Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer
File:                     B33C25921027247BC1670F9F632C29DCD8B421BB.cer (raw, json)
Hash identifier:          oZ+Bcj4PIFlZnaZ8c/5YYoa9qkkAaVJCS15bUnjofJ8=
Subject key identifier:   B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CA57B6EB9C30F4990C292555A664CFE3BAC6A30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 11:35:07 +0000
Certificate not after:    Wed 18 Dec 2024 11:40:07 +0000
Subordinate resources:    AS: 267220
                          IP: 45.231.36.0/22
                          IP: 138.219.184.0/22
                          IP: 2804:4a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a5:7b:6e:b9:c3:0f:49:90:c2:92:55:5a:66:4c:fe:3b:ac:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 11:35:07 2023 GMT
            Not After : Dec 18 11:40:07 2024 GMT
        Subject: CN=B33C25921027247BC1670F9F632C29DCD8B421BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:a0:42:b4:9c:c1:c3:c8:e8:40:d5:ae:49:
                    d2:a4:91:79:13:d3:6c:1e:ef:0e:b8:88:78:be:79:
                    35:08:53:ea:3e:18:dc:3d:74:ca:d3:61:33:fe:ff:
                    7e:89:f3:fe:c6:1c:06:7a:32:a9:f8:f5:57:33:b6:
                    f2:04:ad:7f:6e:d8:f1:1b:47:9a:62:b1:e6:9d:9c:
                    ef:a4:1e:65:7e:1b:79:1a:5d:b6:f1:dd:16:9a:92:
                    f0:2b:89:b8:7a:58:2c:0e:da:b2:1e:34:76:c1:e4:
                    97:d4:85:63:0c:8b:7a:aa:6c:89:e4:d7:82:7b:e8:
                    d4:93:bc:5a:48:5e:e0:dd:4d:27:24:4a:42:ce:50:
                    d1:dd:26:e7:12:d4:8d:85:60:4a:6f:61:a1:9f:d0:
                    bf:6a:ae:bc:7d:7a:89:b0:96:9a:d1:6e:4f:17:1f:
                    3c:c3:f1:fa:c7:1b:f8:82:79:01:8e:e5:6e:83:d9:
                    62:f2:47:1d:9a:e7:13:aa:27:6e:43:19:7b:76:08:
                    44:d5:1f:df:d3:c9:9a:82:0a:a5:de:b9:ff:53:0d:
                    01:92:50:59:aa:7c:90:39:d7:e3:88:4b:5a:56:36:
                    d2:42:62:92:d7:32:00:2c:a4:92:c6:3b:95:82:16:
                    5b:f5:d8:6c:6b:06:b6:c0:af:0b:51:ea:37:88:94:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.36.0/22
                  138.219.184.0/22
                IPv6:
                  2804:4a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267220

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:61:f7:6c:bf:60:09:07:88:21:d6:1a:ae:ce:e4:6a:33:
         48:59:bb:82:e5:c7:7e:a7:f5:bc:52:85:fc:dc:8b:98:29:98:
         0c:d2:eb:1f:06:3c:f7:2f:fa:bf:ab:65:95:1a:d9:f9:66:7c:
         2a:c1:7b:3c:cb:aa:e2:c9:d4:86:9b:74:14:f2:0c:63:1d:31:
         3d:4a:79:88:62:be:f7:28:d3:b0:5c:51:28:09:0e:24:5f:34:
         66:f1:3a:69:83:c3:b3:28:ef:b2:e0:66:c6:71:54:c8:4f:8d:
         a7:b2:f6:64:92:7d:56:a1:1c:88:46:a4:27:10:d8:36:fb:e5:
         9e:63:bd:6d:d1:d6:3c:ac:0c:bc:57:38:f3:01:ec:5c:51:32:
         9c:33:a3:2d:0f:93:46:33:e0:fc:4a:af:8e:01:b1:14:14:95:
         7b:79:06:de:4b:45:01:a0:04:b9:27:5c:5f:71:0e:13:5e:4b:
         a3:60:e9:67:2b:ba:b0:bc:ab:a1:8e:a1:9e:c9:3c:3b:cb:ce:
         75:21:50:c0:4c:0e:08:a2:57:30:cc:c8:4a:27:07:06:61:b9:
         7d:48:34:e2:52:80:17:cb:af:2e:0b:c4:56:91:44:4a:7b:96:
         61:84:a7:06:24:72:0c:3e:14:f0:63:53:ad:98:45:e7:fb:fa:
         c9:04:da:11
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUXKV7brnDD0mQwpJVWmZM/jusajAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjAxMTM1MDdaFw0yNDEyMTgxMTQwMDdaMDMxMTAvBgNV
BAMTKEIzM0MyNTkyMTAyNzI0N0JDMTY3MEY5RjYzMkMyOURDRDhCNDIxQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrm6BCtJzBw8joQNWuSdKkkXkT
02we7w64iHi+eTUIU+o+GNw9dMrTYTP+/36J8/7GHAZ6Mqn49VcztvIErX9u2PEb
R5piseadnO+kHmV+G3kaXbbx3RaakvAribh6WCwO2rIeNHbB5JfUhWMMi3qqbInk
14J76NSTvFpIXuDdTSckSkLOUNHdJucS1I2FYEpvYaGf0L9qrrx9eomwlprRbk8X
HzzD8frHG/iCeQGO5W6D2WLyRx2a5xOqJ25DGXt2CETVH9/TyZqCCqXeuf9TDQGS
UFmqfJA51+OIS1pWNtJCYpLXMgAspJLGO5WCFlv12GxrBrbArwtR6jeIlFNPAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzPCWSECcke8Fn
D59jLCnc2LQhuzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HRE1qYlBpQkIzbXNWcTJDSlZtNjFueFhHVVdkSmEyb3JQ
M0ZXV25Wc0dSby8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HRE1qYlBpQkIzbXNWcTJDSlZtNjFueFhHVVdkSmEyb3JQ
M0ZXV25Wc0dSby8wL0IzM0MyNTkyMTAyNzI0N0JDMTY3MEY5RjYzMkMyOURDRDhC
NDIxQkIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi3nJAMEAorbuDANBAIA
AjAHAwUAKARKIDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEE9QwDQYJKoZIhvcN
AQELBQADggEBACqOYfdsv2AJB4gh1hquzuRqM0hZu4Llx36n9bxShfzci5gpmAzS
6x8GPPcv+r+rZZUa2flmfCrBezzLquLJ1IabdBTyDGMdMT1KeYhivvco07BcUSgJ
DiRfNGbxOmmDw7Mo77LgZsZxVMhPjaey9mSSfVahHIhGpCcQ2Db75Z5jvW3R1jys
DLxXOPMB7FxRMpwzoy0Pk0Yz4PxKr44BsRQUlXt5Bt5LRQGgBLknXF9xDhNeS6Ng
6WcrurC8q6GOoZ7JPDvLznUhUMBMDgiiVzDMyEonBwZhuX1INOJSgBfLry4LxFaR
REp7lmGEpwYkcgw+FPBjU62YRef7+skE2hE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org