Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49E2776FCE62240A6CC3879500038CB7E43B8D94.cer
File:                     49E2776FCE62240A6CC3879500038CB7E43B8D94.cer (raw, json)
Hash identifier:          HI2J97+gB+DcVgnH+B0KtTt3JA8AIYebGGK/Noi36gw=
Subject key identifier:   49:E2:77:6F:CE:62:24:0A:6C:C3:87:95:00:03:8C:B7:E4:3B:8D:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FE3A329823DFC1CB1DCFF6051E0491D6A0DB23E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/49E2776FCE62240A6CC3879500038CB7E43B8D94.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 17:01:12 +0000
Certificate not after:    Mon 27 Jan 2025 17:06:12 +0000
Subordinate resources:    AS: 28587
                          IP: 177.128.184.0/21
                          IP: 2804:da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e3:a3:29:82:3d:fc:1c:b1:dc:ff:60:51:e0:49:1d:6a:0d:b2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 17:01:12 2024 GMT
            Not After : Jan 27 17:06:12 2025 GMT
        Subject: CN=49E2776FCE62240A6CC3879500038CB7E43B8D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:39:04:c2:58:3a:96:a7:30:21:d4:9e:38:
                    7c:ab:c7:6f:fe:93:9d:e0:93:49:2a:0e:fa:5f:7a:
                    f1:e5:5a:f0:51:94:5f:9d:3e:35:f9:1b:4a:98:f6:
                    75:a4:2a:e1:3c:c0:5e:c2:88:ce:aa:79:13:3f:1f:
                    56:19:ca:c1:d4:df:95:c0:c2:a3:88:07:5f:9f:bb:
                    a6:bb:f5:0a:54:3e:5d:ac:7c:61:f3:f1:0b:c1:80:
                    75:d7:ea:ad:9c:7b:5b:ec:39:41:69:1b:1e:47:d0:
                    f5:f3:71:e6:92:9b:48:b5:98:69:ef:95:00:e7:89:
                    51:79:1a:ce:1c:2a:3a:e0:6c:d2:b5:87:12:ac:3d:
                    f3:8e:20:67:48:d2:a8:e3:d4:74:3b:68:c9:2a:f7:
                    56:e5:ae:1c:74:9b:47:03:1f:e8:2d:f0:63:3b:e2:
                    a6:5e:98:c3:a4:33:e3:48:1f:36:d3:0f:85:c1:cf:
                    d5:bd:8e:fc:56:e3:d2:46:37:7c:57:d5:ff:ab:55:
                    a1:4b:d4:15:8e:0a:6e:d5:7d:8c:c9:8a:0c:be:74:
                    5f:91:e6:27:e1:af:2d:70:8e:bd:83:e8:0d:2f:a9:
                    c4:a2:cb:ae:e8:e0:68:68:ab:4c:db:f2:0d:9a:0d:
                    8b:9a:d5:fb:64:b0:6a:7f:2c:d0:d3:4d:f9:ec:61:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:E2:77:6F:CE:62:24:0A:6C:C3:87:95:00:03:8C:B7:E4:3B:8D:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/49E2776FCE62240A6CC3879500038CB7E43B8D94.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.184.0/21
                IPv6:
                  2804:da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28587

    Signature Algorithm: sha256WithRSAEncryption
         02:ca:1a:94:21:b3:78:d8:7b:2d:3d:aa:c0:49:c0:d6:2e:01:
         91:cd:e6:ec:1e:4f:dd:9a:e8:6d:42:0d:f6:02:bc:ae:9b:1a:
         3e:a3:7c:2e:09:c5:50:3c:d3:83:2f:a0:5f:87:dd:aa:9a:08:
         33:64:64:51:5c:39:67:1b:21:bf:a0:60:c3:4b:4a:47:9c:bd:
         c3:c1:0b:86:ba:f4:6b:0d:04:4f:d7:8a:76:21:37:cc:f9:66:
         22:d0:af:84:f6:c2:e5:bb:62:07:b1:bc:a6:a4:07:53:0d:bf:
         ca:af:d5:b6:04:2e:2b:50:1f:9e:16:9d:8b:b1:cd:94:a2:31:
         05:f3:6d:1f:86:8d:a9:50:25:e5:ab:f0:76:15:b7:a6:42:2e:
         a2:54:dd:39:c5:37:b1:51:51:d5:76:02:d9:33:48:45:80:cb:
         69:5e:82:04:e1:5b:89:e3:2f:46:36:2c:25:cf:5e:da:2a:8e:
         c7:2c:54:7f:7d:67:21:0d:f9:56:83:0d:97:7a:40:e8:f9:7c:
         5a:2b:72:e3:09:56:0f:47:0e:16:ae:72:db:a3:9b:5a:7c:65:
         e7:98:75:82:20:cd:73:d9:4b:c5:43:4d:a7:4e:28:4b:ec:b8:
         f1:ab:04:4c:a6:84:36:99:4b:bd:45:2b:cc:72:62:4b:2a:b9:
         9c:3c:45:51
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUH+OjKYI9/Byx3P9gUeBJHWoNsj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjkxNzAxMTJaFw0yNTAxMjcxNzA2MTJaMDMxMTAvBgNV
BAMTKDQ5RTI3NzZGQ0U2MjI0MEE2Q0MzODc5NTAwMDM4Q0I3RTQzQjhEOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nTkEwlg6lqcwIdSeOHyrx2/+
k53gk0kqDvpfevHlWvBRlF+dPjX5G0qY9nWkKuE8wF7CiM6qeRM/H1YZysHU35XA
wqOIB1+fu6a79QpUPl2sfGHz8QvBgHXX6q2ce1vsOUFpGx5H0PXzceaSm0i1mGnv
lQDniVF5Gs4cKjrgbNK1hxKsPfOOIGdI0qjj1HQ7aMkq91blrhx0m0cDH+gt8GM7
4qZemMOkM+NIHzbTD4XBz9W9jvxW49JGN3xX1f+rVaFL1BWOCm7VfYzJigy+dF+R
5ifhry1wjr2D6A0vqcSiy67o4Ghoq0zb8g2aDYua1ftksGp/LNDTTfnsYQRRAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJ4ndvzmIkCmzD
h5UAA4y35DuNlDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ycEVlQmkzRHg0ZlJxTmJGYmJQVzQ1U3NxQ0NCTVNNN2ZC
a3lHUU5IQ3kzei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMnBFZUJpM0R4NGZScU5iRmJiUFc0NVNzcUNDQk1TTTdm
Qmt5R1FOSEN5M3ovMC80OUUyNzc2RkNFNjIyNDBBNkNDMzg3OTUwMDAzOENCN0U0
M0I4RDk0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxgLgwDQQCAAIwBwMF
ACgEDaAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICb6swDQYJKoZIhvcNAQELBQAD
ggEBAALKGpQhs3jYey09qsBJwNYuAZHN5uweT92a6G1CDfYCvK6bGj6jfC4JxVA8
04MvoF+H3aqaCDNkZFFcOWcbIb+gYMNLSkecvcPBC4a69GsNBE/XinYhN8z5ZiLQ
r4T2wuW7YgexvKakB1MNv8qv1bYELitQH54WnYuxzZSiMQXzbR+GjalQJeWr8HYV
t6ZCLqJU3TnFN7FRUdV2AtkzSEWAy2leggThW4njL0Y2LCXPXtoqjscsVH99ZyEN
+VaDDZd6QOj5fForcuMJVg9HDhauctujm1p8ZeeYdYIgzXPZS8VDTadOKEvsuPGr
BEymhDaZS71FK8xyYksquZw8RVE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org