Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/442BC206BBFDDADECD89B534389B6384EB62B9EF.cer
File:                     442BC206BBFDDADECD89B534389B6384EB62B9EF.cer (raw, json)
Hash identifier:          PB8sNw0Dn6RQycI6ti6pi/EeJ5HUBCsK3sxQFKeBNJ0=
Subject key identifier:   44:2B:C2:06:BB:FD:DA:DE:CD:89:B5:34:38:9B:63:84:EB:62:B9:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       529B64E761280F5A339980D4799A59B3355ACB01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/442BC206BBFDDADECD89B534389B6384EB62B9EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 20:03:39 +0000
Certificate not after:    Thu 13 Feb 2025 20:08:39 +0000
Subordinate resources:    AS: 271611
                          IP: 200.24.108.0/22
                          IP: 2804:7e3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9b:64:e7:61:28:0f:5a:33:99:80:d4:79:9a:59:b3:35:5a:cb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 20:03:39 2024 GMT
            Not After : Feb 13 20:08:39 2025 GMT
        Subject: CN=442BC206BBFDDADECD89B534389B6384EB62B9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:c7:97:dc:ff:98:4f:6c:4d:df:05:59:fd:
                    7e:55:fa:79:87:12:8a:f2:5a:5c:7e:28:39:cb:19:
                    b2:f0:c0:bc:dc:6e:8a:a3:25:93:78:ba:b0:b3:ce:
                    13:80:67:92:71:25:c0:ca:35:99:86:69:03:c7:37:
                    be:2d:72:a4:0b:85:88:b6:bf:f9:14:32:65:3e:83:
                    c8:50:2f:46:11:83:14:59:87:b9:bc:f9:8b:2c:cd:
                    36:2a:b1:27:ec:1e:66:4d:ea:18:19:08:dc:43:ac:
                    fe:f2:cf:d3:2a:8a:5f:70:3f:d7:2e:d9:0d:32:7d:
                    fc:5c:e0:1e:ac:45:de:40:a4:8e:66:fe:88:18:4d:
                    c2:fe:e6:f6:b4:70:06:2e:1a:d2:dd:ef:90:e1:d5:
                    bb:1e:a1:4f:28:28:f6:45:97:c1:67:a5:fa:a7:25:
                    56:dc:0c:82:bb:92:dd:47:9f:61:a2:e1:23:01:86:
                    de:7f:0f:4d:71:08:ad:49:ad:7e:53:4b:b0:bd:b7:
                    9f:56:b7:00:bd:29:c8:2d:e8:ee:d7:53:53:45:40:
                    9b:97:a9:47:7e:a5:1f:7e:f4:8b:16:f0:d3:66:c1:
                    99:f1:89:f6:f3:4d:7b:8e:91:06:1b:63:dd:bc:f9:
                    c4:77:94:44:71:3c:3d:ac:26:51:60:39:eb:b8:ec:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:2B:C2:06:BB:FD:DA:DE:CD:89:B5:34:38:9B:63:84:EB:62:B9:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/442BC206BBFDDADECD89B534389B6384EB62B9EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.108.0/22
                IPv6:
                  2804:7e3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271611

    Signature Algorithm: sha256WithRSAEncryption
         23:16:1a:69:39:ec:38:f9:14:da:39:c3:cb:2b:2b:b8:38:34:
         dc:5b:ca:45:41:3e:02:2c:b3:15:e8:0c:bb:45:01:25:d4:fb:
         7d:ed:4d:2f:62:f6:4c:ec:b6:7b:98:b7:83:34:8c:86:a4:f4:
         e2:1f:8d:79:b9:9f:82:ca:b0:6f:27:f0:16:18:1b:84:fb:d0:
         b3:98:7c:25:c5:a9:11:86:1f:aa:8d:86:d7:26:3a:3b:a5:86:
         d4:12:76:f6:c7:ad:f3:79:93:a8:1b:2b:b2:41:cb:5c:76:a2:
         29:f8:70:88:60:6b:19:69:3c:06:3d:75:46:ee:18:c6:9b:64:
         0c:22:ec:3e:d2:0c:7f:23:c3:a8:0a:36:2d:f5:52:3d:46:54:
         fd:0b:f6:f1:63:c4:30:a3:6e:18:be:08:9f:98:6a:2f:85:a4:
         8d:fc:cd:d4:eb:bf:d9:8f:d5:fc:34:96:92:b7:65:e7:40:e9:
         00:11:7c:2a:7c:19:85:e6:c1:39:82:c7:b4:6f:64:a4:37:d7:
         a2:81:73:bc:38:9d:60:e0:b7:42:84:f4:58:5b:01:cc:3d:b9:
         e9:a2:94:1f:81:55:8a:7b:68:52:f3:f1:6c:0b:91:64:eb:40:
         52:e2:3b:4c:a2:f7:14:62:a3:e1:69:03:49:dd:69:5a:a1:4e:
         be:45:ca:ba
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUUptk52EoD1ozmYDUeZpZszVaywEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUyMDAzMzlaFw0yNTAyMTMyMDA4MzlaMDMxMTAvBgNV
BAMTKDQ0MkJDMjA2QkJGRERBREVDRDg5QjUzNDM4OUI2Mzg0RUI2MkI5RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4seX3P+YT2xN3wVZ/X5V+nmH
EoryWlx+KDnLGbLwwLzcboqjJZN4urCzzhOAZ5JxJcDKNZmGaQPHN74tcqQLhYi2
v/kUMmU+g8hQL0YRgxRZh7m8+YsszTYqsSfsHmZN6hgZCNxDrP7yz9Mqil9wP9cu
2Q0yffxc4B6sRd5ApI5m/ogYTcL+5va0cAYuGtLd75Dh1bseoU8oKPZFl8Fnpfqn
JVbcDIK7kt1Hn2Gi4SMBht5/D01xCK1JrX5TS7C9t59WtwC9Kcgt6O7XU1NFQJuX
qUd+pR9+9IsW8NNmwZnxifbzTXuOkQYbY928+cR3lERxPD2sJlFgOeu47E85AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREK8IGu/3a3s2J
tTQ4m2OE62K57zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yb1l1TkdWQzNuUXdUYVJFVUF4dVFramhNa3NTU2JUdXNy
YjRDNWVqWU1KVC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMm9ZdU5HVkMzblF3VGFSRVVBeHVRa2poTWtzU1NiVHVz
cmI0QzVlallNSlQvMC80NDJCQzIwNkJCRkREQURFQ0Q4OUI1MzQzODlCNjM4NEVC
NjJCOUVGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIGGwwDQQCAAIwBwMF
ACgEfjwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCT7MA0GCSqGSIb3DQEBCwUA
A4IBAQAjFhppOew4+RTaOcPLKyu4ODTcW8pFQT4CLLMV6Ay7RQEl1Pt97U0vYvZM
7LZ7mLeDNIyGpPTiH415uZ+CyrBvJ/AWGBuE+9CzmHwlxakRhh+qjYbXJjo7pYbU
Enb2x63zeZOoGyuyQctcdqIp+HCIYGsZaTwGPXVG7hjGm2QMIuw+0gx/I8OoCjYt
9VI9RlT9C/bxY8Qwo24YvgifmGovhaSN/M3U67/Zj9X8NJaSt2XnQOkAEXwqfBmF
5sE5gse0b2SkN9eigXO8OJ1g4LdChPRYWwHMPbnpopQfgVWKe2hS8/FsC5Fk60BS
4jtMovcUYqPhaQNJ3WlaoU6+Rcq6
-----END CERTIFICATE-----