Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/15B8524DD18AE0324F9FC7096DA4B5582EB17F60.cer
File:                     15B8524DD18AE0324F9FC7096DA4B5582EB17F60.cer (raw, json)
Hash identifier:          eHZoup32klaMSy0jZ9sadaeCpkPBjRq1Qd9xsEFDm30=
Subject key identifier:   15:B8:52:4D:D1:8A:E0:32:4F:9F:C7:09:6D:A4:B5:58:2E:B1:7F:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4917E367807951553012027F1E30956E52FB9558
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/15B8524DD18AE0324F9FC7096DA4B5582EB17F60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 May 2023 22:35:36 +0000
Certificate not after:    Tue 07 May 2024 22:40:36 +0000
Subordinate resources:    AS: 268843
                          IP: 45.173.46.0/24
                          IP: 2804:8388::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:17:e3:67:80:79:51:55:30:12:02:7f:1e:30:95:6e:52:fb:95:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  9 22:35:36 2023 GMT
            Not After : May  7 22:40:36 2024 GMT
        Subject: CN=15B8524DD18AE0324F9FC7096DA4B5582EB17F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:dc:0c:b3:ad:47:b2:b6:e4:e6:01:b5:bd:
                    31:d2:51:23:a5:94:f2:74:ee:f1:0b:23:dc:a6:c5:
                    9e:a9:c2:63:01:b4:c3:b7:ae:83:65:8f:73:04:26:
                    36:4f:4c:07:68:dc:a2:59:6c:f9:af:bc:cb:c8:56:
                    36:e7:19:98:df:93:24:0b:dd:36:e2:dc:5f:17:83:
                    f2:52:e0:57:85:88:f7:dd:42:94:75:10:d9:74:29:
                    83:66:eb:5a:c9:b6:88:74:18:20:19:ec:9b:0e:e2:
                    7f:5a:66:6e:9f:65:1a:f1:fe:1f:99:2c:7c:a3:6a:
                    5c:25:63:de:81:38:87:ee:a4:71:47:eb:91:44:17:
                    6c:9b:a1:4b:20:97:c9:b5:09:47:38:5a:7c:79:b5:
                    6f:c4:08:87:c1:14:0e:c4:44:02:b5:47:e3:f1:d0:
                    ef:cc:de:12:27:f3:8d:c3:ee:ba:a6:59:b2:6f:70:
                    f9:df:f2:ce:8f:2c:60:32:b6:c7:8d:c7:b1:6f:ab:
                    a4:d6:56:ca:70:0d:14:09:82:fc:c6:b2:4e:a4:8c:
                    37:ae:ef:eb:66:22:f0:bb:b8:5c:af:3b:02:c9:8c:
                    b2:7e:f0:a0:50:4f:77:09:5b:a8:03:55:e7:11:98:
                    d7:09:29:77:2e:92:c2:91:0d:6a:88:0c:2f:0d:b0:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:B8:52:4D:D1:8A:E0:32:4F:9F:C7:09:6D:A4:B5:58:2E:B1:7F:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/15B8524DD18AE0324F9FC7096DA4B5582EB17F60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.46.0/24
                IPv6:
                  2804:8388::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268843

    Signature Algorithm: sha256WithRSAEncryption
         11:73:37:d8:25:95:d7:3b:31:51:50:05:e1:6e:8c:3a:15:b0:
         ff:37:e8:94:4e:b4:84:72:96:5c:ce:cd:0a:d4:e0:f4:6f:11:
         1c:ca:4e:d7:31:96:08:3e:ae:5f:9d:dc:d5:45:94:8c:6b:11:
         5e:e8:dc:11:bb:01:d5:02:08:f5:66:0a:e8:39:1e:82:03:2a:
         c2:a4:a7:bf:d7:7d:a4:2d:71:cc:cd:b9:3a:2d:77:13:8e:a7:
         34:0c:0b:5e:fa:2a:a5:6e:d6:40:d8:77:e1:d1:9a:2f:57:e2:
         63:f0:7c:c9:53:4a:2b:94:47:63:21:61:64:47:bb:7c:9a:59:
         58:16:3c:97:33:cc:bc:8f:fa:a2:82:22:be:ae:07:51:f8:e8:
         94:0f:03:95:b7:3d:e1:fb:2f:88:14:9c:33:a4:22:68:cc:12:
         f6:ac:5b:5f:bd:f6:44:58:24:17:3e:15:fe:85:5b:66:a7:a5:
         a1:70:7d:d1:4e:1e:8b:a0:60:06:22:b4:5a:30:2c:68:85:1d:
         fe:3b:ec:be:c8:d0:24:3f:dc:46:50:50:71:69:f4:20:22:01:
         b4:d1:f0:c6:78:9d:70:60:7a:60:b3:98:b4:c9:4d:bf:f5:58:
         50:a5:55:cb:f7:a9:6d:45:78:3a:df:e0:2d:23:12:12:c3:ad:
         db:8d:d7:c1
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSRfjZ4B5UVUwEgJ/HjCVblL7lVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MDkyMjM1MzZaFw0yNDA1MDcyMjQwMzZaMDMxMTAvBgNV
BAMTKDE1Qjg1MjRERDE4QUUwMzI0RjlGQzcwOTZEQTRCNTU4MkVCMTdGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADNwMs61Hsrbk5gG1vTHSUSOl
lPJ07vELI9ymxZ6pwmMBtMO3roNlj3MEJjZPTAdo3KJZbPmvvMvIVjbnGZjfkyQL
3Tbi3F8Xg/JS4FeFiPfdQpR1ENl0KYNm61rJtoh0GCAZ7JsO4n9aZm6fZRrx/h+Z
LHyjalwlY96BOIfupHFH65FEF2yboUsgl8m1CUc4Wnx5tW/ECIfBFA7ERAK1R+Px
0O/M3hIn843D7rqmWbJvcPnf8s6PLGAytseNx7Fvq6TWVspwDRQJgvzGsk6kjDeu
7+tmIvC7uFyvOwLJjLJ+8KBQT3cJW6gDVecRmNcJKXcuksKRDWqIDC8NsCMtAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVuFJN0YrgMk+f
xwltpLVYLrF/YDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RHc4SE1yMU5KV0F4ekpKanRDZ3R5cldMMkVBMlEzQThB
TnA5ZXdXREJaSy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RHc4SE1yMU5KV0F4ekpKanRDZ3R5cldMMkVBMlEzQThB
TnA5ZXdXREJaSy8wLzE1Qjg1MjRERDE4QUUwMzI0RjlGQzcwOTZEQTRCNTU4MkVC
MTdGNjAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC2tLjANBAIAAjAHAwUA
KASDiDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGiswDQYJKoZIhvcNAQELBQAD
ggEBABFzN9glldc7MVFQBeFujDoVsP836JROtIRyllzOzQrU4PRvERzKTtcxlgg+
rl+d3NVFlIxrEV7o3BG7AdUCCPVmCug5HoIDKsKkp7/XfaQtcczNuTotdxOOpzQM
C176KqVu1kDYd+HRmi9X4mPwfMlTSiuUR2MhYWRHu3yaWVgWPJczzLyP+qKCIr6u
B1H46JQPA5W3PeH7L4gUnDOkImjMEvasW1+99kRYJBc+Ff6FW2anpaFwfdFOHoug
YAYitFowLGiFHf477L7I0CQ/3EZQUHFp9CAiAbTR8MZ4nXBgemCzmLTJTb/1WFCl
Vcv3qW1FeDrf4C0jEhLDrduN18E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org