Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C64D6884ED4729CDA5C42FF86C7842F7D2F68B27.cer
File:                     C64D6884ED4729CDA5C42FF86C7842F7D2F68B27.cer (raw, json)
Hash identifier:          ARdNyxTs1NVk7t+CnQ08H8EKIwyQ2wXPWtxWbyJ3GQI=
Subject key identifier:   C6:4D:68:84:ED:47:29:CD:A5:C4:2F:F8:6C:78:42:F7:D2:F6:8B:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25D338C9F9A8603C0651E8CBAA9A563DAB740C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/C64D6884ED4729CDA5C42FF86C7842F7D2F68B27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Jan 2022 02:59:25 +0000
Certificate not after:    Sat 21 Jan 2023 03:04:25 +0000
Subordinate resources:    AS: 271468
                          IP: 181.224.12.0/22
                          IP: 2804:7bfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d3:38:c9:f9:a8:60:3c:06:51:e8:cb:aa:9a:56:3d:ab:74:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 22 02:59:25 2022 GMT
            Not After : Jan 21 03:04:25 2023 GMT
        Subject: CN=C64D6884ED4729CDA5C42FF86C7842F7D2F68B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:62:e7:be:0b:8b:b9:f7:7e:b4:25:a4:1e:
                    da:0d:3a:e0:5f:6d:29:05:f8:c1:5b:f7:91:8a:8c:
                    7a:f8:91:e3:9f:03:68:86:f8:58:10:32:9a:a4:99:
                    97:2b:8b:d3:78:d8:33:be:ed:9d:34:e9:20:ef:c8:
                    67:97:79:d7:1c:eb:1d:af:40:63:59:cb:7a:45:61:
                    37:d3:f1:f9:c1:97:85:04:85:e9:b1:2f:1b:5e:4b:
                    ed:db:3d:2d:73:03:73:90:06:33:64:20:11:73:f2:
                    a9:81:16:bc:d2:5c:72:e6:0d:5f:cd:fd:61:1e:13:
                    ec:75:ad:8b:cc:f5:62:b3:5b:7c:2e:c3:e8:87:ff:
                    e2:34:d5:05:ba:ac:bd:5d:24:98:7b:4e:2f:6d:c1:
                    49:17:11:c9:ed:07:c3:64:4b:24:92:e9:10:a2:8e:
                    b9:cf:cd:95:a2:03:68:04:fb:ee:7e:13:17:8b:6d:
                    f0:8c:53:b5:31:2d:85:cc:51:f1:49:d6:fb:32:4a:
                    d9:c0:a3:18:b0:cf:d9:05:16:56:16:01:d8:19:a6:
                    13:d8:ea:eb:fe:48:01:a1:b3:1f:8f:f7:ae:2b:80:
                    dc:77:0a:36:46:1d:03:b4:21:cd:c0:6d:b8:24:25:
                    b0:06:67:06:a6:1f:ae:3e:53:bd:44:a3:77:08:6e:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:4D:68:84:ED:47:29:CD:A5:C4:2F:F8:6C:78:42:F7:D2:F6:8B:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/C64D6884ED4729CDA5C42FF86C7842F7D2F68B27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.12.0/22
                IPv6:
                  2804:7bfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271468

    Signature Algorithm: sha256WithRSAEncryption
         2e:e1:c6:96:c3:c4:e3:a9:b3:a6:34:0e:f9:20:e7:48:52:6f:
         63:50:87:dd:51:62:99:91:bf:55:d4:95:a3:8e:8b:23:4a:bb:
         6f:a3:1c:b7:56:e6:05:dd:90:e2:f3:62:fd:ac:a8:06:2a:73:
         14:f7:86:ba:4c:10:63:e3:41:d5:ff:07:fa:21:fc:33:38:8d:
         dd:a2:ff:a2:d8:ab:2d:fb:e6:c2:fe:c8:ba:a2:cf:51:9a:fe:
         32:65:9a:af:0b:91:5a:69:60:68:0a:61:5f:c9:0b:73:6c:75:
         ce:3f:6c:f3:cc:aa:c1:68:38:3d:31:1b:33:c8:3d:c5:b3:3c:
         2a:06:c5:89:0c:df:06:c7:9c:e7:0f:19:2b:78:e0:2d:e7:c0:
         96:77:8a:b8:6b:7c:66:58:26:44:bb:22:c1:f5:f6:13:e9:2d:
         e9:ad:ee:53:cc:8b:3b:15:79:f3:bf:59:88:35:ff:9e:3c:64:
         a0:62:e3:ee:75:08:d8:e5:68:c7:c8:6b:25:b5:69:a2:f1:76:
         0f:09:2b:fb:ef:2a:e7:b1:09:1d:ba:40:c5:ac:65:45:1d:b6:
         d9:7c:4e:98:4e:61:f7:91:51:20:e8:e8:56:eb:a1:1b:21:4d:
         f8:1b:26:b8:3a:ee:26:c8:19:bd:27:f6:39:4e:1b:42:36:9a:
         2b:43:45:78
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgITJdM4yfmoYDwGUejLqppWPat0DDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhFRTkxN0VCQzdBMTU4NzgzQjQ0QkM2RUQ4MjIxNzQzNEYy
OEFERUZCMB4XDTIyMDEyMjAyNTkyNVoXDTIzMDEyMTAzMDQyNVowMzExMC8GA1UE
AxMoQzY0RDY4ODRFRDQ3MjlDREE1QzQyRkY4NkM3ODQyRjdEMkY2OEIyNzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMc/Yue+C4u59360JaQe2g064F9t
KQX4wVv3kYqMeviR458DaIb4WBAymqSZlyuL03jYM77tnTTpIO/IZ5d51xzrHa9A
Y1nLekVhN9Px+cGXhQSF6bEvG15L7ds9LXMDc5AGM2QgEXPyqYEWvNJccuYNX839
YR4T7HWti8z1YrNbfC7D6If/4jTVBbqsvV0kmHtOL23BSRcRye0Hw2RLJJLpEKKO
uc/NlaIDaAT77n4TF4tt8IxTtTEthcxR8UnW+zJK2cCjGLDP2QUWVhYB2BmmE9jq
6/5IAaGzH4/3riuA3HcKNkYdA7QhzcBtuCQlsAZnBqYfrj5TvUSjdwhuxJkCAwEA
AaOCAxowggMWMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFMZNaITtRynNpcQv
+Gx4QvfS9osnMB8GA1UdIwQYMBaAFO6Rfrx6FYeDtEvG7YIhdDTyit77MA4GA1Ud
DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9FRTkxN0VCQzdBMTU4NzgzQjQ0
QkM2RUQ4MjIxNzQzNEYyOEFERUZCLmNybDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQyNWM5
YmI3ZTVjYWM3NDE5ZmE5MTkzNzcwZjY0YTZlZGYyMGMxOS5jZXIwggE/BggrBgEF
BQcBCwSCATEwggEtMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL0NCMzR1UGt5S21ZUUdtY1hKWTRqRFFZbmZaMXJhN1lXNEVU
dzVCczZadVJmLzAwgYoGCCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL0NCMzR1UGt5S21ZUUdtY1hKWTRqRFFZbmZaMXJhN1lXNEVU
dzVCczZadVJmLzAvQzY0RDY4ODRFRDQ3MjlDREE1QzQyRkY4NkM3ODQyRjdEMkY2
OEIyNy5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCteAMMA0EAgACMAcDBQAo
BHv8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQkbDANBgkqhkiG9w0BAQsFAAOC
AQEALuHGlsPE46mzpjQO+SDnSFJvY1CH3VFimZG/VdSVo46LI0q7b6Mct1bmBd2Q
4vNi/ayoBipzFPeGukwQY+NB1f8H+iH8MziN3aL/otirLfvmwv7IuqLPUZr+MmWa
rwuRWmlgaAphX8kLc2x1zj9s88yqwWg4PTEbM8g9xbM8KgbFiQzfBsec5w8ZK3jg
LefAlneKuGt8ZlgmRLsiwfX2E+kt6a3uU8yLOxV5879ZiDX/njxkoGLj7nUI2OVo
x8hrJbVpovF2Dwkr++8q57EJHbpAxaxlRR222XxOmE5h95FRIOjoVuuhGyFN+Bsm
uDruJsgZvSf2OU4bQjaaK0NFeA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org