Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BE542B5EE79842C85A7A83A7784B0112BD961474.cer
File:                     BE542B5EE79842C85A7A83A7784B0112BD961474.cer (raw, json)
Hash identifier:          P8aWV0mgOcRlnkUqpLmM2SNsure9RfP3Tv0/OCeqoj0=
Subject key identifier:   BE:54:2B:5E:E7:98:42:C8:5A:7A:83:A7:78:4B:01:12:BD:96:14:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2114F22693EF932E8AE60AD8F09F68F1746001AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/BE542B5EE79842C85A7A83A7784B0112BD961474.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 15:08:58 +0000
Certificate not after:    Thu 23 May 2024 15:13:58 +0000
Subordinate resources:    AS: 266135
                          IP: 45.6.128.0/22
                          IP: 2804:3b34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:14:f2:26:93:ef:93:2e:8a:e6:0a:d8:f0:9f:68:f1:74:60:01:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 15:08:58 2023 GMT
            Not After : May 23 15:13:58 2024 GMT
        Subject: CN=BE542B5EE79842C85A7A83A7784B0112BD961474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:7d:c6:76:ac:ef:1d:40:04:9d:24:6b:a0:
                    fb:be:bd:64:c5:48:d3:1c:02:f2:8d:ef:98:71:b0:
                    46:f5:5f:4f:13:76:54:95:7d:5f:50:8d:92:6f:6c:
                    58:48:38:6f:b4:e9:c1:5d:4c:a2:76:01:a0:cc:61:
                    33:27:a9:6f:67:34:5b:3a:1d:c6:19:71:fc:36:a0:
                    82:eb:db:02:78:b8:b5:b5:3a:04:f7:ff:e1:da:d8:
                    f3:f6:2e:19:86:a7:e9:43:c5:df:eb:e5:d4:a3:54:
                    0e:65:2a:10:c7:8f:21:43:42:59:77:20:cb:03:1c:
                    c6:a4:cd:60:64:f9:de:2c:54:ad:23:96:ce:50:f6:
                    58:69:aa:36:90:bf:52:b6:bb:63:bb:fd:4e:39:7f:
                    a0:ce:a8:e6:2d:14:f4:fa:61:cf:ef:41:cc:21:d3:
                    2f:eb:d2:96:4d:2e:2c:97:e5:b9:0d:50:5f:26:4b:
                    9e:bb:18:87:a6:af:04:dd:a3:70:f7:28:73:e5:58:
                    d4:24:f2:61:3b:e0:83:4b:d5:a0:05:47:2f:17:04:
                    21:e0:bc:29:44:e7:10:81:81:40:9d:53:42:f7:af:
                    ab:bb:aa:04:9a:fe:5b:b4:fe:ea:ba:9c:6a:5c:bd:
                    50:96:08:0d:2b:c3:da:a0:a2:23:88:b5:89:14:2a:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:54:2B:5E:E7:98:42:C8:5A:7A:83:A7:78:4B:01:12:BD:96:14:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/BE542B5EE79842C85A7A83A7784B0112BD961474.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.128.0/22
                IPv6:
                  2804:3b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266135

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:c1:e2:61:37:45:70:22:da:0b:65:f8:fa:03:6d:00:4a:
         29:b2:0c:97:e8:1b:af:e7:5e:48:0c:15:af:2e:94:55:97:ee:
         ae:2d:49:20:62:04:a7:1a:3a:9d:46:0c:0a:da:b0:fe:d2:30:
         bf:d6:6a:a2:4a:50:47:6d:3b:26:be:31:ca:2a:96:ff:e3:36:
         99:0a:c3:0a:40:23:bb:35:39:cc:64:85:d9:7b:52:86:48:df:
         2f:6a:7a:6a:c3:ac:cd:cd:88:71:4b:67:66:b2:a8:3f:e0:1a:
         cf:f9:e7:2e:92:91:21:47:16:17:75:85:61:ee:ce:ef:89:f2:
         89:4e:d9:d1:73:6d:9f:be:f6:db:af:4f:0c:01:46:f5:c0:c6:
         3f:a2:ff:70:b6:3f:65:ed:cf:a3:1e:34:2c:01:a7:db:54:3c:
         01:5b:5e:3c:5f:e9:26:0d:1a:d5:9b:b7:1f:43:b9:33:f0:5f:
         cd:33:2a:0a:29:d4:d9:c7:7d:7b:db:7c:46:8e:73:f4:23:b1:
         7c:e3:0a:6c:ac:06:a4:dd:d8:fd:96:eb:e0:88:84:24:01:14:
         e1:27:fa:88:1d:9a:7b:16:59:c3:f7:8c:d9:44:79:52:92:5a:
         4f:da:18:ef:ad:af:f9:1f:5f:a8:f3:76:48:05:10:da:18:97:
         aa:8a:6e:19
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUIRTyJpPvky6K5grY8J9o8XRgAawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjUxNTA4NThaFw0yNDA1MjMxNTEzNThaMDMxMTAvBgNV
BAMTKEJFNTQyQjVFRTc5ODQyQzg1QTdBODNBNzc4NEIwMTEyQkQ5NjE0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrH3GdqzvHUAEnSRroPu+vWTF
SNMcAvKN75hxsEb1X08TdlSVfV9QjZJvbFhIOG+06cFdTKJ2AaDMYTMnqW9nNFs6
HcYZcfw2oILr2wJ4uLW1OgT3/+Ha2PP2LhmGp+lDxd/r5dSjVA5lKhDHjyFDQll3
IMsDHMakzWBk+d4sVK0jls5Q9lhpqjaQv1K2u2O7/U45f6DOqOYtFPT6Yc/vQcwh
0y/r0pZNLiyX5bkNUF8mS567GIemrwTdo3D3KHPlWNQk8mE74INL1aAFRy8XBCHg
vClE5xCBgUCdU0L3r6u7qgSa/lu0/uq6nGpcvVCWCA0rw9qgoiOItYkUKmpvAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+VCte55hCyFp6
g6d4SwESvZYUdDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ER2Jidm9OaURpWXdieUZHRXd4b1RpVWQ3NEdGRjdzYm5x
cnNGYURpOFdZOS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vREdiYnZvTmlEaVl3YnlGR0V3eG9UaVVkNzRHRkY3c2Ju
cXJzRmFEaThXWTkvMC9CRTU0MkI1RUU3OTg0MkM4NUE3QTgzQTc3ODRCMDExMkJE
OTYxNDc0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBoAwDQQCAAIwBwMF
ACgEOzQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA+XMA0GCSqGSIb3DQEBCwUA
A4IBAQCaFMHiYTdFcCLaC2X4+gNtAEopsgyX6Buv515IDBWvLpRVl+6uLUkgYgSn
GjqdRgwK2rD+0jC/1mqiSlBHbTsmvjHKKpb/4zaZCsMKQCO7NTnMZIXZe1KGSN8v
anpqw6zNzYhxS2dmsqg/4BrP+ecukpEhRxYXdYVh7s7vifKJTtnRc22fvvbbr08M
AUb1wMY/ov9wtj9l7c+jHjQsAafbVDwBW148X+kmDRrVm7cfQ7kz8F/NMyoKKdTZ
x31723xGjnP0I7F84wpsrAak3dj9luvgiIQkARThJ/qIHZp7FlnD94zZRHlSklpP
2hjvra/5H1+o83ZIBRDaGJeqim4Z
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org