Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.cer
File:                     C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.cer (raw, json)
Hash identifier:          ED/QOWWsQXzQDB+QZKud8LnL1EaLp2M8jxXWRC5rXbU=
Subject key identifier:   C1:88:9F:3D:EE:DC:B0:3F:5E:4F:CA:20:0B:70:66:50:EC:5B:D0:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       03F9A10602D59A91C78B0FB2DFE9D621DE6E5F11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:45:11 +0000
Certificate not after:    Thu 03 Apr 2025 18:50:11 +0000
Subordinate resources:    AS: 270665
                          IP: 186.148.228.0/22
                          IP: 2804:6f84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f9:a1:06:02:d5:9a:91:c7:8b:0f:b2:df:e9:d6:21:de:6e:5f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 18:45:11 2024 GMT
            Not After : Apr  3 18:50:11 2025 GMT
        Subject: CN=C1889F3DEEDCB03F5E4FCA200B706650EC5BD054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:92:bb:c3:55:10:53:1c:ad:a0:11:51:24:
                    3d:fb:8c:04:96:3c:ac:aa:ff:8f:91:53:e7:cb:f3:
                    18:42:6c:da:46:34:4f:59:34:d5:9a:c2:6d:ba:3a:
                    65:e3:0a:89:c9:f3:bb:2f:24:26:f1:aa:42:76:14:
                    37:de:69:6a:6f:b8:c1:18:b3:72:b1:8f:8c:1c:8f:
                    77:00:a6:af:d3:49:43:73:58:b7:32:60:dd:54:30:
                    76:25:a0:85:b5:d4:b1:9c:45:93:e9:2b:0f:71:92:
                    f4:79:bb:74:38:5c:c9:67:21:4d:4b:d7:18:90:b9:
                    04:c0:e5:e3:ed:a2:8c:1c:21:96:c9:82:58:cc:32:
                    a0:b0:75:d2:ab:9a:26:8a:60:8f:e8:f7:9e:0f:5a:
                    2b:bf:c5:3b:52:1a:76:d7:7e:94:f5:8e:40:ca:47:
                    b8:22:66:44:7f:82:be:72:8d:eb:a2:b6:1e:d5:a0:
                    a8:cc:1f:95:9b:2b:b7:26:35:17:d6:77:f7:71:13:
                    46:c3:2a:a9:75:84:ee:48:7e:81:75:20:ee:47:ce:
                    ea:f8:7a:36:6f:13:88:38:ed:d8:29:a9:28:b5:1f:
                    ac:27:ae:c1:29:46:fc:d3:90:9c:87:1d:65:4d:de:
                    9b:82:1b:db:9a:0c:e1:48:b5:a0:4e:ee:80:55:9b:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:88:9F:3D:EE:DC:B0:3F:5E:4F:CA:20:0B:70:66:50:EC:5B:D0:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.228.0/22
                IPv6:
                  2804:6f84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270665

    Signature Algorithm: sha256WithRSAEncryption
         32:1c:78:6c:f4:ff:07:97:3b:c0:b6:63:ec:15:e7:58:72:6e:
         3c:85:a6:0c:29:cd:18:08:85:d4:06:bf:28:77:23:b5:19:4b:
         2b:21:50:2b:79:bb:85:7c:15:cd:a6:3f:b5:c6:6a:df:1f:99:
         44:f4:d0:ef:3b:0f:41:48:3c:72:6a:c4:97:4a:03:c1:64:a0:
         62:c8:9a:1f:20:5d:59:3a:a8:0e:c8:92:23:d6:a1:1d:69:e1:
         b3:a6:70:e0:bf:95:5f:f2:4e:f7:5a:c1:22:db:9e:67:f9:ce:
         9c:d2:52:5c:ad:1c:f6:ea:86:92:c5:10:ec:d2:df:25:0e:87:
         59:0d:21:c1:5a:52:b8:fa:3b:93:2b:f0:f0:fd:9a:11:e5:ff:
         33:02:4f:49:e6:04:c0:22:4d:26:e1:41:19:59:1f:d2:fb:dd:
         f8:43:fb:a7:b2:b2:b3:2f:75:cc:33:71:e9:36:ed:ce:df:a7:
         53:42:c6:16:43:dc:f9:aa:98:b2:dc:bf:e4:cf:2a:19:9d:4b:
         c7:65:b6:30:03:47:4a:04:d1:61:fa:a1:e9:43:38:31:9a:71:
         0c:14:2a:a4:b4:c3:d4:e3:c4:c8:e2:58:b5:f2:55:cf:a8:7d:
         29:54:1d:c6:6d:a7:d3:6b:6f:c9:f4:6c:cd:88:70:9c:4b:c0:
         be:51:69:35
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUA/mhBgLVmpHHiw+y3+nWId5uXxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDQxODQ1MTFaFw0yNTA0MDMxODUwMTFaMDMxMTAvBgNV
BAMTKEMxODg5RjNERUVEQ0IwM0Y1RTRGQ0EyMDBCNzA2NjUwRUM1QkQwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnpK7w1UQUxytoBFRJD37jASW
PKyq/4+RU+fL8xhCbNpGNE9ZNNWawm26OmXjConJ87svJCbxqkJ2FDfeaWpvuMEY
s3Kxj4wcj3cApq/TSUNzWLcyYN1UMHYloIW11LGcRZPpKw9xkvR5u3Q4XMlnIU1L
1xiQuQTA5ePtoowcIZbJgljMMqCwddKrmiaKYI/o954PWiu/xTtSGnbXfpT1jkDK
R7giZkR/gr5yjeuith7VoKjMH5WbK7cmNRfWd/dxE0bDKql1hO5IfoF1IO5Hzur4
ejZvE4g47dgpqSi1H6wnrsEpRvzTkJyHHWVN3puCG9uaDOFItaBO7oBVm98HAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBiJ897tywP15P
yiALcGZQ7FvQVDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82eG9NaXJacXhlOHhCcFdQVGJuaDZNcU5pV215bnl0aXk0
VmJVdzRjc3lMNC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNnhvTWlyWnF4ZTh4QnBXUFRibmg2TXFOaVdteW55dGl5
NFZiVXc0Y3N5TDQvMC9DMTg4OUYzREVFRENCMDNGNUU0RkNBMjAwQjcwNjY1MEVD
NUJEMDU0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK6lOQwDQQCAAIwBwMF
ACgEb4QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCFJMA0GCSqGSIb3DQEBCwUA
A4IBAQAyHHhs9P8HlzvAtmPsFedYcm48haYMKc0YCIXUBr8odyO1GUsrIVArebuF
fBXNpj+1xmrfH5lE9NDvOw9BSDxyasSXSgPBZKBiyJofIF1ZOqgOyJIj1qEdaeGz
pnDgv5Vf8k73WsEi255n+c6c0lJcrRz26oaSxRDs0t8lDodZDSHBWlK4+juTK/Dw
/ZoR5f8zAk9J5gTAIk0m4UEZWR/S+934Q/unsrKzL3XMM3HpNu3O36dTQsYWQ9z5
qpiy3L/kzyoZnUvHZbYwA0dKBNFh+qHpQzgxmnEMFCqktMPU48TI4li18lXPqH0p
VB3GbafTa2/J9GzNiHCcS8C+UWk1
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org