Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49CF38E1A116647E610408E31A3BE3362B0958DE.cer
File:                     49CF38E1A116647E610408E31A3BE3362B0958DE.cer (raw, json)
Hash identifier:          6rQQRJXgsO1QEdQjbMjp1aNy+fj9uMmCOn3aytfs6i0=
Subject key identifier:   49:CF:38:E1:A1:16:64:7E:61:04:08:E3:1A:3B:E3:36:2B:09:58:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05DCB5DF3628238926E67BD63DE7063AA27253D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/49CF38E1A116647E610408E31A3BE3362B0958DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 May 2022 15:15:22 +0000
Certificate not after:    Thu 18 May 2023 15:20:22 +0000
Subordinate resources:    AS: 263390
                          IP: 177.222.176.0/20
                          IP: 2804:157c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:dc:b5:df:36:28:23:89:26:e6:7b:d6:3d:e7:06:3a:a2:72:53:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 19 15:15:22 2022 GMT
            Not After : May 18 15:20:22 2023 GMT
        Subject: CN=49CF38E1A116647E610408E31A3BE3362B0958DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:e9:4d:22:4c:47:27:5e:fa:c9:12:42:d6:
                    98:a2:a5:4c:9a:ec:f6:9d:6d:e8:a2:f9:8d:1f:ec:
                    95:d2:7e:57:64:0a:6d:21:57:fb:b6:28:1a:e1:f0:
                    4a:19:e4:94:7d:90:ed:38:d5:b6:6c:e8:24:99:3e:
                    0c:fc:d1:c5:77:0c:52:e5:dc:98:df:9c:91:63:fd:
                    a8:1f:ae:99:e5:d3:c4:ea:48:4a:bd:4a:da:3c:62:
                    17:40:09:c5:2a:23:9c:46:e8:8e:2c:75:5c:19:28:
                    00:cc:da:36:a8:39:9f:5b:4e:da:38:90:b3:33:41:
                    22:8a:4f:ef:27:0b:f5:80:23:9b:02:a1:d7:0b:73:
                    2d:22:c8:2c:ec:89:64:83:75:37:2d:cd:3c:6d:6b:
                    64:51:15:ec:6e:10:40:7b:f9:ae:01:4a:64:f9:b2:
                    f0:a0:5a:d2:72:cf:7a:9f:50:ff:2b:4a:54:f2:da:
                    9b:65:57:9a:12:c2:c6:3d:d6:a7:7e:2c:7f:0d:c4:
                    5c:7c:85:18:37:9a:8b:04:ba:6f:44:55:f4:e2:a3:
                    5d:0b:38:d0:3f:e7:8c:e7:b7:ed:e7:00:ec:80:7f:
                    b9:ff:07:47:e4:ca:23:ab:af:af:0a:d6:79:4f:bd:
                    b7:2c:f4:7a:e6:b0:91:db:2d:21:5f:0e:11:d3:52:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:CF:38:E1:A1:16:64:7E:61:04:08:E3:1A:3B:E3:36:2B:09:58:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/49CF38E1A116647E610408E31A3BE3362B0958DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.176.0/20
                IPv6:
                  2804:157c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263390

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:99:6d:1c:9a:df:d7:1e:5e:5a:c6:3c:97:5c:61:f9:53:
         53:e0:2e:61:d9:23:e4:55:09:17:c0:88:4f:c6:e4:ba:53:1e:
         ac:49:d6:60:91:2d:1c:16:a0:4a:26:bf:d9:2f:e0:b3:28:14:
         cf:11:dd:f6:d5:48:b4:50:aa:87:ad:4b:ab:c0:0a:73:ed:98:
         fb:aa:5a:43:53:aa:82:ba:7d:b0:c1:3b:0b:cb:1d:9b:77:2c:
         d2:06:7c:3b:8c:33:1f:10:2f:ce:a7:f5:c9:77:e2:58:25:04:
         bc:d7:c9:09:d9:89:a4:fc:50:4d:18:22:10:02:2f:1d:80:6e:
         87:57:e0:15:ce:50:d8:5f:bb:95:8b:81:92:05:9a:10:a0:55:
         db:4f:e2:d1:a8:d6:36:c5:35:77:86:c0:12:b3:b5:ac:a4:02:
         e9:82:c9:be:a8:04:3b:34:fc:e6:e7:59:a6:1e:1c:54:81:ff:
         67:b0:ba:0a:60:36:23:46:92:ab:53:6f:5d:0e:f1:33:be:5e:
         b9:8b:5f:c9:81:05:bf:d5:b8:20:93:85:15:f4:25:13:af:73:
         2a:6c:d0:e2:c3:7d:b6:c4:d7:87:37:e7:54:4b:75:8e:69:62:
         6a:b3:2e:0b:14:63:d2:d2:4f:23:30:72:c7:4c:56:09:3f:53:
         0e:d5:5a:2e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBdy13zYoI4km5nvWPecGOqJyU9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA1MTkxNTE1MjJaFw0yMzA1MTgxNTIwMjJaMDMxMTAvBgNV
BAMTKDQ5Q0YzOEUxQTExNjY0N0U2MTA0MDhFMzFBM0JFMzM2MkIwOTU4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uelNIkxHJ176yRJC1piipUya
7Padbeii+Y0f7JXSfldkCm0hV/u2KBrh8EoZ5JR9kO041bZs6CSZPgz80cV3DFLl
3JjfnJFj/agfrpnl08TqSEq9Sto8YhdACcUqI5xG6I4sdVwZKADM2jaoOZ9bTto4
kLMzQSKKT+8nC/WAI5sCodcLcy0iyCzsiWSDdTctzTxta2RRFexuEEB7+a4BSmT5
svCgWtJyz3qfUP8rSlTy2ptlV5oSwsY91qd+LH8NxFx8hRg3mosEum9EVfTio10L
ONA/54znt+3nAOyAf7n/B0fkyiOrr68K1nlPvbcs9HrmsJHbLSFfDhHTUi1jAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJzzjhoRZkfmEE
COMaO+M2KwlY3jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84clVaZFY0N1JkUXpDVGFhR0FLcG5CZHBRb1FzSkZkeWRo
aHFnVTRDa29NWC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOHJVWmRWNDdSZFF6Q1RhYUdBS3BuQmRwUW9Rc0pGZHlk
aGhxZ1U0Q2tvTVgvMC80OUNGMzhFMUExMTY2NDdFNjEwNDA4RTMxQTNCRTMzNjJC
MDk1OERFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBASx3rAwDQQCAAIwBwMF
ACgEFXwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBATeMA0GCSqGSIb3DQEBCwUA
A4IBAQAdwZltHJrf1x5eWsY8l1xh+VNT4C5h2SPkVQkXwIhPxuS6Ux6sSdZgkS0c
FqBKJr/ZL+CzKBTPEd321Ui0UKqHrUurwApz7Zj7qlpDU6qCun2wwTsLyx2bdyzS
Bnw7jDMfEC/Op/XJd+JYJQS818kJ2Ymk/FBNGCIQAi8dgG6HV+AVzlDYX7uVi4GS
BZoQoFXbT+LRqNY2xTV3hsASs7WspALpgsm+qAQ7NPzm51mmHhxUgf9nsLoKYDYj
RpKrU29dDvEzvl65i1/JgQW/1bggk4UV9CUTr3MqbNDiw322xNeHN+dUS3WOaWJq
sy4LFGPS0k8jMHLHTFYJP1MO1Vou
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org