwctPOmJnpbzx/zMubFLLuxj2MQcsLqRll9ChnaolJE4ly
Np9UiPUVXb9dGneuju5iWpxb4h9tOmHgWyBCiYIsmjfR1lKBiI10n2oT7q9eyJEC
vlm1Q1FidGJQVR8iYLjV5XivIdUu8D1JTcgDvkid3nH5kH04Uu8P7JuEm3K/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGVOLJ8UDmB7Dn
RemNJVehTzX+4TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yQm04VFRSTExIMjVyZlc4d21OTGFaNGdhaUdhUHZQUDZw
QlpGd1kzZEtyNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yQm04VFRSTExIMjVyZlc4d21OTGFaNGdhaUdhUHZQUDZw
QlpGd1kzZEtyNC8wLzA2NTRFMkM5RjE0MEU2MDdCMEU3NDVFOThEMjU1N0ExNEYz
NUZFRTEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0EkDANBAIAAjAHAwUA
KAQ5xDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMED0EwDQYJKoZIhvcNAQELBQAD
ggEBAJYok37qTNY5YZqmC2Olg1qLRuGfoYHzi5UoHbuOZ4rg7UywPcYql0XukjHY
3+pBS9pz7ScSYbd1RDXmf5qXJaVM1vDcwi8dUC1EYAqs29gfu/j6SoSjstpH8F37
f8lAV2pnMw2tnrhPe8nigZTEJCcMwGScEsHZpUrW0prXBPfPS+ZKyoltB4D7s/ga
ZnBIj0oJWi9L44egbNZgCX2PwT0ZRhVhRgduB53HWRvPRQbHCDcRXU2PzJDjwgaA
/M7Cob50Loil5tul7CbrSjbbrgsjpclJuhuBrMykZ9jlSctooWX5G74zHTdGdRBD
wetaahEWedxoOw8iiimsEPhRCBE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org