Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
File:                     443A05DE457DA61030C50B71D655B381CE793C73.cer (raw, json)
Hash identifier:          6aQnHE0a7F5zYk7mkBg1EH7GSSHALBVo8AYiU8zO4Ec=
Subject key identifier:   44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C36FF059C17D0189903BCF37BF86214A99C0ECC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 17:33:12 +0000
Certificate not after:    Mon 10 Mar 2025 17:38:12 +0000
Subordinate resources:    AS: 271309
                          IP: 207.248.24.0/22
                          IP: 2804:7980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:36:ff:05:9c:17:d0:18:99:03:bc:f3:7b:f8:62:14:a9:9c:0e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 17:33:12 2024 GMT
            Not After : Mar 10 17:38:12 2025 GMT
        Subject: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:75:11:c8:21:f1:ff:69:ad:29:95:76:8c:
                    ef:2b:ac:c7:2c:91:0b:52:37:b9:ae:a9:0c:24:cb:
                    ae:2d:7f:08:88:8a:76:6e:9c:3b:cb:a3:42:ff:10:
                    f7:bf:4c:21:db:5b:dc:5f:cf:05:d7:85:21:2b:fd:
                    47:f8:92:af:75:b8:0b:b2:4f:75:ea:0c:6b:92:5c:
                    ee:2b:1b:64:7c:d2:00:56:a0:8f:7c:9d:04:37:7e:
                    8f:19:66:58:36:3f:63:5e:ac:b7:53:b0:91:a3:e9:
                    2c:e4:a8:3a:d1:4e:40:00:a8:10:75:56:5e:a5:0c:
                    6f:3a:6c:aa:18:03:42:23:a9:36:79:28:28:ea:d7:
                    0d:04:6e:36:14:02:e2:81:68:63:17:d3:76:8b:a4:
                    4a:17:55:77:08:26:ff:ea:34:5c:a3:5c:74:cf:86:
                    3b:fc:7b:b5:0a:b4:b2:cb:cc:0c:64:72:4b:ab:8b:
                    9f:4e:fb:88:7f:89:c2:95:c0:4a:5b:40:a0:62:b2:
                    a6:83:a0:c9:22:3d:69:25:ce:95:a3:f6:ff:a3:32:
                    e2:2b:21:87:bf:e4:30:eb:74:a3:54:80:77:14:1f:
                    76:cd:60:f8:a5:06:c2:b7:28:36:a9:88:c9:82:af:
                    fe:f3:04:52:e9:c3:7b:1b:3e:88:70:c3:5f:5f:12:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.24.0/22
                IPv6:
                  2804:7980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271309

    Signature Algorithm: sha256WithRSAEncryption
         4d:b8:84:cf:bc:fd:f4:42:2d:b2:24:fa:89:01:3d:ed:41:b1:
         89:9b:02:24:48:a0:af:29:31:6f:3f:45:c7:d4:a7:0e:a2:6e:
         14:89:b7:78:3d:9a:be:86:d7:ac:35:08:8a:2a:c6:6d:2c:0e:
         f2:ae:56:90:4e:d8:c8:ea:b9:97:bb:16:dd:a8:d3:2a:93:08:
         9a:36:a5:34:6d:9b:82:f5:74:32:df:6b:9e:61:21:30:39:e3:
         83:ee:dc:69:15:cf:88:cb:ff:d0:9b:b2:ea:dc:62:dd:5f:4e:
         7a:43:56:2a:e2:f1:12:e4:34:4e:75:6e:64:f7:c2:47:83:ae:
         f4:c8:62:f3:14:0c:23:d9:aa:4e:27:f7:bf:8b:cd:1b:29:9c:
         64:a9:28:6d:b3:57:16:aa:76:06:6e:1b:e0:d3:07:3b:0c:f8:
         de:0d:0b:a9:3a:0e:42:0b:7f:e5:4b:5b:68:a8:94:51:e4:0e:
         ee:56:00:6f:dc:f1:a2:9b:f6:c6:cc:dd:6f:a4:5e:8a:0d:70:
         9e:3e:36:d4:e4:31:ce:c8:cf:2f:b9:e2:5a:9b:ab:cc:48:18:
         f4:c3:9c:4b:1d:ba:fe:c9:67:93:df:f3:e7:0d:99:bd:75:16:
         5b:69:64:4a:c7:d3:a0:b3:da:1f:fd:58:32:41:07:3d:75:9d:
         e4:3f:51:2f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTDb/BZwX0BiZA7zze/hiFKmcDswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTExNzMzMTJaFw0yNTAzMTAxNzM4MTJaMDMxMTAvBgNV
BAMTKDQ0M0EwNURFNDU3REE2MTAzMEM1MEI3MUQ2NTVCMzgxQ0U3OTNDNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVnURyCHx/2mtKZV2jO8rrMcs
kQtSN7muqQwky64tfwiIinZunDvLo0L/EPe/TCHbW9xfzwXXhSEr/Uf4kq91uAuy
T3XqDGuSXO4rG2R80gBWoI98nQQ3fo8ZZlg2P2NerLdTsJGj6SzkqDrRTkAAqBB1
Vl6lDG86bKoYA0IjqTZ5KCjq1w0EbjYUAuKBaGMX03aLpEoXVXcIJv/qNFyjXHTP
hjv8e7UKtLLLzAxkckuri59O+4h/icKVwEpbQKBisqaDoMkiPWklzpWj9v+jMuIr
IYe/5DDrdKNUgHcUH3bNYPilBsK3KDapiMmCr/7zBFLpw3sbPohww19fEvfJAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREOgXeRX2mEDDF
C3HWVbOBznk8czAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80VDJZQm1hVHp6eEVHZVFDUEd3NGlzOGNzZEtIOW83c05F
cEJ3b3Q2TW5iZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNFQyWUJtYVR6enhFR2VRQ1BHdzRpczhjc2RLSDlvN3NO
RXBCd290Nk1uYmYvMC80NDNBMDVERTQ1N0RBNjEwMzBDNTBCNzFENjU1QjM4MUNF
NzkzQzczLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALP+BgwDQQCAAIwBwMF
ACgEeYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCPNMA0GCSqGSIb3DQEBCwUA
A4IBAQBNuITPvP30Qi2yJPqJAT3tQbGJmwIkSKCvKTFvP0XH1KcOom4Uibd4PZq+
htesNQiKKsZtLA7yrlaQTtjI6rmXuxbdqNMqkwiaNqU0bZuC9XQy32ueYSEwOeOD
7txpFc+Iy//Qm7Lq3GLdX056Q1Yq4vES5DROdW5k98JHg670yGLzFAwj2apOJ/e/
i80bKZxkqShts1cWqnYGbhvg0wc7DPjeDQupOg5CC3/lS1toqJRR5A7uVgBv3PGi
m/bGzN1vpF6KDXCePjbU5DHOyM8vueJam6vMSBj0w5xLHbr+yWeT3/PnDZm9dRZb
aWRKx9Ogs9of/VgyQQc9dZ3kP1Ev
-----END CERTIFICATE-----