Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/649E8D45A83049224C738847B14ABCF154352B34.cer
File:                     649E8D45A83049224C738847B14ABCF154352B34.cer (raw, json)
Hash identifier:          0hH4jFApnJhY5JtE++QrShC5B0JAYm/79SFpbkGS//U=
Subject key identifier:   64:9E:8D:45:A8:30:49:22:4C:73:88:47:B1:4A:BC:F1:54:35:2B:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7251A60F6538340004407B865CF5955DF9EA2BC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/649E8D45A83049224C738847B14ABCF154352B34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Oct 2023 15:51:10 +0000
Certificate not after:    Wed 16 Oct 2024 15:56:10 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:51:a6:0f:65:38:34:00:04:40:7b:86:5c:f5:95:5d:f9:ea:2b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 15:51:10 2023 GMT
            Not After : Oct 16 15:56:10 2024 GMT
        Subject: CN=649E8D45A83049224C738847B14ABCF154352B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:84:7c:35:47:5d:6e:2a:61:e2:83:66:c6:
                    fa:3e:33:97:d1:42:9b:c9:8d:5b:bc:b9:dd:bb:83:
                    07:11:dd:93:39:7d:3a:e7:9a:10:98:dd:18:ac:23:
                    78:ff:72:5b:ce:58:4e:34:4d:f0:4f:fb:96:4b:cc:
                    25:8a:ce:60:90:2a:bf:93:6f:14:19:49:3b:a1:cb:
                    ea:bb:ff:3d:9c:78:ad:75:5b:bd:bc:37:f6:72:33:
                    12:b1:a9:97:08:83:22:c1:a2:ad:a4:ee:73:38:8b:
                    91:4d:2c:6a:eb:9a:d5:5e:cd:21:4f:95:b2:f9:ae:
                    aa:e5:25:c5:e6:4c:1e:a6:c6:35:85:70:7e:48:ec:
                    4c:47:61:56:c6:37:79:ee:f2:19:01:bc:40:61:f7:
                    43:33:8d:99:31:38:70:3a:54:ce:8b:fb:67:ca:c1:
                    c7:c1:53:7f:a7:8d:b3:a5:59:91:6d:1b:7d:30:31:
                    a4:ba:a8:23:26:f6:05:a8:c3:40:b3:31:1e:a9:40:
                    2a:dd:f5:10:3d:04:4d:b5:7d:e9:31:25:58:d9:96:
                    f0:68:d7:08:e0:8b:e3:ce:30:1f:25:61:46:15:12:
                    3a:98:c3:73:70:f8:71:8a:0e:f6:44:9d:58:db:95:
                    27:5e:ad:e9:5c:fc:39:2a:45:e7:70:b4:c8:2c:40:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:9E:8D:45:A8:30:49:22:4C:73:88:47:B1:4A:BC:F1:54:35:2B:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/649E8D45A83049224C738847B14ABCF154352B34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:c4:29:04:05:de:31:0d:67:eb:65:dc:57:6b:42:fb:84:
         83:08:90:79:4c:fc:46:65:ff:b9:14:23:4a:dc:38:7e:89:f4:
         76:74:19:98:5a:fb:a4:d4:c4:fd:96:ae:25:2a:bc:5a:de:da:
         93:1f:05:29:5e:a4:b0:48:d4:18:31:71:52:cc:25:b5:63:ee:
         74:76:1a:53:27:c7:d8:ea:c7:8e:62:ef:20:b9:fc:49:e7:be:
         9f:85:3d:6b:18:cb:16:fb:38:20:de:c7:3e:c5:77:64:aa:ee:
         f1:64:58:c7:c5:8d:b2:9b:5f:dc:c0:6b:e6:13:b5:4f:e3:cd:
         4b:03:a5:e6:10:bf:6c:6c:6f:4e:6a:86:05:20:bc:d9:8e:8b:
         56:9e:08:d1:04:68:69:d3:64:ee:1a:b1:e9:a9:34:26:80:8d:
         b8:c6:9f:79:ac:38:71:b0:ae:a1:db:47:c6:7c:ba:c5:ad:11:
         fd:9a:83:10:7f:95:80:53:9b:8a:e8:79:81:df:d8:8a:29:fd:
         b9:bf:5e:d0:0e:c7:e2:af:66:e9:75:39:12:b8:1e:9d:9a:86:
         4c:0d:cc:29:b8:62:86:18:f0:9c:c8:1c:db:37:75:49:ab:32:
         32:10:34:a3:31:c4:4f:f5:fb:6b:5a:b5:f6:95:2a:c7:84:c3:
         07:74:ea:60
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUclGmD2U4NAAEQHuGXPWVXfnqK8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTgxNTUxMTBaFw0yNDEwMTYxNTU2MTBaMDMxMTAvBgNV
BAMTKDY0OUU4RDQ1QTgzMDQ5MjI0QzczODg0N0IxNEFCQ0YxNTQzNTJCMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwYR8NUddbiph4oNmxvo+M5fR
QpvJjVu8ud27gwcR3ZM5fTrnmhCY3RisI3j/clvOWE40TfBP+5ZLzCWKzmCQKr+T
bxQZSTuhy+q7/z2ceK11W728N/ZyMxKxqZcIgyLBoq2k7nM4i5FNLGrrmtVezSFP
lbL5rqrlJcXmTB6mxjWFcH5I7ExHYVbGN3nu8hkBvEBh90MzjZkxOHA6VM6L+2fK
wcfBU3+njbOlWZFtG30wMaS6qCMm9gWow0CzMR6pQCrd9RA9BE21fekxJVjZlvBo
1wjgi+POMB8lYUYVEjqYw3Nw+HGKDvZEnVjblSderelc/DkqRedwtMgsQKPDAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkno1FqDBJIkxz
iEexSrzxVDUrNDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EM3g0cHdyamtIdjgybTFneFRLbnB2OEo1eDRTQ0pmTWJV
S3lOV2lQZHhUZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1i
VUt5TldpUGR4VGYvMC82NDlFOEQ0NUE4MzA0OTIyNEM3Mzg4NDdCMTRBQkNGMTU0
MzUyQjM0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxJ5wwDQQCAAIwBwMF
ACgEJZwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM4kMA0GCSqGSIb3DQEBCwUA
A4IBAQAWCsQpBAXeMQ1n62XcV2tC+4SDCJB5TPxGZf+5FCNK3Dh+ifR2dBmYWvuk
1MT9lq4lKrxa3tqTHwUpXqSwSNQYMXFSzCW1Y+50dhpTJ8fY6seOYu8gufxJ576f
hT1rGMsW+zgg3sc+xXdkqu7xZFjHxY2ym1/cwGvmE7VP481LA6XmEL9sbG9OaoYF
ILzZjotWngjRBGhp02TuGrHpqTQmgI24xp95rDhxsK6h20fGfLrFrRH9moMQf5WA
U5uK6HmB39iKKf25v17QDsfir2bpdTkSuB6dmoZMDcwpuGKGGPCcyBzbN3VJqzIy
EDSjMcRP9ftrWrX2lSrHhMMHdOpg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org