Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
File:                     1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer (raw, json)
Hash identifier:          CRv1T3NdPF7COAwOCDzE0gu6ZwWtk54wlh/+Z7fVCFU=
Subject key identifier:   1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E3FD7D72A728B1DA9D303851BB7EB5E885EB7C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Jul 2023 21:02:41 +0000
Certificate not after:    Fri 19 Jul 2024 21:07:41 +0000
Subordinate resources:    AS: 61672
                          IP: 131.108.100.0/22
                          IP: 177.11.100.0/22
                          IP: 2804:1cbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3f:d7:d7:2a:72:8b:1d:a9:d3:03:85:1b:b7:eb:5e:88:5e:b7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 21:02:41 2023 GMT
            Not After : Jul 19 21:07:41 2024 GMT
        Subject: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:56:37:fc:61:13:80:ec:5c:39:de:8e:bd:
                    f0:31:8b:88:1e:32:f9:7e:6e:76:64:f1:82:aa:42:
                    0d:5b:0f:44:4b:5a:a3:dd:de:c1:17:2a:11:af:81:
                    92:55:6b:97:da:0e:fb:77:f5:42:8d:e2:73:c3:63:
                    60:88:6d:a3:a6:d3:f4:cb:15:32:00:8e:23:7c:56:
                    84:1d:2b:8e:12:d5:3f:1d:c5:70:6d:f9:61:b8:87:
                    c8:85:3f:ba:e2:3a:f4:7c:05:66:aa:62:dc:90:1c:
                    e0:75:ee:60:d7:46:70:62:e2:0b:c4:7b:5c:86:60:
                    c2:99:6d:39:e2:99:07:05:74:e8:53:b4:16:02:fe:
                    0f:5a:04:2f:8f:0a:f5:5e:e4:16:25:f3:d5:4f:ce:
                    73:c9:99:16:7d:50:44:6e:cd:96:b7:0e:b1:8d:d6:
                    6e:0e:c3:65:0e:d9:66:47:01:3b:f3:fe:65:94:f0:
                    2a:84:4a:81:70:8b:23:c6:23:77:77:c9:35:b9:02:
                    fb:56:7f:fc:e7:0f:2e:83:9b:ad:14:a4:dd:a4:87:
                    35:75:8c:43:38:83:c3:25:89:8e:ea:99:b9:39:8d:
                    fa:a4:2e:b1:8a:29:2d:b9:e1:47:3e:57:c0:32:9b:
                    87:8c:1f:be:84:31:e2:22:4c:17:65:5b:a4:75:27:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.100.0/22
                  177.11.100.0/22
                IPv6:
                  2804:1cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61672

    Signature Algorithm: sha256WithRSAEncryption
         69:53:42:8c:ea:82:bd:19:d2:6d:79:a8:55:92:00:09:bd:5f:
         d6:fe:55:e6:64:29:ad:71:da:1a:54:31:83:1a:57:fc:88:d6:
         d5:ea:37:a0:0b:f2:29:79:a1:b0:4d:16:88:57:69:2c:50:4e:
         67:48:d1:db:9f:c1:05:ce:20:cd:08:e1:c5:b0:31:47:ce:c6:
         65:c5:8d:b1:2d:13:49:9d:2b:54:5e:02:37:af:9c:70:b6:56:
         a4:25:c8:38:a3:03:e4:33:d5:fa:cb:4f:fa:de:05:d3:c1:26:
         c7:bd:70:e2:fc:17:0f:d7:ae:1c:77:a1:8f:b0:50:2d:9f:61:
         17:c6:fe:68:54:6e:77:04:7d:6b:e2:22:bd:b5:a5:f0:96:65:
         54:c5:8a:0b:ab:fd:3d:62:ac:17:42:3e:55:55:a3:16:2b:d4:
         7c:60:32:59:d6:ab:b2:d9:95:e2:e6:c5:f2:bb:6f:35:40:e5:
         d8:e0:85:5a:ed:ed:d2:ce:78:ac:b9:57:af:7d:82:73:14:ee:
         ad:8d:1a:2f:6a:a9:7e:b9:b4:82:7f:d5:3e:0b:e7:11:6e:5a:
         af:1d:70:eb:92:fd:e9:08:da:4c:4a:96:75:94:ac:49:ea:4b:
         65:9c:77:06:18:c3:83:67:14:f9:99:72:ea:6e:a6:3d:e0:53:
         e1:8e:be:d8
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUXj/X1ypyix2p0wOFG7frXohet8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjEyMTAyNDFaFw0yNDA3MTkyMTA3NDFaMDMxMTAvBgNV
BAMTKDFGNjQ1RjdBOUE1RjNCMjkyRTQxQUVCOUUwMTQwOUEzQjE1MjZDMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8VY3/GETgOxcOd6OvfAxi4ge
Mvl+bnZk8YKqQg1bD0RLWqPd3sEXKhGvgZJVa5faDvt39UKN4nPDY2CIbaOm0/TL
FTIAjiN8VoQdK44S1T8dxXBt+WG4h8iFP7riOvR8BWaqYtyQHOB17mDXRnBi4gvE
e1yGYMKZbTnimQcFdOhTtBYC/g9aBC+PCvVe5BYl89VPznPJmRZ9UERuzZa3DrGN
1m4Ow2UO2WZHATvz/mWU8CqESoFwiyPGI3d3yTW5AvtWf/znDy6Dm60UpN2khzV1
jEM4g8MliY7qmbk5jfqkLrGKKS254Uc+V8Aym4eMH76EMeIiTBdlW6R1J/V/AgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfZF96ml87KS5B
rrngFAmjsVJsOTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zVUhhTExXVDVpU2Q4TjVoQXFRbUhVbktYSkxQMnVGU1Jn
a003c1lwdjdGWC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNS
Z2tNN3NZcHY3RlgvMC8xRjY0NUY3QTlBNUYzQjI5MkU0MUFFQjlFMDE0MDlBM0Ix
NTI2QzM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKDbGQDBAKxC2QwDQQC
AAIwBwMFACgEHLwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPDoMA0GCSqGSIb3
DQEBCwUAA4IBAQBpU0KM6oK9GdJteahVkgAJvV/W/lXmZCmtcdoaVDGDGlf8iNbV
6jegC/IpeaGwTRaIV2ksUE5nSNHbn8EFziDNCOHFsDFHzsZlxY2xLRNJnStUXgI3
r5xwtlakJcg4owPkM9X6y0/63gXTwSbHvXDi/BcP164cd6GPsFAtn2EXxv5oVG53
BH1r4iK9taXwlmVUxYoLq/09YqwXQj5VVaMWK9R8YDJZ1quy2ZXi5sXyu281QOXY
4IVa7e3SznisuVevfYJzFO6tjRovaql+ubSCf9U+C+cRblqvHXDrkv3pCNpMSpZ1
lKxJ6ktlnHcGGMODZxT5mXLqbqY94FPhjr7Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org