Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61265445CC0AF18FCB619E3470E1DD8B9CCE1635.cer
File:                     61265445CC0AF18FCB619E3470E1DD8B9CCE1635.cer (raw, json)
Hash identifier:          JJCkPlYUavCtWKJHTPnEhuA+jr7G+q1slQ0bmlwQ4m0=
Subject key identifier:   61:26:54:45:CC:0A:F1:8F:CB:61:9E:34:70:E1:DD:8B:9C:CE:16:35
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16175183F9E259849F5DBD6E93F9C58C6C9B0051
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/61265445CC0AF18FCB619E3470E1DD8B9CCE1635.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 23:18:05 +0000
Certificate not after:    Wed 27 Mar 2024 23:23:05 +0000
Subordinate resources:    AS: 266545
                          IP: 45.6.192.0/22
                          IP: 2804:3da8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:17:51:83:f9:e2:59:84:9f:5d:bd:6e:93:f9:c5:8c:6c:9b:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 23:18:05 2023 GMT
            Not After : Mar 27 23:23:05 2024 GMT
        Subject: CN=61265445CC0AF18FCB619E3470E1DD8B9CCE1635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:15:ac:33:a0:c2:2d:36:1e:35:ee:07:af:
                    2f:fb:24:82:1b:dc:03:b8:22:e2:82:8c:c2:3c:3c:
                    76:b3:50:76:c6:fb:11:06:1f:02:cb:46:52:03:34:
                    c4:92:7b:e0:53:24:a6:57:ed:c1:ea:fc:24:c7:2a:
                    93:d0:32:15:a6:5d:32:21:cd:45:47:1d:ef:22:f6:
                    9f:2d:18:6d:86:56:aa:cd:33:6d:a2:40:49:03:2f:
                    b5:20:88:3f:66:14:34:7c:51:99:eb:e6:cf:91:f9:
                    83:46:a6:e4:1c:8e:56:75:8e:39:b5:6a:e8:b1:53:
                    95:80:8b:e1:4b:21:06:e5:5a:eb:13:32:90:a1:ff:
                    41:a4:11:7e:db:ef:67:71:56:d5:82:0c:99:71:78:
                    14:93:ac:18:38:2c:ee:dd:96:66:1c:4a:c6:e4:e1:
                    f1:8d:b1:b8:89:15:65:2f:49:07:c5:e3:44:75:74:
                    74:20:06:2a:24:82:0b:d9:7e:0a:33:ac:e2:e3:97:
                    21:63:72:2b:e7:79:6c:24:a7:64:8b:2b:66:06:40:
                    05:90:de:0b:64:51:69:0c:11:2a:a6:9f:15:c2:2f:
                    ff:dc:8e:a5:ad:28:b0:40:b6:22:ef:65:b9:ef:3b:
                    98:7a:27:2b:18:0b:fb:b6:b6:78:dd:da:42:2f:63:
                    c4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:26:54:45:CC:0A:F1:8F:CB:61:9E:34:70:E1:DD:8B:9C:CE:16:35
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/61265445CC0AF18FCB619E3470E1DD8B9CCE1635.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.192.0/22
                IPv6:
                  2804:3da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266545

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:96:15:38:d2:bf:e5:c5:a1:8b:2a:be:19:c3:f2:23:6d:
         a1:1f:58:c7:e4:a8:0c:83:bd:7e:26:bd:0c:42:52:8c:10:6d:
         f0:13:e0:0f:ea:6d:99:ed:28:83:4f:58:b7:b4:02:a3:d1:b1:
         d6:3e:5e:4d:f0:a8:7a:1f:9f:14:93:b3:4f:cc:5a:86:47:8c:
         8b:e9:6c:53:45:be:49:0b:ba:45:75:26:1f:82:22:cc:4d:86:
         89:c2:7e:3d:ef:75:06:62:71:8a:c0:cb:46:6a:ba:bf:1f:1b:
         3a:14:53:24:d6:5a:7e:91:8b:52:33:96:4d:9d:e3:8a:29:e3:
         a9:7a:a6:1e:80:6f:69:a9:25:ec:71:26:13:be:c2:66:ed:40:
         71:ea:f9:3c:e1:b4:27:a8:a9:28:2a:02:70:0f:24:af:8a:11:
         bc:bd:ec:a0:95:05:e3:d0:e6:b7:ee:60:2b:76:43:fc:a8:68:
         a6:e3:6c:79:d8:5c:c2:45:4b:27:d2:11:c0:28:66:be:84:6b:
         a5:9b:15:51:b2:58:82:cc:95:ff:2c:26:a7:24:d5:93:80:e7:
         fc:59:4d:32:2a:62:68:83:6c:9b:75:16:91:72:2c:79:e3:7b:
         f1:ea:2f:bb:13:d6:96:a5:55:1b:bd:ab:3c:53:03:9b:22:f3:
         77:45:ca:22
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFhdRg/niWYSfXb1uk/nFjGybAFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjkyMzE4MDVaFw0yNDAzMjcyMzIzMDVaMDMxMTAvBgNV
BAMTKDYxMjY1NDQ1Q0MwQUYxOEZDQjYxOUUzNDcwRTFERDhCOUNDRTE2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfhWsM6DCLTYeNe4Hry/7JIIb
3AO4IuKCjMI8PHazUHbG+xEGHwLLRlIDNMSSe+BTJKZX7cHq/CTHKpPQMhWmXTIh
zUVHHe8i9p8tGG2GVqrNM22iQEkDL7UgiD9mFDR8UZnr5s+R+YNGpuQcjlZ1jjm1
auixU5WAi+FLIQblWusTMpCh/0GkEX7b72dxVtWCDJlxeBSTrBg4LO7dlmYcSsbk
4fGNsbiJFWUvSQfF40R1dHQgBiokggvZfgozrOLjlyFjcivneWwkp2SLK2YGQAWQ
3gtkUWkMESqmnxXCL//cjqWtKLBAtiLvZbnvO5h6JysYC/u2tnjd2kIvY8SfAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhJlRFzArxj8th
njRw4d2LnM4WNTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80VzIzTmVpNUR2elhYYnh3cjU1d3dzdFZzUzF0ZVZtZkpD
dHBISFJYQmFNNi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80VzIzTmVpNUR2elhYYnh3cjU1d3dzdFZzUzF0ZVZtZkpD
dHBISFJYQmFNNi8wLzYxMjY1NDQ1Q0MwQUYxOEZDQjYxOUUzNDcwRTFERDhCOUND
RTE2MzUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0GwDANBAIAAjAHAwUA
KAQ9qDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEETEwDQYJKoZIhvcNAQELBQAD
ggEBAFi7lhU40r/lxaGLKr4Zw/IjbaEfWMfkqAyDvX4mvQxCUowQbfAT4A/qbZnt
KINPWLe0AqPRsdY+Xk3wqHofnxSTs0/MWoZHjIvpbFNFvkkLukV1Jh+CIsxNhonC
fj3vdQZicYrAy0Zqur8fGzoUUyTWWn6Ri1Izlk2d44op46l6ph6Ab2mpJexxJhO+
wmbtQHHq+TzhtCeoqSgqAnAPJK+KEby97KCVBePQ5rfuYCt2Q/yoaKbjbHnYXMJF
SyfSEcAoZr6Ea6WbFVGyWILMlf8sJqck1ZOA5/xZTTIqYmiDbJt1FpFyLHnje/Hq
L7sT1palVRu9qzxTA5si83dFyiI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org