Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B144058AE28D396D5E5EFE2D90A0C107F0CAED41.cer
File:                     B144058AE28D396D5E5EFE2D90A0C107F0CAED41.cer (raw, json)
Hash identifier:          kdNgava0/RYbFlkie43N4SewKqt007Qi9JoyhRUjEto=
Subject key identifier:   B1:44:05:8A:E2:8D:39:6D:5E:5E:FE:2D:90:A0:C1:07:F0:CA:ED:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       368B34D94568388E5139309380408A602174BA9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FuBUaSG5wPESkM6LN8wqFAwpN1eBvqZzy5aoP5qboyq1/0/B144058AE28D396D5E5EFE2D90A0C107F0CAED41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FuBUaSG5wPESkM6LN8wqFAwpN1eBvqZzy5aoP5qboyq1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 02:20:31 +0000
Certificate not after:    Thu 30 Jan 2025 02:25:31 +0000
Subordinate resources:    AS: 269496
                          IP: 45.187.156.0/22
                          IP: 2804:6584::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8b:34:d9:45:68:38:8e:51:39:30:93:80:40:8a:60:21:74:ba:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 02:20:31 2024 GMT
            Not After : Jan 30 02:25:31 2025 GMT
        Subject: CN=B144058AE28D396D5E5EFE2D90A0C107F0CAED41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:04:7b:fc:b2:dd:47:e7:73:95:4a:8a:40:
                    2a:18:f7:d0:7b:d0:03:e1:02:c2:3f:6f:3d:d8:22:
                    ba:35:a0:9f:4e:39:80:fa:ea:73:32:81:92:df:eb:
                    6b:64:df:8b:79:f7:ca:31:e1:43:5e:78:96:9b:94:
                    be:85:ba:30:07:07:46:2f:ec:ac:e7:94:39:5e:fd:
                    d3:4c:a2:f0:51:ec:58:fd:65:2f:8d:0d:00:2a:05:
                    9e:53:82:24:f3:77:16:24:92:8f:54:cb:42:7c:ee:
                    3f:cb:bb:f5:e8:6f:cf:2b:66:66:ff:47:53:16:23:
                    45:97:02:f6:70:6c:57:6f:fe:7e:d1:9c:ff:2a:12:
                    b6:bf:26:da:c3:3f:4a:56:02:f8:eb:87:31:dd:f4:
                    0a:20:c0:f6:b1:9b:4b:08:b9:3d:82:97:24:6f:5b:
                    47:dd:5f:ae:a4:ea:bb:56:ff:02:17:03:cf:78:01:
                    96:8a:b4:8a:f3:c6:44:8a:1a:87:93:80:3c:42:b1:
                    57:d7:03:d9:5e:2a:4a:5a:e7:22:af:01:a1:82:e6:
                    99:56:4f:05:91:c0:1b:11:e4:53:75:25:40:34:f1:
                    5d:a8:4f:d9:6d:2e:ce:b0:a0:95:f8:cf:2c:83:50:
                    c8:e5:4d:15:d5:3a:e2:56:fa:99:a4:28:34:5b:18:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:44:05:8A:E2:8D:39:6D:5E:5E:FE:2D:90:A0:C1:07:F0:CA:ED:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FuBUaSG5wPESkM6LN8wqFAwpN1eBvqZzy5aoP5qboyq1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FuBUaSG5wPESkM6LN8wqFAwpN1eBvqZzy5aoP5qboyq1/0/B144058AE28D396D5E5EFE2D90A0C107F0CAED41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.156.0/22
                IPv6:
                  2804:6584::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269496

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:14:8c:92:ba:e2:6a:76:3d:83:91:92:21:de:ba:4a:1d:
         dc:2a:91:d1:68:b0:df:7d:4b:f3:a4:fa:f5:fa:84:5b:0b:de:
         d4:11:10:ca:ed:42:90:6a:7b:85:d5:69:4d:dc:a4:78:3a:fb:
         80:47:57:96:0c:ea:6d:88:1b:a0:5e:79:0f:b3:53:38:71:d6:
         9d:ed:1d:d0:45:ef:d3:d2:87:16:ff:8e:95:20:71:d9:e1:04:
         42:e0:50:86:33:0e:00:45:7d:0e:7c:8f:89:d7:b6:96:6a:6c:
         62:51:93:2b:22:40:c9:ec:f3:71:bb:bd:38:ad:ea:f6:2a:7c:
         16:5a:7e:cc:16:13:db:e9:93:25:ea:a4:ec:d1:b2:4d:52:d7:
         09:9b:41:36:47:78:2a:5d:e3:eb:15:84:68:b9:8b:95:36:63:
         f8:69:9b:e5:a1:6f:ca:e1:77:8c:f4:17:9f:d5:10:19:7b:e4:
         61:53:a7:ff:76:63:cd:98:54:27:ba:c8:d9:cc:fe:e3:af:f9:
         eb:25:89:6c:db:ab:ce:84:58:12:13:9c:db:5d:9a:bb:fb:28:
         92:56:1a:d4:c6:96:b9:20:e1:37:fe:91:3d:e9:de:82:2a:39:
         8d:d3:80:e7:2f:10:35:63:db:bc:cb:62:c9:7d:5b:84:65:e2:
         c2:6c:6e:f1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNos02UVoOI5ROTCTgECKYCF0upowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDEwMjIwMzFaFw0yNTAxMzAwMjI1MzFaMDMxMTAvBgNV
BAMTKEIxNDQwNThBRTI4RDM5NkQ1RTVFRkUyRDkwQTBDMTA3RjBDQUVENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23gR7/LLdR+dzlUqKQCoY99B7
0APhAsI/bz3YIro1oJ9OOYD66nMygZLf62tk34t598ox4UNeeJablL6FujAHB0Yv
7KznlDle/dNMovBR7Fj9ZS+NDQAqBZ5TgiTzdxYkko9Uy0J87j/Lu/Xob88rZmb/
R1MWI0WXAvZwbFdv/n7RnP8qEra/JtrDP0pWAvjrhzHd9AogwPaxm0sIuT2ClyRv
W0fdX66k6rtW/wIXA894AZaKtIrzxkSKGoeTgDxCsVfXA9leKkpa5yKvAaGC5plW
TwWRwBsR5FN1JUA08V2oT9ltLs6woJX4zyyDUMjlTRXVOuJW+pmkKDRbGEBHAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxRAWK4o05bV5e
/i2QoMEH8MrtQTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GdUJVYVNHNXdQRVNrTTZMTjh3cUZBd3BOMWVCdnFaenk1
YW9QNXFib3lxMS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRnVCVWFTRzV3UEVTa002TE44d3FGQXdwTjFlQnZxWnp5
NWFvUDVxYm95cTEvMC9CMTQ0MDU4QUUyOEQzOTZENUU1RUZFMkQ5MEEwQzEwN0Yw
Q0FFRDQxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItu5wwDQQCAAIwBwMF
ACgEZYQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBy4MA0GCSqGSIb3DQEBCwUA
A4IBAQArOhSMkrrianY9g5GSId66Sh3cKpHRaLDffUvzpPr1+oRbC97UERDK7UKQ
anuF1WlN3KR4OvuAR1eWDOptiBugXnkPs1M4cdad7R3QRe/T0ocW/46VIHHZ4QRC
4FCGMw4ARX0OfI+J17aWamxiUZMrIkDJ7PNxu704rer2KnwWWn7MFhPb6ZMl6qTs
0bJNUtcJm0E2R3gqXePrFYRouYuVNmP4aZvloW/K4XeM9Bef1RAZe+RhU6f/dmPN
mFQnusjZzP7jr/nrJYls26vOhFgSE5zbXZq7+yiSVhrUxpa5IOE3/pE96d6CKjmN
04DnLxA1Y9u8y2LJfVuEZeLCbG7x
-----END CERTIFICATE-----