Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer
File:                     321E98532E0480CAAC859174555C2E9A5402331D.cer (raw, json)
Hash identifier:          UMYxWIaonA26vDvyP+CHAZGFI4GxutHjfJ9zh0DQA0s=
Subject key identifier:   32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1835348604BBC8A677D0FA90B13463ECE51ED677
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 12:57:22 +0000
Certificate not after:    Wed 10 Apr 2024 13:02:22 +0000
Subordinate resources:    AS: 271166
                          IP: 179.42.132.0/22
                          IP: 2804:7744::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:35:34:86:04:bb:c8:a6:77:d0:fa:90:b1:34:63:ec:e5:1e:d6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 12:57:22 2023 GMT
            Not After : Apr 10 13:02:22 2024 GMT
        Subject: CN=321E98532E0480CAAC859174555C2E9A5402331D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:06:39:c1:d9:30:a5:13:84:d3:ca:a0:12:
                    7e:67:e1:3c:ec:21:75:d0:9d:0b:4e:48:03:3b:50:
                    63:0e:8e:71:75:a4:a0:b3:ff:cd:97:c0:be:66:44:
                    63:8d:08:d2:21:15:9b:db:92:02:b3:28:26:94:61:
                    f3:d5:3a:e3:a0:58:b7:bc:98:c6:6d:e3:67:dc:ba:
                    3e:53:41:5e:24:bf:aa:5f:45:57:e4:78:76:ef:35:
                    87:59:f4:33:1f:1a:a7:0b:c9:9b:75:b9:6b:48:5f:
                    70:7f:01:20:38:5c:37:a7:a0:2c:fe:65:66:23:ce:
                    27:db:8e:c0:c8:35:28:39:51:23:7d:a2:a3:36:b8:
                    4f:27:cb:5c:45:fb:24:5b:1e:3d:92:76:c4:2c:8c:
                    b9:0b:88:9f:c2:50:9f:89:47:dc:55:7e:b4:61:50:
                    2e:2d:31:23:3f:3d:b6:a3:8d:1e:4a:48:73:45:99:
                    8e:1b:6b:80:83:b7:48:74:3d:0c:3b:a4:40:10:72:
                    02:3e:68:98:04:79:7f:b9:9e:c0:dc:77:e7:91:48:
                    b0:9a:0c:d6:97:c2:32:3f:34:6a:c6:9c:b4:19:91:
                    51:8b:e2:85:5a:ef:3c:3f:b4:57:72:81:5b:bd:55:
                    06:f8:b7:7f:75:bc:96:d8:50:12:8f:86:a7:fc:11:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.132.0/22
                IPv6:
                  2804:7744::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271166

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:3c:7c:22:e7:9a:c4:16:a9:d2:40:b8:eb:71:f8:3d:01:
         08:03:fa:a8:8f:83:96:69:73:f5:1d:de:10:c8:3e:7d:8a:bd:
         af:0a:eb:fb:ce:fb:41:2b:09:ed:30:8e:31:6f:cf:c9:cb:ed:
         f4:21:da:21:47:49:9a:e5:2e:c2:c6:de:e6:53:bd:74:7c:3d:
         fb:3f:cd:9a:65:53:8a:56:05:6e:36:6d:41:2c:af:a5:a5:cb:
         bd:56:e8:e7:30:e6:54:13:c7:45:4e:49:23:db:cf:12:e7:58:
         56:70:ad:ce:56:10:2d:09:26:e9:5f:62:ae:3a:63:61:60:be:
         f8:50:ce:c5:7a:ca:a6:10:eb:20:f8:03:5a:2d:70:20:1e:cf:
         ca:49:d7:ff:1a:f3:88:18:c5:b2:8d:e7:02:e0:ba:7e:93:21:
         d8:68:00:e4:f7:48:68:8f:c6:40:df:e3:bf:ec:ce:7e:61:52:
         15:46:66:09:7f:da:6a:d5:cf:3b:89:7e:4a:ce:9f:d2:c5:90:
         46:f0:ee:e7:13:22:01:34:68:b3:59:9d:61:ec:58:86:fa:79:
         77:cf:7e:e4:72:f8:a8:80:c3:56:b8:81:fe:bd:e2:18:95:e6:
         8a:b7:47:88:ea:02:1a:12:e3:a3:f3:b3:9b:f1:25:13:72:4a:
         73:1a:cf:5d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUGDU0hgS7yKZ30PqQsTRj7OUe1ncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTIxMjU3MjJaFw0yNDA0MTAxMzAyMjJaMDMxMTAvBgNV
BAMTKDMyMUU5ODUzMkUwNDgwQ0FBQzg1OTE3NDU1NUMyRTlBNTQwMjMzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTgY5wdkwpROE08qgEn5n4Tzs
IXXQnQtOSAM7UGMOjnF1pKCz/82XwL5mRGONCNIhFZvbkgKzKCaUYfPVOuOgWLe8
mMZt42fcuj5TQV4kv6pfRVfkeHbvNYdZ9DMfGqcLyZt1uWtIX3B/ASA4XDenoCz+
ZWYjzifbjsDINSg5USN9oqM2uE8ny1xF+yRbHj2SdsQsjLkLiJ/CUJ+JR9xVfrRh
UC4tMSM/PbajjR5KSHNFmY4ba4CDt0h0PQw7pEAQcgI+aJgEeX+5nsDcd+eRSLCa
DNaXwjI/NGrGnLQZkVGL4oVa7zw/tFdygVu9VQb4t391vJbYUBKPhqf8EXhtAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyHphTLgSAyqyF
kXRVXC6aVAIzHTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IbnFQWkxxQzVjMVFRUk03ZGNtV0FWRHpKbnlpZnNDQTJw
ZXA4R0NmcDhWVi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IbnFQWkxxQzVjMVFRUk03ZGNtV0FWRHpKbnlpZnNDQTJw
ZXA4R0NmcDhWVi8wLzMyMUU5ODUzMkUwNDgwQ0FBQzg1OTE3NDU1NUMyRTlBNTQw
MjMzMUQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArMqhDANBAIAAjAHAwUA
KAR3RDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIz4wDQYJKoZIhvcNAQELBQAD
ggEBAD3KPHwi55rEFqnSQLjrcfg9AQgD+qiPg5Zpc/Ud3hDIPn2Kva8K6/vO+0Er
Ce0wjjFvz8nL7fQh2iFHSZrlLsLG3uZTvXR8Pfs/zZplU4pWBW42bUEsr6Wly71W
6Ocw5lQTx0VOSSPbzxLnWFZwrc5WEC0JJulfYq46Y2FgvvhQzsV6yqYQ6yD4A1ot
cCAez8pJ1/8a84gYxbKN5wLgun6TIdhoAOT3SGiPxkDf47/szn5hUhVGZgl/2mrV
zzuJfkrOn9LFkEbw7ucTIgE0aLNZnWHsWIb6eXfPfuRy+KiAw1a4gf694hiV5oq3
R4jqAhoS46Pzs5vxJRNySnMaz10=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org