Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/648520D55CE6F704F2274F72C43640D9F1EFBD30.cer
File:                     648520D55CE6F704F2274F72C43640D9F1EFBD30.cer (raw, json)
Hash identifier:          4azYkArCnUmPKuR8hrJVfJAUomRVBmvbk2PbuH6T+Xk=
Subject key identifier:   64:85:20:D5:5C:E6:F7:04:F2:27:4F:72:C4:36:40:D9:F1:EF:BD:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74E9F4BA91099E68B5007C74C1421B431BF56D61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/648520D55CE6F704F2274F72C43640D9F1EFBD30.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 12:23:51 +0000
Certificate not after:    Thu 23 May 2024 12:28:51 +0000
Subordinate resources:    AS: 266240
                          IP: 192.140.116.0/22
                          IP: 2804:3ce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e9:f4:ba:91:09:9e:68:b5:00:7c:74:c1:42:1b:43:1b:f5:6d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 12:23:51 2023 GMT
            Not After : May 23 12:28:51 2024 GMT
        Subject: CN=648520D55CE6F704F2274F72C43640D9F1EFBD30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0f:48:2b:b0:70:a4:fc:6e:f3:68:24:3a:e2:
                    36:4e:5e:f5:a0:18:e0:de:d1:ee:44:45:03:83:2c:
                    d8:36:16:fb:fa:0f:59:ba:38:fa:66:69:7a:8a:f0:
                    21:66:46:2c:c0:30:94:62:3a:a7:d9:99:b2:b7:1e:
                    ad:82:1c:a4:5e:5e:9b:96:85:29:44:96:a1:49:46:
                    74:3e:fa:84:5d:8e:88:91:6f:6f:89:90:cf:7d:89:
                    88:7b:6c:f4:fb:0f:f6:75:fb:ac:26:cc:42:b3:9a:
                    30:45:19:3e:af:d8:1e:11:d1:e2:9c:0f:fc:f0:84:
                    3b:8f:53:17:70:a5:b0:cd:c5:a4:f2:15:c8:6a:a4:
                    53:8a:0b:05:a9:71:26:94:3c:de:6c:fe:b2:2b:72:
                    36:0a:75:ce:71:b3:20:fc:58:77:b0:92:ef:88:be:
                    c4:2b:34:b2:ed:34:c4:6e:0a:13:6e:c5:09:ac:a6:
                    05:d6:fa:1e:c2:df:12:13:ff:d6:97:b9:be:d8:db:
                    cb:d6:4f:c0:e9:53:fd:9b:12:42:75:9f:1d:cc:ce:
                    b8:82:a5:d2:3e:a3:83:e9:52:be:8c:23:f3:36:bf:
                    4e:6a:f9:51:bb:96:11:80:c8:3f:3f:c7:b4:2b:1f:
                    db:40:c3:8f:57:89:cd:c7:b5:f8:23:22:5f:3e:cf:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:85:20:D5:5C:E6:F7:04:F2:27:4F:72:C4:36:40:D9:F1:EF:BD:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/648520D55CE6F704F2274F72C43640D9F1EFBD30.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.116.0/22
                IPv6:
                  2804:3ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266240

    Signature Algorithm: sha256WithRSAEncryption
         76:01:1f:2b:c4:11:58:0d:9b:a1:23:29:99:51:b9:c1:0f:c2:
         38:e5:ae:a0:94:52:6f:ea:c4:4f:f6:31:e3:d9:55:b8:bd:d7:
         34:df:28:97:de:5b:80:4f:e5:0f:32:36:ba:6c:4e:4d:0f:72:
         09:3f:a2:d1:32:70:b4:13:0b:12:54:83:f7:55:f1:b2:b6:b1:
         49:11:e4:da:66:99:de:7c:e0:7e:3c:3a:b2:dc:56:d1:49:59:
         1c:7f:89:74:cf:7f:f5:0b:1b:02:0c:8d:90:6f:74:84:9c:60:
         9b:c4:aa:ae:f6:93:f4:13:2f:2c:0a:44:bd:2f:3e:df:b1:ea:
         af:c4:53:e8:6e:98:b4:f3:48:a8:99:73:12:eb:71:0e:db:26:
         f9:5e:c4:16:ad:19:46:6c:43:fc:d2:d4:ed:e6:18:3c:5b:d4:
         e2:b8:89:b5:da:81:bf:6a:bf:19:16:c6:3b:31:cc:d2:d1:ba:
         58:7c:15:2a:45:f1:04:f0:10:76:e9:cf:45:60:cc:7d:45:f6:
         e8:b6:13:2a:ea:21:6c:c1:d6:77:ad:b2:f4:8d:29:8e:68:2c:
         38:44:2a:07:22:30:b2:cb:86:0d:71:da:b5:c5:e7:3d:af:f9:
         a2:d3:a9:d7:95:c1:6e:ac:6b:81:68:4e:5e:78:b2:62:1e:f8:
         e7:cd:db:0b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUdOn0upEJnmi1AHx0wUIbQxv1bWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjUxMjIzNTFaFw0yNDA1MjMxMjI4NTFaMDMxMTAvBgNV
BAMTKDY0ODUyMEQ1NUNFNkY3MDRGMjI3NEY3MkM0MzY0MEQ5RjFFRkJEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtD0grsHCk/G7zaCQ64jZOXvWg
GODe0e5ERQODLNg2Fvv6D1m6OPpmaXqK8CFmRizAMJRiOqfZmbK3Hq2CHKReXpuW
hSlElqFJRnQ++oRdjoiRb2+JkM99iYh7bPT7D/Z1+6wmzEKzmjBFGT6v2B4R0eKc
D/zwhDuPUxdwpbDNxaTyFchqpFOKCwWpcSaUPN5s/rIrcjYKdc5xsyD8WHewku+I
vsQrNLLtNMRuChNuxQmspgXW+h7C3xIT/9aXub7Y28vWT8DpU/2bEkJ1nx3MzriC
pdI+o4PpUr6MI/M2v05q+VG7lhGAyD8/x7QrH9tAw49Xic3HtfgjIl8+z5k1AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkhSDVXOb3BPIn
T3LENkDZ8e+9MDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81S21HYjdld1g2cUdKeDREVnN1YjRVQTVNUHpobktDelp3
UkFKY0hRWHRXaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUttR2I3ZXdYNnFHSng0RFZzdWI0VUE1TVB6aG5LQ3pa
d1JBSmNIUVh0V2gvMC82NDg1MjBENTVDRTZGNzA0RjIyNzRGNzJDNDM2NDBEOUYx
RUZCRDMwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALAjHQwDQQCAAIwBwMF
ACgEPOAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBAAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2AR8rxBFYDZuhIymZUbnBD8I45a6glFJv6sRP9jHj2VW4vdc03yiX3luA
T+UPMja6bE5ND3IJP6LRMnC0EwsSVIP3VfGytrFJEeTaZpnefOB+PDqy3FbRSVkc
f4l0z3/1CxsCDI2Qb3SEnGCbxKqu9pP0Ey8sCkS9Lz7fseqvxFPobpi080iomXMS
63EO2yb5XsQWrRlGbEP80tTt5hg8W9TiuIm12oG/ar8ZFsY7MczS0bpYfBUqRfEE
8BB26c9FYMx9RfbothMq6iFswdZ3rbL0jSmOaCw4RCoHIjCyy4YNcdq1xec9r/mi
06nXlcFurGuBaE5eeLJiHvjnzdsL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org