Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer
File:                     644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer (raw, json)
Hash identifier:          kjNdGMoW4v979bmQ/HHzoe64vrk8vdGhlTm9hP1VWEo=
Subject key identifier:   64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1736AE0BC2C85E69C5B54E1FBB262DF8744EEA1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Dec 2022 11:46:44 +0000
Certificate not after:    Tue 05 Dec 2023 11:51:44 +0000
Subordinate resources:    AS: 271045
                          IP: 45.65.164.0/22
                          IP: 177.67.160.0/21
                          IP: 201.54.184.0/22
                          IP: 2804:756c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:36:ae:0b:c2:c8:5e:69:c5:b5:4e:1f:bb:26:2d:f8:74:4e:ea:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 11:46:44 2022 GMT
            Not After : Dec  5 11:51:44 2023 GMT
        Subject: CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:c7:27:04:a6:93:40:c1:f0:3c:23:53:bb:
                    f8:fd:d5:e4:92:dd:54:c7:eb:5f:e3:bf:21:e7:4c:
                    4e:b9:c8:64:64:f0:51:f6:11:89:88:c7:e1:bd:51:
                    4f:02:71:e9:74:43:9b:cb:c6:3e:5b:9b:d1:ed:18:
                    63:88:d1:5b:a5:aa:62:92:ac:42:8c:52:02:a1:ff:
                    7d:00:2a:d9:d5:6a:1c:48:d5:d2:5a:44:9b:95:0e:
                    2b:c4:82:b0:8d:0d:9e:08:b2:50:e1:90:bc:21:e3:
                    a8:fa:de:76:38:95:d6:de:32:56:f1:3b:77:7e:57:
                    1c:65:23:c6:ce:56:d7:be:ae:70:38:35:65:8e:8c:
                    19:d0:06:d0:87:d7:89:1d:1f:5a:1d:6a:b9:29:fb:
                    63:8a:dd:b0:b5:a3:9a:0f:ff:34:79:57:cc:13:70:
                    28:5a:f4:1a:05:f9:b7:9f:b4:7e:70:85:f7:fb:40:
                    5b:da:8e:47:59:19:34:66:76:66:56:45:6e:74:42:
                    4c:a9:fb:5e:12:1a:dd:0e:68:16:e6:fd:c3:a3:7c:
                    e4:3f:43:2f:30:36:1f:c8:d8:58:b2:e2:4b:9a:47:
                    26:9d:56:95:83:7a:21:89:94:78:1f:da:20:ea:da:
                    d6:e6:43:89:68:16:c9:dc:8e:31:dd:cc:84:ec:5b:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.164.0/22
                  177.67.160.0/21
                  201.54.184.0/22
                IPv6:
                  2804:756c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271045

    Signature Algorithm: sha256WithRSAEncryption
         ae:8b:c5:c7:7d:64:0d:90:71:1f:65:3b:e6:23:01:e9:a3:34:
         08:9b:bc:4e:a3:84:c8:1a:1c:fc:bf:e1:09:3e:57:12:00:b1:
         a1:be:bb:84:21:98:0d:1e:5c:d1:8f:de:a2:6e:ea:cf:d7:da:
         ec:5b:72:98:55:9e:be:74:e3:ff:cc:ef:21:15:ae:09:20:01:
         57:57:be:d9:98:9a:8c:43:34:6b:fa:27:d3:7c:95:fc:40:c4:
         b3:a2:17:94:a9:9a:3c:4d:98:ab:00:1f:2c:4a:54:f5:c7:10:
         9f:8d:03:8c:34:5e:47:1c:f7:78:11:30:5f:ea:29:9f:0e:f9:
         1b:a0:c9:b3:26:99:51:a3:81:d9:c2:68:b6:61:bd:78:4f:1e:
         bd:83:c9:28:e9:2a:31:85:0c:c4:5a:90:c8:19:38:7e:3f:96:
         c9:a0:28:8b:0e:e8:59:be:81:6e:ab:e7:43:9a:65:ec:71:76:
         27:42:99:12:a4:3d:35:c7:76:87:ab:75:dd:53:c8:66:38:b5:
         e6:71:ff:f8:5c:3a:d2:f7:fa:08:87:40:e3:c9:a6:e1:21:7f:
         4f:2b:9f:2b:14:ff:82:cd:58:13:1f:e1:5d:ca:61:2b:52:28:
         27:a2:06:e9:55:9b:cb:b7:6e:b5:3c:5a:6e:a7:81:97:30:ad:
         43:87:b7:63
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUFzauC8LIXmnFtU4fuyYt+HRO6howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMDYxMTQ2NDRaFw0yMzEyMDUxMTUxNDRaMDMxMTAvBgNV
BAMTKDY0NDUwMkI4RkUxOEFDMUI0MTFCNDBFN0FCQUIzOTU5QzFGNzZERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmgMcnBKaTQMHwPCNTu/j91eSS
3VTH61/jvyHnTE65yGRk8FH2EYmIx+G9UU8Ccel0Q5vLxj5bm9HtGGOI0VulqmKS
rEKMUgKh/30AKtnVahxI1dJaRJuVDivEgrCNDZ4IslDhkLwh46j63nY4ldbeMlbx
O3d+VxxlI8bOVte+rnA4NWWOjBnQBtCH14kdH1odarkp+2OK3bC1o5oP/zR5V8wT
cCha9BoF+beftH5whff7QFvajkdZGTRmdmZWRW50Qkyp+14SGt0OaBbm/cOjfOQ/
Qy8wNh/I2Fiy4kuaRyadVpWDeiGJlHgf2iDq2tbmQ4loFsncjjHdzITsW7pRAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkRQK4/hisG0Eb
QOerqzlZwfdt0DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EY0hWd2RucGJYa0tHbWgyVko4OGJLTmMzODY4N1dNeHNZ
S2djb3gxOUdlZy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EY0hWd2RucGJYa0tHbWgyVko4OGJLTmMzODY4N1dNeHNZ
S2djb3gxOUdlZy8wLzY0NDUwMkI4RkUxOEFDMUI0MTFCNDBFN0FCQUIzOTU5QzFG
NzZERDAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAi1BpAMEA7FDoAMEAsk2
uDANBAIAAjAHAwUAKAR1bDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIsUwDQYJ
KoZIhvcNAQELBQADggEBAK6Lxcd9ZA2QcR9lO+YjAemjNAibvE6jhMgaHPy/4Qk+
VxIAsaG+u4QhmA0eXNGP3qJu6s/X2uxbcphVnr504//M7yEVrgkgAVdXvtmYmoxD
NGv6J9N8lfxAxLOiF5SpmjxNmKsAHyxKVPXHEJ+NA4w0Xkcc93gRMF/qKZ8O+Rug
ybMmmVGjgdnCaLZhvXhPHr2DySjpKjGFDMRakMgZOH4/lsmgKIsO6Fm+gW6r50Oa
ZexxdidCmRKkPTXHdoerdd1TyGY4teZx//hcOtL3+giHQOPJpuEhf08rnysU/4LN
WBMf4V3KYStSKCeiBulVm8u3brU8Wm6ngZcwrUOHt2M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org