Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
File:                     615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer (raw, json)
Hash identifier:          1n/Poym5rBw3UFj+Td4/sTVJqAVHegXdFSyTz3rkSAA=
Subject key identifier:   61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       250FB9C07090860F4165A74340B960AB3780C2FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 21:23:10 +0000
Certificate not after:    Tue 05 Nov 2024 21:28:10 +0000
Subordinate resources:    AS: 271042
                          IP: 177.36.16.0/22
                          IP: 2804:7560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0f:b9:c0:70:90:86:0f:41:65:a7:43:40:b9:60:ab:37:80:c2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 21:23:10 2023 GMT
            Not After : Nov  5 21:28:10 2024 GMT
        Subject: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:28:95:dc:46:e2:74:34:b2:22:ca:8a:cd:
                    13:c5:52:f7:8a:14:62:4a:bb:17:24:33:ba:92:45:
                    d7:a8:8a:aa:b7:3e:29:64:ec:0e:dd:f1:99:74:04:
                    06:9e:a7:b1:38:09:79:bf:d3:fa:da:f9:5c:19:45:
                    6f:06:8b:99:35:e5:69:e2:85:e6:57:e9:07:68:f6:
                    b3:61:aa:7e:7f:28:3b:eb:38:41:dc:72:82:41:4c:
                    f0:a1:3f:55:59:4a:2c:b0:75:9f:ee:c3:e0:21:10:
                    c9:62:77:15:33:72:29:72:0e:54:e1:0e:74:16:7b:
                    6b:79:12:f7:cf:bb:11:d0:57:9c:b0:93:dd:94:e8:
                    e1:30:d7:27:18:41:b0:9c:b0:52:e4:59:d4:9b:b1:
                    5f:d0:1f:0f:81:58:64:0c:39:a1:1a:67:53:94:5b:
                    2e:0d:d4:09:bd:ab:fb:0e:81:e4:cf:f1:57:b3:22:
                    57:b1:42:cb:cd:65:c6:7a:51:cf:00:15:91:7d:50:
                    87:1b:5c:be:43:57:40:b2:71:a8:6a:69:f6:4e:9e:
                    7f:fc:38:c0:7a:db:24:12:89:03:43:86:35:d2:0d:
                    21:04:2a:4b:0b:95:4a:44:73:d5:4d:2e:44:b6:9a:
                    e0:79:08:70:8b:ff:02:73:0c:40:44:3c:df:2a:78:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.16.0/22
                IPv6:
                  2804:7560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271042

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:69:4f:5e:2e:c1:87:8f:c0:ca:29:f7:4d:a4:38:21:de:
         08:77:7d:92:5d:30:e3:6e:82:ac:77:78:ea:33:7a:49:ef:43:
         84:98:1c:4d:14:22:cb:23:4f:f6:6f:07:90:2c:ea:83:ba:67:
         7f:47:a1:d1:00:70:a7:4c:19:61:68:24:51:9c:ec:64:3d:63:
         39:27:83:1e:1f:0d:a4:e6:37:29:7d:bd:27:18:70:77:7a:73:
         a7:75:0a:bb:92:a4:cf:9e:a2:d4:76:06:a2:34:e3:73:51:cb:
         a5:53:2c:79:77:6a:5f:95:1b:4f:9b:92:03:ec:ab:a1:b0:c6:
         1c:62:77:4a:ce:e0:4a:ce:58:bf:1a:53:a9:11:99:d0:3d:92:
         c4:f3:56:89:2c:b6:34:3d:5f:2f:59:b4:1b:63:49:eb:62:3a:
         da:b7:3f:d1:7b:45:b3:1b:58:56:fc:9f:91:a1:2e:f5:03:72:
         7a:f6:cb:89:98:7a:a6:b7:2e:b1:ba:ed:85:be:77:12:f1:62:
         71:1d:91:ab:46:0c:7d:a6:c9:73:d5:f3:b4:56:76:6e:c4:70:
         65:31:65:6e:9a:ef:3e:3c:6a:a0:cf:23:33:53:c7:92:b6:e0:
         59:b5:eb:f6:66:38:43:d5:26:e3:66:85:28:d2:72:65:c5:09:
         36:bd:72:d8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUJQ+5wHCQhg9BZadDQLlgqzeAwvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDcyMTIzMTBaFw0yNDExMDUyMTI4MTBaMDMxMTAvBgNV
BAMTKDYxNUZBRUE0Q0NEQzdGNzAyRDRGNUZBNEMxMjU4Mzk1NjE3OTA3M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMiiV3EbidDSyIsqKzRPFUveK
FGJKuxckM7qSRdeoiqq3Pilk7A7d8Zl0BAaep7E4CXm/0/ra+VwZRW8Gi5k15Wni
heZX6Qdo9rNhqn5/KDvrOEHccoJBTPChP1VZSiywdZ/uw+AhEMlidxUzcilyDlTh
DnQWe2t5EvfPuxHQV5ywk92U6OEw1ycYQbCcsFLkWdSbsV/QHw+BWGQMOaEaZ1OU
Wy4N1Am9q/sOgeTP8VezIlexQsvNZcZ6Uc8AFZF9UIcbXL5DV0CycahqafZOnn/8
OMB62yQSiQNDhjXSDSEEKksLlUpEc9VNLkS2muB5CHCL/wJzDEBEPN8qeJk1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhX66kzNx/cC1P
X6TBJYOVYXkHOjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HZjJZQVFBNGVpa05wRHQ4VzZzVUREMlV4eGhVem5YOWpC
ZHF2S3JiMmZkOC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HZjJZQVFBNGVpa05wRHQ4VzZzVUREMlV4eGhVem5YOWpC
ZHF2S3JiMmZkOC8wLzYxNUZBRUE0Q0NEQzdGNzAyRDRGNUZBNEMxMjU4Mzk1NjE3
OTA3M0EubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArEkEDANBAIAAjAHAwUA
KAR1YDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIsIwDQYJKoZIhvcNAQELBQAD
ggEBAKljaU9eLsGHj8DKKfdNpDgh3gh3fZJdMONugqx3eOozeknvQ4SYHE0UIssj
T/ZvB5As6oO6Z39HodEAcKdMGWFoJFGc7GQ9Yzkngx4fDaTmNyl9vScYcHd6c6d1
CruSpM+eotR2BqI043NRy6VTLHl3al+VG0+bkgPsq6Gwxhxid0rO4ErOWL8aU6kR
mdA9ksTzVokstjQ9Xy9ZtBtjSetiOtq3P9F7RbMbWFb8n5GhLvUDcnr2y4mYeqa3
LrG67YW+dxLxYnEdkatGDH2myXPV87RWdm7EcGUxZW6a7z48aqDPIzNTx5K24Fm1
6/ZmOEPVJuNmhSjScmXFCTa9ctg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org