Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.cer
File:                     A04E01C2C7CEF30C9831FD37C94F10585E93B941.cer (raw, json)
Hash identifier:          83LmKxe8Q45ln5NNFe98kOM87GbDwjtu4GmKk+NFMXA=
Subject key identifier:   A0:4E:01:C2:C7:CE:F3:0C:98:31:FD:37:C9:4F:10:58:5E:93:B9:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0371F2E66E2D68A71F9443A84263666E14237EE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Oct 2022 21:36:02 +0000
Certificate not after:    Tue 24 Oct 2023 21:41:02 +0000
Subordinate resources:    AS: 269075
                          IP: 45.179.108.0/22
                          IP: 2804:5f14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:71:f2:e6:6e:2d:68:a7:1f:94:43:a8:42:63:66:6e:14:23:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 21:36:02 2022 GMT
            Not After : Oct 24 21:41:02 2023 GMT
        Subject: CN=A04E01C2C7CEF30C9831FD37C94F10585E93B941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:66:55:bd:05:6b:49:12:63:07:2b:90:51:
                    32:a1:4c:bc:34:ba:04:b0:3a:6e:16:bd:fe:d3:32:
                    f9:a9:54:68:e0:80:33:f7:3b:bc:d0:4e:51:43:75:
                    40:dc:eb:dc:1f:e5:ef:68:b9:9b:ae:d3:52:74:0d:
                    10:9a:83:a1:9c:a0:dc:3f:ae:02:cb:fd:58:f7:82:
                    86:cd:6a:ec:7c:75:5f:5f:89:00:00:c9:44:9a:6e:
                    a7:bc:98:e8:0d:33:fc:89:62:33:6d:1c:10:92:f7:
                    64:4b:ae:0e:e3:f8:62:bb:8d:db:5a:3a:e9:3b:f8:
                    09:cf:3b:e0:5b:54:a9:76:0e:60:8e:d7:ac:6f:2d:
                    b8:c8:a8:73:8e:95:94:57:85:58:47:f1:d5:bc:3e:
                    f3:40:b5:9a:bf:9d:11:04:5f:1a:ee:a3:c1:c9:d7:
                    67:c8:46:d8:ed:a5:c4:a2:49:b4:7c:c1:c5:a0:03:
                    bf:78:70:be:66:aa:6a:dc:e9:2a:cf:65:2b:d1:8f:
                    fd:d5:34:c8:14:aa:4f:ca:6e:74:fc:3f:4e:da:8e:
                    0c:97:7a:97:08:f4:1b:95:4b:4e:35:f8:4c:5d:ce:
                    dd:f9:8c:6e:a4:65:3f:50:2a:d6:e5:38:be:03:b5:
                    c0:b4:27:36:8e:ae:a9:6d:77:28:46:e9:42:c2:bf:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:4E:01:C2:C7:CE:F3:0C:98:31:FD:37:C9:4F:10:58:5E:93:B9:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.108.0/22
                IPv6:
                  2804:5f14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269075

    Signature Algorithm: sha256WithRSAEncryption
         81:59:26:39:01:e6:0e:50:68:3c:55:7a:99:be:4a:59:5f:bd:
         dd:34:ce:a9:86:ff:eb:1c:96:04:23:22:35:6a:8c:2d:e8:57:
         90:57:9f:6e:fb:48:8c:fc:fc:99:ad:27:00:3d:f3:b3:9a:93:
         67:9c:33:19:47:29:ed:53:6b:f9:43:ce:85:ff:82:e1:85:b8:
         40:04:1f:2c:c7:05:5a:5a:5a:e8:a8:01:f7:bf:c5:47:66:4b:
         ec:27:2a:ac:8e:b3:60:92:4c:43:6f:96:e4:25:02:43:a6:cd:
         4c:18:52:09:21:91:cc:62:bd:d4:0b:bb:e5:4a:d1:a1:e9:df:
         3f:21:ca:8d:7c:f9:7e:fa:89:c6:13:27:66:58:ca:06:e6:71:
         8a:8a:d3:d7:f3:c8:86:0e:12:69:1d:9c:27:4a:0c:28:e2:eb:
         ec:51:55:9d:5a:83:1d:2a:20:82:ec:d8:76:88:da:ee:3c:9a:
         74:8f:c2:6e:fd:c7:1c:a6:95:9c:d2:0d:d0:ad:1a:b6:b1:8d:
         0a:73:9f:7d:f4:c1:d2:14:73:5c:52:73:f2:01:f5:e1:3b:b4:
         db:dd:d2:0e:0c:ed:c5:22:76:de:34:7f:ad:75:bf:e6:4a:d4:
         45:7c:b8:d1:70:12:05:c6:3c:8f:35:32:1e:84:58:2d:6f:0b:
         8b:bc:bd:c9
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUA3Hy5m4taKcflEOoQmNmbhQjfuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMjUyMTM2MDJaFw0yMzEwMjQyMTQxMDJaMDMxMTAvBgNV
BAMTKEEwNEUwMUMyQzdDRUYzMEM5ODMxRkQzN0M5NEYxMDU4NUU5M0I5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGmZVvQVrSRJjByuQUTKhTLw0
ugSwOm4Wvf7TMvmpVGjggDP3O7zQTlFDdUDc69wf5e9ouZuu01J0DRCag6GcoNw/
rgLL/Vj3gobNaux8dV9fiQAAyUSabqe8mOgNM/yJYjNtHBCS92RLrg7j+GK7jdta
Ouk7+AnPO+BbVKl2DmCO16xvLbjIqHOOlZRXhVhH8dW8PvNAtZq/nREEXxruo8HJ
12fIRtjtpcSiSbR8wcWgA794cL5mqmrc6SrPZSvRj/3VNMgUqk/KbnT8P07ajgyX
epcI9BuVS041+Exdzt35jG6kZT9QKtblOL4DtcC0JzaOrqltdyhG6ULCv9FfAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgTgHCx87zDJgx
/TfJTxBYXpO5QTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81Vzd1U1N4TU45SEhTREtGTFJaY2Y5UVA3dVA4bzY0YUpr
UXl6N0trR2JBcC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81Vzd1U1N4TU45SEhTREtGTFJaY2Y5UVA3dVA4bzY0YUpr
UXl6N0trR2JBcC8wL0EwNEUwMUMyQzdDRUYzMEM5ODMxRkQzN0M5NEYxMDU4NUU5
M0I5NDEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2zbDANBAIAAjAHAwUA
KARfFDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGxMwDQYJKoZIhvcNAQELBQAD
ggEBAIFZJjkB5g5QaDxVepm+Sllfvd00zqmG/+sclgQjIjVqjC3oV5BXn277SIz8
/JmtJwA987Oak2ecMxlHKe1Ta/lDzoX/guGFuEAEHyzHBVpaWuioAfe/xUdmS+wn
KqyOs2CSTENvluQlAkOmzUwYUgkhkcxivdQLu+VK0aHp3z8hyo18+X76icYTJ2ZY
ygbmcYqK09fzyIYOEmkdnCdKDCji6+xRVZ1agx0qIILs2HaI2u48mnSPwm79xxym
lZzSDdCtGraxjQpzn330wdIUc1xSc/IB9eE7tNvd0g4M7cUidt40f611v+ZK1EV8
uNFwEgXGPI81Mh6EWC1vC4u8vck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org