Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.cer
File:                     1CE78DE47E8BDBA4A648DDC8FFEE696941848504.cer (raw, json)
Hash identifier:          YVDBwRZ0TPvPZzI78wLByLDiFKqVgaf9rzgWoVwJPJ4=
Subject key identifier:   1C:E7:8D:E4:7E:8B:DB:A4:A6:48:DD:C8:FF:EE:69:69:41:84:85:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0DF260F80E9C7B6D7CEA20E647990AE99BED92A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 19:31:40 +0000
Certificate not after:    Fri 12 Jul 2024 19:36:40 +0000
Subordinate resources:    AS: 266131
                          IP: 45.6.112.0/22
                          IP: 2804:3b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f2:60:f8:0e:9c:7b:6d:7c:ea:20:e6:47:99:0a:e9:9b:ed:92:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 19:31:40 2023 GMT
            Not After : Jul 12 19:36:40 2024 GMT
        Subject: CN=1CE78DE47E8BDBA4A648DDC8FFEE696941848504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:9e:50:25:1d:55:12:f8:03:c0:e6:d1:bf:
                    a0:06:b6:8d:27:e4:c4:89:bb:6c:f7:23:cf:d9:95:
                    bc:8e:19:0b:2f:be:77:00:13:ea:ca:36:8c:d6:b5:
                    77:a5:33:e8:fc:60:b8:ef:f4:5d:e5:92:61:09:f0:
                    b7:97:98:c9:56:cd:20:ea:6c:13:1d:98:fa:7f:6a:
                    bc:df:e9:0a:af:13:26:f5:cc:28:8a:af:9f:6a:17:
                    7b:59:6a:03:20:ef:6c:7b:ff:5e:91:d9:8b:4c:a1:
                    ec:5e:88:02:75:7b:65:a4:40:35:e8:0b:5a:7e:61:
                    3b:c9:cf:d9:1d:9d:4a:8b:90:2b:d5:94:84:96:3a:
                    1d:09:fe:7c:25:28:93:8d:8a:57:5e:5c:39:8a:2f:
                    a4:b3:16:aa:a9:01:a1:96:ad:a3:7a:16:66:03:53:
                    bf:03:df:7d:19:81:66:25:f6:f2:d2:7c:d0:4a:eb:
                    4d:2f:04:41:c4:76:54:5d:3e:07:cf:ee:c8:9b:64:
                    25:46:a9:f8:f2:26:92:f3:8e:68:97:e4:10:cc:50:
                    6b:4f:9b:6b:02:15:96:44:97:f1:c2:a5:2c:6c:51:
                    2c:4c:ae:86:88:68:c9:79:16:50:58:52:9c:ae:ca:
                    c7:89:40:99:d6:8a:c1:6f:32:80:34:80:36:93:fb:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:E7:8D:E4:7E:8B:DB:A4:A6:48:DD:C8:FF:EE:69:69:41:84:85:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.112.0/22
                IPv6:
                  2804:3b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266131

    Signature Algorithm: sha256WithRSAEncryption
         98:a0:32:6d:ad:c5:7b:4f:52:cc:a4:87:e4:d6:19:7f:d4:0a:
         70:b9:d1:23:fa:35:27:78:75:bf:81:d6:4e:fb:d3:7c:35:7b:
         63:8a:ba:f6:29:b7:a2:6c:94:13:50:5a:91:8c:1b:54:06:03:
         3e:c0:0a:b8:f3:76:56:66:4e:2b:e2:bd:e6:2a:5e:3c:59:33:
         e9:e3:c9:8f:d7:84:10:fd:7a:80:5d:5c:06:1d:d9:b1:b2:3c:
         a8:50:03:d0:24:26:7e:1a:26:e0:63:bb:c3:26:aa:f1:19:30:
         70:f7:08:ed:fa:22:f4:b0:d9:20:ff:47:74:46:0f:13:4b:f0:
         30:d6:cc:d3:c4:d7:e8:6a:3e:51:6a:19:08:95:4c:f9:a8:8e:
         69:f7:f9:ef:84:88:4e:75:48:df:7d:a4:85:6e:35:a2:04:98:
         9b:2e:06:f5:46:ca:7e:69:6e:c3:95:ed:cd:1f:c5:7f:9c:54:
         05:e4:e0:61:c8:41:96:7d:a4:92:14:68:93:34:8f:ee:d1:b7:
         4d:03:60:5e:fd:d6:fb:5a:f9:97:ad:a8:4e:67:69:5e:81:20:
         1e:46:4b:7f:8f:73:f6:76:70:43:7c:60:7b:b4:18:81:b3:46:
         4f:d9:09:fc:42:b8:60:5e:52:5c:93:03:e4:5c:d4:1c:55:a0:
         87:c8:47:85
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUDfJg+A6ce2186iDmR5kK6ZvtkqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTQxOTMxNDBaFw0yNDA3MTIxOTM2NDBaMDMxMTAvBgNV
BAMTKDFDRTc4REU0N0U4QkRCQTRBNjQ4RERDOEZGRUU2OTY5NDE4NDg1MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eJ5QJR1VEvgDwObRv6AGto0n
5MSJu2z3I8/ZlbyOGQsvvncAE+rKNozWtXelM+j8YLjv9F3lkmEJ8LeXmMlWzSDq
bBMdmPp/arzf6QqvEyb1zCiKr59qF3tZagMg72x7/16R2YtMoexeiAJ1e2WkQDXo
C1p+YTvJz9kdnUqLkCvVlISWOh0J/nwlKJONildeXDmKL6SzFqqpAaGWraN6FmYD
U78D330ZgWYl9vLSfNBK600vBEHEdlRdPgfP7sibZCVGqfjyJpLzjmiX5BDMUGtP
m2sCFZZEl/HCpSxsUSxMroaIaMl5FlBYUpyuyseJQJnWisFvMoA0gDaT+7yXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQc543kfovbpKZI
3cj/7mlpQYSFBDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85QWk0TFhyeGlQRWNEMVRHenAzWUhEQ1JhRDNaREhwY3Ja
SDlMR1NDMXRhWi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOUFpNExYcnhpUEVjRDFUR3pwM1lIRENSYUQzWkRIcGNy
Wkg5TEdTQzF0YVovMC8xQ0U3OERFNDdFOEJEQkE0QTY0OEREQzhGRkVFNjk2OTQx
ODQ4NTA0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBnAwDQQCAAIwBwMF
ACgEOyAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA+TMA0GCSqGSIb3DQEBCwUA
A4IBAQCYoDJtrcV7T1LMpIfk1hl/1ApwudEj+jUneHW/gdZO+9N8NXtjirr2Kbei
bJQTUFqRjBtUBgM+wAq483ZWZk4r4r3mKl48WTPp48mP14QQ/XqAXVwGHdmxsjyo
UAPQJCZ+GibgY7vDJqrxGTBw9wjt+iL0sNkg/0d0Rg8TS/Aw1szTxNfoaj5RahkI
lUz5qI5p9/nvhIhOdUjffaSFbjWiBJibLgb1Rsp+aW7Dle3NH8V/nFQF5OBhyEGW
faSSFGiTNI/u0bdNA2Be/db7WvmXrahOZ2legSAeRkt/j3P2dnBDfGB7tBiBs0ZP
2Qn8QrhgXlJckwPkXNQcVaCHyEeF
-----END CERTIFICATE-----