Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1959D600929860D5650DBFB8BCE70EEE50717927.cer
File:                     1959D600929860D5650DBFB8BCE70EEE50717927.cer (raw, json)
Hash identifier:          Ac4ZIzgAD5ApvzUY1lL/6MSZNHYGp9SbkDWvbqUogLA=
Subject key identifier:   19:59:D6:00:92:98:60:D5:65:0D:BF:B8:BC:E7:0E:EE:50:71:79:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2EC814A7ADC44E57E027374BF9544812611D0835
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/1959D600929860D5650DBFB8BCE70EEE50717927.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Mar 2023 20:05:12 +0000
Certificate not after:    Tue 05 Mar 2024 20:10:12 +0000
Subordinate resources:    AS: 268055
                          IP: 45.168.112.0/22
                          IP: 2804:5744::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c8:14:a7:ad:c4:4e:57:e0:27:37:4b:f9:54:48:12:61:1d:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 20:05:12 2023 GMT
            Not After : Mar  5 20:10:12 2024 GMT
        Subject: CN=1959D600929860D5650DBFB8BCE70EEE50717927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:4b:76:ae:85:01:9a:73:31:9a:59:00:9f:
                    e0:c7:d6:d2:73:4e:e2:e3:dc:2b:bf:d9:9b:05:fc:
                    d2:e3:36:fe:87:7a:5d:cb:bf:17:31:2b:4c:57:a4:
                    d1:00:3a:ef:84:a4:4f:6c:5a:9d:d2:27:29:bc:28:
                    97:ee:12:ae:55:a5:65:3b:0a:e5:56:27:af:5d:36:
                    12:da:a3:4d:37:c6:7d:ed:58:d7:ac:45:6e:cd:a2:
                    bd:3b:a0:02:16:c7:74:fd:52:7f:e0:6e:e6:64:a5:
                    e7:d8:06:df:81:df:66:9c:8d:49:51:60:4a:00:93:
                    ce:1e:e4:8e:06:0f:30:e6:3c:ba:21:ad:a3:32:7c:
                    41:32:83:f5:3b:5e:28:13:19:7a:7d:ab:4f:1a:75:
                    85:96:48:7c:bd:a6:b7:07:79:39:6f:bb:3c:30:c6:
                    45:59:f8:2a:9a:d9:de:62:f7:95:60:45:38:ab:ca:
                    86:70:e9:09:67:04:49:c4:81:67:26:69:fd:6e:97:
                    c3:e7:54:7d:3c:72:c1:7e:59:53:6e:0a:01:c3:f9:
                    ec:3a:ff:04:01:cd:e0:a4:7e:4d:7d:d1:c5:4e:cb:
                    aa:21:3f:0e:fa:7a:16:2c:23:71:41:a8:58:7a:d5:
                    2e:0f:a6:de:05:be:f1:e3:2e:ee:bc:af:21:41:a6:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:59:D6:00:92:98:60:D5:65:0D:BF:B8:BC:E7:0E:EE:50:71:79:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/1959D600929860D5650DBFB8BCE70EEE50717927.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.112.0/22
                IPv6:
                  2804:5744::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268055

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:c9:13:fb:99:0e:e7:9e:87:62:d1:4f:d9:74:36:79:33:
         1c:41:34:f2:bd:09:7f:05:67:e0:04:90:07:d4:19:c0:ee:c8:
         bc:0b:54:54:cb:1b:07:7b:f1:e8:5e:85:5f:b1:24:13:60:bc:
         8b:09:20:1b:69:8c:8e:2b:cc:50:de:f9:03:2d:56:c1:ca:73:
         24:e9:f4:7d:4a:ac:c1:fe:52:89:53:2a:16:b8:69:61:e5:ee:
         36:01:95:ce:17:57:d0:de:26:9e:41:8b:31:09:20:88:1e:f5:
         e0:8b:ba:64:a4:f4:f5:87:e5:41:e8:c0:e0:e6:e3:8b:60:96:
         78:79:4e:27:1b:c5:3e:cb:b3:ce:63:30:d5:33:6f:10:f9:26:
         61:84:02:4a:79:f1:6d:37:6b:e7:14:09:ac:4f:ad:f7:88:f6:
         fa:cc:cc:8a:ed:95:be:9e:6b:3f:0f:57:a6:0e:d9:27:9d:38:
         cf:ce:0a:ac:6a:bb:d1:30:d3:0a:ac:60:37:6d:3a:5f:95:f4:
         67:50:8a:27:58:7d:d9:5c:bc:7e:69:9d:c0:cd:b8:9e:3c:3d:
         41:bf:16:56:9f:e3:72:c6:08:23:d5:cf:c6:03:f0:3f:18:a4:
         41:be:79:a4:08:e1:22:db:47:de:cf:d7:26:2b:98:6d:24:c4:
         2a:16:dc:dc
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIULsgUp63ETlfgJzdL+VRIEmEdCDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDcyMDA1MTJaFw0yNDAzMDUyMDEwMTJaMDMxMTAvBgNV
BAMTKDE5NTlENjAwOTI5ODYwRDU2NTBEQkZCOEJDRTcwRUVFNTA3MTc5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDalkt2roUBmnMxmlkAn+DH1tJz
TuLj3Cu/2ZsF/NLjNv6Hel3LvxcxK0xXpNEAOu+EpE9sWp3SJym8KJfuEq5VpWU7
CuVWJ69dNhLao003xn3tWNesRW7Nor07oAIWx3T9Un/gbuZkpefYBt+B32acjUlR
YEoAk84e5I4GDzDmPLohraMyfEEyg/U7XigTGXp9q08adYWWSHy9prcHeTlvuzww
xkVZ+Cqa2d5i95VgRTiryoZw6QlnBEnEgWcmaf1ul8PnVH08csF+WVNuCgHD+ew6
/wQBzeCkfk190cVOy6ohPw76ehYsI3FBqFh61S4Ppt4FvvHjLu68ryFBpk+tAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZWdYAkphg1WUN
v7i85w7uUHF5JzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FZXdGMWZZU05SOUpXV25mQ3gzQ0M2dUF4YnhFNjZQY1VG
RjhnYTdOalJaTC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRWV3RjFmWVNOUjlKV1duZkN4M0NDNnVBeGJ4RTY2UGNV
RkY4Z2E3TmpSWkwvMC8xOTU5RDYwMDkyOTg2MEQ1NjUwREJGQjhCQ0U3MEVFRTUw
NzE3OTI3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqHAwDQQCAAIwBwMF
ACgEV0QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBcXMA0GCSqGSIb3DQEBCwUA
A4IBAQAoTckT+5kO556HYtFP2XQ2eTMcQTTyvQl/BWfgBJAH1BnA7si8C1RUyxsH
e/HoXoVfsSQTYLyLCSAbaYyOK8xQ3vkDLVbBynMk6fR9SqzB/lKJUyoWuGlh5e42
AZXOF1fQ3iaeQYsxCSCIHvXgi7pkpPT1h+VB6MDg5uOLYJZ4eU4nG8U+y7POYzDV
M28Q+SZhhAJKefFtN2vnFAmsT633iPb6zMyK7ZW+nms/D1emDtknnTjPzgqsarvR
MNMKrGA3bTpflfRnUIonWH3ZXLx+aZ3AzbiePD1BvxZWn+Nyxggj1c/GA/A/GKRB
vnmkCOEi20fez9cmK5htJMQqFtzc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org