Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD55FF0938210CC75C2967BEE6EB4FE12D059582.cer
File:                     AD55FF0938210CC75C2967BEE6EB4FE12D059582.cer (raw, json)
Hash identifier:          LWGcHkR5FGlleXF8DcD6F5eVDDLu23lnB3bdlr9cq4o=
Subject key identifier:   AD:55:FF:09:38:21:0C:C7:5C:29:67:BE:E6:EB:4F:E1:2D:05:95:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BE5C9D1B214CFA3DA7EB43DA0871412ECBDC5E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/1/AD55FF0938210CC75C2967BEE6EB4FE12D059582.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 19:17:45 +0000
Certificate not after:    Mon 07 Apr 2025 19:22:45 +0000
Subordinate resources:    AS: 268608
                          IP: 45.164.80.0/22
                          IP: 2804:53d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e5:c9:d1:b2:14:cf:a3:da:7e:b4:3d:a0:87:14:12:ec:bd:c5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 19:17:45 2024 GMT
            Not After : Apr  7 19:22:45 2025 GMT
        Subject: CN=AD55FF0938210CC75C2967BEE6EB4FE12D059582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:84:24:46:85:88:4c:84:89:c9:d8:66:cb:
                    2c:c0:78:1e:44:65:43:60:6d:ec:b8:52:40:ed:c3:
                    b3:82:e8:69:ba:4f:a9:c5:fb:80:c1:23:d5:54:c5:
                    08:e6:97:98:6c:b0:08:c0:1a:63:80:a4:b9:12:89:
                    58:61:20:3a:36:5d:d2:47:56:8a:6b:7a:0c:99:bf:
                    a5:07:75:bd:6b:ce:65:3f:20:0b:9d:90:1a:c6:df:
                    c5:91:f1:e1:77:54:2e:43:c6:bc:74:ae:68:ad:f3:
                    67:6d:5d:52:45:cd:63:77:a3:60:f1:fd:0a:64:24:
                    09:ad:81:fb:de:f3:e3:ea:d8:48:ad:10:77:4e:66:
                    d0:65:79:ec:87:e9:cc:78:e9:1e:e7:90:9a:65:04:
                    13:64:88:2b:94:49:a4:e0:8b:55:24:3f:15:6d:21:
                    e5:e4:af:46:0e:87:cf:2e:31:c1:1d:72:6c:f5:21:
                    d2:0b:74:35:43:99:01:cf:8d:81:b4:8d:21:3a:b6:
                    99:c9:b7:64:3d:7b:d2:0f:71:73:06:c0:d0:74:ba:
                    90:8b:79:0c:85:2a:4d:5d:15:64:78:c5:e1:52:df:
                    2c:ca:26:6f:23:a6:ce:c4:2e:0c:96:f0:44:71:fd:
                    1e:1c:e1:f9:77:6a:82:1c:35:b4:6a:b6:3e:6b:65:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:55:FF:09:38:21:0C:C7:5C:29:67:BE:E6:EB:4F:E1:2D:05:95:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/1/AD55FF0938210CC75C2967BEE6EB4FE12D059582.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.80.0/22
                IPv6:
                  2804:53d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268608

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:03:0f:92:40:21:81:57:49:52:78:7e:fe:79:c9:f7:44:
         b5:9b:bc:0e:ee:94:62:77:4d:7f:3f:ff:60:1e:4d:d6:77:68:
         07:7d:52:30:09:c5:89:9d:4d:e9:af:c4:05:33:57:66:71:9a:
         0b:79:0b:3b:16:43:38:3e:ef:cb:f4:55:20:e0:56:62:28:d7:
         0a:58:87:f3:ca:00:ab:bb:59:ef:a4:7d:8e:3a:9a:3a:2b:2f:
         ed:e5:9a:a6:4b:6f:2b:e4:50:a7:1f:32:0e:47:7b:39:91:ca:
         cb:96:2d:4c:e1:dd:91:f4:0a:c9:3f:ca:ed:03:b9:7e:01:d8:
         29:c8:ca:79:2e:25:6b:1f:31:77:e2:a3:0a:5f:b5:2d:a7:a5:
         b4:5a:74:25:72:45:24:1b:a3:56:b8:68:83:d0:4f:88:3b:d2:
         aa:a2:8c:b5:8f:a7:fd:b8:72:a1:bb:22:ae:5e:45:62:6e:68:
         85:73:a1:e5:25:2b:30:3f:c2:e0:a6:5c:91:40:56:51:a5:bd:
         62:a9:71:e2:07:7c:91:ee:5b:8d:de:7e:5c:17:23:75:e6:a8:
         df:7c:42:79:92:3a:ec:4d:04:75:46:75:df:2e:8c:33:26:93:
         04:68:3d:e0:20:6f:a0:72:03:e3:f9:01:79:9f:47:34:5f:6a:
         56:5e:4f:d8
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUS+XJ0bIUz6PafrQ9oIcUEuy9xeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDgxOTE3NDVaFw0yNTA0MDcxOTIyNDVaMDMxMTAvBgNV
BAMTKEFENTVGRjA5MzgyMTBDQzc1QzI5NjdCRUU2RUI0RkUxMkQwNTk1ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgIQkRoWITISJydhmyyzAeB5E
ZUNgbey4UkDtw7OC6Gm6T6nF+4DBI9VUxQjml5hssAjAGmOApLkSiVhhIDo2XdJH
VopregyZv6UHdb1rzmU/IAudkBrG38WR8eF3VC5Dxrx0rmit82dtXVJFzWN3o2Dx
/QpkJAmtgfve8+Pq2EitEHdOZtBleeyH6cx46R7nkJplBBNkiCuUSaTgi1UkPxVt
IeXkr0YOh88uMcEdcmz1IdILdDVDmQHPjYG0jSE6tpnJt2Q9e9IPcXMGwNB0upCL
eQyFKk1dFWR4xeFS3yzKJm8jps7ELgyW8ERx/R4c4fl3aoIcNbRqtj5rZdf/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStVf8JOCEMx1wp
Z77m60/hLQWVgjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KRE44Rk1vNkJWVXlIWXJCcmlpZTY2NXJwYm9uQ2FCa1lh
ZkJDdHZXTnJVdS8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSkROOEZNbzZCVlV5SFlyQnJpaWU2NjVycGJvbkNhQmtZ
YWZCQ3R2V05yVXUvMS9BRDU1RkYwOTM4MjEwQ0M3NUMyOTY3QkVFNkVCNEZFMTJE
MDU5NTgyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItpFAwDQQCAAIwBwMF
ACgEU9AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBlAMA0GCSqGSIb3DQEBCwUA
A4IBAQCbRwMPkkAhgVdJUnh+/nnJ90S1m7wO7pRid01/P/9gHk3Wd2gHfVIwCcWJ
nU3pr8QFM1dmcZoLeQs7FkM4Pu/L9FUg4FZiKNcKWIfzygCru1nvpH2OOpo6Ky/t
5ZqmS28r5FCnHzIOR3s5kcrLli1M4d2R9ArJP8rtA7l+AdgpyMp5LiVrHzF34qMK
X7Utp6W0WnQlckUkG6NWuGiD0E+IO9Kqooy1j6f9uHKhuyKuXkVibmiFc6HlJSsw
P8LgplyRQFZRpb1iqXHiB3yR7luN3n5cFyN15qjffEJ5kjrsTQR1RnXfLowzJpME
aD3gIG+gcgPj+QF5n0c0X2pWXk/Y
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org