Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/64F420F8784014FABFBC1041CAA9D39011085982.cer
File:                     64F420F8784014FABFBC1041CAA9D39011085982.cer (raw, json)
Hash identifier:          o3nP190jhlWbSpQ0AgLwzcehcWleyQSF3b+cs8aU6Uo=
Subject key identifier:   64:F4:20:F8:78:40:14:FA:BF:BC:10:41:CA:A9:D3:90:11:08:59:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       358919E78BE96D6129FD0881E77F5D05B0C136C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/64F420F8784014FABFBC1041CAA9D39011085982.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 20:57:29 +0000
Certificate not after:    Wed 08 May 2024 21:02:29 +0000
Subordinate resources:    AS: 269072
                          IP: 45.177.228.0/23
                          IP: 2804:5f08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:89:19:e7:8b:e9:6d:61:29:fd:08:81:e7:7f:5d:05:b0:c1:36:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 10 20:57:29 2023 GMT
            Not After : May  8 21:02:29 2024 GMT
        Subject: CN=64F420F8784014FABFBC1041CAA9D39011085982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:c8:eb:09:12:2c:ad:61:27:95:b6:79:92:
                    96:3b:42:71:1b:9f:9b:b3:b9:63:4f:dc:c6:d0:7c:
                    8a:25:bd:be:e6:dc:35:3d:aa:3d:4f:88:e6:36:ae:
                    46:91:94:55:51:1b:a9:0f:18:d3:75:07:2b:d8:9d:
                    8c:3f:69:20:f3:06:54:b1:1f:71:02:9e:65:2b:61:
                    90:65:ae:8f:b4:3e:87:73:21:6c:76:6b:a7:7f:e0:
                    6c:61:ff:cc:c0:ae:d3:b8:f4:5e:40:13:0d:d3:31:
                    e5:2c:6a:94:28:28:6a:c1:9a:11:c3:ee:de:9b:1f:
                    f4:83:de:0f:8b:b2:76:cc:ed:2c:71:d0:ef:04:b9:
                    5c:cd:05:67:3d:54:4a:e3:e3:de:19:6c:5a:a2:47:
                    b1:7d:de:1b:8b:e7:47:2b:c4:c1:d1:97:03:de:23:
                    05:90:ac:7b:c1:39:96:1a:d2:13:5e:14:b1:c8:58:
                    d7:c9:b6:6d:a7:1b:ad:49:30:cf:85:3b:d8:ac:50:
                    23:cd:f8:9d:df:0a:4f:b3:94:50:7e:26:3f:cc:48:
                    ef:a7:a4:1a:a7:39:a2:51:48:80:ba:15:23:78:97:
                    9f:a0:25:3d:4e:05:e0:6f:89:76:8b:20:1d:44:21:
                    45:28:94:0b:19:48:50:8b:6a:05:08:8d:0f:8b:14:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:F4:20:F8:78:40:14:FA:BF:BC:10:41:CA:A9:D3:90:11:08:59:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/64F420F8784014FABFBC1041CAA9D39011085982.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.228.0/23
                IPv6:
                  2804:5f08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269072

    Signature Algorithm: sha256WithRSAEncryption
         72:1a:7d:4f:99:cc:de:da:45:ef:13:07:d6:7b:85:a0:8a:4e:
         fd:ed:ec:6c:ee:dd:77:a0:92:7b:21:93:c2:28:f6:43:85:ab:
         33:dc:da:65:cc:5d:12:bf:76:48:f4:5c:8f:e6:b5:47:0b:d0:
         31:62:19:af:87:51:60:72:c2:0d:8d:8e:b7:1a:b4:a3:1d:5b:
         1a:63:13:95:c0:04:31:1c:8c:49:63:30:f0:ca:84:12:28:8b:
         de:aa:c1:f0:0d:df:18:17:c8:e3:2a:88:33:51:6d:8b:66:21:
         89:a4:f7:82:97:a0:af:ba:a7:f3:6e:50:87:c9:9c:fd:09:1f:
         52:0f:5f:b1:d9:fc:6d:61:1e:e3:d4:ae:d4:4b:07:45:84:e7:
         79:77:12:aa:ec:06:5e:6f:de:15:59:93:f6:b9:ff:ce:45:c8:
         be:29:9c:6d:44:3d:9c:dc:14:08:9b:0b:0c:72:df:bf:36:c5:
         7f:9f:4d:ad:4a:62:01:fe:a7:9b:ff:b5:d8:b9:8e:0b:49:fc:
         f1:b6:8c:1a:cd:34:4f:46:eb:d0:83:e2:42:48:ab:b0:3a:7f:
         93:ef:9b:f9:d6:7f:2e:4f:f5:37:e1:1d:6d:71:ab:b4:8c:96:
         42:ce:7a:fa:0f:a9:a7:e6:27:b7:ab:65:1a:17:f5:33:6f:32:
         47:8a:7c:14
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUNYkZ54vpbWEp/QiB539dBbDBNsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTAyMDU3MjlaFw0yNDA1MDgyMTAyMjlaMDMxMTAvBgNV
BAMTKDY0RjQyMEY4Nzg0MDE0RkFCRkJDMTA0MUNBQTlEMzkwMTEwODU5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeMjrCRIsrWEnlbZ5kpY7QnEb
n5uzuWNP3MbQfIolvb7m3DU9qj1PiOY2rkaRlFVRG6kPGNN1ByvYnYw/aSDzBlSx
H3ECnmUrYZBlro+0PodzIWx2a6d/4Gxh/8zArtO49F5AEw3TMeUsapQoKGrBmhHD
7t6bH/SD3g+LsnbM7Sxx0O8EuVzNBWc9VErj494ZbFqiR7F93huL50crxMHRlwPe
IwWQrHvBOZYa0hNeFLHIWNfJtm2nG61JMM+FO9isUCPN+J3fCk+zlFB+Jj/MSO+n
pBqnOaJRSIC6FSN4l5+gJT1OBeBviXaLIB1EIUUolAsZSFCLagUIjQ+LFF4nAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRk9CD4eEAU+r+8
EEHKqdOQEQhZgjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GY29TVzRrTDd4Y203N2pKQWc3QVZqUVVmWDZiV2t0ZU52
a1Y3S0hRSzV5ei8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GY29TVzRrTDd4Y203N2pKQWc3QVZqUVVmWDZiV2t0ZU52
a1Y3S0hRSzV5ei8wLzY0RjQyMEY4Nzg0MDE0RkFCRkJDMTA0MUNBQTlEMzkwMTEw
ODU5ODIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS2x5DANBAIAAjAHAwUA
KARfCDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGxAwDQYJKoZIhvcNAQELBQAD
ggEBAHIafU+ZzN7aRe8TB9Z7haCKTv3t7Gzu3Xegknshk8Io9kOFqzPc2mXMXRK/
dkj0XI/mtUcL0DFiGa+HUWBywg2NjrcatKMdWxpjE5XABDEcjEljMPDKhBIoi96q
wfAN3xgXyOMqiDNRbYtmIYmk94KXoK+6p/NuUIfJnP0JH1IPX7HZ/G1hHuPUrtRL
B0WE53l3EqrsBl5v3hVZk/a5/85FyL4pnG1EPZzcFAibCwxy3782xX+fTa1KYgH+
p5v/tdi5jgtJ/PG2jBrNNE9G69CD4kJIq7A6f5Pvm/nWfy5P9TfhHW1xq7SMlkLO
evoPqafmJ7erZRoX9TNvMkeKfBQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org