Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.cer
File:                     4544E411778EFB11B81DA1588CD69CC920FEC02F.cer (raw, json)
Hash identifier:          ypAEpN+GD5gUa+PZexXw/7Az6gL2marRhYuqHNDCGpU=
Subject key identifier:   45:44:E4:11:77:8E:FB:11:B8:1D:A1:58:8C:D6:9C:C9:20:FE:C0:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       034FC1F1E2949A1F741764D713E9CFC663EE71B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Nov 2023 11:53:01 +0000
Certificate not after:    Thu 31 Oct 2024 11:58:01 +0000
Subordinate resources:    AS: 268088
                          IP: 45.168.100.0/22
                          IP: 2804:57d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4f:c1:f1:e2:94:9a:1f:74:17:64:d7:13:e9:cf:c6:63:ee:71:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  2 11:53:01 2023 GMT
            Not After : Oct 31 11:58:01 2024 GMT
        Subject: CN=4544E411778EFB11B81DA1588CD69CC920FEC02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:b9:b8:a1:15:fa:c7:df:0c:78:33:93:5a:
                    17:16:98:fd:2d:b6:4f:4b:48:f4:31:3c:2e:80:e7:
                    8e:38:4e:47:73:6c:06:9e:de:c5:4f:51:f9:8a:44:
                    db:46:00:da:66:9d:d7:52:74:65:4d:8f:34:32:c3:
                    23:ac:da:de:4d:c3:48:5e:ba:e8:81:40:f2:00:5b:
                    12:29:c6:85:3f:38:f3:ed:aa:38:71:c1:db:dd:aa:
                    2f:ae:94:93:13:9f:c8:69:c7:15:67:a1:6b:97:56:
                    f2:a0:b6:0c:77:6d:fb:8e:fa:f3:2a:20:ae:b8:d2:
                    e9:ce:c0:6f:75:97:ca:e3:d2:8a:5e:50:f5:a0:a1:
                    45:bc:1a:33:92:b0:58:9d:b6:09:6a:8b:9e:f5:b1:
                    76:29:4f:0d:29:56:5c:61:71:4d:91:5f:3f:23:23:
                    2e:0c:88:f3:a4:9b:9c:fa:cf:36:57:80:1d:35:37:
                    60:bf:7c:88:3d:f9:af:a3:9c:c5:b7:2d:55:fe:6f:
                    1a:c6:cc:4e:28:98:fc:52:9e:f4:a4:8e:64:f6:35:
                    7a:ad:15:e6:af:71:f5:ba:2b:95:5a:09:c0:16:bb:
                    85:84:66:16:2d:d9:89:ce:94:4a:a3:06:13:bd:d5:
                    06:d6:d5:5c:80:2c:bb:77:39:de:2b:f8:17:44:6e:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:44:E4:11:77:8E:FB:11:B8:1D:A1:58:8C:D6:9C:C9:20:FE:C0:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22
                IPv6:
                  2804:57d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268088

    Signature Algorithm: sha256WithRSAEncryption
         3e:51:d3:05:7d:32:e9:73:06:50:e8:3a:24:91:91:a0:39:af:
         12:e6:38:28:cd:6b:92:68:a0:f8:00:ea:d2:88:f1:1b:53:b1:
         7f:e7:85:02:4d:50:b9:20:14:37:dd:83:9b:68:54:1e:b1:d1:
         a6:f4:39:1e:2b:ef:30:d4:4e:2d:13:a5:05:e1:99:9b:ae:a8:
         35:90:02:e0:3f:89:01:66:b5:26:03:b8:30:9a:9d:e1:01:e5:
         63:cc:5f:9c:ec:01:0d:69:81:45:c8:93:ca:5e:25:10:d7:cc:
         3a:b9:d1:aa:e8:1b:b8:b7:74:4c:c3:8c:21:f0:db:db:cd:4f:
         cd:f8:e4:4d:fe:68:4f:20:5a:0c:48:66:b6:52:9b:b2:e2:ba:
         aa:b1:b3:23:6e:1f:bd:70:82:e5:79:ba:14:b1:8e:76:f3:8b:
         b1:c1:4e:f0:e5:f9:e3:f4:6e:94:4c:6c:39:fb:79:b9:fb:2a:
         08:da:b4:fc:da:c6:38:9f:51:44:d7:3d:f0:15:8d:35:51:f8:
         98:ba:6b:a4:fa:5f:41:a4:b4:dd:c2:b4:aa:b2:63:e7:0e:9b:
         98:4b:e4:d1:ff:03:33:7b:4b:9f:bb:88:ae:f5:88:7c:6e:28:
         fa:59:35:1d:49:34:9c:48:25:aa:99:4e:f9:92:38:23:81:61:
         b6:d7:2d:fe
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUA0/B8eKUmh90F2TXE+nPxmPucbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDIxMTUzMDFaFw0yNDEwMzExMTU4MDFaMDMxMTAvBgNV
BAMTKDQ1NDRFNDExNzc4RUZCMTFCODFEQTE1ODhDRDY5Q0M5MjBGRUMwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Qrm4oRX6x98MeDOTWhcWmP0t
tk9LSPQxPC6A5444TkdzbAae3sVPUfmKRNtGANpmnddSdGVNjzQywyOs2t5Nw0he
uuiBQPIAWxIpxoU/OPPtqjhxwdvdqi+ulJMTn8hpxxVnoWuXVvKgtgx3bfuO+vMq
IK640unOwG91l8rj0opeUPWgoUW8GjOSsFidtglqi571sXYpTw0pVlxhcU2RXz8j
Iy4MiPOkm5z6zzZXgB01N2C/fIg9+a+jnMW3LVX+bxrGzE4omPxSnvSkjmT2NXqt
FeavcfW6K5VaCcAWu4WEZhYt2YnOlEqjBhO91QbW1VyALLt3Od4r+BdEbi1hAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRFROQRd477Ebgd
oViM1pzJIP7ALzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EdnhyVUNtblllVGtoMVFEalByb0d0QlAzM0VXbkFXaTRC
RUZCS3RNeHJ1RS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0
QkVGQkt0TXhydUUvMC80NTQ0RTQxMTc3OEVGQjExQjgxREExNTg4Q0Q2OUNDOTIw
RkVDMDJGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqGQwDQQCAAIwBwMF
ACgEV9AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBc4MA0GCSqGSIb3DQEBCwUA
A4IBAQA+UdMFfTLpcwZQ6DokkZGgOa8S5jgozWuSaKD4AOrSiPEbU7F/54UCTVC5
IBQ33YObaFQesdGm9DkeK+8w1E4tE6UF4Zmbrqg1kALgP4kBZrUmA7gwmp3hAeVj
zF+c7AENaYFFyJPKXiUQ18w6udGq6Bu4t3RMw4wh8NvbzU/N+ORN/mhPIFoMSGa2
Upuy4rqqsbMjbh+9cILleboUsY5284uxwU7w5fnj9G6UTGw5+3m5+yoI2rT82sY4
n1FE1z3wFY01UfiYumuk+l9BpLTdwrSqsmPnDpuYS+TR/wMze0ufu4iu9Yh8bij6
WTUdSTScSCWqmU75kjgjgWG21y3+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org