Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/663B04E84B40B6C39816F987E77ACDAD976C215F.cer
File:                     663B04E84B40B6C39816F987E77ACDAD976C215F.cer (raw, json)
Hash identifier:          MWcSZMfPcZPmjNlgNCrvdu2Iv2UfieDTtSMEDDEFtUs=
Subject key identifier:   66:3B:04:E8:4B:40:B6:C3:98:16:F9:87:E7:7A:CD:AD:97:6C:21:5F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       464B14B329EA4D258F4F637FF844D0F991C63A7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/663B04E84B40B6C39816F987E77ACDAD976C215F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 02:49:47 +0000
Certificate not after:    Thu 30 May 2024 02:54:47 +0000
Subordinate resources:    AS: 52903
                          IP: 177.11.168.0/21
                          IP: 2804:aa8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4b:14:b3:29:ea:4d:25:8f:4f:63:7f:f8:44:d0:f9:91:c6:3a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 02:49:47 2023 GMT
            Not After : May 30 02:54:47 2024 GMT
        Subject: CN=663B04E84B40B6C39816F987E77ACDAD976C215F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:45:e9:76:80:24:54:52:59:27:e1:91:fa:
                    b1:83:cc:94:9e:eb:31:99:60:41:7a:0e:38:44:65:
                    8a:4e:b7:58:56:50:bf:50:22:d2:0a:2a:d2:36:df:
                    d7:b7:66:b5:fa:5b:2b:92:7f:63:17:43:75:29:e0:
                    30:8f:d8:b7:75:9c:08:8d:b9:ac:95:18:56:24:85:
                    53:3b:b8:75:98:6c:63:e2:35:e7:ea:0a:b2:a8:78:
                    ae:be:6f:d4:0f:27:3d:db:78:89:16:31:26:ac:48:
                    14:94:92:fb:dd:d1:d8:46:3e:ff:3f:0c:74:68:a6:
                    ad:7f:3d:2b:d0:d1:35:1a:a7:30:a6:17:bc:c4:3b:
                    61:17:06:8d:fa:30:69:37:ae:d4:b5:93:a6:ec:a5:
                    49:60:3d:92:21:cd:b3:3e:15:53:9b:c4:61:ee:8f:
                    7d:1a:d1:2c:68:fe:7a:41:ce:42:c5:ac:66:33:71:
                    b0:62:b0:9b:56:26:63:67:56:dd:52:f9:34:9b:ae:
                    1a:e1:2f:9c:3f:ad:87:69:60:b5:3a:85:c7:50:d4:
                    59:d0:39:46:e6:0d:fe:5c:22:6d:36:e5:be:f8:7e:
                    3e:6b:be:4e:b6:d2:18:4c:e8:f5:6a:32:54:9f:6e:
                    da:5b:fd:92:ce:d1:c7:e3:29:3e:10:13:6f:1c:25:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:3B:04:E8:4B:40:B6:C3:98:16:F9:87:E7:7A:CD:AD:97:6C:21:5F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/663B04E84B40B6C39816F987E77ACDAD976C215F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.168.0/21
                IPv6:
                  2804:aa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52903

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:97:04:6a:45:b0:87:18:85:5a:db:72:70:88:0f:98:20:
         17:c3:cd:33:e1:87:e6:43:1c:08:3e:80:0c:e2:a2:f7:47:5e:
         79:72:72:f8:2f:f4:b3:9b:3c:14:83:51:6d:c9:73:b5:05:7e:
         b5:09:a3:57:f3:fe:50:a7:20:c5:a9:2c:ee:1b:48:67:b5:a9:
         a6:cd:bb:6b:46:d3:1d:88:66:95:6d:93:53:c8:d0:43:0d:fa:
         8f:79:94:4f:17:5f:10:d9:02:19:d7:05:76:f6:36:3c:2f:d5:
         e0:8e:74:da:24:a1:4d:db:c9:d8:58:65:06:54:2d:44:c3:d8:
         e4:62:1d:17:17:74:6c:73:dc:c5:12:4c:59:f5:07:ad:cf:3a:
         28:21:ee:29:68:37:56:2c:2f:d5:82:92:71:c1:38:a2:bd:00:
         1f:6e:cf:c3:4c:b2:a5:29:8a:dd:e1:73:f1:3f:b2:9a:f7:28:
         6d:d3:03:61:73:33:b2:18:02:9b:b1:51:87:cc:4b:68:1a:26:
         30:f2:5d:67:c6:57:d6:b8:59:ac:2a:e6:f4:9a:0a:03:64:e9:
         8a:c2:56:9b:2a:29:0f:a1:21:8e:d2:db:75:c9:e1:8c:65:30:
         49:2b:82:35:ac:82:12:53:1a:3f:47:15:dd:50:ab:fd:41:0e:
         e0:4b:0f:f6
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIURksUsynqTSWPT2N/+ETQ+ZHGOnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MDEwMjQ5NDdaFw0yNDA1MzAwMjU0NDdaMDMxMTAvBgNV
BAMTKDY2M0IwNEU4NEI0MEI2QzM5ODE2Rjk4N0U3N0FDREFEOTc2QzIxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Y0XpdoAkVFJZJ+GR+rGDzJSe
6zGZYEF6DjhEZYpOt1hWUL9QItIKKtI239e3ZrX6WyuSf2MXQ3Up4DCP2Ld1nAiN
uayVGFYkhVM7uHWYbGPiNefqCrKoeK6+b9QPJz3beIkWMSasSBSUkvvd0dhGPv8/
DHRopq1/PSvQ0TUapzCmF7zEO2EXBo36MGk3rtS1k6bspUlgPZIhzbM+FVObxGHu
j30a0Sxo/npBzkLFrGYzcbBisJtWJmNnVt1S+TSbrhrhL5w/rYdpYLU6hcdQ1FnQ
OUbmDf5cIm025b74fj5rvk620hhM6PVqMlSfbtpb/ZLO0cfjKT4QE28cJblBAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmOwToS0C2w5gW
+Yfnes2tl2whXzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80QTVkOTdwb3NYTDI5Q2J1U3R2VnYzWEFDZlIyYzdyWGJk
RFRDWGlDRVJxWC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80QTVkOTdwb3NYTDI5Q2J1U3R2VnYzWEFDZlIyYzdyWGJk
RFRDWGlDRVJxWC8wLzY2M0IwNEU4NEI0MEI2QzM5ODE2Rjk4N0U3N0FDREFEOTc2
QzIxNUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7ELqDANBAIAAjAHAwUA
KAQKqDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzqcwDQYJKoZIhvcNAQELBQAD
ggEBAB/YlwRqRbCHGIVa23JwiA+YIBfDzTPhh+ZDHAg+gAziovdHXnlycvgv9LOb
PBSDUW3Jc7UFfrUJo1fz/lCnIMWpLO4bSGe1qabNu2tG0x2IZpVtk1PI0EMN+o95
lE8XXxDZAhnXBXb2Njwv1eCOdNokoU3bydhYZQZULUTD2ORiHRcXdGxz3MUSTFn1
B63POigh7iloN1YsL9WCknHBOKK9AB9uz8NMsqUpit3hc/E/spr3KG3TA2FzM7IY
ApuxUYfMS2gaJjDyXWfGV9a4Wawq5vSaCgNk6YrCVpsqKQ+hIY7S23XJ4YxlMEkr
gjWsghJTGj9HFd1Qq/1BDuBLD/Y=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org