Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC6856B1E156B23BC75F9286572B478F1447972E.cer
File:                     CC6856B1E156B23BC75F9286572B478F1447972E.cer (raw, json)
Hash identifier:          izMMvW8TvPgZKFoT0TAMgCa6o2sv3wUa+RYSxqtrpgI=
Subject key identifier:   CC:68:56:B1:E1:56:B2:3B:C7:5F:92:86:57:2B:47:8F:14:47:97:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3118741A0DDA8A56FF10E33E7427EE69FD29373D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CC6856B1E156B23BC75F9286572B478F1447972E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Oct 2023 17:16:36 +0000
Certificate not after:    Fri 18 Oct 2024 17:21:36 +0000
Subordinate resources:    AS: 270483
                          IP: 200.73.216.0/22
                          IP: 2804:6ca8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:18:74:1a:0d:da:8a:56:ff:10:e3:3e:74:27:ee:69:fd:29:37:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 17:16:36 2023 GMT
            Not After : Oct 18 17:21:36 2024 GMT
        Subject: CN=CC6856B1E156B23BC75F9286572B478F1447972E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:b9:2f:39:33:0e:e8:0a:d8:90:f3:f1:f7:
                    0c:69:f2:f6:f5:ad:0d:b3:85:18:b6:37:60:8a:9b:
                    b2:e3:a0:42:f5:92:15:07:72:58:32:73:a1:f8:9d:
                    ec:89:9e:89:7c:59:5e:4c:1e:11:0f:b2:35:34:e3:
                    e4:4a:8a:22:1a:b0:32:fb:61:f6:3d:dd:13:0a:e1:
                    a5:91:55:f8:2c:88:4f:0b:b2:9f:5e:90:95:93:a7:
                    38:a1:d1:9e:c2:87:bd:a9:aa:f8:4d:7c:90:37:57:
                    13:8e:c8:31:6a:19:d9:fd:a5:41:4c:29:92:0e:7b:
                    35:73:b4:78:f9:8f:fc:27:98:72:69:8a:59:a5:f5:
                    3e:8f:ad:17:64:4f:c5:24:ea:84:7e:54:4a:19:a9:
                    25:ee:df:c5:17:39:64:07:66:0d:36:ab:0e:30:72:
                    c4:c4:08:dc:d8:07:31:70:c4:c3:d1:23:64:37:ce:
                    50:fd:93:88:c4:a7:0e:89:5b:20:08:66:45:07:c0:
                    61:7b:ce:58:68:6e:cd:9a:9f:1a:2c:40:09:f0:91:
                    f3:68:0a:2e:bc:0e:80:9e:8b:42:72:d0:ab:51:c6:
                    56:4a:2c:05:1b:8e:2d:5f:8d:53:a7:b3:a8:f3:b1:
                    65:50:97:f0:42:07:f2:ca:b5:24:fe:33:3f:46:05:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:68:56:B1:E1:56:B2:3B:C7:5F:92:86:57:2B:47:8F:14:47:97:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CC6856B1E156B23BC75F9286572B478F1447972E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.216.0/22
                IPv6:
                  2804:6ca8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270483

    Signature Algorithm: sha256WithRSAEncryption
         83:76:e1:42:d8:49:ad:3c:11:a7:d9:30:3e:ba:ba:67:d8:93:
         ae:4b:a3:2c:3c:b2:68:bf:6d:f7:c3:5b:14:1f:d6:ca:a9:bd:
         3c:00:7d:4b:6a:7d:b3:14:a5:a2:98:8a:38:71:91:5f:b4:a2:
         6d:69:9a:16:87:1a:86:5d:1a:33:bf:63:5b:93:2c:0e:bd:56:
         54:98:43:a9:7b:4d:a4:bd:74:59:e4:f4:0a:e8:55:14:51:43:
         a3:f6:f2:aa:33:94:63:e7:a6:c0:9b:65:99:4a:b5:58:36:ec:
         5e:ab:19:dd:42:7c:95:3b:39:b9:97:25:50:68:90:be:6c:13:
         9c:30:35:30:5a:5d:e8:6f:c3:5b:6c:59:85:7c:3e:a6:33:49:
         4b:0b:3a:5f:b5:7f:eb:56:7b:0e:60:d5:2a:80:ce:0c:32:e1:
         ff:e5:d3:a3:e7:78:a6:c5:c5:67:ea:ff:4d:2a:14:22:c2:f2:
         a7:2f:84:89:c8:19:82:97:95:5d:d7:53:08:7e:42:bf:07:bf:
         4d:39:05:8e:26:64:6c:e2:bf:ac:f0:44:a7:6a:0b:a5:e2:93:
         80:25:2d:eb:91:6c:c5:45:81:e6:08:b8:da:6d:8c:62:6f:9d:
         2a:c8:bd:fe:db:13:eb:ac:1f:4a:77:ea:f5:8f:bd:46:00:13:
         6e:df:0d:17
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUMRh0Gg3ailb/EOM+dCfuaf0pNz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjAxNzE2MzZaFw0yNDEwMTgxNzIxMzZaMDMxMTAvBgNV
BAMTKENDNjg1NkIxRTE1NkIyM0JDNzVGOTI4NjU3MkI0NzhGMTQ0Nzk3MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQ7kvOTMO6ArYkPPx9wxp8vb1
rQ2zhRi2N2CKm7LjoEL1khUHclgyc6H4neyJnol8WV5MHhEPsjU04+RKiiIasDL7
YfY93RMK4aWRVfgsiE8Lsp9ekJWTpzih0Z7Ch72pqvhNfJA3VxOOyDFqGdn9pUFM
KZIOezVztHj5j/wnmHJpilml9T6PrRdkT8Uk6oR+VEoZqSXu38UXOWQHZg02qw4w
csTECNzYBzFwxMPRI2Q3zlD9k4jEpw6JWyAIZkUHwGF7zlhobs2anxosQAnwkfNo
Ci68DoCei0Jy0KtRxlZKLAUbji1fjVOns6jzsWVQl/BCB/LKtST+Mz9GBSeNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMaFax4VayO8df
koZXK0ePFEeXLjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CV29QVTFIaFh1RW5QNVo2RDJLWVUxbnpQb0tOZHN5VHZk
ak1jaEE1VnQ5OC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2
ZGpNY2hBNVZ0OTgvMC9DQzY4NTZCMUUxNTZCMjNCQzc1RjkyODY1NzJCNDc4RjE0
NDc5NzJFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALISdgwDQQCAAIwBwMF
ACgEbKgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCCTMA0GCSqGSIb3DQEBCwUA
A4IBAQCDduFC2EmtPBGn2TA+urpn2JOuS6MsPLJov233w1sUH9bKqb08AH1Lan2z
FKWimIo4cZFftKJtaZoWhxqGXRozv2NbkywOvVZUmEOpe02kvXRZ5PQK6FUUUUOj
9vKqM5Rj56bAm2WZSrVYNuxeqxndQnyVOzm5lyVQaJC+bBOcMDUwWl3ob8NbbFmF
fD6mM0lLCzpftX/rVnsOYNUqgM4MMuH/5dOj53imxcVn6v9NKhQiwvKnL4SJyBmC
l5Vd11MIfkK/B79NOQWOJmRs4r+s8ESnagul4pOAJS3rkWzFRYHmCLjabYxib50q
yL3+2xPrrB9Kd+r1j71GABNu3w0X
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org