Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1477F1BD82C9178B38F3754FB5C414666133B78A.cer
File:                     1477F1BD82C9178B38F3754FB5C414666133B78A.cer (raw, json)
Hash identifier:          R5q/kIsObIoEAZqrm5PHQxmTjVqTJ4B1T6C/4+xa2bo=
Subject key identifier:   14:77:F1:BD:82:C9:17:8B:38:F3:75:4F:B5:C4:14:66:61:33:B7:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FD335AB04208FC3D38F38A7DF4876D4E4F85325
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/1477F1BD82C9178B38F3754FB5C414666133B78A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Nov 2022 14:39:24 +0000
Certificate not after:    Tue 07 Nov 2023 14:44:24 +0000
Subordinate resources:    AS: 265050
                          IP: 170.150.220.0/22
                          IP: 2804:3200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d3:35:ab:04:20:8f:c3:d3:8f:38:a7:df:48:76:d4:e4:f8:53:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 14:39:24 2022 GMT
            Not After : Nov  7 14:44:24 2023 GMT
        Subject: CN=1477F1BD82C9178B38F3754FB5C414666133B78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:fb:14:2a:ab:de:6b:3f:01:dd:92:e9:d2:
                    33:a1:fc:39:a8:9a:5c:c3:4d:5e:36:a9:f8:c1:2e:
                    e9:58:b0:b5:68:d9:cb:31:63:0b:81:20:61:6b:16:
                    67:de:04:01:c5:5c:90:28:10:95:7b:31:b4:3e:d1:
                    6e:e1:bc:91:36:76:89:37:a5:34:bf:00:e8:0d:19:
                    ab:8a:3f:ef:b3:4a:8e:ce:45:3d:75:3b:5f:f3:af:
                    b2:cf:63:99:ce:d9:c5:67:fa:dd:cd:09:4b:1d:af:
                    77:4a:99:3b:a4:49:dd:6a:9b:1a:d8:bf:34:40:4d:
                    e0:60:cb:f0:26:9b:61:11:1d:6b:a7:dc:4d:09:87:
                    64:a6:81:13:50:9e:3e:24:1d:62:df:33:6c:11:8b:
                    5c:b3:6e:39:34:58:50:9f:f6:96:52:4b:0b:c1:49:
                    4e:ac:6c:57:ac:03:f4:49:72:2d:66:2a:ed:8d:c4:
                    9d:d7:4a:48:83:9a:f3:8c:b5:02:f3:95:ad:98:a9:
                    96:d8:7b:fc:10:7a:0e:cc:24:5c:3a:04:57:e2:f2:
                    f9:a4:43:94:c6:20:61:fb:62:47:94:9b:25:81:ae:
                    8b:21:0e:c9:1a:df:72:a8:40:3b:83:7d:aa:d3:58:
                    f7:63:d9:fc:e4:81:a2:06:d7:40:d5:d5:43:0b:bb:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:77:F1:BD:82:C9:17:8B:38:F3:75:4F:B5:C4:14:66:61:33:B7:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/1477F1BD82C9178B38F3754FB5C414666133B78A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.220.0/22
                IPv6:
                  2804:3200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265050

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:67:11:ad:90:e2:18:2f:7b:e6:9d:c5:f0:7f:91:e7:a0:
         09:4b:8c:4b:33:1f:52:87:f0:a3:1e:e5:da:a9:40:11:0b:82:
         15:b3:bd:a9:eb:9a:c8:e2:14:54:d7:4d:a7:16:b1:d5:48:a0:
         bf:fa:af:92:e1:e2:51:db:e7:78:e4:a4:e9:ba:9a:b4:44:a6:
         0b:a1:f9:ca:72:8d:44:80:01:2f:9d:70:62:6b:fd:8d:d4:2e:
         ed:77:36:17:48:4b:e4:93:4c:41:ec:05:90:8e:62:90:88:f2:
         bf:5c:a0:31:50:73:a0:66:44:fd:ec:eb:26:6d:eb:d8:4a:50:
         0e:1b:c4:7b:d2:5a:fe:65:a9:42:ef:02:be:c8:c8:b4:36:14:
         d5:38:d1:76:17:94:5c:64:c2:23:db:39:15:21:07:aa:21:b5:
         1f:1e:e8:f6:ec:11:67:cd:87:7c:1d:c9:7d:a9:11:32:59:1d:
         12:83:fd:4a:f1:be:4d:36:42:20:4d:26:4e:14:4e:aa:5b:15:
         ec:3e:17:02:ce:c5:13:2b:2b:92:09:e0:0f:37:87:b5:11:6c:
         54:90:6a:7e:34:ef:bf:38:73:69:bb:b4:de:a3:ca:51:0c:bd:
         ea:01:7e:80:99:c9:b6:d2:06:7e:20:4b:1b:ae:d1:02:90:7d:
         4f:78:55:1d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUX9M1qwQgj8PTjzin30h21OT4UyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMDgxNDM5MjRaFw0yMzExMDcxNDQ0MjRaMDMxMTAvBgNV
BAMTKDE0NzdGMUJEODJDOTE3OEIzOEYzNzU0RkI1QzQxNDY2NjEzM0I3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7avsUKqveaz8B3ZLp0jOh/Dmo
mlzDTV42qfjBLulYsLVo2csxYwuBIGFrFmfeBAHFXJAoEJV7MbQ+0W7hvJE2dok3
pTS/AOgNGauKP++zSo7ORT11O1/zr7LPY5nO2cVn+t3NCUsdr3dKmTukSd1qmxrY
vzRATeBgy/Amm2ERHWun3E0Jh2SmgRNQnj4kHWLfM2wRi1yzbjk0WFCf9pZSSwvB
SU6sbFesA/RJci1mKu2NxJ3XSkiDmvOMtQLzla2YqZbYe/wQeg7MJFw6BFfi8vmk
Q5TGIGH7YkeUmyWBroshDska33KoQDuDfarTWPdj2fzkgaIG10DV1UMLu9+lAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUd/G9gskXizjz
dU+1xBRmYTO3ijAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbTlucVcyMUVWc2Z5YlVIU29iV3BMTENFRzFLNFBLU3pK
d1FGM3BkcnV0Ny8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbTlucVcyMUVWc2Z5YlVIU29iV3BMTENFRzFLNFBLU3pK
d1FGM3BkcnV0Ny8wLzE0NzdGMUJEODJDOTE3OEIzOEYzNzU0RkI1QzQxNDY2NjEz
M0I3OEEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqqW3DANBAIAAjAHAwUA
KAQyADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC1owDQYJKoZIhvcNAQELBQAD
ggEBAA7UZxGtkOIYL3vmncXwf5HnoAlLjEszH1KH8KMe5dqpQBELghWzvanrmsji
FFTXTacWsdVIoL/6r5Lh4lHb53jkpOm6mrREpguh+cpyjUSAAS+dcGJr/Y3ULu13
NhdIS+STTEHsBZCOYpCI8r9coDFQc6BmRP3s6yZt69hKUA4bxHvSWv5lqULvAr7I
yLQ2FNU40XYXlFxkwiPbORUhB6ohtR8e6PbsEWfNh3wdyX2pETJZHRKD/Urxvk02
QiBNJk4UTqpbFew+FwLOxRMrK5IJ4A83h7URbFSQan407784c2m7tN6jylEMveoB
foCZybbSBn4gSxuu0QKQfU94VR0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org