Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.cer
File:                     45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.cer (raw, json)
Hash identifier:          +1GdH6uouwQuiIa+0lU9vIBU7jsw90wk8fufUA9xotA=
Subject key identifier:   45:C2:B2:7E:F4:0A:0F:DB:E3:D9:87:DA:ED:A2:AD:DB:47:E3:B2:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42AF4EAD3F764689A2B417D804EBCD16CBDD3EA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Jan 2023 23:49:14 +0000
Certificate not after:    Tue 16 Jan 2024 23:54:14 +0000
Subordinate resources:    AS: 264293
                          IP: 138.121.120.0/22
                          IP: 2804:25a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:af:4e:ad:3f:76:46:89:a2:b4:17:d8:04:eb:cd:16:cb:dd:3e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 23:49:14 2023 GMT
            Not After : Jan 16 23:54:14 2024 GMT
        Subject: CN=45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:ab:76:d5:02:0a:ac:ee:b9:c3:4d:6b:3a:
                    20:f0:cb:26:34:f5:10:fa:b9:e4:8b:af:04:e1:d3:
                    15:61:6a:82:5d:b1:83:07:27:01:b4:bd:7e:f6:f7:
                    39:12:6d:26:12:2b:48:35:82:32:2a:cb:67:60:f4:
                    7c:13:19:59:9f:16:3d:af:6d:ef:f6:ad:da:37:aa:
                    c0:a1:b4:0b:ba:b3:81:9a:93:bd:9c:28:67:53:94:
                    1c:e8:88:8b:64:53:8e:2b:e4:42:d8:1d:9e:6e:1b:
                    bd:76:cf:b3:9c:b8:70:cd:a8:21:3a:e8:03:72:c2:
                    19:22:a7:72:52:42:15:5b:ce:2f:4c:33:c6:2b:44:
                    05:5a:d7:fd:54:7e:d8:9a:47:17:dd:16:2b:40:df:
                    d2:35:fd:c5:5d:3a:9d:9b:18:df:4d:c4:4d:d0:3e:
                    c7:66:6a:c1:c9:7b:29:91:b4:09:04:4a:0c:d2:c4:
                    45:26:09:10:0c:03:65:e3:bf:c6:8c:be:60:04:3c:
                    db:60:42:ae:68:6f:b3:53:27:ce:1f:c0:a2:92:6d:
                    5d:52:9a:35:cd:26:2e:3e:c3:c3:34:d8:31:73:6b:
                    23:38:bc:83:74:b4:f9:92:21:01:07:cd:66:87:51:
                    3b:1f:bf:37:62:f3:20:ed:87:6f:8b:d3:e9:c6:9e:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:C2:B2:7E:F4:0A:0F:DB:E3:D9:87:DA:ED:A2:AD:DB:47:E3:B2:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.120.0/22
                IPv6:
                  2804:25a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264293

    Signature Algorithm: sha256WithRSAEncryption
         59:27:a8:8c:60:1c:b6:a0:ed:d2:bf:8f:c7:f7:1c:6d:9a:06:
         6e:09:f1:e8:f5:45:a3:6d:d6:64:73:ab:90:61:ee:de:fe:fc:
         c2:bc:c5:8b:d7:11:9c:e8:33:49:8a:59:b2:24:17:2c:30:55:
         f9:4a:d6:83:6b:45:1a:4b:be:44:75:64:7b:d7:79:17:a2:08:
         cf:07:57:9b:03:c1:93:60:cd:91:26:42:20:3d:a2:ec:a8:13:
         ec:0e:26:15:aa:06:e2:42:3d:5c:9b:5a:cb:28:72:75:cf:5b:
         e4:fa:67:9f:67:02:ba:4e:4c:9e:91:52:de:f7:18:27:9e:cb:
         cf:b3:d1:cb:d5:8f:60:88:43:c8:cc:d6:a1:a8:e8:39:c5:77:
         a6:ab:9f:45:13:54:fe:cc:61:85:cc:76:53:0c:db:99:50:3b:
         cf:7e:5f:3e:13:66:fb:6c:e3:02:77:22:0b:fe:49:26:65:e2:
         55:38:b7:c1:4c:db:f9:e3:d5:39:2d:56:1d:20:83:71:d6:38:
         f8:dd:27:68:89:8c:f1:c2:36:cc:8c:26:a7:bd:d9:63:dd:63:
         c9:60:d9:53:fa:c6:87:dd:ce:d6:91:c9:06:98:3b:47:4b:e3:
         cc:de:ef:3b:64:5e:98:b5:75:5f:2d:7a:90:94:0d:41:e5:0a:
         3c:d6:84:4c
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQq9OrT92RomitBfYBOvNFsvdPqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMTcyMzQ5MTRaFw0yNDAxMTYyMzU0MTRaMDMxMTAvBgNV
BAMTKDQ1QzJCMjdFRjQwQTBGREJFM0Q5ODdEQUVEQTJBRERCNDdFM0IyMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJ6t21QIKrO65w01rOiDwyyY0
9RD6ueSLrwTh0xVhaoJdsYMHJwG0vX729zkSbSYSK0g1gjIqy2dg9HwTGVmfFj2v
be/2rdo3qsChtAu6s4Gak72cKGdTlBzoiItkU44r5ELYHZ5uG712z7OcuHDNqCE6
6ANywhkip3JSQhVbzi9MM8YrRAVa1/1UftiaRxfdFitA39I1/cVdOp2bGN9NxE3Q
PsdmasHJeymRtAkESgzSxEUmCRAMA2Xjv8aMvmAEPNtgQq5ob7NTJ84fwKKSbV1S
mjXNJi4+w8M02DFzayM4vIN0tPmSIQEHzWaHUTsfvzdi8yDth2+L0+nGnmhxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRFwrJ+9AoP2+PZ
h9rtoq3bR+OyNzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HYWt0dENrMmpLQzJ5cVNneml6ckpyclk1YWd6c1oydzdC
UXF2a1hGWFZGaC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HYWt0dENrMmpLQzJ5cVNneml6ckpyclk1YWd6c1oydzdC
UXF2a1hGWFZGaC8wLzQ1QzJCMjdFRjQwQTBGREJFM0Q5ODdEQUVEQTJBRERCNDdF
M0IyMzcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAop5eDANBAIAAjAHAwUA
KAQlqDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECGUwDQYJKoZIhvcNAQELBQAD
ggEBAFknqIxgHLag7dK/j8f3HG2aBm4J8ej1RaNt1mRzq5Bh7t7+/MK8xYvXEZzo
M0mKWbIkFywwVflK1oNrRRpLvkR1ZHvXeReiCM8HV5sDwZNgzZEmQiA9ouyoE+wO
JhWqBuJCPVybWssocnXPW+T6Z59nArpOTJ6RUt73GCeey8+z0cvVj2CIQ8jM1qGo
6DnFd6arn0UTVP7MYYXMdlMM25lQO89+Xz4TZvts4wJ3Igv+SSZl4lU4t8FM2/nj
1TktVh0gg3HWOPjdJ2iJjPHCNsyMJqe92WPdY8lg2VP6xofdztaRyQaYO0dL48ze
7ztkXpi1dV8tepCUDUHlCjzWhEw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org