Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC0E06E042035D313BCF3C7A514149A1C635129B.cer
File:                     CC0E06E042035D313BCF3C7A514149A1C635129B.cer (raw, json)
Hash identifier:          BMdd91syDK/BTWsOCPRDR75VhGs2/nsI6jJv6XEWFEc=
Subject key identifier:   CC:0E:06:E0:42:03:5D:31:3B:CF:3C:7A:51:41:49:A1:C6:35:12:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A2CF4349A10BFCAC9BC9E63B56E3A8636054140
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/CC0E06E042035D313BCF3C7A514149A1C635129B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 11:50:01 +0000
Certificate not after:    Mon 22 Jul 2024 11:55:01 +0000
Subordinate resources:    AS: 270315
                          IP: 189.126.0.0/22
                          IP: 2804:6a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2c:f4:34:9a:10:bf:ca:c9:bc:9e:63:b5:6e:3a:86:36:05:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 11:50:01 2023 GMT
            Not After : Jul 22 11:55:01 2024 GMT
        Subject: CN=CC0E06E042035D313BCF3C7A514149A1C635129B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:da:61:1b:1e:db:e4:d5:ee:79:09:24:f9:
                    59:46:57:82:9a:d0:e8:57:3d:4e:11:b8:cc:d1:8c:
                    70:63:8b:2b:e1:b1:0f:a8:a9:cc:3f:e4:ac:3b:65:
                    9f:cb:4a:03:92:7a:93:6b:c1:b1:0f:91:a8:0f:e6:
                    3b:cc:cb:ea:f7:74:f3:f4:46:9e:38:d4:6a:ec:cc:
                    ef:10:ba:2c:00:17:72:ab:75:8c:a1:13:b2:5c:72:
                    fe:c3:23:d8:f0:94:76:4b:f5:58:f7:33:42:e6:9d:
                    dd:4f:dd:2b:1e:74:8f:e8:27:37:45:43:02:0a:e0:
                    52:69:50:69:43:d6:8d:30:16:0f:23:69:73:0c:0a:
                    a4:d5:d0:5c:e2:6d:19:1c:63:06:ba:ee:e6:5a:c6:
                    39:cb:0a:48:d5:c6:57:02:b0:09:3b:fa:8c:88:d4:
                    84:75:02:89:e4:bf:ef:13:cc:14:7c:be:e2:4f:0b:
                    d5:fe:9b:b6:aa:22:ad:2d:71:0f:8a:0f:e8:c3:52:
                    62:0d:ea:d9:23:f9:52:3f:f2:fd:f7:22:35:be:f5:
                    fd:3c:da:a1:66:33:de:02:2e:2b:9c:67:73:66:1e:
                    53:e3:f5:fb:27:95:52:92:04:22:bb:2e:11:b2:48:
                    ce:e0:38:65:89:ca:41:37:35:2e:eb:a0:61:44:de:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:0E:06:E0:42:03:5D:31:3B:CF:3C:7A:51:41:49:A1:C6:35:12:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/CC0E06E042035D313BCF3C7A514149A1C635129B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.0.0/22
                IPv6:
                  2804:6a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270315

    Signature Algorithm: sha256WithRSAEncryption
         51:d5:26:2a:18:d0:44:30:65:58:75:68:12:61:c9:c8:5a:e0:
         20:0e:a0:c4:ce:67:87:31:c4:7d:15:8c:86:78:be:16:6c:f0:
         88:35:f8:6a:0a:40:74:a6:f4:68:6f:e1:4c:48:e9:50:1c:b1:
         72:8d:e6:b9:52:31:1e:a4:19:f3:b5:d2:6f:6a:ea:65:31:eb:
         76:a9:90:33:c3:62:41:c4:36:c9:a1:60:a9:b2:ad:8b:63:7b:
         5a:f2:9d:85:ea:5d:26:37:e8:d2:db:c7:d6:40:e9:2f:05:14:
         91:62:53:d2:3b:a5:bb:44:4d:1a:cd:22:ce:f8:c4:2e:64:93:
         71:c4:15:65:a6:63:7b:bc:c6:3d:f3:18:d6:68:b6:61:e3:b2:
         af:72:70:33:fd:bd:32:9e:16:d6:98:b5:e6:76:92:b5:05:96:
         3a:95:d1:1d:df:b1:9b:12:5a:c1:ec:c9:bd:3c:5c:b8:56:52:
         95:b4:75:03:b2:4b:b3:28:53:eb:c6:cd:fe:03:35:76:7e:fc:
         1e:c2:ba:d5:2e:89:cf:c1:3a:91:54:cd:05:0b:9d:f9:f5:66:
         d4:26:84:44:0c:aa:e5:00:a6:53:54:6a:db:a9:48:11:a0:73:
         90:a0:29:52:56:9b:05:66:28:ed:76:22:2b:e0:94:4c:74:a6:
         b0:5c:e0:08
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUCiz0NJoQv8rJvJ5jtW46hjYFQUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjQxMTUwMDFaFw0yNDA3MjIxMTU1MDFaMDMxMTAvBgNV
BAMTKENDMEUwNkUwNDIwMzVEMzEzQkNGM0M3QTUxNDE0OUExQzYzNTEyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAItphGx7b5NXueQkk+VlGV4Ka
0OhXPU4RuMzRjHBjiyvhsQ+oqcw/5Kw7ZZ/LSgOSepNrwbEPkagP5jvMy+r3dPP0
Rp441GrszO8QuiwAF3KrdYyhE7Jccv7DI9jwlHZL9Vj3M0Lmnd1P3SsedI/oJzdF
QwIK4FJpUGlD1o0wFg8jaXMMCqTV0FzibRkcYwa67uZaxjnLCkjVxlcCsAk7+oyI
1IR1Aonkv+8TzBR8vuJPC9X+m7aqIq0tcQ+KD+jDUmIN6tkj+VI/8v33IjW+9f08
2qFmM94CLiucZ3NmHlPj9fsnlVKSBCK7LhGySM7gOGWJykE3NS7roGFE3hKLAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMDgbgQgNdMTvP
PHpRQUmhxjUSmzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EcUZKdmNXTVN0ZHVYOXE4TEd5ZGU1RWRRQ1d4QXVHZnoy
MkE4U3Rxc041NC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRHFGSnZjV01TdGR1WDlxOExHeWRlNUVkUUNXeEF1R2Z6
MjJBOFN0cXNONTQvMC9DQzBFMDZFMDQyMDM1RDMxM0JDRjNDN0E1MTQxNDlBMUM2
MzUxMjlCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK9fgAwDQQCAAIwBwMF
ACgEaiQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB/rMA0GCSqGSIb3DQEBCwUA
A4IBAQBR1SYqGNBEMGVYdWgSYcnIWuAgDqDEzmeHMcR9FYyGeL4WbPCINfhqCkB0
pvRob+FMSOlQHLFyjea5UjEepBnztdJvauplMet2qZAzw2JBxDbJoWCpsq2LY3ta
8p2F6l0mN+jS28fWQOkvBRSRYlPSO6W7RE0azSLO+MQuZJNxxBVlpmN7vMY98xjW
aLZh47KvcnAz/b0ynhbWmLXmdpK1BZY6ldEd37GbElrB7Mm9PFy4VlKVtHUDskuz
KFPrxs3+AzV2fvwewrrVLonPwTqRVM0FC5359WbUJoREDKrlAKZTVGrbqUgRoHOQ
oClSVpsFZijtdiIr4JRMdKawXOAI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org