Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer
File:                     493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer (raw, json)
Hash identifier:          VPmJd79ZF09gvH0ZQvk25rJUSwCvaHpk+t8S6DVxMk8=
Subject key identifier:   49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       208FC3A2969C71EEA66F51D361A73655CC00A042
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jul 2021 20:10:59 +0000
Certificate not after:    Mon 11 Jul 2022 20:15:59 +0000
Subordinate resources:    AS: 268387
                          IP: 45.160.0.0/22
                          IP: 2804:5068::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8f:c3:a2:96:9c:71:ee:a6:6f:51:d3:61:a7:36:55:cc:00:a0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 20:10:59 2021 GMT
            Not After : Jul 11 20:15:59 2022 GMT
        Subject: CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:24:63:30:2d:07:d4:d4:35:f3:ed:32:38:
                    22:88:a2:a1:79:f6:51:6e:26:00:d6:74:f8:ae:61:
                    30:68:ff:53:19:b7:c4:2a:af:9c:43:93:17:7d:ee:
                    e7:d7:94:fd:46:0e:92:41:17:53:f7:df:b6:9b:e7:
                    dd:33:03:2e:2c:0c:df:1e:79:d3:e2:f8:be:bf:35:
                    90:a9:66:f7:a2:20:cd:0e:cb:e1:df:f8:c4:66:ef:
                    54:67:81:da:39:1d:a9:7d:80:f4:17:90:72:29:ae:
                    8e:8d:54:57:b4:2d:89:fc:b0:c0:50:65:06:23:74:
                    6f:4e:90:4d:a8:36:22:9f:4a:8a:90:5e:ed:68:da:
                    9d:09:9c:77:01:e7:3b:89:81:78:3c:03:6f:80:e6:
                    73:7a:a4:a9:d2:81:81:c5:c1:e2:b4:a8:69:37:3e:
                    4f:52:43:dc:39:06:d1:f4:ea:f1:13:26:90:54:b8:
                    be:6b:1a:80:86:1e:4f:aa:70:23:d6:f9:02:f3:31:
                    89:65:2f:83:27:9e:6d:cf:d3:e7:6d:46:14:67:27:
                    7b:2e:61:db:c2:1f:71:63:5f:40:ca:61:11:2a:11:
                    3c:9e:b2:0f:ff:cf:37:53:57:12:58:2a:a0:a5:22:
                    81:f7:e2:5c:db:bc:fa:23:ff:d7:dc:11:97:ce:ff:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.0.0/22
                IPv6:
                  2804:5068::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268387

    Signature Algorithm: sha256WithRSAEncryption
         71:07:35:4d:fd:f2:78:06:e2:66:94:1a:b8:20:e5:96:b3:52:
         62:48:91:9c:54:8a:83:5b:af:7c:d9:49:d8:3d:4e:80:1e:98:
         0e:c5:bb:c9:ac:f2:d5:36:d8:c3:ce:ca:e0:36:76:ec:13:e6:
         7e:93:af:a4:84:39:84:36:46:aa:54:30:41:a4:9d:45:1e:1f:
         60:95:6a:6a:4d:7e:67:b9:9b:17:0b:bc:dc:4b:00:50:78:de:
         7e:f4:08:18:61:bf:a4:42:0f:cb:79:dd:44:a4:f4:ec:63:8e:
         f2:66:14:04:7d:b7:eb:7e:3f:b3:74:8e:2c:f9:75:38:eb:eb:
         8d:a6:5e:af:1e:11:62:21:14:cc:e5:2c:2a:31:69:0d:88:36:
         62:6b:85:fc:76:47:4c:77:1b:f6:7b:f6:89:41:91:b8:51:62:
         a7:e9:28:51:03:8d:d0:bd:ee:db:fb:2a:29:0f:4c:ca:07:56:
         0e:25:f1:3e:da:a3:1b:2e:04:b9:66:50:1d:72:e3:5a:fd:7f:
         26:3b:69:7e:83:84:97:50:f0:fd:5a:38:c3:7a:b5:67:8f:e2:
         78:00:cc:84:48:57:71:95:e3:8d:92:bf:66:b1:ff:90:5c:22:
         c6:fc:18:68:96:b0:fb:c0:66:4b:c7:c5:b3:21:bb:1b:17:eb:
         1e:80:98:e6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUII/Dopacce6mb1HTYac2VcwAoEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTA3MTIyMDEwNTlaFw0yMjA3MTEyMDE1NTlaMDMxMTAvBgNV
BAMTKDQ5M0JEODFEOTBDMzRDQzQ5NTM3RDlDRTM2NkU5MDU5RDk5RUJEMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8yRjMC0H1NQ18+0yOCKIoqF5
9lFuJgDWdPiuYTBo/1MZt8Qqr5xDkxd97ufXlP1GDpJBF1P337ab590zAy4sDN8e
edPi+L6/NZCpZveiIM0Oy+Hf+MRm71Rngdo5Hal9gPQXkHIpro6NVFe0LYn8sMBQ
ZQYjdG9OkE2oNiKfSoqQXu1o2p0JnHcB5zuJgXg8A2+A5nN6pKnSgYHFweK0qGk3
Pk9SQ9w5BtH06vETJpBUuL5rGoCGHk+qcCPW+QLzMYllL4Mnnm3P0+dtRhRnJ3su
YdvCH3FjX0DKYREqETyesg//zzdTVxJYKqClIoH34lzbvPoj/9fcEZfO/4ELAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJO9gdkMNMxJU3
2c42bpBZ2Z69LTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FRmc1TnRtak1MM2RZUFZNS2RIU29MVkRjVUM0eWtCOHNS
cGpRWHFpYkFDTS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRUZnNU50bWpNTDNkWVBWTUtkSFNvTFZEY1VDNHlrQjhz
UnBqUVhxaWJBQ00vMC80OTNCRDgxRDkwQzM0Q0M0OTUzN0Q5Q0UzNjZFOTA1OUQ5
OUVCRDJELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItoAAwDQQCAAIwBwMF
ACgEUGgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBhjMA0GCSqGSIb3DQEBCwUA
A4IBAQBxBzVN/fJ4BuJmlBq4IOWWs1JiSJGcVIqDW6982UnYPU6AHpgOxbvJrPLV
NtjDzsrgNnbsE+Z+k6+khDmENkaqVDBBpJ1FHh9glWpqTX5nuZsXC7zcSwBQeN5+
9AgYYb+kQg/Led1EpPTsY47yZhQEfbfrfj+zdI4s+XU46+uNpl6vHhFiIRTM5Swq
MWkNiDZia4X8dkdMdxv2e/aJQZG4UWKn6ShRA43Qve7b+yopD0zKB1YOJfE+2qMb
LgS5ZlAdcuNa/X8mO2l+g4SXUPD9WjjDerVnj+J4AMyESFdxleONkr9msf+QXCLG
/BholrD7wGZLx8WzIbsbF+segJjm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org