Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0E0815184FB056808BEADEF778AC358B56780EE2.cer
File:                     0E0815184FB056808BEADEF778AC358B56780EE2.cer (raw, json)
Hash identifier:          RkFAFnyUD9T7k1QyeLgfeLeeZZsTf7gu2jABQK5JNmA=
Subject key identifier:   0E:08:15:18:4F:B0:56:80:8B:EA:DE:F7:78:AC:35:8B:56:78:0E:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       741C7AF2B25CEC7E5F6BA3EB86FB02A2A1A1DE81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/0E0815184FB056808BEADEF778AC358B56780EE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 22:07:49 +0000
Certificate not after:    Wed 10 Apr 2024 22:12:49 +0000
Subordinate resources:    AS: 272174
                          IP: 45.164.202.0/23
                          IP: 2804:8310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1c:7a:f2:b2:5c:ec:7e:5f:6b:a3:eb:86:fb:02:a2:a1:a1:de:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 22:07:49 2023 GMT
            Not After : Apr 10 22:12:49 2024 GMT
        Subject: CN=0E0815184FB056808BEADEF778AC358B56780EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:07:92:58:cc:e8:65:2e:86:51:9a:d1:45:
                    fb:f0:4c:ad:cb:be:3c:a2:d6:db:61:f0:11:35:cc:
                    de:91:fe:54:33:a0:29:c3:85:6c:a3:38:1f:95:1c:
                    70:7a:a0:92:47:2d:1f:0d:09:d9:7e:d9:0f:f6:1b:
                    42:a0:4c:33:5e:08:d9:4d:67:af:b2:66:ef:18:34:
                    7a:aa:1a:24:08:6f:4b:c6:10:e7:72:90:96:83:cb:
                    6f:97:2e:0d:9b:2c:9b:a6:3a:63:8a:66:40:a3:c6:
                    22:ad:ff:22:fa:fb:09:f2:fc:f5:ca:e5:d9:c9:58:
                    6b:c8:f8:54:0f:bd:35:e3:14:67:1c:63:cb:f3:63:
                    c0:cb:bf:50:d3:28:35:8c:07:14:fe:4f:c7:9f:95:
                    b8:7f:7f:d9:a8:6e:a8:03:39:07:a3:5a:db:e2:0c:
                    7b:49:d4:f5:e2:2c:1e:8c:7b:31:e9:a3:96:9e:36:
                    bb:31:01:15:ab:0e:d9:e9:1d:f4:b0:39:39:b0:53:
                    b1:88:6a:69:09:58:1d:f8:f7:53:b1:3c:bc:20:c9:
                    71:74:f4:19:9e:00:10:29:f5:16:04:1f:05:56:df:
                    8f:70:8a:e5:9f:67:93:6a:08:ab:84:e9:c1:aa:4d:
                    75:1e:19:8b:59:41:97:37:39:82:f7:2d:be:73:93:
                    42:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:08:15:18:4F:B0:56:80:8B:EA:DE:F7:78:AC:35:8B:56:78:0E:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/0E0815184FB056808BEADEF778AC358B56780EE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.202.0/23
                IPv6:
                  2804:8310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272174

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:e8:02:3f:07:a3:1a:b1:9f:ba:30:6c:e5:f1:8b:60:dc:
         e1:c0:fd:06:70:4f:37:24:9b:e2:62:7f:54:1e:73:53:4f:30:
         52:88:0c:8c:d4:e8:78:4f:9f:d0:cd:45:6a:1c:ac:ff:19:ef:
         b8:94:23:63:71:22:94:7a:2d:ec:2e:ba:67:14:28:46:69:f0:
         74:cd:40:56:12:5e:fa:38:5a:10:a2:d1:3d:99:c6:fd:91:62:
         29:58:ae:6d:c2:25:6d:1a:5f:d2:0d:7c:10:d6:08:8f:e7:4f:
         9e:fd:20:21:2e:c3:ae:1e:1d:95:f2:ed:3b:02:c0:c7:72:e1:
         1f:de:5c:27:dc:4f:33:e8:2e:f2:64:25:ca:81:06:2f:b4:c2:
         d1:a0:69:32:06:62:8f:90:89:93:e1:bb:72:11:b6:8f:6b:4b:
         c0:91:3f:92:0b:df:38:35:12:07:e9:92:59:ef:ae:1e:10:42:
         b4:19:2e:e1:a0:35:e8:94:5f:67:56:58:fc:9c:68:4d:90:7e:
         fd:9c:66:87:74:c6:bf:f9:74:c6:80:99:83:ae:71:ab:0a:29:
         dd:93:31:f0:6c:93:66:e6:b5:97:87:c2:86:3b:d3:23:9c:3a:
         c1:22:4f:e9:1f:0b:6e:91:74:87:6f:eb:5e:71:90:69:64:a7:
         33:03:72:a3
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUdBx68rJc7H5fa6PrhvsCoqGh3oEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTIyMjA3NDlaFw0yNDA0MTAyMjEyNDlaMDMxMTAvBgNV
BAMTKDBFMDgxNTE4NEZCMDU2ODA4QkVBREVGNzc4QUMzNThCNTY3ODBFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITAeSWMzoZS6GUZrRRfvwTK3L
vjyi1tth8BE1zN6R/lQzoCnDhWyjOB+VHHB6oJJHLR8NCdl+2Q/2G0KgTDNeCNlN
Z6+yZu8YNHqqGiQIb0vGEOdykJaDy2+XLg2bLJumOmOKZkCjxiKt/yL6+wny/PXK
5dnJWGvI+FQPvTXjFGccY8vzY8DLv1DTKDWMBxT+T8eflbh/f9mobqgDOQejWtvi
DHtJ1PXiLB6MezHpo5aeNrsxARWrDtnpHfSwOTmwU7GIamkJWB3491OxPLwgyXF0
9BmeABAp9RYEHwVW349wiuWfZ5NqCKuE6cGqTXUeGYtZQZc3OYL3Lb5zk0I7AgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOCBUYT7BWgIvq
3vd4rDWLVngO4jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RDVpeUNuaE1qcU1Na1czVFpkM3l5VmhCd3k2R3ozMkQx
RTZIcHBhSGExLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvLzVENWl5Q25oTWpxTU1rVzNUWmQzeXlWaEJ3eTZHejMyRDFF
NkhwcGFIYTEvMC8wRTA4MTUxODRGQjA1NjgwOEJFQURFRjc3OEFDMzU4QjU2Nzgw
RUUyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAEtpMowDQQCAAIwBwMFACgE
gxAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCcuMA0GCSqGSIb3DQEBCwUAA4IB
AQCD4OgCPwejGrGfujBs5fGLYNzhwP0GcE83JJviYn9UHnNTTzBSiAyM1Oh4T5/Q
zUVqHKz/Ge+4lCNjcSKUei3sLrpnFChGafB0zUBWEl76OFoQotE9mcb9kWIpWK5t
wiVtGl/SDXwQ1giP50+e/SAhLsOuHh2V8u07AsDHcuEf3lwn3E8z6C7yZCXKgQYv
tMLRoGkyBmKPkImT4btyEbaPa0vAkT+SC984NRIH6ZJZ764eEEK0GS7hoDXolF9n
Vlj8nGhNkH79nGaHdMa/+XTGgJmDrnGrCindkzHwbJNm5rWXh8KGO9MjnDrBIk/p
HwtukXSHb+tecZBpZKczA3Kj
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org