Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/528249EC56CB215F518F4451571769ECE2BB8915.cer
File:                     528249EC56CB215F518F4451571769ECE2BB8915.cer (raw, json)
Hash identifier:          y5+KOAscTr7N3We32tKCpMKgvAdeM3lv+7o/loVByw4=
Subject key identifier:   52:82:49:EC:56:CB:21:5F:51:8F:44:51:57:17:69:EC:E2:BB:89:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BD39240B65D1F4E95F89D710A7DE6CCAE65C715
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/528249EC56CB215F518F4451571769ECE2BB8915.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 13:48:31 +0000
Certificate not after:    Thu 17 Oct 2024 13:53:31 +0000
Subordinate resources:    AS: 267543
                          IP: 45.70.16.0/22
                          IP: 2804:4304::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d3:92:40:b6:5d:1f:4e:95:f8:9d:71:0a:7d:e6:cc:ae:65:c7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 13:48:31 2023 GMT
            Not After : Oct 17 13:53:31 2024 GMT
        Subject: CN=528249EC56CB215F518F4451571769ECE2BB8915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:2b:e7:67:68:55:37:b1:b4:51:e6:b5:6f:
                    dd:15:4a:0b:ad:3f:ba:ff:e4:23:a4:fb:7e:3e:fa:
                    2a:32:e5:45:58:da:ef:ac:c0:55:00:96:25:7f:69:
                    12:af:60:73:51:b9:bf:f7:a3:2e:25:7f:36:0f:62:
                    33:98:cc:98:1e:27:d9:2a:71:b1:03:de:c3:d6:8e:
                    34:2a:21:b7:64:e2:c3:50:e4:58:b7:4e:e1:8c:98:
                    cb:9d:6b:2d:19:03:14:30:6c:01:e3:3a:9f:4d:24:
                    4f:d0:04:ea:5a:8d:46:9e:61:1c:d0:83:ac:60:5e:
                    90:78:be:19:61:f4:eb:e5:ff:ca:96:73:5c:21:01:
                    6c:98:fa:08:31:6a:28:b5:ff:87:b8:59:a7:55:2e:
                    1f:77:29:5c:48:ea:03:98:ea:b3:37:80:d1:11:dd:
                    2f:3b:95:0a:31:75:2f:4d:8b:5b:5f:aa:6c:df:51:
                    0f:d7:08:57:1c:60:3b:14:01:2f:ee:fe:c6:11:1b:
                    7f:3c:59:a1:0b:ba:b3:92:4a:fa:09:4e:a3:f4:2b:
                    0f:c9:a3:6a:54:ec:c4:b4:74:d3:0c:a3:11:3a:f6:
                    2e:4b:d9:36:1c:9b:35:af:fe:53:82:f7:1a:22:03:
                    d2:fd:07:51:7b:3b:7e:ce:04:e9:7d:68:22:f2:26:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:82:49:EC:56:CB:21:5F:51:8F:44:51:57:17:69:EC:E2:BB:89:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/528249EC56CB215F518F4451571769ECE2BB8915.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.16.0/22
                IPv6:
                  2804:4304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267543

    Signature Algorithm: sha256WithRSAEncryption
         14:fd:99:b9:7b:cb:eb:c9:f1:2d:62:ed:82:08:c1:f7:b3:df:
         45:b9:26:f4:da:6f:70:72:ad:bc:64:be:cf:95:ad:ad:d0:a0:
         ca:ba:a4:4e:d6:3c:6f:1d:01:65:8a:c6:3a:8b:76:ff:d9:ae:
         a2:3e:f5:ce:46:97:6c:13:9d:46:00:0a:20:89:ae:ee:80:8c:
         4b:79:40:77:11:29:3e:6e:56:9b:af:08:a8:97:e2:06:5e:86:
         26:cc:7e:45:7e:d0:d2:72:6c:1e:d9:88:92:dd:51:04:e0:a1:
         9b:42:a9:7b:b7:ed:c6:41:4f:b7:22:3b:f0:d1:a7:c3:be:c2:
         b6:46:11:c1:ba:d1:16:f6:ed:3c:80:6a:63:0a:8f:79:c3:98:
         dd:43:2a:9e:39:6d:d9:89:e1:e5:af:4d:95:e3:5b:69:a8:47:
         23:4b:82:de:b4:88:c4:7d:23:da:2e:a0:fa:69:06:fa:96:da:
         85:44:32:74:e0:88:ff:ef:3a:8a:f2:c6:c0:98:68:03:9b:39:
         92:f4:3d:02:1b:04:33:99:e2:09:6e:36:18:3a:e7:2d:71:08:
         50:18:93:34:6e:79:32:a9:d6:2f:c3:6c:d3:99:12:a5:00:50:
         57:08:fa:f5:30:9b:c3:d0:f0:15:dd:38:3b:a9:7e:33:5d:c9:
         b4:55:b0:00
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUO9OSQLZdH06V+J1xCn3mzK5lxxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTkxMzQ4MzFaFw0yNDEwMTcxMzUzMzFaMDMxMTAvBgNV
BAMTKDUyODI0OUVDNTZDQjIxNUY1MThGNDQ1MTU3MTc2OUVDRTJCQjg5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uivnZ2hVN7G0Uea1b90VSgut
P7r/5COk+34++ioy5UVY2u+swFUAliV/aRKvYHNRub/3oy4lfzYPYjOYzJgeJ9kq
cbED3sPWjjQqIbdk4sNQ5Fi3TuGMmMuday0ZAxQwbAHjOp9NJE/QBOpajUaeYRzQ
g6xgXpB4vhlh9Ovl/8qWc1whAWyY+ggxaii1/4e4WadVLh93KVxI6gOY6rM3gNER
3S87lQoxdS9Ni1tfqmzfUQ/XCFccYDsUAS/u/sYRG388WaELurOSSvoJTqP0Kw/J
o2pU7MS0dNMMoxE69i5L2TYcmzWv/lOC9xoiA9L9B1F7O37OBOl9aCLyJmRbAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSgknsVsshX1GP
RFFXF2ns4ruJFTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EWFhSbjVORU0yN0pneFlwVXd6TUR6WGNzVkpYd0J3ZVhV
V3U0MlNMamlNYy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VY
VVd1NDJTTGppTWMvMC81MjgyNDlFQzU2Q0IyMTVGNTE4RjQ0NTE1NzE3NjlFQ0Uy
QkI4OTE1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItRhAwDQQCAAIwBwMF
ACgEQwQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBUXMA0GCSqGSIb3DQEBCwUA
A4IBAQAU/Zm5e8vryfEtYu2CCMH3s99FuSb02m9wcq28ZL7Pla2t0KDKuqRO1jxv
HQFlisY6i3b/2a6iPvXORpdsE51GAAogia7ugIxLeUB3ESk+blabrwiol+IGXoYm
zH5FftDScmwe2YiS3VEE4KGbQql7t+3GQU+3Ijvw0afDvsK2RhHButEW9u08gGpj
Co95w5jdQyqeOW3ZieHlr02V41tpqEcjS4LetIjEfSPaLqD6aQb6ltqFRDJ04Ij/
7zqK8sbAmGgDmzmS9D0CGwQzmeIJbjYYOuctcQhQGJM0bnkyqdYvw2zTmRKlAFBX
CPr1MJvD0PAV3Tg7qX4zXcm0VbAA
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org