Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A506536960B8F03C2AECE0E49F542FED010D41E4.cer
File:                     A506536960B8F03C2AECE0E49F542FED010D41E4.cer (raw, json)
Hash identifier:          7hTgqI8p1W8AYTPvcjKhNMiBfHlUxwQZhOJ4oUJtoiE=
Subject key identifier:   A5:06:53:69:60:B8:F0:3C:2A:EC:E0:E4:9F:54:2F:ED:01:0D:41:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3885043374975DE67EB76A668252CA5B9C5A4C1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/A506536960B8F03C2AECE0E49F542FED010D41E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 19:33:50 +0000
Certificate not after:    Thu 15 Aug 2024 19:38:50 +0000
Subordinate resources:    AS: 266549
                          IP: 160.238.192.0/22
                          IP: 2804:3db8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:85:04:33:74:97:5d:e6:7e:b7:6a:66:82:52:ca:5b:9c:5a:4c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 19:33:50 2023 GMT
            Not After : Aug 15 19:38:50 2024 GMT
        Subject: CN=A506536960B8F03C2AECE0E49F542FED010D41E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:03:a7:13:60:e6:66:4b:39:02:ef:39:d2:
                    62:71:b3:f3:40:dd:5e:98:dd:f3:1f:a2:9d:c4:aa:
                    48:34:55:54:1d:fe:ae:ac:58:b6:e2:19:04:1c:1c:
                    46:17:82:ca:62:83:f3:e2:28:25:7e:08:6a:9f:fe:
                    e1:31:52:85:9a:52:d7:fd:32:64:6b:b3:8a:3f:ae:
                    fa:31:d2:43:3d:22:45:53:b7:4a:2d:3c:67:d0:97:
                    06:25:d0:4c:0a:ec:02:60:7f:02:13:4e:88:46:00:
                    53:52:82:6b:fc:db:85:85:a3:cd:0c:0c:f1:d6:fc:
                    70:00:a5:18:de:cc:02:71:e8:97:b4:90:48:d2:85:
                    a8:05:1e:c5:0a:68:db:89:a5:55:5b:5f:26:bb:97:
                    78:c2:f6:c7:b1:71:07:35:05:ea:09:ac:4a:59:be:
                    8a:65:2b:47:39:43:6f:6d:b7:ef:d6:fb:c3:a1:e3:
                    cf:08:7f:14:55:a5:12:ab:37:68:49:cd:52:f1:b3:
                    80:86:00:6f:93:ea:1a:4f:68:d9:ab:a3:44:fc:66:
                    3d:20:8f:06:cd:34:27:2e:20:fc:48:93:65:12:bc:
                    7c:06:12:17:32:a2:44:5c:ae:70:7b:94:93:33:a5:
                    95:6f:5d:5c:b6:85:ba:6c:ce:5c:0f:53:56:66:18:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:06:53:69:60:B8:F0:3C:2A:EC:E0:E4:9F:54:2F:ED:01:0D:41:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/A506536960B8F03C2AECE0E49F542FED010D41E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.192.0/22
                IPv6:
                  2804:3db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266549

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:e4:d8:ee:46:c1:bb:d1:0b:89:02:5a:07:e7:1d:84:60:
         1d:cd:42:a6:fe:19:f4:07:45:f9:ec:6f:26:e2:87:b1:b2:47:
         8f:4b:14:28:76:23:a2:ff:3e:41:f5:05:ef:4d:e5:b2:25:d2:
         d8:fa:30:7a:6d:5b:89:8f:c2:78:9b:35:1f:b0:81:29:ed:30:
         21:25:86:30:91:f6:71:3e:fa:5f:3e:b1:45:06:5a:c9:fd:0f:
         47:33:4c:71:58:68:2f:27:55:1b:af:e0:bc:39:28:fc:4f:38:
         68:dc:34:ee:ee:cf:01:86:7f:18:df:4e:9d:8c:f0:82:f3:db:
         ca:69:d9:9d:0b:15:d6:bd:f7:cf:d4:cd:1a:5e:7b:4b:78:79:
         96:e8:2a:95:c9:b0:45:67:66:ed:fc:cb:31:16:c5:fb:88:0f:
         e3:ce:b5:7d:0c:5f:44:f9:48:f2:4a:20:42:d1:66:f6:9e:38:
         28:07:5c:58:fb:03:2f:5f:13:9f:24:6a:5c:42:d7:95:0b:00:
         c7:86:ab:0c:2c:a7:ab:51:f6:ce:13:6c:62:42:af:38:2f:84:
         65:45:c8:b7:57:b6:a4:29:b5:8c:57:0b:e6:a6:38:15:86:0c:
         00:3e:9e:60:3f:2b:57:a0:64:77:11:66:d9:1a:7d:f1:07:59:
         82:c5:3d:f1
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUOIUEM3SXXeZ+t2pmglLKW5xaTBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTcxOTMzNTBaFw0yNDA4MTUxOTM4NTBaMDMxMTAvBgNV
BAMTKEE1MDY1MzY5NjBCOEYwM0MyQUVDRTBFNDlGNTQyRkVEMDEwRDQxRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7QOnE2DmZks5Au850mJxs/NA
3V6Y3fMfop3Eqkg0VVQd/q6sWLbiGQQcHEYXgspig/PiKCV+CGqf/uExUoWaUtf9
MmRrs4o/rvox0kM9IkVTt0otPGfQlwYl0EwK7AJgfwITTohGAFNSgmv824WFo80M
DPHW/HAApRjezAJx6Je0kEjShagFHsUKaNuJpVVbXya7l3jC9sexcQc1BeoJrEpZ
voplK0c5Q29tt+/W+8Oh488IfxRVpRKrN2hJzVLxs4CGAG+T6hpPaNmro0T8Zj0g
jwbNNCcuIPxIk2USvHwGEhcyokRcrnB7lJMzpZVvXVy2hbpszlwPU1ZmGJ+nAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlBlNpYLjwPCrs
4OSfVC/tAQ1B5DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Bb21ob1FadW5lQkNxSnRWTU53VjZtQ1hCYmN6NWQ3WWRB
NVBibmJvdkpGQy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Bb21ob1FadW5lQkNxSnRWTU53VjZtQ1hCYmN6NWQ3WWRB
NVBibmJvdkpGQy8wL0E1MDY1MzY5NjBCOEYwM0MyQUVDRTBFNDlGNTQyRkVEMDEw
RDQxRTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqDuwDANBAIAAjAHAwUA
KAQ9uDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEETUwDQYJKoZIhvcNAQELBQAD
ggEBAEbW5NjuRsG70QuJAloH5x2EYB3NQqb+GfQHRfnsbybih7GyR49LFCh2I6L/
PkH1Be9N5bIl0tj6MHptW4mPwnibNR+wgSntMCElhjCR9nE++l8+sUUGWsn9D0cz
THFYaC8nVRuv4Lw5KPxPOGjcNO7uzwGGfxjfTp2M8ILz28pp2Z0LFda998/UzRpe
e0t4eZboKpXJsEVnZu38yzEWxfuID+POtX0MX0T5SPJKIELRZvaeOCgHXFj7Ay9f
E58kalxC15ULAMeGqwwsp6tR9s4TbGJCrzgvhGVFyLdXtqQptYxXC+amOBWGDAA+
nmA/K1egZHcRZtkaffEHWYLFPfE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org