Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.cer
File:                     549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.cer (raw, json)
Hash identifier:          Xsv3sVq+vHlq29NQV8zgb09/lEAPm6zIypk9RZOytcM=
Subject key identifier:   54:9E:8C:D6:E2:0F:EE:E8:E6:9B:6A:65:BB:F5:C6:90:AB:74:CB:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D4A575F8C1181C6CA63E913083C4BE334150FF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 16:31:54 +0000
Certificate not after:    Fri 12 Apr 2024 16:36:54 +0000
Subordinate resources:    AS: 268459
                          IP: 45.161.128.0/22
                          IP: 2804:518c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4a:57:5f:8c:11:81:c6:ca:63:e9:13:08:3c:4b:e3:34:15:0f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 14 16:31:54 2023 GMT
            Not After : Apr 12 16:36:54 2024 GMT
        Subject: CN=549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:af:9c:1d:61:b1:54:c3:22:2a:0b:f2:e8:
                    07:f7:cd:6c:f7:07:29:97:f8:bf:3e:89:97:d6:f3:
                    cf:c0:fe:24:85:0b:3c:1f:c5:56:06:0c:0c:76:21:
                    17:88:41:f6:38:9a:7c:3d:50:1c:e2:f9:67:a2:fe:
                    c9:55:6a:e7:eb:c0:59:54:d5:bb:af:27:ed:24:a6:
                    ee:6b:27:12:de:fa:69:80:86:b7:d9:32:32:97:16:
                    f0:ea:fe:d3:a2:ab:28:ed:10:97:c7:ec:71:93:9d:
                    48:67:bc:98:7e:8d:e5:9e:31:21:13:b3:b3:e8:d3:
                    59:ba:6a:92:1f:7f:47:e5:b3:e1:37:a6:74:67:00:
                    e4:21:0c:8d:08:54:4b:3a:ee:a7:ea:df:04:57:82:
                    e0:29:16:4e:4c:e2:ed:59:5c:ab:b2:e3:68:08:d1:
                    d2:e4:2c:9e:7b:cf:99:2c:3b:2f:31:b3:ac:f1:1f:
                    a5:01:40:4f:a7:26:07:a8:79:64:c8:37:31:eb:8d:
                    3c:71:d4:44:4a:eb:af:bb:44:72:39:a6:c0:7f:cc:
                    5b:83:e9:fd:24:8e:17:fa:68:17:15:9a:99:e6:16:
                    17:dc:64:ae:c1:8d:73:96:89:bb:88:c0:fe:ee:70:
                    98:04:07:c4:b8:ef:7e:6a:71:9d:f3:54:68:95:b0:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:9E:8C:D6:E2:0F:EE:E8:E6:9B:6A:65:BB:F5:C6:90:AB:74:CB:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.128.0/22
                IPv6:
                  2804:518c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268459

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:7f:88:2c:40:17:ca:13:54:77:21:e6:79:eb:ea:3e:40:
         04:e8:a2:d3:26:40:fc:52:48:68:1e:56:3d:73:a3:14:a1:91:
         4f:c5:da:24:98:c3:6e:06:73:7c:a1:21:81:90:88:cc:ba:e4:
         35:ff:5a:34:62:39:00:e9:dd:27:c3:ef:a3:7e:e7:ab:28:f3:
         03:ae:30:65:9f:f0:46:f9:16:ab:c4:64:69:bc:ba:ba:dc:ca:
         bc:5b:67:e3:52:1c:28:0b:fe:ff:e1:a8:f7:7b:32:e8:b4:ec:
         1d:1c:d8:a2:e3:22:64:a2:08:c1:84:39:1b:f9:9a:7f:20:d6:
         04:e3:df:f0:7c:da:0d:e2:ea:8c:55:9d:5d:05:ce:a6:33:ad:
         d5:84:bd:79:bd:51:1a:85:da:e7:78:f4:4e:02:8f:bc:52:5c:
         cd:c9:46:82:bf:2e:72:da:57:42:58:99:14:a8:cc:00:81:f5:
         23:76:86:55:e9:41:12:e2:e0:88:6a:90:bf:7b:c8:bd:16:43:
         42:a2:bf:c8:54:26:26:5f:bc:07:6d:5b:8d:b1:e8:a1:55:7b:
         3e:2d:c6:f9:83:4d:67:52:1a:18:11:19:ad:d8:35:3e:38:e1:
         df:c8:67:72:e1:2c:13:67:42:db:ab:6c:6a:4f:48:d1:8b:ef:
         a3:cd:4b:5e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUHUpXX4wRgcbKY+kTCDxL4zQVD/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTQxNjMxNTRaFw0yNDA0MTIxNjM2NTRaMDMxMTAvBgNV
BAMTKDU0OUU4Q0Q2RTIwRkVFRThFNjlCNkE2NUJCRjVDNjkwQUI3NENCQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDa+cHWGxVMMiKgvy6Af3zWz3
BymX+L8+iZfW88/A/iSFCzwfxVYGDAx2IReIQfY4mnw9UBzi+Wei/slVaufrwFlU
1buvJ+0kpu5rJxLe+mmAhrfZMjKXFvDq/tOiqyjtEJfH7HGTnUhnvJh+jeWeMSET
s7Po01m6apIff0fls+E3pnRnAOQhDI0IVEs67qfq3wRXguApFk5M4u1ZXKuy42gI
0dLkLJ57z5ksOy8xs6zxH6UBQE+nJgeoeWTINzHrjTxx1ERK66+7RHI5psB/zFuD
6f0kjhf6aBcVmpnmFhfcZK7BjXOWibuIwP7ucJgEB8S4735qcZ3zVGiVsEhDAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUnozW4g/u6Oab
amW79caQq3TLozAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83RXl2NnlNV2drYjZkMVlvRjY1VlVpeFRkQjNlZURCa0tF
QXI2N3B3bld5cy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83RXl2NnlNV2drYjZkMVlvRjY1VlVpeFRkQjNlZURCa0tF
QXI2N3B3bld5cy8wLzU0OUU4Q0Q2RTIwRkVFRThFNjlCNkE2NUJCRjVDNjkwQUI3
NENCQTMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2hgDANBAIAAjAHAwUA
KARRjDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGKswDQYJKoZIhvcNAQELBQAD
ggEBABHwf4gsQBfKE1R3IeZ56+o+QATootMmQPxSSGgeVj1zoxShkU/F2iSYw24G
c3yhIYGQiMy65DX/WjRiOQDp3SfD76N+56so8wOuMGWf8Eb5FqvEZGm8urrcyrxb
Z+NSHCgL/v/hqPd7Mui07B0c2KLjImSiCMGEORv5mn8g1gTj3/B82g3i6oxVnV0F
zqYzrdWEvXm9URqF2ud49E4Cj7xSXM3JRoK/LnLaV0JYmRSozACB9SN2hlXpQRLi
4IhqkL97yL0WQ0Kiv8hUJiZfvAdtW42x6KFVez4txvmDTWdSGhgRGa3YNT444d/I
Z3LhLBNnQturbGpPSNGL76PNS14=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org