Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D50059D951879B96671AEA89EAAD5669D01ACDF.cer
File:                     2D50059D951879B96671AEA89EAAD5669D01ACDF.cer (raw, json)
Hash identifier:          J2ixNMUoi63vbcw6qyyleg59JeNRkPTTCZlZFoZSmJY=
Subject key identifier:   2D:50:05:9D:95:18:79:B9:66:71:AE:A8:9E:AA:D5:66:9D:01:AC:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       014BE99DDDCBED3488AF06A83753C0493A7677C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/2D50059D951879B96671AEA89EAAD5669D01ACDF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 08:13:30 +0000
Certificate not after:    Tue 14 May 2024 08:18:30 +0000
Subordinate resources:    AS: 268088
                          IP: 45.168.100.0/22
                          IP: 2804:57d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4b:e9:9d:dd:cb:ed:34:88:af:06:a8:37:53:c0:49:3a:76:77:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 08:13:30 2023 GMT
            Not After : May 14 08:18:30 2024 GMT
        Subject: CN=2D50059D951879B96671AEA89EAAD5669D01ACDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:2f:2f:3b:f5:01:d9:91:8d:13:b8:85:27:
                    e4:9f:3e:de:a8:2f:fa:3c:98:9f:5b:61:4f:c5:6f:
                    14:40:56:5d:0b:5f:97:f6:64:44:78:be:1f:b4:59:
                    02:09:30:a2:7b:e6:ef:06:ec:87:ca:3d:c8:af:89:
                    3f:82:5a:07:b9:45:46:7c:61:79:5e:85:8f:bc:95:
                    ab:7a:ac:0a:1a:1e:b3:d8:5d:f4:33:e7:0d:b2:2b:
                    2c:3a:f8:23:7c:19:64:f4:c9:e6:3c:dc:ea:c0:d1:
                    76:84:17:71:91:a2:72:fb:9a:ac:70:a3:11:30:77:
                    2c:19:a4:d0:7a:be:19:a3:49:fa:94:6a:d4:71:df:
                    43:fe:c1:e5:5d:93:91:b5:2a:05:9a:dc:e9:6c:8e:
                    52:80:87:6d:ff:98:2f:2c:cb:48:2a:63:8c:92:19:
                    c4:5d:24:ed:7a:40:77:c9:fa:20:c8:00:a5:6a:00:
                    95:62:c2:5b:f5:12:07:7f:e1:3c:70:82:2d:dc:33:
                    ae:53:dd:d4:a7:fd:ca:3c:7b:07:74:f6:06:c3:98:
                    d4:8f:6f:b4:9e:4f:f2:c8:f6:85:d8:22:e9:63:0f:
                    14:ef:76:41:bc:01:40:ef:41:8e:84:d7:0c:e1:70:
                    84:60:57:3e:07:2a:73:cd:43:61:51:c1:1c:1e:53:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:50:05:9D:95:18:79:B9:66:71:AE:A8:9E:AA:D5:66:9D:01:AC:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/2D50059D951879B96671AEA89EAAD5669D01ACDF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22
                IPv6:
                  2804:57d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268088

    Signature Algorithm: sha256WithRSAEncryption
         46:7b:b5:a8:1b:3a:46:76:67:aa:ec:39:fb:fa:8b:b1:3a:f5:
         5f:1b:6d:ce:55:0b:25:c1:86:9d:fa:6f:87:95:4b:50:4e:d0:
         c3:74:e2:cb:43:17:21:21:8f:63:2c:f9:96:0c:26:be:ac:d8:
         ec:0c:d7:90:8d:7a:2c:ee:f6:0b:a2:44:0d:9f:35:7d:89:80:
         5b:74:b7:00:83:29:2a:69:53:f3:a6:66:4d:32:62:7a:42:39:
         bc:44:8b:d4:e7:a1:c0:a9:b7:1a:1b:d9:e5:6d:ea:60:75:2e:
         25:c5:fd:62:52:ba:4e:bb:7f:c1:7d:f3:34:ec:f9:cb:b5:0d:
         01:36:86:df:a0:ef:10:44:f2:dd:fb:26:63:cc:ed:20:ad:d7:
         8e:71:b1:f7:01:cd:c8:ed:35:46:ca:de:b9:0a:ff:4f:eb:9d:
         9d:ed:2b:54:b0:83:f3:2d:2f:11:77:f1:ac:b4:dc:44:4a:64:
         41:14:93:be:2a:95:e2:fe:ed:4f:c7:ef:de:2c:79:8f:ab:e8:
         18:06:3d:83:38:e7:69:e1:91:a1:0a:86:45:ce:63:31:da:32:
         c1:bf:c4:2b:a8:02:41:20:a4:34:0b:1d:7f:f9:37:21:28:23:
         93:f3:4a:5b:da:c5:f8:62:c8:81:c7:6e:9f:44:25:bd:9d:0d:
         68:04:f0:3b
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUAUvpnd3L7TSIrwaoN1PASTp2d8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTYwODEzMzBaFw0yNDA1MTQwODE4MzBaMDMxMTAvBgNV
BAMTKDJENTAwNTlEOTUxODc5Qjk2NjcxQUVBODlFQUFENTY2OUQwMUFDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Hi8vO/UB2ZGNE7iFJ+SfPt6o
L/o8mJ9bYU/FbxRAVl0LX5f2ZER4vh+0WQIJMKJ75u8G7IfKPciviT+CWge5RUZ8
YXlehY+8lat6rAoaHrPYXfQz5w2yKyw6+CN8GWT0yeY83OrA0XaEF3GRonL7mqxw
oxEwdywZpNB6vhmjSfqUatRx30P+weVdk5G1KgWa3OlsjlKAh23/mC8sy0gqY4yS
GcRdJO16QHfJ+iDIAKVqAJViwlv1Egd/4Txwgi3cM65T3dSn/co8ewd09gbDmNSP
b7SeT/LI9oXYIuljDxTvdkG8AUDvQY6E1wzhcIRgVz4HKnPNQ2FRwRweU0MVAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtUAWdlRh5uWZx
rqieqtVmnQGs3zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EdnhyVUNtblllVGtoMVFEalByb0d0QlAzM0VXbkFXaTRC
RUZCS3RNeHJ1RS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EdnhyVUNtblllVGtoMVFEalByb0d0QlAzM0VXbkFXaTRC
RUZCS3RNeHJ1RS8wLzJENTAwNTlEOTUxODc5Qjk2NjcxQUVBODlFQUFENTY2OUQw
MUFDREYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2oZDANBAIAAjAHAwUA
KARX0DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFzgwDQYJKoZIhvcNAQELBQAD
ggEBAEZ7tagbOkZ2Z6rsOfv6i7E69V8bbc5VCyXBhp36b4eVS1BO0MN04stDFyEh
j2Ms+ZYMJr6s2OwM15CNeizu9guiRA2fNX2JgFt0twCDKSppU/OmZk0yYnpCObxE
i9TnocCptxob2eVt6mB1LiXF/WJSuk67f8F98zTs+cu1DQE2ht+g7xBE8t37JmPM
7SCt145xsfcBzcjtNUbK3rkK/0/rnZ3tK1Swg/MtLxF38ay03ERKZEEUk74qleL+
7U/H794seY+r6BgGPYM452nhkaEKhkXOYzHaMsG/xCuoAkEgpDQLHX/5NyEoI5Pz
SlvaxfhiyIHHbp9EJb2dDWgE8Ds=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org