Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4E159AD7556EFEF005A4799CCD909C726C3832E.cer
File:                     B4E159AD7556EFEF005A4799CCD909C726C3832E.cer (raw, json)
Hash identifier:          lNRFUiSWxeS1qu4FF+XfVrv1Mg9VxANOJwTiF62hlKQ=
Subject key identifier:   B4:E1:59:AD:75:56:EF:EF:00:5A:47:99:CC:D9:09:C7:26:C3:83:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08025E0A6E88C52FD485F2D6ADC3839ABF72F220
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/B4E159AD7556EFEF005A4799CCD909C726C3832E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jul 2023 05:24:30 +0000
Certificate not after:    Tue 02 Jul 2024 05:29:30 +0000
Subordinate resources:    AS: 262889
                          IP: 177.54.32.0/20
                          IP: 2804:11a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:02:5e:0a:6e:88:c5:2f:d4:85:f2:d6:ad:c3:83:9a:bf:72:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  4 05:24:30 2023 GMT
            Not After : Jul  2 05:29:30 2024 GMT
        Subject: CN=B4E159AD7556EFEF005A4799CCD909C726C3832E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:87:74:fe:cf:ab:7e:c7:eb:2c:97:41:e7:
                    82:73:ad:36:65:10:1b:fd:bd:9b:dd:32:09:e0:9b:
                    25:0c:0e:ce:fd:e8:f9:9c:cd:af:ec:96:d9:36:23:
                    e4:23:35:28:85:4d:b8:13:82:92:56:5a:bb:2c:d9:
                    5f:38:01:d6:52:ad:5b:6a:be:7a:83:be:02:c2:2c:
                    be:21:57:5a:3d:d4:e2:d8:c4:a5:d8:2a:83:93:ef:
                    dd:69:08:e5:9a:2b:4d:4c:de:8c:7e:72:78:66:c6:
                    44:c1:d0:b4:ce:67:77:61:89:0e:de:4d:a1:46:42:
                    02:b1:3b:24:57:7c:d0:9e:cc:ce:c4:f8:56:73:74:
                    e4:73:f4:38:4c:15:a3:57:ea:1c:4f:c9:dc:63:6e:
                    ef:29:77:ad:a3:65:04:59:54:5e:65:99:c9:e9:b9:
                    2b:24:dc:65:be:76:c1:67:fb:65:be:56:39:36:84:
                    6c:41:e2:8b:53:a1:dd:28:cb:4a:91:ed:e6:fc:7e:
                    3d:3b:a1:e4:74:46:75:9c:2e:69:b7:f1:be:20:1a:
                    e7:ec:18:9c:7d:21:4b:11:e3:09:97:69:aa:c4:da:
                    26:a8:54:4a:05:95:c3:9d:c0:1c:de:72:20:47:f1:
                    34:2a:4b:c1:0e:6e:4b:44:79:c3:44:fd:77:23:04:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:E1:59:AD:75:56:EF:EF:00:5A:47:99:CC:D9:09:C7:26:C3:83:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/B4E159AD7556EFEF005A4799CCD909C726C3832E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.32.0/20
                IPv6:
                  2804:11a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262889

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:66:9e:6b:31:05:51:18:bf:46:6b:d5:95:b0:0d:e9:2b:
         8f:0f:38:94:15:99:1f:6f:16:75:6d:91:f1:c9:99:f6:1c:eb:
         18:da:25:e7:3f:db:b8:93:1c:fe:f9:e6:98:75:d3:75:7d:25:
         9a:db:99:93:8a:86:d7:cc:02:79:7d:6b:99:60:aa:78:39:4d:
         e5:3a:9a:15:e2:4d:a0:af:0c:73:90:90:55:cf:84:86:8d:10:
         e5:f7:17:f4:da:54:c4:85:02:20:91:ea:29:15:bf:8b:97:0d:
         b0:f1:58:ac:76:08:fc:c9:96:b8:0c:6e:65:dc:2d:3b:2a:48:
         8f:6a:42:e8:3a:3e:61:bd:6c:fd:25:47:0f:5b:d9:95:1a:b3:
         01:c2:c2:c5:7a:07:96:5e:23:d1:10:83:c3:58:d8:d0:ea:c9:
         c1:88:57:f4:f4:fa:13:6d:f3:c3:51:fd:93:0f:95:e2:1e:f2:
         b0:8d:3c:73:1c:ad:0d:ee:4d:26:1a:65:2d:55:a1:7d:cf:00:
         77:46:4c:65:bf:cf:b9:ff:db:8e:9d:3f:09:d4:39:02:96:d8:
         c5:43:82:38:5d:0a:74:3b:f1:1e:5c:28:e1:90:4b:93:c1:04:
         8c:30:2d:84:cc:0a:eb:25:0f:f7:dd:de:b4:77:66:7c:a6:84:
         e7:b6:a9:c8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUCAJeCm6IxS/UhfLWrcODmr9y8iAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDQwNTI0MzBaFw0yNDA3MDIwNTI5MzBaMDMxMTAvBgNV
BAMTKEI0RTE1OUFENzU1NkVGRUYwMDVBNDc5OUNDRDkwOUM3MjZDMzgzMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TYd0/s+rfsfrLJdB54JzrTZl
EBv9vZvdMgngmyUMDs796Pmcza/sltk2I+QjNSiFTbgTgpJWWrss2V84AdZSrVtq
vnqDvgLCLL4hV1o91OLYxKXYKoOT791pCOWaK01M3ox+cnhmxkTB0LTOZ3dhiQ7e
TaFGQgKxOyRXfNCezM7E+FZzdORz9DhMFaNX6hxPydxjbu8pd62jZQRZVF5lmcnp
uSsk3GW+dsFn+2W+Vjk2hGxB4otTod0oy0qR7eb8fj07oeR0RnWcLmm38b4gGufs
GJx9IUsR4wmXaarE2iaoVEoFlcOdwBzeciBH8TQqS8EObktEecNE/XcjBK0xAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS04VmtdVbv7wBa
R5nM2QnHJsODLjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERUx6N01EWW9DemRpVDVkZUdBcG1qb2RBREExOU1yU3Yz
QlIzeTlhQ3pjSy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERUx6N01EWW9DemRpVDVkZUdBcG1qb2RBREExOU1yU3Yz
QlIzeTlhQ3pjSy8wL0I0RTE1OUFENzU1NkVGRUYwMDVBNDc5OUNDRDkwOUM3MjZD
MzgzMkUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLE2IDANBAIAAjAHAwUA
KAQRoDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAukwDQYJKoZIhvcNAQELBQAD
ggEBAF2OZp5rMQVRGL9Ga9WVsA3pK48POJQVmR9vFnVtkfHJmfYc6xjaJec/27iT
HP755ph103V9JZrbmZOKhtfMAnl9a5lgqng5TeU6mhXiTaCvDHOQkFXPhIaNEOX3
F/TaVMSFAiCR6ikVv4uXDbDxWKx2CPzJlrgMbmXcLTsqSI9qQug6PmG9bP0lRw9b
2ZUaswHCwsV6B5ZeI9EQg8NY2NDqycGIV/T0+hNt88NR/ZMPleIe8rCNPHMcrQ3u
TSYaZS1VoX3PAHdGTGW/z7n/246dPwnUOQKW2MVDgjhdCnQ78R5cKOGQS5PBBIww
LYTMCuslD/fd3rR3ZnymhOe2qcg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org