Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1529D09679006E6AB394B0A0AF3F4338A8B02F2C.cer
File:                     1529D09679006E6AB394B0A0AF3F4338A8B02F2C.cer (raw, json)
Hash identifier:          kQA5YlPKlMqmRCU0+Ll/ByJ6dAIQA+anRS8vl+U6SIY=
Subject key identifier:   15:29:D0:96:79:00:6E:6A:B3:94:B0:A0:AF:3F:43:38:A8:B0:2F:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       699949E1893B8FB9CEE8C6AAA30C397FF313A8E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F4DCXiyDBBCuUWGpLZ9VpBLhmTmPFuUFtB69jXoWv4YM/0/1529D09679006E6AB394B0A0AF3F4338A8B02F2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F4DCXiyDBBCuUWGpLZ9VpBLhmTmPFuUFtB69jXoWv4YM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Aug 2022 20:38:29 +0000
Certificate not after:    Wed 30 Aug 2023 20:43:29 +0000
Subordinate resources:    AS: 61832
                          IP: 170.81.192.0/22
                          IP: 201.148.100.0/22
                          IP: 2804:1a04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:99:49:e1:89:3b:8f:b9:ce:e8:c6:aa:a3:0c:39:7f:f3:13:a8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 20:38:29 2022 GMT
            Not After : Aug 30 20:43:29 2023 GMT
        Subject: CN=1529D09679006E6AB394B0A0AF3F4338A8B02F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:62:86:e0:be:3c:2d:6e:a9:6c:b7:d7:5a:
                    e9:c4:d4:73:03:c5:0d:28:e3:b0:dd:76:6a:c2:29:
                    0f:ff:5c:4f:c0:84:d1:15:3d:f6:24:bd:03:f7:9e:
                    0b:4c:3f:5e:fa:70:80:b3:d0:4c:32:d0:be:82:46:
                    7c:d7:f7:6a:84:d3:d0:03:6d:98:58:70:8b:5e:71:
                    23:cd:4d:6a:f7:33:f6:2a:28:ca:55:68:f4:75:68:
                    66:29:52:27:e1:72:e2:c1:87:06:ed:d2:af:15:d6:
                    1a:08:ec:fa:23:52:bd:ca:c9:20:62:77:12:98:f6:
                    e5:0d:a9:fc:0d:45:a9:f1:f2:1b:69:f6:c1:18:c1:
                    67:0f:87:cb:8d:5a:da:6d:15:4d:38:0e:0d:4f:9d:
                    d6:9b:f9:9e:4b:a9:70:12:4f:08:f6:97:a6:05:88:
                    ed:23:2b:17:98:13:4d:5e:8c:dc:c1:88:08:fa:e1:
                    23:e5:a1:07:47:09:52:82:b2:82:1d:4f:de:82:0a:
                    05:10:f7:c6:d4:1a:9e:65:11:e3:9b:82:7d:cf:c0:
                    f1:fd:3e:7b:b4:ff:ab:cb:35:cb:76:d5:47:73:33:
                    b2:47:da:71:02:dc:4f:e0:72:89:ee:c3:2d:04:72:
                    dd:67:08:77:f6:42:87:90:ac:5f:1f:d9:af:a4:34:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:29:D0:96:79:00:6E:6A:B3:94:B0:A0:AF:3F:43:38:A8:B0:2F:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F4DCXiyDBBCuUWGpLZ9VpBLhmTmPFuUFtB69jXoWv4YM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F4DCXiyDBBCuUWGpLZ9VpBLhmTmPFuUFtB69jXoWv4YM/0/1529D09679006E6AB394B0A0AF3F4338A8B02F2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.192.0/22
                  201.148.100.0/22
                IPv6:
                  2804:1a04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61832

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:fc:0f:3f:f4:67:9e:0c:3f:39:e0:6a:d7:a4:df:39:97:
         10:df:7d:15:9a:72:d4:af:24:a9:78:71:27:d8:b7:16:4c:bf:
         bc:91:a3:8c:2c:2b:c7:81:b8:9a:26:55:22:f3:02:1f:35:8b:
         9c:3a:5b:cd:54:9d:f2:5f:1f:56:af:80:e6:e1:41:9e:05:13:
         fe:98:00:b3:ba:bc:da:59:5f:26:9a:bb:07:db:e7:1b:3e:7c:
         03:ea:44:6e:6a:21:4c:40:d1:ad:9b:f6:74:d9:a1:ce:96:d1:
         df:f6:30:f8:f7:0e:e9:c4:0b:81:0d:c5:a4:f3:c0:69:e3:4b:
         d4:6a:c2:d5:34:55:92:1e:78:31:db:5c:b6:b6:12:a7:8e:cc:
         77:66:15:0d:e8:2c:5a:27:11:be:97:3f:35:36:ca:ef:09:12:
         81:31:00:10:2c:17:9c:63:41:da:fd:ed:1b:dc:2b:e6:9b:36:
         40:37:ad:69:ff:a5:4d:ac:fb:1a:9a:25:a6:52:c7:d4:e5:3b:
         28:00:da:79:0f:40:76:ef:df:10:ba:b6:ad:32:5b:54:d9:32:
         83:3a:72:18:43:ae:ff:0a:af:ae:97:db:38:ab:29:85:c3:c2:
         21:05:c5:c0:77:29:85:5d:c0:34:d0:1e:27:ae:9a:88:43:d5:
         e6:8a:2c:e3
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUaZlJ4Yk7j7nO6Maqoww5f/MTqOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MzEyMDM4MjlaFw0yMzA4MzAyMDQzMjlaMDMxMTAvBgNV
BAMTKDE1MjlEMDk2NzkwMDZFNkFCMzk0QjBBMEFGM0Y0MzM4QThCMDJGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxs2KG4L48LW6pbLfXWunE1HMD
xQ0o47DddmrCKQ//XE/AhNEVPfYkvQP3ngtMP176cICz0Ewy0L6CRnzX92qE09AD
bZhYcItecSPNTWr3M/YqKMpVaPR1aGYpUifhcuLBhwbt0q8V1hoI7PojUr3KySBi
dxKY9uUNqfwNRanx8htp9sEYwWcPh8uNWtptFU04Dg1Pndab+Z5LqXASTwj2l6YF
iO0jKxeYE01ejNzBiAj64SPloQdHCVKCsoIdT96CCgUQ98bUGp5lEeObgn3PwPH9
Pnu0/6vLNct21UdzM7JH2nEC3E/gconuwy0Ect1nCHf2QoeQrF8f2a+kNBn3AgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVKdCWeQBuarOU
sKCvP0M4qLAvLDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GNERDWGl5REJCQ3VVV0dwTFo5VnBCTGhtVG1QRnVVRnRC
NjlqWG9XdjRZTS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GNERDWGl5REJCQ3VVV0dwTFo5VnBCTGhtVG1QRnVVRnRC
NjlqWG9XdjRZTS8wLzE1MjlEMDk2NzkwMDZFNkFCMzk0QjBBMEFGM0Y0MzM4QThC
MDJGMkMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqpRwAMEAsmUZDANBAIA
AjAHAwUAKAQaBDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8YgwDQYJKoZIhvcN
AQELBQADggEBAKq9/A8/9GeeDD854GrXpN85lxDffRWactSvJKl4cSfYtxZMv7yR
o4wsK8eBuJomVSLzAh81i5w6W81UnfJfH1avgObhQZ4FE/6YALO6vNpZXyaauwfb
5xs+fAPqRG5qIUxA0a2b9nTZoc6W0d/2MPj3DunEC4ENxaTzwGnjS9RqwtU0VZIe
eDHbXLa2EqeOzHdmFQ3oLFonEb6XPzU2yu8JEoExABAsF5xjQdr97RvcK+abNkA3
rWn/pU2s+xqaJaZSx9TlOygA2nkPQHbv3xC6tq0yW1TZMoM6chhDrv8Kr66X2zir
KYXDwiEFxcB3KYVdwDTQHieumohD1eaKLOM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org