Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4832607AC6C96585F4D44466D566C5224139F09C.cer
File:                     4832607AC6C96585F4D44466D566C5224139F09C.cer (raw, json)
Hash identifier:          JKoVz5z1M+WgLjhTzEzSkpPfJZHWYmNepq2RQGIJzMM=
Subject key identifier:   48:32:60:7A:C6:C9:65:85:F4:D4:44:66:D5:66:C5:22:41:39:F0:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08C31D817360C53C858FF362F76A1773B68AA8BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/4832607AC6C96585F4D44466D566C5224139F09C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 18:37:44 +0000
Certificate not after:    Mon 15 Apr 2024 18:42:44 +0000
Subordinate resources:    AS: 269647
                          IP: 45.190.136.0/22
                          IP: 2804:67bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:1d:81:73:60:c5:3c:85:8f:f3:62:f7:6a:17:73:b6:8a:a8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 17 18:37:44 2023 GMT
            Not After : Apr 15 18:42:44 2024 GMT
        Subject: CN=4832607AC6C96585F4D44466D566C5224139F09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:53:4b:57:c0:61:9e:3f:26:8d:1b:74:f8:
                    45:68:dd:d8:82:61:39:c4:33:4e:2a:5e:e3:72:6b:
                    81:9d:09:f5:94:87:0a:f6:f1:d3:56:b1:0a:a0:2a:
                    9a:eb:9e:d3:bb:12:ea:56:58:3c:29:f9:40:fc:65:
                    f5:2b:c5:68:cf:f4:cf:8d:0c:96:e1:ab:e9:59:dd:
                    39:ef:14:f6:3c:bc:2b:84:fd:1a:10:56:5a:32:76:
                    76:05:95:74:e7:d5:24:5d:27:57:ef:04:59:2e:64:
                    27:f1:63:5a:ec:14:6f:bd:63:62:99:9f:7b:bd:01:
                    45:bf:99:d7:32:83:74:71:a8:0b:60:2f:c0:3a:32:
                    f4:36:e6:0c:9c:79:8d:97:c7:6c:c6:dc:c5:11:b8:
                    53:a0:26:e2:b8:7b:35:e6:fc:11:1c:dc:ef:47:6b:
                    fd:47:d9:1b:cb:36:34:76:37:db:dc:2b:4f:d3:ee:
                    7c:57:19:4b:28:b7:eb:05:d0:a8:d0:1d:50:b3:04:
                    5f:45:8b:39:76:4d:bb:1e:77:54:e9:3e:47:77:73:
                    88:f8:9e:9a:0a:b2:55:76:d7:b2:0d:0f:88:8d:20:
                    28:9a:58:3f:b5:24:8e:ef:d0:11:d9:86:c3:0a:24:
                    19:92:70:09:63:b9:fb:80:8c:c0:46:71:ec:0f:42:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:32:60:7A:C6:C9:65:85:F4:D4:44:66:D5:66:C5:22:41:39:F0:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/4832607AC6C96585F4D44466D566C5224139F09C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.136.0/22
                IPv6:
                  2804:67bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269647

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:25:09:e7:83:f6:28:ab:5b:71:f5:1a:e9:4d:e1:4f:f9:
         67:d7:58:dd:f6:27:ae:68:d8:55:0b:15:05:b4:1a:4b:84:18:
         c9:4c:77:7d:45:d4:c6:c3:bf:50:23:03:f8:5b:cb:9d:13:3e:
         09:53:20:42:1b:77:09:3e:28:3f:60:f2:7f:a1:71:d9:cb:3e:
         da:9b:57:18:de:ad:e8:f9:15:86:1a:a0:68:1d:3a:78:e4:ad:
         44:cf:c0:da:9f:9c:d8:db:a2:ec:a5:29:33:61:2a:a4:78:c4:
         0b:e2:a4:8c:ea:2e:e5:50:ee:08:bb:09:b7:c1:2f:7a:50:6c:
         ba:67:d7:08:78:d6:4c:76:a4:4d:7d:11:3c:99:5f:ff:97:22:
         f3:f6:81:75:51:09:56:89:d5:69:61:43:05:f0:c1:a2:91:87:
         ad:96:b3:70:17:3b:fa:8e:ab:9e:58:a9:6a:78:fe:97:8e:1f:
         65:5e:ff:9b:e0:09:9a:e5:ae:ce:94:e0:3c:33:e5:0c:70:72:
         0e:e2:e9:67:27:ac:e7:f5:0f:b9:c4:5b:89:ef:2d:bb:f3:14:
         81:c4:4f:78:ec:1c:9d:bd:dc:7d:d4:6a:95:27:a5:06:36:18:
         01:92:5b:1b:58:94:d9:1b:2f:26:a4:c5:e0:dd:84:50:da:ec:
         f0:34:80:68
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUCMMdgXNgxTyFj/Ni92oXc7aKqLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTcxODM3NDRaFw0yNDA0MTUxODQyNDRaMDMxMTAvBgNV
BAMTKDQ4MzI2MDdBQzZDOTY1ODVGNEQ0NDQ2NkQ1NjZDNTIyNDEzOUYwOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRFNLV8Bhnj8mjRt0+EVo3diC
YTnEM04qXuNya4GdCfWUhwr28dNWsQqgKprrntO7EupWWDwp+UD8ZfUrxWjP9M+N
DJbhq+lZ3TnvFPY8vCuE/RoQVloydnYFlXTn1SRdJ1fvBFkuZCfxY1rsFG+9Y2KZ
n3u9AUW/mdcyg3RxqAtgL8A6MvQ25gyceY2Xx2zG3MURuFOgJuK4ezXm/BEc3O9H
a/1H2RvLNjR2N9vcK0/T7nxXGUsot+sF0KjQHVCzBF9Fizl2Tbsed1TpPkd3c4j4
npoKslV217IND4iNICiaWD+1JI7v0BHZhsMKJBmScAljufuAjMBGcewPQiVhAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRIMmB6xsllhfTU
RGbVZsUiQTnwnDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84VEY4V1hHSFdlUGR6Rk05QTNqdThUZWc1Q1JQczRMcVVL
Y1d6VmFxcFFMNS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84VEY4V1hHSFdlUGR6Rk05QTNqdThUZWc1Q1JQczRMcVVL
Y1d6VmFxcFFMNS8wLzQ4MzI2MDdBQzZDOTY1ODVGNEQ0NDQ2NkQ1NjZDNTIyNDEz
OUYwOUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2+iDANBAIAAjAHAwUA
KARnvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHU8wDQYJKoZIhvcNAQELBQAD
ggEBAIzZJQnng/Yoq1tx9RrpTeFP+WfXWN32J65o2FULFQW0GkuEGMlMd31F1MbD
v1AjA/hby50TPglTIEIbdwk+KD9g8n+hcdnLPtqbVxjerej5FYYaoGgdOnjkrUTP
wNqfnNjbouylKTNhKqR4xAvipIzqLuVQ7gi7CbfBL3pQbLpn1wh41kx2pE19ETyZ
X/+XIvP2gXVRCVaJ1WlhQwXwwaKRh62Ws3AXO/qOq55YqWp4/peOH2Ve/5vgCZrl
rs6U4Dwz5Qxwcg7i6WcnrOf1D7nEW4nvLbvzFIHET3jsHJ293H3UapUnpQY2GAGS
WxtYlNkbLyakxeDdhFDa7PA0gGg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org