Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/624E8F50A83B113E9FD8C4A256DF937051749585.cer
File:                     624E8F50A83B113E9FD8C4A256DF937051749585.cer (raw, json)
Hash identifier:          W3sblWu2Pqo+V9IfYiai/yXsutomK24hZqpGpVsxBSU=
Subject key identifier:   62:4E:8F:50:A8:3B:11:3E:9F:D8:C4:A2:56:DF:93:70:51:74:95:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       139DAC9D3607E313223440D91C7BA046E65BC4AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/624E8F50A83B113E9FD8C4A256DF937051749585.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 15:02:22 +0000
Certificate not after:    Fri 21 Oct 2022 15:07:22 +0000
Subordinate resources:    AS: 264512
                          IP: 132.255.228.0/22
                          IP: 138.255.200.0/22
                          IP: 2804:20c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9d:ac:9d:36:07:e3:13:22:34:40:d9:1c:7b:a0:46:e6:5b:c4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 15:02:22 2021 GMT
            Not After : Oct 21 15:07:22 2022 GMT
        Subject: CN=624E8F50A83B113E9FD8C4A256DF937051749585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:74:fa:2b:e1:ab:0c:55:3a:19:c7:72:df:
                    65:19:34:5f:0e:e4:11:73:d5:d0:79:75:08:4b:0a:
                    b1:4d:df:b5:b4:6e:49:f5:e1:f1:40:7d:a6:9d:99:
                    1e:20:20:51:6e:5f:07:90:8e:b9:e5:3c:b6:a3:f2:
                    83:83:f7:68:41:6c:9d:eb:bd:b3:78:f8:0d:1e:13:
                    62:62:50:98:a8:a9:a5:bc:97:fa:0e:c2:a6:20:df:
                    ad:2c:12:c7:1a:aa:16:6d:b9:63:e3:75:eb:01:c1:
                    c6:26:2e:5d:73:b3:24:25:29:3d:8a:f5:26:de:2f:
                    d5:17:e0:4c:62:f2:6b:aa:83:5e:1f:8e:f2:7c:06:
                    17:9c:d1:57:36:60:8f:21:f1:f2:ca:c4:db:80:0e:
                    8f:ae:8b:e1:3d:6a:7c:9d:ba:ad:ca:9b:67:b4:02:
                    56:d4:0d:4f:1e:5f:45:2b:b4:ab:10:fb:44:fb:f2:
                    a5:57:35:c4:b2:1d:8d:75:0d:22:24:67:ec:15:b8:
                    65:b2:0a:22:ab:01:e6:55:9c:c8:87:b2:34:89:bb:
                    81:10:bc:2e:51:ec:75:76:4c:5d:ab:42:d0:36:ee:
                    00:37:6a:97:17:65:ce:c3:d4:d2:30:32:32:a6:8d:
                    6b:94:85:12:a4:39:bb:7e:8d:79:bc:5d:3b:c5:9d:
                    ad:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:4E:8F:50:A8:3B:11:3E:9F:D8:C4:A2:56:DF:93:70:51:74:95:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/624E8F50A83B113E9FD8C4A256DF937051749585.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.228.0/22
                  138.255.200.0/22
                IPv6:
                  2804:20c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264512

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:24:c1:89:25:20:0c:bf:39:a0:23:30:34:f7:59:f5:0b:
         62:5e:be:6e:3e:80:fa:80:a7:e7:87:0d:e8:70:fd:fe:7f:59:
         ee:90:4e:b2:aa:9d:13:05:2f:4b:a5:44:bf:4c:0b:18:56:64:
         b0:07:ae:75:11:fb:07:f5:01:fc:c4:0d:db:d7:5e:ae:52:71:
         76:62:d4:9e:99:29:f4:b9:9b:78:f7:53:3d:df:0f:c4:30:a2:
         cf:b7:05:0d:05:b2:48:6d:6d:1c:8e:f7:15:39:23:2c:89:20:
         0d:16:c4:e8:cd:c0:73:7e:6b:b8:d7:6e:d6:41:df:64:03:da:
         e6:14:51:f9:02:c6:e2:be:e2:65:70:9c:a6:b0:2a:d3:00:06:
         63:77:42:d0:e3:f7:fe:ef:0e:0e:29:f2:1a:46:29:fd:cd:29:
         03:9c:b0:30:37:83:56:da:16:6a:53:71:11:d8:a3:38:a3:f7:
         86:16:65:c5:5e:ac:66:44:b7:98:a5:33:e4:df:26:e1:c0:79:
         61:d3:40:0f:45:93:cc:f1:3c:f6:77:c8:13:2d:f4:b4:b5:af:
         65:be:63:f0:a8:0a:9e:51:cf:f4:be:c3:49:80:79:72:0a:15:
         0e:67:ac:31:34:c5:68:db:b1:76:5a:41:d0:8c:4e:7a:e4:b5:
         36:5e:ff:8d
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUE52snTYH4xMiNEDZHHugRuZbxK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEwMjIxNTAyMjJaFw0yMjEwMjExNTA3MjJaMDMxMTAvBgNV
BAMTKDYyNEU4RjUwQTgzQjExM0U5RkQ4QzRBMjU2REY5MzcwNTE3NDk1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2nT6K+GrDFU6Gcdy32UZNF8O
5BFz1dB5dQhLCrFN37W0bkn14fFAfaadmR4gIFFuXweQjrnlPLaj8oOD92hBbJ3r
vbN4+A0eE2JiUJioqaW8l/oOwqYg360sEscaqhZtuWPjdesBwcYmLl1zsyQlKT2K
9SbeL9UX4Exi8muqg14fjvJ8Bhec0Vc2YI8h8fLKxNuADo+ui+E9anyduq3Km2e0
AlbUDU8eX0UrtKsQ+0T78qVXNcSyHY11DSIkZ+wVuGWyCiKrAeZVnMiHsjSJu4EQ
vC5R7HV2TF2rQtA27gA3apcXZc7D1NIwMjKmjWuUhRKkObt+jXm8XTvFna3ZAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiTo9QqDsRPp/Y
xKJW35NwUXSVhTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FWnhSYkpjWGhCTTVva20xNlQyZHJTZUpuQm9nb2ZETDQx
dlNkRmg5UlJXTS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FWnhSYkpjWGhCTTVva20xNlQyZHJTZUpuQm9nb2ZETDQx
dlNkRmg5UlJXTS8wLzYyNEU4RjUwQTgzQjExM0U5RkQ4QzRBMjU2REY5MzcwNTE3
NDk1ODUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoT/5AMEAor/yDANBAIA
AjAHAwUAKAQgwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECUAwDQYJKoZIhvcN
AQELBQADggEBABNsJMGJJSAMvzmgIzA091n1C2Jevm4+gPqAp+eHDehw/f5/We6Q
TrKqnRMFL0ulRL9MCxhWZLAHrnUR+wf1AfzEDdvXXq5ScXZi1J6ZKfS5m3j3Uz3f
D8Qwos+3BQ0FskhtbRyO9xU5IyyJIA0WxOjNwHN+a7jXbtZB32QD2uYUUfkCxuK+
4mVwnKawKtMABmN3QtDj9/7vDg4p8hpGKf3NKQOcsDA3g1baFmpTcRHYozij94YW
ZcVerGZEt5ilM+TfJuHAeWHTQA9Fk8zxPPZ3yBMt9LS1r2W+Y/CoCp5Rz/S+w0mA
eXIKFQ5nrDE0xWjbsXZaQdCMTnrktTZe/40=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org