Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer
File:                     31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer (raw, json)
Hash identifier:          XWxH5pREb459x4J4Bj2pjYaP8abT/9gPYXJWyKo8Ny8=
Subject key identifier:   31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5327BD7C37A48D2C0D78509497C17D3ADABADB10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Jan 2023 14:09:44 +0000
Certificate not after:    Thu 04 Jan 2024 14:14:44 +0000
Subordinate resources:    AS: 52544
                          IP: 143.202.220.0/22
                          IP: 143.208.232.0/22
                          IP: 170.247.72.0/22
                          IP: 177.152.152.0/21
                          IP: 201.150.108.0/22
                          IP: 2804:e18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:27:bd:7c:37:a4:8d:2c:0d:78:50:94:97:c1:7d:3a:da:ba:db:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 14:09:44 2023 GMT
            Not After : Jan  4 14:14:44 2024 GMT
        Subject: CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:90:eb:f8:36:7f:0e:0e:cb:f0:ae:0a:87:
                    ca:1a:fb:80:67:68:63:7d:3c:f3:9f:de:01:34:9a:
                    ee:4d:a5:9a:f8:ed:78:3d:65:24:5e:a9:d6:c4:77:
                    73:cb:69:f0:6d:26:f2:43:23:1c:f6:15:3a:86:e5:
                    cf:06:a5:1b:81:21:5f:48:49:db:e2:05:af:90:d7:
                    cb:1c:ed:56:e7:b2:33:2b:14:96:cf:d8:61:58:3a:
                    04:af:c8:cb:60:5f:0b:70:92:ba:ba:87:16:a2:d4:
                    00:15:eb:32:b1:21:c9:a8:45:a9:c7:a5:56:db:17:
                    04:3e:68:9c:c0:38:7e:c7:3e:66:53:74:df:03:be:
                    bf:74:71:9d:2d:9c:67:b7:6d:7c:6a:21:97:0f:d1:
                    f4:c7:d5:31:27:a7:89:fa:45:2d:60:3a:30:d9:a2:
                    23:36:aa:b9:b3:8e:a3:ae:48:6c:d1:61:f9:75:84:
                    41:5a:0a:45:73:60:46:d1:10:9f:8f:53:02:74:f4:
                    50:f9:1d:dc:b3:e1:92:35:6d:5e:d3:d8:dc:13:76:
                    32:e4:58:91:5a:d6:c3:e4:bb:5f:c3:7e:ec:3f:c6:
                    03:98:75:25:d4:90:16:28:b7:1b:0a:d8:fd:58:ef:
                    89:f3:57:71:59:5c:f6:72:25:53:45:09:2b:cc:2a:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.220.0/22
                  143.208.232.0/22
                  170.247.72.0/22
                  177.152.152.0/21
                  201.150.108.0/22
                IPv6:
                  2804:e18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52544

    Signature Algorithm: sha256WithRSAEncryption
         85:02:23:ba:45:fe:81:f4:09:be:0e:32:0e:d6:7d:ce:b9:9e:
         76:83:18:7f:f6:00:e5:f6:12:7e:d4:49:0f:2c:0d:f6:dc:48:
         7f:25:cd:7f:68:e1:de:1f:6a:16:56:91:db:a5:ac:11:d7:13:
         77:77:9a:d1:0f:24:34:b3:6b:63:ab:aa:ab:df:78:6a:cd:fb:
         8c:39:ec:2f:ab:8a:e0:18:04:66:fa:2c:8b:cb:8b:02:62:d3:
         08:65:23:2b:5e:6b:04:03:45:6e:ab:82:aa:75:b9:0f:4c:09:
         f8:dd:59:c5:6f:d5:88:c7:34:ef:26:42:ef:38:ba:51:91:61:
         ff:ff:86:7c:e1:d9:e9:30:47:8d:a1:0a:7c:23:13:9d:7d:13:
         9d:87:25:64:23:a9:5e:26:11:6a:e2:67:64:85:10:3f:41:65:
         e7:4d:6d:c4:f4:a9:9d:79:4c:4b:27:c8:5e:a0:5c:46:f6:18:
         73:47:69:c4:88:d5:58:40:12:77:03:12:b1:57:9d:59:06:86:
         0b:33:42:8f:b6:e7:51:f1:b1:c0:0a:75:93:03:30:23:02:41:
         0d:67:ba:eb:01:c4:cd:97:24:eb:c8:8f:a6:a2:f4:34:29:16:
         5e:6a:42:74:a0:11:64:21:04:0e:7e:28:ce:62:7d:de:66:b9:
         cf:8a:e4:13
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgIUUye9fDekjSwNeFCUl8F9Otq62xAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMDUxNDA5NDRaFw0yNDAxMDQxNDE0NDRaMDMxMTAvBgNV
BAMTKDMxNjMwQTdBNDJDNTY5MDk1NjgyRUU4RjMyRjE5REJGRTRCRDgxRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkZDr+DZ/Dg7L8K4Kh8oa+4Bn
aGN9PPOf3gE0mu5NpZr47Xg9ZSReqdbEd3PLafBtJvJDIxz2FTqG5c8GpRuBIV9I
SdviBa+Q18sc7VbnsjMrFJbP2GFYOgSvyMtgXwtwkrq6hxai1AAV6zKxIcmoRanH
pVbbFwQ+aJzAOH7HPmZTdN8Dvr90cZ0tnGe3bXxqIZcP0fTH1TEnp4n6RS1gOjDZ
oiM2qrmzjqOuSGzRYfl1hEFaCkVzYEbREJ+PUwJ09FD5Hdyz4ZI1bV7T2NwTdjLk
WJFa1sPku1/Dfuw/xgOYdSXUkBYotxsK2P1Y74nzV3FZXPZyJVNFCSvMKsPXAgMB
AAGjggMyMIIDLjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxYwp6QsVpCVaC
7o8y8Z2/5L2B/DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82RWNOSG5HdGZpd3g2RXg0VzM0SFFqcUp5Mmo0MXBGUGdv
YnVaVWM0SDVjOS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82RWNOSG5HdGZpd3g2RXg0VzM0SFFqcUp5Mmo0MXBGUGdv
YnVaVWM0SDVjOS8wLzMxNjMwQTdBNDJDNTY5MDk1NjgyRUU4RjMyRjE5REJGRTRC
RDgxRkMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAo/K3AMEAo/Q6AMEAqr3
SAMEA7GYmAMEAsmWbDANBAIAAjAHAwUAKAQOGDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMAzUAwDQYJKoZIhvcNAQELBQADggEBAIUCI7pF/oH0Cb4OMg7Wfc65nnaD
GH/2AOX2En7USQ8sDfbcSH8lzX9o4d4fahZWkdulrBHXE3d3mtEPJDSza2Orqqvf
eGrN+4w57C+riuAYBGb6LIvLiwJi0whlIyteawQDRW6rgqp1uQ9MCfjdWcVv1YjH
NO8mQu84ulGRYf//hnzh2ekwR42hCnwjE519E52HJWQjqV4mEWriZ2SFED9BZedN
bcT0qZ15TEsnyF6gXEb2GHNHacSI1VhAEncDErFXnVkGhgszQo+251HxscAKdZMD
MCMCQQ1nuusBxM2XJOvIj6ai9DQpFl5qQnSgEWQhBA5+KM5ifd5muc+K5BM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org