Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/188A046D444E10CED499927BB4D6C4C4507B28DD.cer
File:                     188A046D444E10CED499927BB4D6C4C4507B28DD.cer (raw, json)
Hash identifier:          SBMYlurBG/wzObEPLydqMwfNplNRkbPiIWJiMn9SA+4=
Subject key identifier:   18:8A:04:6D:44:4E:10:CE:D4:99:92:7B:B4:D6:C4:C4:50:7B:28:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B9F0F150A7699ABBDD3C64D19C193C207E4676B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/188A046D444E10CED499927BB4D6C4C4507B28DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Mar 2023 07:25:49 +0000
Certificate not after:    Thu 28 Mar 2024 07:30:49 +0000
Subordinate resources:    AS: 266325
                          IP: 170.238.96.0/22
                          IP: 2804:3614::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:0f:15:0a:76:99:ab:bd:d3:c6:4d:19:c1:93:c2:07:e4:67:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 07:25:49 2023 GMT
            Not After : Mar 28 07:30:49 2024 GMT
        Subject: CN=188A046D444E10CED499927BB4D6C4C4507B28DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:60:ac:c1:4c:05:c6:73:51:ac:a9:df:bc:
                    85:e5:7a:28:7d:a6:b0:05:85:07:85:7a:70:89:12:
                    11:d2:e0:38:83:0e:1e:4d:b3:a0:da:57:e1:00:08:
                    53:f9:39:a7:c3:ba:cd:bc:99:fe:46:c1:b6:b0:fb:
                    3b:e3:a1:7b:2f:c3:28:e0:fd:d1:32:e3:32:12:ec:
                    db:66:e6:f5:97:26:81:25:c0:5e:1d:cb:89:d4:db:
                    03:13:6c:b9:c4:cb:e3:8c:48:29:b1:26:33:1d:f0:
                    3b:fe:9b:51:b0:fd:19:2d:ba:c0:70:64:38:9f:91:
                    96:8c:13:41:85:67:8e:f8:5e:5a:7d:60:bd:6d:7d:
                    f5:f6:7d:ed:49:cb:f1:93:68:0f:92:b7:bb:72:df:
                    91:f6:4c:73:aa:fc:52:fb:93:21:f1:e7:7e:8a:d7:
                    24:9d:0f:f4:de:37:49:11:6c:c2:c8:cc:21:26:9a:
                    e5:cf:f3:9b:63:ab:7f:7d:bb:81:ad:0c:6d:f6:ff:
                    07:7e:57:db:7e:c1:a3:6a:13:d0:e8:4b:19:8a:a5:
                    a5:da:4c:5f:1b:bd:56:74:3b:72:ea:48:28:d8:4f:
                    1a:8f:32:6e:1c:d8:7c:4c:f6:1e:ef:f1:0b:e2:5c:
                    05:01:22:67:4d:81:a3:99:0a:b0:93:2f:6c:28:e2:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:8A:04:6D:44:4E:10:CE:D4:99:92:7B:B4:D6:C4:C4:50:7B:28:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/188A046D444E10CED499927BB4D6C4C4507B28DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.96.0/22
                IPv6:
                  2804:3614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266325

    Signature Algorithm: sha256WithRSAEncryption
         51:1e:7e:86:b3:3e:01:b9:33:2a:61:1c:d3:b5:0a:e2:32:2c:
         c0:a9:7b:a0:fc:e5:68:66:36:8e:79:5f:07:db:57:5b:bc:ce:
         d3:50:f0:69:21:bf:54:c2:0d:15:23:5f:e5:3f:c7:bd:5b:c7:
         f2:eb:03:5b:62:d4:f0:7e:e5:bf:71:12:90:03:51:28:e2:f2:
         34:da:6c:6d:fa:89:93:03:c7:32:fc:83:e4:30:92:df:e6:5f:
         b8:75:01:3e:c4:01:d6:5f:b0:7f:4a:f6:03:9d:12:72:65:16:
         22:7e:15:1f:a6:81:b1:6d:2f:e3:46:06:cd:e3:a8:bb:a2:c3:
         91:af:b5:31:25:a2:e1:e1:ab:ec:d8:1d:f0:99:39:a4:3b:eb:
         aa:06:3d:d4:bf:93:d3:3f:7a:12:86:51:c9:61:58:bf:08:3d:
         87:83:52:75:6b:a4:21:81:b7:e7:0e:b3:2a:ed:95:5a:dd:ab:
         fc:60:41:0d:62:74:12:e6:d6:c6:ff:c7:55:93:3d:60:dc:1b:
         aa:a2:df:6e:ee:e3:08:b1:35:1b:e2:bb:03:a0:66:e7:07:73:
         ab:81:38:3a:6c:70:10:97:52:2c:26:76:72:3d:dd:c9:49:66:
         2e:0b:03:45:59:d0:89:16:e8:09:39:90:76:d9:6d:13:11:1f:
         5d:28:af:87
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUC58PFQp2mau908ZNGcGTwgfkZ2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMzAwNzI1NDlaFw0yNDAzMjgwNzMwNDlaMDMxMTAvBgNV
BAMTKDE4OEEwNDZENDQ0RTEwQ0VENDk5OTI3QkI0RDZDNEM0NTA3QjI4REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmYmCswUwFxnNRrKnfvIXleih9
prAFhQeFenCJEhHS4DiDDh5Ns6DaV+EACFP5OafDus28mf5Gwbaw+zvjoXsvwyjg
/dEy4zIS7Ntm5vWXJoElwF4dy4nU2wMTbLnEy+OMSCmxJjMd8Dv+m1Gw/RktusBw
ZDifkZaME0GFZ474Xlp9YL1tffX2fe1Jy/GTaA+St7ty35H2THOq/FL7kyHx536K
1ySdD/TeN0kRbMLIzCEmmuXP85tjq399u4GtDG32/wd+V9t+waNqE9DoSxmKpaXa
TF8bvVZ0O3LqSCjYTxqPMm4c2HxM9h7v8QviXAUBImdNgaOZCrCTL2wo4ugdAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYigRtRE4QztSZ
knu01sTEUHso3TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CaXBCMk4zWXBBY2NZZHVtOEF2dXRMQXdnVE4xUlV5d0FS
WjRQRkF0aHVQYS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CaXBCMk4zWXBBY2NZZHVtOEF2dXRMQXdnVE4xUlV5d0FS
WjRQRkF0aHVQYS8wLzE4OEEwNDZENDQ0RTEwQ0VENDk5OTI3QkI0RDZDNEM0NTA3
QjI4REQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqruYDANBAIAAjAHAwUA
KAQ2FDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEFUwDQYJKoZIhvcNAQELBQAD
ggEBAFEefoazPgG5MyphHNO1CuIyLMCpe6D85WhmNo55XwfbV1u8ztNQ8Gkhv1TC
DRUjX+U/x71bx/LrA1ti1PB+5b9xEpADUSji8jTabG36iZMDxzL8g+Qwkt/mX7h1
AT7EAdZfsH9K9gOdEnJlFiJ+FR+mgbFtL+NGBs3jqLuiw5GvtTElouHhq+zYHfCZ
OaQ766oGPdS/k9M/ehKGUclhWL8IPYeDUnVrpCGBt+cOsyrtlVrdq/xgQQ1idBLm
1sb/x1WTPWDcG6qi327u4wixNRviuwOgZucHc6uBODpscBCXUiwmdnI93clJZi4L
A0VZ0IkW6Ak5kHbZbRMRH10or4c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org