Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
File:                     149F2053828E9D6B8CB095EF3F1D72541252D364.cer (raw, json)
Hash identifier:          P8kV0zpUkdQBCMeaafnlj9nqGJ9wFTNHABcF3ioHcJA=
Subject key identifier:   14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       272E1A3AA233CD620D16C5B419A4551BF1F23D8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 21:11:05 +0000
Certificate not after:    Tue 18 Feb 2025 21:16:05 +0000
Subordinate resources:    AS: 52545
                          IP: 131.72.48.0/22
                          IP: 168.121.168.0/22
                          IP: 170.82.168.0/22
                          IP: 179.107.80.0/22
                          IP: 2804:e1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2e:1a:3a:a2:33:cd:62:0d:16:c5:b4:19:a4:55:1b:f1:f2:3d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 21:11:05 2024 GMT
            Not After : Feb 18 21:16:05 2025 GMT
        Subject: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:4a:e9:4a:2a:e3:65:cb:67:d8:1a:8a:bd:
                    20:9a:1a:97:f9:31:ed:f8:fa:e1:10:e3:d0:5b:95:
                    b5:a6:c5:b4:a9:d1:89:ef:1d:08:3a:52:d0:85:8a:
                    51:e3:86:7d:ba:9d:18:ac:73:4c:8f:84:4a:08:82:
                    6e:0b:ab:c2:5a:9e:c7:58:94:a9:56:f9:45:97:92:
                    78:50:fa:36:91:d7:cb:12:38:86:6a:22:4f:22:6b:
                    b9:ac:bf:f2:a8:8e:25:a8:44:68:b0:b5:ee:0e:98:
                    00:dd:fe:25:7b:f2:40:f1:2b:23:5a:6e:34:0e:da:
                    73:17:9d:00:a0:a2:0e:9a:56:58:2c:60:c0:f4:93:
                    da:83:e0:75:fa:78:e0:65:5d:ef:c1:37:99:94:36:
                    9e:b3:2c:0c:1d:2c:9a:2e:86:8b:9f:12:88:c4:6a:
                    d2:00:34:1b:e2:2c:34:52:1d:7a:75:1f:36:8f:d0:
                    d1:5c:93:bc:de:88:d8:d5:dc:8b:5c:3d:9b:56:06:
                    6f:0b:46:ae:50:8e:b2:3c:eb:3a:de:e5:61:ea:de:
                    3b:48:0b:38:5e:ba:77:a4:ca:30:33:50:cc:a7:10:
                    3b:64:64:43:c6:d8:da:af:36:d3:83:90:89:5d:e5:
                    27:d9:92:92:d3:7a:0b:98:8b:2a:fc:46:15:ec:52:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/22
                  168.121.168.0/22
                  170.82.168.0/22
                  179.107.80.0/22
                IPv6:
                  2804:e1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52545

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:84:6f:55:a6:f8:09:98:df:93:ac:bc:1c:d2:7c:f2:99:
         57:f7:64:c4:9e:41:c0:f0:76:ae:80:08:52:25:c9:d9:7a:20:
         27:2a:59:97:ec:3c:bc:53:6e:74:0d:5a:c6:ca:ad:41:ba:e2:
         c9:e9:6d:bf:2f:9f:25:84:52:ee:e4:57:2c:47:ed:ba:84:43:
         9f:17:7b:0c:56:5d:fb:f3:fd:4f:cc:d3:6f:41:e4:01:03:85:
         a2:57:ac:a4:da:46:e3:81:1f:6e:f9:31:37:dc:79:2a:ec:4f:
         64:db:ce:b1:76:34:5a:13:61:2c:15:61:fb:ad:34:cb:65:25:
         fc:f8:25:c6:b5:ec:9f:68:22:54:2e:07:65:2a:c7:a5:18:e0:
         77:84:f7:98:71:49:4a:78:03:4f:91:cc:71:89:59:d7:43:9b:
         59:1a:00:cd:e7:6a:78:c7:b3:7d:ee:09:f8:e2:a5:71:f8:58:
         f3:2d:11:45:12:73:24:f9:a4:bb:4d:ad:aa:b7:b2:1b:a3:db:
         6d:bd:32:6e:d7:47:1d:13:b8:40:84:7f:33:4e:f7:51:c1:1d:
         97:75:74:8b:1c:31:d6:8f:a5:f2:0a:76:fa:ae:12:04:c5:d8:
         15:94:69:15:03:cd:bd:93:c0:ab:dd:b4:45:14:74:66:24:8a:
         e3:0e:c3:fe
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUJy4aOqIzzWINFsW0GaRVG/HyPYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjAyMTExMDVaFw0yNTAyMTgyMTE2MDVaMDMxMTAvBgNV
BAMTKDE0OUYyMDUzODI4RTlENkI4Q0IwOTVFRjNGMUQ3MjU0MTI1MkQzNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8ErpSirjZctn2BqKvSCaGpf5
Me34+uEQ49BblbWmxbSp0YnvHQg6UtCFilHjhn26nRisc0yPhEoIgm4Lq8JansdY
lKlW+UWXknhQ+jaR18sSOIZqIk8ia7msv/KojiWoRGiwte4OmADd/iV78kDxKyNa
bjQO2nMXnQCgog6aVlgsYMD0k9qD4HX6eOBlXe/BN5mUNp6zLAwdLJouhoufEojE
atIANBviLDRSHXp1HzaP0NFck7zeiNjV3ItcPZtWBm8LRq5QjrI86zre5WHq3jtI
CzheunekyjAzUMynEDtkZEPG2NqvNtODkIld5SfZkpLTeguYiyr8RhXsUtPfAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUnyBTgo6da4yw
le8/HXJUElLTZDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HQUxRMkdqRFFTc1lRbTdDU1h0SGV3UUhmUUY4UXF0Qkh2
czRNZ0htMXF4eC8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJI
dnM0TWdIbTFxeHgvMS8xNDlGMjA1MzgyOEU5RDZCOENCMDk1RUYzRjFENzI1NDEy
NTJEMzY0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKDSDADBAKoeagDBAKq
UqgDBAKza1AwDQQCAAIwBwMFACgEDhwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AM1BMA0GCSqGSIb3DQEBCwUAA4IBAQB8qYRvVab4CZjfk6y8HNJ88plX92TEnkHA
8HaugAhSJcnZeiAnKlmX7Dy8U250DVrGyq1BuuLJ6W2/L58lhFLu5FcsR+26hEOf
F3sMVl378/1PzNNvQeQBA4WiV6yk2kbjgR9u+TE33Hkq7E9k286xdjRaE2EsFWH7
rTTLZSX8+CXGteyfaCJULgdlKselGOB3hPeYcUlKeANPkcxxiVnXQ5tZGgDN52p4
x7N97gn44qVx+FjzLRFFEnMk+aS7Ta2qt7Ibo9ttvTJu10cdE7hAhH8zTvdRwR2X
dXSLHDHWj6XyCnb6rhIExdgVlGkVA829k8Cr3bRFFHRmJIrjDsP+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org