Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/32CDBF70992C95E39533AD8FC1EC9439AD7E5182.cer
File:                     32CDBF70992C95E39533AD8FC1EC9439AD7E5182.cer (raw, json)
Hash identifier:          qm42GnyeQpxGMXr9J5sK+Mt9qDKc1sBBslRL2Sl9M1U=
Subject key identifier:   32:CD:BF:70:99:2C:95:E3:95:33:AD:8F:C1:EC:94:39:AD:7E:51:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5544516DBF58F1219FD7E782959789367F98BFA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/32CDBF70992C95E39533AD8FC1EC9439AD7E5182.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Feb 2023 18:55:11 +0000
Certificate not after:    Tue 20 Feb 2024 19:00:11 +0000
Subordinate resources:    AS: 268303
                          IP: 45.237.212.0/22
                          IP: 2804:4f18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:44:51:6d:bf:58:f1:21:9f:d7:e7:82:95:97:89:36:7f:98:bf:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 18:55:11 2023 GMT
            Not After : Feb 20 19:00:11 2024 GMT
        Subject: CN=32CDBF70992C95E39533AD8FC1EC9439AD7E5182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:87:76:56:d0:7c:8e:42:d5:cd:20:71:0f:
                    24:5a:9b:ba:49:2f:09:67:94:8e:0a:81:1e:05:a5:
                    4c:28:9f:41:60:0c:0d:33:29:63:b2:2e:5b:a4:86:
                    e0:f2:4d:5c:ac:ea:73:36:de:b8:6b:ee:f0:92:db:
                    f6:98:17:10:23:a2:81:c9:b6:dd:a2:6d:29:93:70:
                    03:1a:47:4b:2f:05:fc:f5:50:0d:62:75:24:a4:7c:
                    f8:3c:bb:15:5e:25:7e:e8:34:24:a5:3c:36:6f:ea:
                    46:da:7a:25:5b:78:cf:f1:0c:80:b7:97:07:69:e2:
                    73:23:dc:61:0a:c9:7b:c5:d3:25:9e:8e:77:09:d6:
                    ef:d2:4b:1a:8d:6a:e2:88:59:1a:1d:97:4e:d4:c1:
                    9f:4f:9a:55:a8:61:fb:33:7d:bc:d5:a2:e2:86:f8:
                    74:19:2a:38:a0:15:d8:d2:12:fa:f8:d6:b3:67:ca:
                    d5:3b:cd:0c:7d:68:35:98:58:7a:c8:67:f7:3c:fb:
                    b4:04:15:b4:6f:a3:43:6d:0f:c1:77:7d:71:bf:a0:
                    e4:7e:00:2f:62:ed:28:b0:58:1b:4d:ef:b9:fc:35:
                    88:05:9d:dc:30:a2:7c:4c:ea:0f:8d:fb:a3:7e:e6:
                    ea:cb:ab:27:61:42:de:3e:35:c4:e0:0e:18:c0:51:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:CD:BF:70:99:2C:95:E3:95:33:AD:8F:C1:EC:94:39:AD:7E:51:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/32CDBF70992C95E39533AD8FC1EC9439AD7E5182.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.212.0/22
                IPv6:
                  2804:4f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268303

    Signature Algorithm: sha256WithRSAEncryption
         34:83:88:32:71:20:f9:e3:7c:b0:31:e1:96:93:bb:9b:d2:71:
         ce:8e:d8:70:b3:a7:41:b5:28:ba:1e:4a:af:bf:17:1b:8a:7e:
         24:d3:8d:e6:29:3c:4d:9e:fc:03:c6:4f:df:15:9b:ce:48:56:
         3e:73:26:2c:1d:a7:af:57:1b:11:bb:d6:08:9d:ff:e6:7d:3e:
         b5:fc:ae:a2:40:8f:5c:99:ea:e9:60:d9:91:a5:c1:67:bb:3a:
         91:9d:3f:86:37:a7:77:22:2d:f0:57:d0:b5:8d:1b:2f:b4:75:
         b9:c1:04:b1:4f:33:69:4b:56:05:be:d3:41:05:44:0b:68:24:
         d8:4b:d5:c3:5a:54:18:85:09:f5:cf:48:10:bd:0b:9c:72:fd:
         2e:e3:a0:9c:8f:46:98:f3:a1:0c:82:a8:66:60:8d:2c:29:cd:
         6a:26:df:61:be:e8:a7:70:48:aa:60:fb:04:57:a4:39:40:82:
         c3:bb:ea:45:4c:82:07:53:49:00:11:e6:3c:10:dc:3c:5c:30:
         22:f4:fa:f9:1a:d9:e4:87:5e:e7:07:19:72:be:ec:02:3d:8c:
         c2:f8:72:3d:d9:42:d3:56:85:d0:60:69:27:9c:d4:57:6d:9a:
         de:cc:8d:ee:f6:e8:47:87:c1:26:4d:e5:92:da:8d:af:4d:e1:
         95:b4:6f:a3
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUVURRbb9Y8SGf1+eClZeJNn+Yv6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMjExODU1MTFaFw0yNDAyMjAxOTAwMTFaMDMxMTAvBgNV
BAMTKDMyQ0RCRjcwOTkyQzk1RTM5NTMzQUQ4RkMxRUM5NDM5QUQ3RTUxODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhYd2VtB8jkLVzSBxDyRam7pJ
LwlnlI4KgR4FpUwon0FgDA0zKWOyLlukhuDyTVys6nM23rhr7vCS2/aYFxAjooHJ
tt2ibSmTcAMaR0svBfz1UA1idSSkfPg8uxVeJX7oNCSlPDZv6kbaeiVbeM/xDIC3
lwdp4nMj3GEKyXvF0yWejncJ1u/SSxqNauKIWRodl07UwZ9PmlWoYfszfbzVouKG
+HQZKjigFdjSEvr41rNnytU7zQx9aDWYWHrIZ/c8+7QEFbRvo0NtD8F3fXG/oOR+
AC9i7SiwWBtN77n8NYgFndwwonxM6g+N+6N+5urLqydhQt4+NcTgDhjAUWPzAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyzb9wmSyV45Uz
rY/B7JQ5rX5RgjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85SEc1TmVoU0FXUXlrU0NzZnRMempoR2VjbjFtd2sxQmpr
dUVKcmpaZ1BrYi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85SEc1TmVoU0FXUXlrU0NzZnRMempoR2VjbjFtd2sxQmpr
dUVKcmpaZ1BrYi8wLzMyQ0RCRjcwOTkyQzk1RTM5NTMzQUQ4RkMxRUM5NDM5QUQ3
RTUxODIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3t1DANBAIAAjAHAwUA
KARPGDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGA8wDQYJKoZIhvcNAQELBQAD
ggEBADSDiDJxIPnjfLAx4ZaTu5vScc6O2HCzp0G1KLoeSq+/FxuKfiTTjeYpPE2e
/APGT98Vm85IVj5zJiwdp69XGxG71gid/+Z9PrX8rqJAj1yZ6ulg2ZGlwWe7OpGd
P4Y3p3ciLfBX0LWNGy+0dbnBBLFPM2lLVgW+00EFRAtoJNhL1cNaVBiFCfXPSBC9
C5xy/S7joJyPRpjzoQyCqGZgjSwpzWom32G+6KdwSKpg+wRXpDlAgsO76kVMggdT
SQAR5jwQ3DxcMCL0+vka2eSHXucHGXK+7AI9jML4cj3ZQtNWhdBgaSec1Fdtmt7M
je726EeHwSZN5ZLaja9N4ZW0b6M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org