Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B432410FF204DD80C535B6B43485D75E1298EC61.cer
File:                     B432410FF204DD80C535B6B43485D75E1298EC61.cer (raw, json)
Hash identifier:          f9xYPTZylDxql2PtAwf9856uGr26A4m9O2vO/TCB6Ko=
Subject key identifier:   B4:32:41:0F:F2:04:DD:80:C5:35:B6:B4:34:85:D7:5E:12:98:EC:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3EA6CD54D922B2DDC909E3198085DF251795EDA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/B432410FF204DD80C535B6B43485D75E1298EC61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:35 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:35 +0000
Subordinate resources:    AS: 268742
                          IP: 45.172.44.0/22
                          IP: 2804:5a0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a6:cd:54:d9:22:b2:dd:c9:09:e3:19:80:85:df:25:17:95:ed:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:35 2023 GMT
            Not After : Nov  5 03:58:35 2024 GMT
        Subject: CN=B432410FF204DD80C535B6B43485D75E1298EC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:e0:d2:b2:16:7b:ef:16:9f:24:e7:0c:6e:
                    d6:aa:e6:56:43:d1:66:48:c4:7d:2e:03:08:f0:af:
                    fa:b4:a6:ea:e8:81:a7:ef:ac:67:e6:80:59:30:fc:
                    9d:23:ef:bb:d2:f7:43:72:51:70:76:19:bf:77:25:
                    f7:8c:88:c3:bb:16:8a:ee:0d:f1:39:2a:83:fb:4c:
                    62:47:cf:fd:f8:b6:d6:d0:16:42:9e:60:80:f9:a8:
                    21:c5:fc:19:34:d9:6f:08:cd:8c:cc:5a:16:d9:74:
                    fe:f2:4a:49:c1:25:7f:d3:6f:c0:8d:79:c0:09:78:
                    31:87:d4:88:c1:97:fe:94:06:04:26:b6:21:4c:97:
                    b6:b2:24:f5:5c:e8:7d:d4:b0:af:ec:fc:bf:8c:6f:
                    d0:bc:05:e3:73:33:72:64:6d:06:63:ad:61:41:47:
                    eb:59:24:e2:b5:53:0f:db:ce:7d:ce:09:b9:b9:ee:
                    3f:d8:78:28:f5:b0:bc:bc:6c:7a:e4:c6:9f:94:f4:
                    ed:26:1e:30:db:d7:b1:52:77:c9:de:11:b2:c8:91:
                    6d:00:a6:6b:eb:32:df:f4:c8:38:68:82:51:b9:79:
                    b2:04:fe:1c:3e:dd:67:06:1b:bf:5c:b8:d4:9c:0f:
                    a8:2c:ee:06:2f:81:b8:21:e7:23:53:c8:66:95:76:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:32:41:0F:F2:04:DD:80:C5:35:B6:B4:34:85:D7:5E:12:98:EC:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/B432410FF204DD80C535B6B43485D75E1298EC61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.44.0/22
                IPv6:
                  2804:5a0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268742

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:3d:f7:2c:ac:8f:02:84:a3:36:f5:c2:6f:cd:34:6d:02:
         44:a9:0f:87:35:eb:e6:83:be:f4:bf:f3:a6:7c:50:18:f7:82:
         ee:8c:f4:ad:ec:8c:cf:8f:b5:11:94:ad:cb:06:9f:87:06:35:
         29:66:59:6c:75:74:34:a5:4e:7f:ad:f0:c1:82:f4:60:33:28:
         f7:a5:cc:6a:3e:ad:e5:97:d4:37:31:b0:23:1f:b1:b6:37:b5:
         57:a3:4f:2d:76:cd:c8:78:52:29:df:c9:0a:d7:93:d2:ef:47:
         fb:ed:4b:b4:1f:ff:9e:17:c6:f9:66:0b:e5:21:13:05:e3:22:
         59:b6:1b:f0:10:1f:f6:9b:82:1c:df:53:1e:b1:87:5b:35:bd:
         e6:6c:4d:10:c1:eb:80:d5:af:5c:fb:f8:99:64:27:9d:ca:b2:
         80:cc:dc:03:20:22:ef:86:b0:f5:db:25:d6:88:74:47:17:3d:
         b3:c2:f4:07:c2:74:92:3a:d9:d6:58:b6:b9:35:3c:d7:bf:b3:
         81:5d:9d:74:b6:ce:25:ab:21:9b:d0:71:4e:77:91:44:04:3a:
         cc:4c:4b:69:68:fb:d7:5e:d4:30:97:96:2e:6c:9f:2b:db:ee:
         9f:de:d0:b8:7f:80:ca:83:07:b6:51:21:b9:2b:78:73:39:7e:
         07:5e:57:b1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUPqbNVNkist3JCeMZgIXfJReV7aMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDcwMzUzMzVaFw0yNDExMDUwMzU4MzVaMDMxMTAvBgNV
BAMTKEI0MzI0MTBGRjIwNEREODBDNTM1QjZCNDM0ODVENzVFMTI5OEVDNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvleDSshZ77xafJOcMbtaq5lZD
0WZIxH0uAwjwr/q0purogafvrGfmgFkw/J0j77vS90NyUXB2Gb93JfeMiMO7Foru
DfE5KoP7TGJHz/34ttbQFkKeYID5qCHF/Bk02W8IzYzMWhbZdP7ySknBJX/Tb8CN
ecAJeDGH1IjBl/6UBgQmtiFMl7ayJPVc6H3UsK/s/L+Mb9C8BeNzM3JkbQZjrWFB
R+tZJOK1Uw/bzn3OCbm57j/YeCj1sLy8bHrkxp+U9O0mHjDb17FSd8neEbLIkW0A
pmvrMt/0yDhoglG5ebIE/hw+3WcGG79cuNScD6gs7gYvgbgh5yNTyGaVdpeTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0MkEP8gTdgMU1
trQ0hddeEpjsYTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84d1A1TkJYNWZjSHBIcnVBTEdIMTVwM3pQS3Z2TkNTeVR4
REZKZEdkM0Rtby8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOHdQNU5CWDVmY0hwSHJ1QUxHSDE1cDN6UEt2dk5DU3lU
eERGSmRHZDNEbW8vMC9CNDMyNDEwRkYyMDRERDgwQzUzNUI2QjQzNDg1RDc1RTEy
OThFQzYxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItrCwwDQQCAAIwBwMF
ACgEWgwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBnGMA0GCSqGSIb3DQEBCwUA
A4IBAQAH6T33LKyPAoSjNvXCb800bQJEqQ+HNevmg770v/OmfFAY94LujPSt7IzP
j7URlK3LBp+HBjUpZllsdXQ0pU5/rfDBgvRgMyj3pcxqPq3ll9Q3MbAjH7G2N7VX
o08tds3IeFIp38kK15PS70f77Uu0H/+eF8b5ZgvlIRMF4yJZthvwEB/2m4Ic31Me
sYdbNb3mbE0QweuA1a9c+/iZZCedyrKAzNwDICLvhrD12yXWiHRHFz2zwvQHwnSS
OtnWWLa5NTzXv7OBXZ10ts4lqyGb0HFOd5FEBDrMTEtpaPvXXtQwl5YubJ8r2+6f
3tC4f4DKgwe2USG5K3hzOX4HXlex
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org