Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61B839A1A584B33DE2E26067718D221D6539188C.cer
File:                     61B839A1A584B33DE2E26067718D221D6539188C.cer (raw, json)
Hash identifier:          Qcvvwn5TESBGuAjxEevM1eszXnmIvM4+pDFA6eBa1sI=
Subject key identifier:   61:B8:39:A1:A5:84:B3:3D:E2:E2:60:67:71:8D:22:1D:65:39:18:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CED88BD92FA2E0EED3D8B446AF16B21A55973CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/61B839A1A584B33DE2E26067718D221D6539188C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Feb 2023 20:24:17 +0000
Certificate not after:    Thu 01 Feb 2024 20:29:17 +0000
Subordinate resources:    AS: 28352
                          IP: 187.0.48.0/20
                          IP: 189.51.192.0/20
                          IP: 2804:ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ed:88:bd:92:fa:2e:0e:ed:3d:8b:44:6a:f1:6b:21:a5:59:73:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 20:24:17 2023 GMT
            Not After : Feb  1 20:29:17 2024 GMT
        Subject: CN=61B839A1A584B33DE2E26067718D221D6539188C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:74:d2:c9:da:48:b8:b1:51:6d:d7:b5:1c:c4:
                    46:6c:c7:7c:88:7a:7c:7b:21:01:4f:13:f4:ae:e6:
                    6b:16:20:f0:fb:58:aa:a2:a1:6f:3d:6a:7c:9b:1a:
                    90:e4:3d:89:16:1b:0b:5f:27:3b:ce:aa:04:58:fd:
                    1f:a9:55:e7:03:17:fa:4d:11:0d:26:86:6b:d0:21:
                    6d:80:08:89:ac:cc:e8:e0:ea:8d:97:bd:e6:98:14:
                    a6:f2:42:f7:bb:f9:30:5c:51:72:80:13:17:fb:c3:
                    c9:6b:6e:c1:d9:fd:a1:c4:8f:4a:5b:2a:a3:8b:97:
                    5b:95:4b:7c:d4:41:1f:16:ac:4d:25:3f:f8:00:03:
                    c5:d5:b3:d3:b4:14:80:94:67:b9:21:19:e9:e7:84:
                    ea:9d:19:2b:d0:4b:11:9e:25:6a:f9:db:3b:f7:15:
                    e1:13:b4:14:64:53:4d:06:17:13:19:b4:00:6d:93:
                    96:98:a4:0d:15:ac:33:90:c9:d2:e2:98:a2:d5:df:
                    de:66:86:e3:18:07:db:cf:53:33:18:c1:0a:fe:f8:
                    49:b7:b3:a6:25:b9:6f:e1:9d:78:d8:7c:1f:bf:36:
                    f2:b8:d7:11:3c:51:e7:af:08:3c:67:f1:48:19:4a:
                    45:b6:c3:a1:30:96:1a:c6:b1:26:d1:7e:96:62:ee:
                    d9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:B8:39:A1:A5:84:B3:3D:E2:E2:60:67:71:8D:22:1D:65:39:18:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/61B839A1A584B33DE2E26067718D221D6539188C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/20
                  189.51.192.0/20
                IPv6:
                  2804:ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28352

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:34:1d:82:d2:9f:ef:26:ce:2d:44:8c:e6:e8:85:32:dd:
         11:ab:81:1b:19:6d:07:d2:1e:a0:1e:24:f8:50:ab:8d:41:fb:
         7a:2b:ca:c7:d6:87:9b:1f:23:0a:81:22:27:da:4b:8f:20:49:
         b2:5d:39:5d:e4:1b:1a:0c:17:f6:86:cd:13:66:d5:45:13:68:
         82:72:cb:5e:c4:80:0d:de:c1:ff:32:b1:97:9f:bb:0a:da:63:
         e7:f3:46:6d:8e:9f:0b:c8:06:15:8d:bd:26:db:25:a0:5a:f4:
         fe:e1:c2:e5:ae:37:dd:ed:5a:07:c7:b6:51:9a:9b:89:1c:a7:
         8b:6c:5e:ca:f6:ac:77:24:76:29:13:03:2a:66:1f:44:3a:10:
         59:41:48:28:76:92:9e:3c:cb:f0:12:38:9b:22:1f:26:c2:08:
         79:69:f1:77:49:23:24:8a:99:8f:c7:4a:c1:5c:32:df:f2:a5:
         aa:fe:56:22:b6:dc:ce:d4:5e:23:bd:88:49:05:38:71:bf:60:
         c0:a6:c1:d9:9c:df:ed:57:80:d9:e2:e5:da:04:75:a3:a3:8d:
         ba:17:38:a0:c0:87:13:f5:cc:9c:e3:45:a5:51:50:92:35:35:
         00:de:37:12:00:8d:46:46:e1:eb:e4:43:53:7f:89:ff:f0:d0:
         fe:43:89:32
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUfO2IvZL6Lg7tPYtEavFrIaVZc8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMDIyMDI0MTdaFw0yNDAyMDEyMDI5MTdaMDMxMTAvBgNV
BAMTKDYxQjgzOUExQTU4NEIzM0RFMkUyNjA2NzcxOEQyMjFENjUzOTE4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzdNLJ2ki4sVFt17UcxEZsx3yI
enx7IQFPE/Su5msWIPD7WKqioW89anybGpDkPYkWGwtfJzvOqgRY/R+pVecDF/pN
EQ0mhmvQIW2ACImszOjg6o2XveaYFKbyQve7+TBcUXKAExf7w8lrbsHZ/aHEj0pb
KqOLl1uVS3zUQR8WrE0lP/gAA8XVs9O0FICUZ7khGennhOqdGSvQSxGeJWr52zv3
FeETtBRkU00GFxMZtABtk5aYpA0VrDOQydLimKLV395mhuMYB9vPUzMYwQr++Em3
s6YluW/hnXjYfB+/NvK41xE8UeevCDxn8UgZSkW2w6EwlhrGsSbRfpZi7tmNAgMB
AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhuDmhpYSzPeLi
YGdxjSIdZTkYjDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84aTY4NlBiS0xYdkdjRldyNnZwc3lHdVd0N0NEdzNUMVhD
RjVtenF0b2VIcy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84aTY4NlBiS0xYdkdjRldyNnZwc3lHdVd0N0NEdzNUMVhD
RjVtenF0b2VIcy8wLzYxQjgzOUExQTU4NEIzM0RFMkUyNjA2NzcxOEQyMjFENjUz
OTE4OEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLsAMAMEBL0zwDANBAIA
AjAHAwUAKAQK4DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuwDANBgkqhkiG9w0B
AQsFAAOCAQEAePM0HYLSn+8mzi1EjObohTLdEauBGxltB9IeoB4k+FCrjUH7eivK
x9aHmx8jCoEiJ9pLjyBJsl05XeQbGgwX9obNE2bVRRNognLLXsSADd7B/zKxl5+7
Ctpj5/NGbY6fC8gGFY29JtsloFr0/uHC5a433e1aB8e2UZqbiRyni2xeyvasdyR2
KRMDKmYfRDoQWUFIKHaSnjzL8BI4myIfJsIIeWnxd0kjJIqZj8dKwVwy3/Klqv5W
IrbcztReI72ISQU4cb9gwKbB2Zzf7VeA2eLl2gR1o6ONuhc4oMCHE/XMnONFpVFQ
kjU1AN43EgCNRkbh6+RDU3+J//DQ/kOJMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org