Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/614057E825455239FB0BB10B8319C073DCEBD601.cer
File:                     614057E825455239FB0BB10B8319C073DCEBD601.cer (raw, json)
Hash identifier:          2FAW1H3hUc0u/QLt6TsA4Ux3sgDCKue3vXM0tMYL38o=
Subject key identifier:   61:40:57:E8:25:45:52:39:FB:0B:B1:0B:83:19:C0:73:DC:EB:D6:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       226BE7E8083DC4120788B462FF8268559BB7864F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/614057E825455239FB0BB10B8319C073DCEBD601.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Jun 2023 15:14:25 +0000
Certificate not after:    Tue 11 Jun 2024 15:19:25 +0000
Subordinate resources:    AS: 266546
                          IP: 160.238.196.0/22
                          IP: 2804:3dac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6b:e7:e8:08:3d:c4:12:07:88:b4:62:ff:82:68:55:9b:b7:86:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 13 15:14:25 2023 GMT
            Not After : Jun 11 15:19:25 2024 GMT
        Subject: CN=614057E825455239FB0BB10B8319C073DCEBD601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:52:b5:0a:03:6b:34:70:df:37:8a:b4:97:
                    a0:db:1f:fa:80:85:ca:f3:3b:3e:8b:55:72:e6:82:
                    b4:d9:df:d3:0e:e6:c6:50:3a:15:5e:55:c1:9d:d5:
                    5c:e5:54:47:c1:e8:15:3a:d7:dd:85:a3:5b:92:6b:
                    46:57:b5:15:01:82:05:c9:89:a9:f8:91:c0:fc:25:
                    ff:a5:45:97:3f:9d:f5:65:32:92:ae:dd:3f:2a:09:
                    ba:e1:78:99:3b:a7:0c:ce:08:9a:a5:54:a8:a2:56:
                    d5:32:35:cf:b3:19:36:b1:cb:f0:c3:f1:df:9e:bb:
                    6a:1c:d3:13:6c:4a:4f:39:fa:ee:8e:e8:e9:d3:69:
                    81:48:ab:c9:c8:31:cf:2f:43:fd:9c:88:63:1e:7e:
                    80:ae:6b:1d:47:44:ee:01:ea:95:0f:2b:56:9a:fb:
                    c8:a6:34:82:f9:85:99:fa:93:62:d3:e6:05:17:67:
                    43:31:4a:58:93:11:db:29:fc:0e:72:3b:dc:d3:7e:
                    ad:5e:a0:16:49:77:50:f2:38:14:49:5d:63:77:40:
                    33:fc:4c:e7:e6:a9:3e:31:cd:e0:09:4e:3b:31:e9:
                    72:f9:07:27:88:65:f4:7a:35:75:49:9d:3c:d9:9b:
                    6b:ff:fb:09:0b:e5:1c:2f:fd:3c:4a:8e:24:5d:c3:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:40:57:E8:25:45:52:39:FB:0B:B1:0B:83:19:C0:73:DC:EB:D6:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/614057E825455239FB0BB10B8319C073DCEBD601.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.196.0/22
                IPv6:
                  2804:3dac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266546

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:85:d8:37:b1:e6:07:3a:ee:81:f4:e8:8a:1f:fe:ce:af:
         79:1d:9a:ce:92:a3:35:09:f2:90:b6:84:77:ea:dc:c7:d1:60:
         9f:54:61:77:ac:97:2e:b8:2b:6c:32:04:7f:e7:36:83:ed:97:
         22:70:67:5f:a4:69:03:4a:13:a0:9b:44:f3:30:87:1f:68:a9:
         c3:3a:b9:97:f8:53:e1:cf:61:4c:b7:98:c3:49:d2:c3:e6:34:
         95:83:31:e5:f1:d6:1c:ff:0a:0c:c3:f6:d2:36:69:2b:42:28:
         3a:3e:ff:69:52:4f:f8:88:de:ba:65:ae:cf:98:88:d5:56:fd:
         7c:0e:e5:1c:26:06:d4:c8:43:95:9f:e7:8f:a7:41:59:5f:36:
         f1:49:41:9b:08:d2:59:45:69:bd:8d:a2:46:90:10:bf:87:75:
         47:50:52:f1:3d:69:e4:69:4a:09:5e:de:76:09:53:48:03:6d:
         89:8d:c1:48:99:c1:69:8a:8d:8b:01:e6:4f:6c:60:dd:a8:6c:
         69:c7:39:fd:c1:3a:f5:c0:36:0f:8e:25:ac:ea:79:83:ac:86:
         0d:7a:b8:44:7c:c6:ad:25:90:36:30:d1:21:c0:de:c7:71:85:
         ef:f7:b1:e0:ef:75:bb:69:02:e0:f7:11:47:cc:eb:10:81:7b:
         3a:8f:a7:8b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUImvn6Ag9xBIHiLRi/4JoVZu3hk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MTMxNTE0MjVaFw0yNDA2MTExNTE5MjVaMDMxMTAvBgNV
BAMTKDYxNDA1N0U4MjU0NTUyMzlGQjBCQjEwQjgzMTlDMDczRENFQkQ2MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oVK1CgNrNHDfN4q0l6DbH/qA
hcrzOz6LVXLmgrTZ39MO5sZQOhVeVcGd1VzlVEfB6BU6192Fo1uSa0ZXtRUBggXJ
ian4kcD8Jf+lRZc/nfVlMpKu3T8qCbrheJk7pwzOCJqlVKiiVtUyNc+zGTaxy/DD
8d+eu2oc0xNsSk85+u6O6OnTaYFIq8nIMc8vQ/2ciGMefoCuax1HRO4B6pUPK1aa
+8imNIL5hZn6k2LT5gUXZ0MxSliTEdsp/A5yO9zTfq1eoBZJd1DyOBRJXWN3QDP8
TOfmqT4xzeAJTjsx6XL5ByeIZfR6NXVJnTzZm2v/+wkL5Rwv/TxKjiRdwyTXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhQFfoJUVSOfsL
sQuDGcBz3OvWATAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FaGdEMVRoSENOTVV6MmtBRGtNV0p0ZVNmcG5UTnB3UWh4
RThoZTJQWFdFei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRWhnRDFUaEhDTk1VejJrQURrTVdKdGVTZnBuVE5wd1Fo
eEU4aGUyUFhXRXovMC82MTQwNTdFODI1NDU1MjM5RkIwQkIxMEI4MzE5QzA3M0RD
RUJENjAxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKg7sQwDQQCAAIwBwMF
ACgEPawwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBEyMA0GCSqGSIb3DQEBCwUA
A4IBAQAztYXYN7HmBzrugfToih/+zq95HZrOkqM1CfKQtoR36tzH0WCfVGF3rJcu
uCtsMgR/5zaD7ZcicGdfpGkDShOgm0TzMIcfaKnDOrmX+FPhz2FMt5jDSdLD5jSV
gzHl8dYc/woMw/bSNmkrQig6Pv9pUk/4iN66Za7PmIjVVv18DuUcJgbUyEOVn+eP
p0FZXzbxSUGbCNJZRWm9jaJGkBC/h3VHUFLxPWnkaUoJXt52CVNIA22JjcFImcFp
io2LAeZPbGDdqGxpxzn9wTr1wDYPjiWs6nmDrIYNerhEfMatJZA2MNEhwN7HcYXv
97Hg73W7aQLg9xFHzOsQgXs6j6eL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org