Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/576425B450FC2BA8FAE7DF2C79093DAF4BD4FE1A.cer
File:                     576425B450FC2BA8FAE7DF2C79093DAF4BD4FE1A.cer (raw, json)
Hash identifier:          6r2v/RsOAntGzFHugJz+S2pMq/36fJbCHw617IYw+Cg=
Subject key identifier:   57:64:25:B4:50:FC:2B:A8:FA:E7:DF:2C:79:09:3D:AF:4B:D4:FE:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F5163A58BA49F37268F5047CF38BF85ECDB848A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/576425B450FC2BA8FAE7DF2C79093DAF4BD4FE1A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Aug 2023 21:18:47 +0000
Certificate not after:    Thu 22 Aug 2024 21:23:47 +0000
Subordinate resources:    AS: 267388
                          IP: 45.4.156.0/22
                          IP: 45.7.0.0/22
                          IP: 45.174.208.0/22
                          IP: 45.234.248.0/22
                          IP: 131.196.40.0/22
                          IP: 132.255.44.0/22
                          IP: 2804:4cbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:51:63:a5:8b:a4:9f:37:26:8f:50:47:cf:38:bf:85:ec:db:84:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 21:18:47 2023 GMT
            Not After : Aug 22 21:23:47 2024 GMT
        Subject: CN=576425B450FC2BA8FAE7DF2C79093DAF4BD4FE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:38:44:26:23:f1:cd:2f:bc:4c:87:b2:f1:
                    be:c8:2c:42:11:60:ed:20:8f:3f:80:11:ad:17:6f:
                    f6:00:7d:3a:da:23:03:1f:16:02:78:54:6a:8e:e0:
                    72:f8:8f:49:d0:3a:9b:80:85:80:8a:00:51:8c:94:
                    34:dd:2a:9d:2a:29:f7:b1:95:68:9a:ef:05:e0:78:
                    26:77:89:41:42:90:0e:32:68:db:d7:b3:18:9b:49:
                    ce:77:72:aa:82:03:56:17:d1:57:5b:27:28:d2:9c:
                    51:9a:01:ee:3e:d2:5f:d0:83:74:bd:94:67:0f:2a:
                    51:f8:91:27:eb:5a:9d:f8:c5:02:6a:25:0a:47:a5:
                    01:63:3a:a6:ea:32:f3:dd:3c:f7:57:c5:eb:d7:8e:
                    66:9f:be:38:89:fe:53:a0:15:03:14:8c:d3:56:01:
                    d6:56:f4:79:23:12:34:2d:0c:20:b6:6f:36:ff:5f:
                    54:e0:5b:2e:7f:fb:e3:fe:9a:f1:ad:2a:38:bf:3b:
                    2a:78:75:fc:11:1f:d7:be:72:d7:7c:63:7b:35:50:
                    7d:a1:82:91:00:44:ca:77:96:6a:5c:c2:34:9c:d9:
                    80:12:e6:b5:d0:34:3c:b2:e8:ae:61:0e:e4:12:ce:
                    61:98:d1:fb:22:c6:fc:76:77:94:81:2a:6b:91:77:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:64:25:B4:50:FC:2B:A8:FA:E7:DF:2C:79:09:3D:AF:4B:D4:FE:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/576425B450FC2BA8FAE7DF2C79093DAF4BD4FE1A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.156.0/22
                  45.7.0.0/22
                  45.174.208.0/22
                  45.234.248.0/22
                  131.196.40.0/22
                  132.255.44.0/22
                IPv6:
                  2804:4cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267388

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:c1:41:ba:9e:d4:76:90:5a:17:27:8c:bb:bd:04:e3:c7:
         01:24:d5:bc:42:44:08:14:6f:5d:f2:04:0f:87:de:3d:2f:06:
         8a:6c:a8:5f:d6:bb:66:4c:23:74:c4:2d:47:c6:52:fc:15:76:
         40:f5:72:99:cf:8d:6c:28:4b:83:b5:c2:16:41:ed:99:61:11:
         4a:5e:0a:67:33:53:bb:37:97:3e:aa:15:94:00:1b:b9:fc:bb:
         17:0b:c5:f8:65:a9:26:8d:14:68:df:0f:b6:88:85:6a:18:b6:
         4c:f7:43:da:7b:a3:0f:3a:10:b9:99:a1:68:42:a5:c1:c5:69:
         34:b4:ad:07:f0:7b:25:61:d6:24:a7:a4:a9:53:db:aa:b9:b1:
         d0:87:41:d0:e3:e7:bf:7d:74:5d:35:78:62:4b:92:81:8c:75:
         68:fd:97:cc:db:32:1f:15:60:4d:ce:be:09:d0:e3:18:e9:24:
         16:06:c1:e0:aa:a1:84:a2:31:e6:cd:83:06:ae:8d:d2:d8:0c:
         a4:44:9b:2d:01:bf:62:b6:44:33:5f:bd:5b:66:12:aa:07:e9:
         3a:c7:eb:28:c0:c4:6d:c9:f8:f8:23:2c:d0:e5:3e:29:23:2e:
         52:f5:08:54:c7:c3:bc:29:35:ee:fe:c4:1a:0f:7c:b9:4c:a9:
         d2:3c:25:24
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUD1FjpYuknzcmj1BHzzi/hezbhIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjQyMTE4NDdaFw0yNDA4MjIyMTIzNDdaMDMxMTAvBgNV
BAMTKDU3NjQyNUI0NTBGQzJCQThGQUU3REYyQzc5MDkzREFGNEJENEZFMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8DhEJiPxzS+8TIey8b7ILEIR
YO0gjz+AEa0Xb/YAfTraIwMfFgJ4VGqO4HL4j0nQOpuAhYCKAFGMlDTdKp0qKfex
lWia7wXgeCZ3iUFCkA4yaNvXsxibSc53cqqCA1YX0VdbJyjSnFGaAe4+0l/Qg3S9
lGcPKlH4kSfrWp34xQJqJQpHpQFjOqbqMvPdPPdXxevXjmafvjiJ/lOgFQMUjNNW
AdZW9HkjEjQtDCC2bzb/X1TgWy5/++P+mvGtKji/Oyp4dfwRH9e+ctd8Y3s1UH2h
gpEARMp3lmpcwjSc2YAS5rXQNDyy6K5hDuQSzmGY0fsixvx2d5SBKmuRd9aNAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXZCW0UPwrqPrn
3yx5CT2vS9T+GjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84NGNQQjZLa3hjUjlYWm9pTDhwaG8zYVlwSjFkdXJLRXNH
SERqcEhidEc3Yy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0Vz
R0hEanBIYnRHN2MvMC81NzY0MjVCNDUwRkMyQkE4RkFFN0RGMkM3OTA5M0RBRjRC
RDRGRTFBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAItBJwDBAItBwADBAIt
rtADBAIt6vgDBAKDxCgDBAKE/ywwDQQCAAIwBwMFACgETLwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBR8MA0GCSqGSIb3DQEBCwUAA4IBAQAV+8FBup7UdpBaFyeM
u70E48cBJNW8QkQIFG9d8gQPh949LwaKbKhf1rtmTCN0xC1HxlL8FXZA9XKZz41s
KEuDtcIWQe2ZYRFKXgpnM1O7N5c+qhWUABu5/LsXC8X4ZakmjRRo3w+2iIVqGLZM
90Pae6MPOhC5maFoQqXBxWk0tK0H8HslYdYkp6SpU9uqubHQh0HQ4+e/fXRdNXhi
S5KBjHVo/ZfM2zIfFWBNzr4J0OMY6SQWBsHgqqGEojHmzYMGro3S2AykRJstAb9i
tkQzX71bZhKqB+k6x+sowMRtyfj4IyzQ5T4pIy5S9QhUx8O8KTXu/sQaD3y5TKnS
PCUk
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org