Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.cer
File:                     644F0E6C277C2D5FE0F38192DD116F10AC91E33A.cer (raw, json)
Hash identifier:          L0plPBd3k7d6zHblSPsZlUXxYmQyKUNN46GqpPCzUpc=
Subject key identifier:   64:4F:0E:6C:27:7C:2D:5F:E0:F3:81:92:DD:11:6F:10:AC:91:E3:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       038CD4B5966070B3393608BDC346214199C0F654
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 18:06:19 +0000
Certificate not after:    Fri 20 Sep 2024 18:11:19 +0000
Subordinate resources:    AS: 268888
                          IP: 45.175.72.0/22
                          IP: 2804:5c1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8c:d4:b5:96:60:70:b3:39:36:08:bd:c3:46:21:41:99:c0:f6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 18:06:19 2023 GMT
            Not After : Sep 20 18:11:19 2024 GMT
        Subject: CN=644F0E6C277C2D5FE0F38192DD116F10AC91E33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:21:d0:1e:f7:6a:4f:85:ed:4f:cc:0d:6e:
                    ea:31:6e:41:29:aa:24:57:6f:46:67:19:c9:91:2c:
                    52:a9:2a:40:ef:d9:fe:60:15:dc:d7:7a:d1:a3:28:
                    6a:96:84:76:62:7d:91:c9:69:e3:3f:5d:61:0c:46:
                    4f:a8:8b:b7:e3:22:4f:07:fc:ea:11:f7:6b:ab:fb:
                    48:86:3d:25:4a:f3:b8:9a:9f:c3:cb:29:04:e6:b2:
                    b6:21:48:00:8c:03:20:4a:f4:20:39:77:3b:52:a3:
                    cd:9c:d8:56:3f:b1:44:04:a4:20:06:82:46:3f:ae:
                    c1:5a:a1:87:3a:87:af:9d:b4:88:13:df:12:0e:2a:
                    f7:9d:5e:0e:6e:97:bd:31:8d:00:08:e0:70:f0:bb:
                    c3:f7:30:fb:88:32:f3:14:03:be:03:2f:75:f9:cf:
                    2f:3d:0f:dd:dd:7a:31:a7:b8:5e:a7:da:0a:65:d6:
                    0b:48:fb:45:04:98:25:9d:61:c7:52:f0:e3:52:c9:
                    cb:85:41:7d:a1:d6:e9:ca:b8:b9:d7:57:f0:30:b3:
                    10:1a:b2:70:51:18:69:cf:fa:f8:b7:7e:67:98:cc:
                    e7:ff:77:ce:91:e8:8e:71:53:cf:95:82:6e:0d:1c:
                    e8:4b:ee:82:68:ad:99:02:95:df:18:e7:1d:be:48:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:4F:0E:6C:27:7C:2D:5F:E0:F3:81:92:DD:11:6F:10:AC:91:E3:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.72.0/22
                IPv6:
                  2804:5c1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268888

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:04:7f:7f:59:53:d1:fa:32:78:10:40:ba:2c:5c:7f:ca:
         9f:4a:80:4d:48:0b:dd:e1:2a:12:f8:72:2f:4a:3c:8b:19:d9:
         c1:71:12:81:ad:9b:10:8f:29:4e:a6:4b:6c:24:5e:73:65:b8:
         19:92:59:72:05:6d:d0:d2:87:6c:d7:fa:b5:a9:be:ce:e4:e6:
         e0:a3:d1:f6:a4:32:26:b1:a0:94:95:c6:ad:8b:a7:1a:5c:8c:
         15:1f:35:a0:91:bb:fc:4a:25:25:ba:2c:df:28:c4:81:dd:1a:
         ea:cd:2a:05:e7:30:f9:d8:26:7e:19:c3:c6:39:21:3c:4b:bc:
         5c:52:f3:35:64:7d:05:70:c4:ef:e3:ce:78:fd:c6:f4:93:24:
         f0:28:0e:bc:b4:64:3d:1f:22:02:a4:62:98:d9:83:80:75:69:
         75:f3:a1:05:bd:65:85:17:32:92:74:46:a3:6b:d6:34:eb:b3:
         6b:fa:8a:c6:3a:0a:b6:01:a8:42:0e:88:20:75:68:f4:c7:f9:
         5e:b0:5e:55:1b:3f:da:12:62:f2:ab:94:45:9f:3b:ce:a6:d3:
         85:68:f9:3b:0e:2f:2d:c0:38:be:28:21:62:ec:34:0e:77:0b:
         04:ac:a0:a9:2d:22:fc:fd:0c:c8:63:d7:6a:07:a7:77:47:0d:
         0c:6e:a3:8e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUA4zUtZZgcLM5Ngi9w0YhQZnA9lQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjIxODA2MTlaFw0yNDA5MjAxODExMTlaMDMxMTAvBgNV
BAMTKDY0NEYwRTZDMjc3QzJENUZFMEYzODE5MkREMTE2RjEwQUM5MUUzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxyHQHvdqT4XtT8wNbuoxbkEp
qiRXb0ZnGcmRLFKpKkDv2f5gFdzXetGjKGqWhHZifZHJaeM/XWEMRk+oi7fjIk8H
/OoR92ur+0iGPSVK87ian8PLKQTmsrYhSACMAyBK9CA5dztSo82c2FY/sUQEpCAG
gkY/rsFaoYc6h6+dtIgT3xIOKvedXg5ul70xjQAI4HDwu8P3MPuIMvMUA74DL3X5
zy89D93dejGnuF6n2gpl1gtI+0UEmCWdYcdS8ONSycuFQX2h1unKuLnXV/AwsxAa
snBRGGnP+vi3fmeYzOf/d86R6I5xU8+Vgm4NHOhL7oJorZkCld8Y5x2+SLsZAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkTw5sJ3wtX+Dz
gZLdEW8QrJHjOjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zNmtWalpzMXRyY2JTV3BaN2F5RXQxWmdDaUp4S2JBSmhT
V1g4WlEydllwaS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMzZrVmpaczF0cmNiU1dwWjdheUV0MVpnQ2lKeEtiQUpo
U1dYOFpRMnZZcGkvMC82NDRGMEU2QzI3N0MyRDVGRTBGMzgxOTJERDExNkYxMEFD
OTFFMzNBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItr0gwDQQCAAIwBwMF
ACgEXBwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBpYMA0GCSqGSIb3DQEBCwUA
A4IBAQApmgR/f1lT0foyeBBAuixcf8qfSoBNSAvd4SoS+HIvSjyLGdnBcRKBrZsQ
jylOpktsJF5zZbgZkllyBW3Q0ods1/q1qb7O5Obgo9H2pDImsaCUlcati6caXIwV
HzWgkbv8SiUluizfKMSB3RrqzSoF5zD52CZ+GcPGOSE8S7xcUvM1ZH0FcMTv4854
/cb0kyTwKA68tGQ9HyICpGKY2YOAdWl186EFvWWFFzKSdEaja9Y067Nr+orGOgq2
AahCDoggdWj0x/lesF5VGz/aEmLyq5RFnzvOptOFaPk7Di8twDi+KCFi7DQOdwsE
rKCpLSL8/QzIY9dqB6d3Rw0MbqOO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org