Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BEB46512B8880AD36DFF21606FF23737C60D7704.cer
File:                     BEB46512B8880AD36DFF21606FF23737C60D7704.cer (raw, json)
Hash identifier:          kRkHR8szPiOmswZW4GlGUAf6rV8rVVUZ2/i9o+S34NI=
Subject key identifier:   BE:B4:65:12:B8:88:0A:D3:6D:FF:21:60:6F:F2:37:37:C6:0D:77:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1203FDE13E8A08C00E7BC680C3E78B36623D8B9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/BEB46512B8880AD36DFF21606FF23737C60D7704.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 14:35:28 +0000
Certificate not after:    Mon 25 Mar 2024 14:40:28 +0000
Subordinate resources:    AS: 268351
                          IP: 45.236.188.0/22
                          IP: 2804:4fd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:03:fd:e1:3e:8a:08:c0:0e:7b:c6:80:c3:e7:8b:36:62:3d:8b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 14:35:28 2023 GMT
            Not After : Mar 25 14:40:28 2024 GMT
        Subject: CN=BEB46512B8880AD36DFF21606FF23737C60D7704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7c:07:ce:1b:d6:a5:46:c5:1a:2b:9d:e4:e3:
                    33:83:40:c5:a6:ce:f7:48:4e:3e:4a:49:0f:07:6c:
                    c0:d0:0a:5b:74:7d:f5:b8:5d:a0:2b:df:5d:06:03:
                    bd:92:59:c9:7f:8c:dc:ba:75:48:f1:af:b2:b8:e2:
                    b6:34:4c:75:39:48:d3:bc:0e:7a:ac:c3:7a:41:79:
                    75:db:25:df:40:08:05:25:f8:e4:7a:49:26:ac:85:
                    b7:03:98:c1:e7:ff:06:2b:a9:3f:54:9e:a1:52:e9:
                    8b:35:f2:de:ae:ac:15:ef:67:96:1a:80:c1:fa:8f:
                    b5:ec:ba:2b:5c:f7:fc:19:d8:a2:6d:b9:19:1e:55:
                    83:9f:69:0a:d1:a2:75:6d:b0:88:cc:b6:cf:5b:4c:
                    b3:8e:c9:60:d3:6b:02:5f:55:b8:28:5f:5e:d9:be:
                    3d:3d:d3:c8:7f:fe:c5:3c:69:c3:d3:76:9a:00:5f:
                    b1:a4:a0:0d:e1:14:b8:e8:3b:75:a2:03:8c:ad:d3:
                    c3:ab:a7:e0:6f:05:c5:c5:ae:0c:71:0c:f1:ce:bf:
                    c0:72:04:8d:bf:76:05:e2:76:5c:8b:39:10:5a:23:
                    97:62:7a:1f:f3:e9:73:b3:2f:46:e6:06:5f:ae:f4:
                    0f:d8:eb:2f:01:46:f4:60:0e:7b:72:b7:d0:69:3d:
                    1b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:B4:65:12:B8:88:0A:D3:6D:FF:21:60:6F:F2:37:37:C6:0D:77:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/BEB46512B8880AD36DFF21606FF23737C60D7704.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.188.0/22
                IPv6:
                  2804:4fd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268351

    Signature Algorithm: sha256WithRSAEncryption
         10:fc:71:84:e2:61:25:3c:4d:75:1a:98:de:a9:32:6b:c8:9d:
         b4:90:82:62:82:20:ee:e2:fc:54:7b:57:e3:cf:3d:24:91:ef:
         62:2d:57:6d:6b:9d:6b:c2:ab:f3:26:05:5f:7d:ee:6d:0c:67:
         d6:ca:a8:d3:97:52:16:95:5d:c8:c6:80:56:7b:f1:3f:80:6f:
         58:f3:91:17:17:7a:ec:15:32:3e:aa:6d:0a:c3:e1:c3:39:17:
         70:94:f6:02:63:b8:b2:2e:78:01:5f:0c:44:5a:28:5f:31:bc:
         d6:ee:9c:07:91:c5:72:a7:1d:f8:9f:dd:82:6e:d8:3e:e3:80:
         e4:ed:67:67:46:61:06:d3:56:a3:3f:8e:fd:6f:57:b8:d6:78:
         50:9b:52:7b:df:48:51:dd:08:95:0d:9a:4d:fa:66:05:4e:b4:
         92:32:b9:d3:1f:cd:19:11:af:85:8a:81:b9:8f:9f:b7:38:01:
         1e:76:00:9c:ab:2d:00:be:65:07:ea:f3:85:5e:d5:a1:06:9a:
         e9:22:65:44:f5:10:8d:14:8f:12:cf:f1:30:dc:80:38:b7:81:
         17:b7:34:dd:63:f5:df:b2:74:24:b7:52:1b:9d:82:00:02:d6:
         1f:bb:d4:6c:dd:be:d2:88:f9:8e:97:48:03:51:d0:32:b5:c2:
         17:8a:44:ed
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUEgP94T6KCMAOe8aAw+eLNmI9i54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjcxNDM1MjhaFw0yNDAzMjUxNDQwMjhaMDMxMTAvBgNV
BAMTKEJFQjQ2NTEyQjg4ODBBRDM2REZGMjE2MDZGRjIzNzM3QzYwRDc3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTfAfOG9alRsUaK53k4zODQMWm
zvdITj5KSQ8HbMDQClt0ffW4XaAr310GA72SWcl/jNy6dUjxr7K44rY0THU5SNO8
Dnqsw3pBeXXbJd9ACAUl+OR6SSashbcDmMHn/wYrqT9UnqFS6Ys18t6urBXvZ5Ya
gMH6j7Xsuitc9/wZ2KJtuRkeVYOfaQrRonVtsIjMts9bTLOOyWDTawJfVbgoX17Z
vj0908h//sU8acPTdpoAX7GkoA3hFLjoO3WiA4yt08Orp+BvBcXFrgxxDPHOv8By
BI2/dgXidlyLORBaI5dieh/z6XOzL0bmBl+u9A/Y6y8BRvRgDntyt9BpPRs3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+tGUSuIgK023/
IWBv8jc3xg13BDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85SEVyMXR2TVZwcnU1Z1Uyb3RWWmp1UFg1UThFeVpqcVU3
ZHlScEdiVVBIUC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85SEVyMXR2TVZwcnU1Z1Uyb3RWWmp1UFg1UThFeVpqcVU3
ZHlScEdiVVBIUC8wL0JFQjQ2NTEyQjg4ODBBRDM2REZGMjE2MDZGRjIzNzM3QzYw
RDc3MDQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3svDANBAIAAjAHAwUA
KARP0DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGD8wDQYJKoZIhvcNAQELBQAD
ggEBABD8cYTiYSU8TXUamN6pMmvInbSQgmKCIO7i/FR7V+PPPSSR72ItV21rnWvC
q/MmBV997m0MZ9bKqNOXUhaVXcjGgFZ78T+Ab1jzkRcXeuwVMj6qbQrD4cM5F3CU
9gJjuLIueAFfDERaKF8xvNbunAeRxXKnHfif3YJu2D7jgOTtZ2dGYQbTVqM/jv1v
V7jWeFCbUnvfSFHdCJUNmk36ZgVOtJIyudMfzRkRr4WKgbmPn7c4AR52AJyrLQC+
ZQfq84Ve1aEGmukiZUT1EI0UjxLP8TDcgDi3gRe3NN1j9d+ydCS3UhudggAC1h+7
1GzdvtKI+Y6XSANR0DK1wheKRO0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org