Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/32EC41713985EB1975D078E0AED3F900F61F3A0C.cer
File:                     32EC41713985EB1975D078E0AED3F900F61F3A0C.cer (raw, json)
Hash identifier:          GqiC9NSvjhp89K1hGmYb8QF/eb6SxuMyP9nZfVEa4D0=
Subject key identifier:   32:EC:41:71:39:85:EB:19:75:D0:78:E0:AE:D3:F9:00:F6:1F:3A:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A5287ED44DF796CE0C989B8D7ED0C260C879968
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/32EC41713985EB1975D078E0AED3F900F61F3A0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jan 2022 01:48:20 +0000
Certificate not after:    Thu 12 Jan 2023 01:53:20 +0000
Subordinate resources:    AS: 269282
                          IP: 45.183.132.0/22
                          IP: 2804:6234::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:52:87:ed:44:df:79:6c:e0:c9:89:b8:d7:ed:0c:26:0c:87:99:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 13 01:48:20 2022 GMT
            Not After : Jan 12 01:53:20 2023 GMT
        Subject: CN=32EC41713985EB1975D078E0AED3F900F61F3A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:d1:cc:de:6b:79:70:36:41:37:70:14:0e:
                    3a:e8:2b:58:3e:cd:bd:0a:1f:e1:3a:39:95:1f:fc:
                    0a:db:ca:37:18:8e:82:ea:db:a9:23:20:82:48:55:
                    c7:27:59:e1:18:12:c4:ac:15:03:61:dc:cb:ab:95:
                    51:a1:5f:b3:94:6d:77:9e:dd:b5:33:b4:b8:2c:ce:
                    40:b9:d1:c0:6e:e5:d4:14:1a:cb:99:f1:11:78:5d:
                    3a:98:c9:7d:f8:2a:38:54:0d:79:04:a4:a0:96:52:
                    f8:06:c8:c3:44:50:4d:68:ac:b0:94:93:40:68:f0:
                    ab:2a:d7:15:33:0a:f7:fa:92:af:1a:2d:b2:d3:ab:
                    ef:ec:bf:fa:9f:ea:ff:74:5c:d4:56:a1:11:98:9b:
                    9d:b7:5d:fa:f2:81:46:ba:4f:94:b7:80:5b:41:a9:
                    06:d3:c3:17:00:cb:df:3f:64:34:a8:64:e4:06:c6:
                    a2:55:58:df:9b:93:a9:1b:e8:85:ce:18:b8:01:d9:
                    c5:08:8d:ce:13:15:90:a7:1d:40:9c:51:0a:d9:55:
                    e0:68:62:63:42:95:a2:b9:70:f6:bd:80:40:c7:c3:
                    59:76:f8:b9:21:5c:75:20:fd:7a:d2:c0:68:9e:1b:
                    12:dd:52:a6:94:34:d6:54:da:b4:bb:d9:87:42:39:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:EC:41:71:39:85:EB:19:75:D0:78:E0:AE:D3:F9:00:F6:1F:3A:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/32EC41713985EB1975D078E0AED3F900F61F3A0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.132.0/22
                IPv6:
                  2804:6234::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269282

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:9b:3b:22:9d:df:04:0e:61:8d:67:e5:00:52:29:cb:c9:
         69:99:f5:5f:39:07:a9:13:cf:bb:fb:77:c8:16:1a:77:57:7b:
         51:9b:21:44:92:5f:d0:45:2d:1d:74:e1:22:c6:84:ea:54:59:
         eb:4d:72:98:30:27:93:fc:4c:f5:99:ab:e4:7f:9e:a6:3b:a0:
         2b:fb:6f:9e:0e:92:18:e3:1c:43:e7:11:16:3f:e9:50:f4:78:
         ac:8d:ca:c6:8d:59:d8:59:ef:ad:5a:0e:cf:0c:d3:22:57:0e:
         22:4a:b6:bb:2b:83:5a:f3:52:69:5d:75:e8:7f:ae:76:52:08:
         5a:85:3f:bd:ab:2a:60:9a:9f:3f:8d:24:42:2f:66:2e:20:74:
         83:bb:87:9e:93:8f:02:14:11:f0:36:0d:e3:28:50:cd:a8:66:
         1f:c1:5b:48:72:fa:04:4d:63:5c:89:47:99:8e:6b:8f:85:4a:
         9c:09:d5:ba:9e:e2:93:06:a7:0a:fc:cb:00:6f:c4:98:8f:66:
         bd:13:0a:3c:e5:95:4d:a7:91:dc:6b:19:81:32:e7:39:b4:54:
         81:7d:54:43:d3:05:dd:77:70:83:9e:f5:7e:a5:0f:3f:18:dd:
         1b:4d:f1:78:56:a8:b7:65:91:9c:b2:5e:6a:11:5f:95:02:e0:
         40:b8:e1:68
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSlKH7UTfeWzgyYm41+0MJgyHmWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAxMTMwMTQ4MjBaFw0yMzAxMTIwMTUzMjBaMDMxMTAvBgNV
BAMTKDMyRUM0MTcxMzk4NUVCMTk3NUQwNzhFMEFFRDNGOTAwRjYxRjNBMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUe9HM3mt5cDZBN3AUDjroK1g+
zb0KH+E6OZUf/ArbyjcYjoLq26kjIIJIVccnWeEYEsSsFQNh3MurlVGhX7OUbXee
3bUztLgszkC50cBu5dQUGsuZ8RF4XTqYyX34KjhUDXkEpKCWUvgGyMNEUE1orLCU
k0Bo8Ksq1xUzCvf6kq8aLbLTq+/sv/qf6v90XNRWoRGYm523XfrygUa6T5S3gFtB
qQbTwxcAy98/ZDSoZOQGxqJVWN+bk6kb6IXOGLgB2cUIjc4TFZCnHUCcUQrZVeBo
YmNClaK5cPa9gEDHw1l2+LkhXHUg/XrSwGieGxLdUqaUNNZU2rS72YdCOSn/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQy7EFxOYXrGXXQ
eOCu0/kA9h86DDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84WG43eWY5bUxDbzNzbVA5aGRIWkNITHJmU1FLbXloQXph
TlRwZ21aUEwzNy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84WG43eWY5bUxDbzNzbVA5aGRIWkNITHJmU1FLbXloQXph
TlRwZ21aUEwzNy8wLzMyRUM0MTcxMzk4NUVCMTk3NUQwNzhFMEFFRDNGOTAwRjYx
RjNBMEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi23hDANBAIAAjAHAwUA
KARiNDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEG+IwDQYJKoZIhvcNAQELBQAD
ggEBAJ1Vmzsind8EDmGNZ+UAUinLyWmZ9V85B6kTz7v7d8gWGndXe1GbIUSSX9BF
LR104SLGhOpUWetNcpgwJ5P8TPWZq+R/nqY7oCv7b54OkhjjHEPnERY/6VD0eKyN
ysaNWdhZ761aDs8M0yJXDiJKtrsrg1rzUmlddeh/rnZSCFqFP72rKmCanz+NJEIv
Zi4gdIO7h56TjwIUEfA2DeMoUM2oZh/BW0hy+gRNY1yJR5mOa4+FSpwJ1bqe4pMG
pwr8ywBvxJiPZr0TCjzllU2nkdxrGYEy5zm0VIF9VEPTBd13cIOe9X6lDz8Y3RtN
8XhWqLdlkZyyXmoRX5UC4EC44Wg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org