Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer
File:                     CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer (raw, json)
Hash identifier:          7E8cp0uVCZXdMo7+YO4CPxgMsH4TQp6v480SFO/dyH4=
Subject key identifier:   CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2507CE973A389B57EE139AA1C5BC5DA276B88E72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2023 19:33:10 +0000
Certificate not after:    Mon 25 Nov 2024 19:38:10 +0000
Subordinate resources:    AS: 53187
                          IP: 143.106.0.0/16
                          IP: 177.8.96.0/20
                          IP: 177.220.0.0/17
                          IP: 2801:8a::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:07:ce:97:3a:38:9b:57:ee:13:9a:a1:c5:bc:5d:a2:76:b8:8e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 27 19:33:10 2023 GMT
            Not After : Nov 25 19:38:10 2024 GMT
        Subject: CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:4b:7e:19:14:e8:4e:ad:2d:c5:4d:3b:11:
                    02:ee:b2:d0:3f:32:f3:8c:30:fc:29:b2:dd:64:a1:
                    9e:c2:35:9b:b2:ef:55:52:f8:c5:d9:cf:60:32:0f:
                    85:62:42:cd:36:f5:c9:a7:c6:ef:9c:98:8a:23:bf:
                    78:21:05:84:e5:cf:e5:e2:3b:17:7e:5a:97:c9:e0:
                    c8:49:fd:27:11:fa:f6:e9:30:b5:16:19:c1:70:42:
                    81:9d:7c:30:78:6d:7a:8b:2e:b8:51:be:66:6e:62:
                    f5:13:f4:5c:e7:20:8c:86:cb:c4:9c:e1:fc:68:5b:
                    5b:17:82:9c:2f:ba:0d:df:da:9e:f6:20:56:97:a2:
                    29:de:3f:62:61:8f:d1:2a:29:88:37:2c:23:c5:e7:
                    7e:f7:a1:0e:55:b7:03:0c:4a:84:7c:a7:f0:e5:b5:
                    5d:4f:98:14:51:6b:7a:9f:b1:06:7f:a8:4b:dd:e2:
                    91:e4:2c:97:50:7e:27:1f:04:17:7b:56:3d:59:af:
                    98:81:78:4a:29:7d:1b:4f:23:97:e1:47:40:0e:05:
                    c9:b7:04:a8:65:a9:ce:ea:b7:dc:68:83:d1:fd:81:
                    58:cc:0f:88:f6:93:a5:a5:c7:d7:a6:b2:ca:d3:4e:
                    32:9f:01:6b:19:d5:cf:09:ac:2e:50:d2:b6:c3:e8:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.106.0.0/16
                  177.8.96.0/20
                  177.220.0.0/17
                IPv6:
                  2801:8a::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53187

    Signature Algorithm: sha256WithRSAEncryption
         b4:30:86:3c:13:48:eb:13:5c:85:a0:22:c3:21:ae:d7:61:6b:
         36:59:6d:ce:95:ae:b2:2b:77:70:0b:3e:de:1c:16:87:f2:21:
         3e:3d:37:45:02:b6:52:d3:2b:a6:ad:97:a8:3c:4b:71:28:7f:
         50:43:3d:fa:85:78:8c:43:b8:20:1d:50:6c:97:ba:44:a2:50:
         82:b9:70:66:be:7f:78:f7:34:4a:c1:0c:9c:cb:76:c5:5f:04:
         d9:a0:50:fc:06:72:27:e3:87:c8:a2:a2:e5:0a:c1:35:03:24:
         89:6b:09:c5:a9:1f:1d:78:49:11:91:76:23:97:b7:6f:55:a6:
         c9:ad:e2:39:85:a5:d2:d7:a9:8f:98:87:28:f9:62:e1:f2:20:
         4d:f9:c6:3c:eb:fa:8d:5d:03:e4:ce:02:e0:25:da:7d:c7:8c:
         83:03:02:9d:6f:d2:0a:f6:93:dc:c7:d9:b6:44:45:67:d8:1c:
         68:ce:05:f9:89:c8:e1:35:59:e0:4a:96:ce:b8:8c:7c:15:ed:
         d9:34:20:75:45:21:de:24:8d:13:1c:cb:11:34:71:c3:69:45:
         2b:14:ca:ae:b4:98:70:c4:ba:ba:f8:94:00:54:7b:7b:95:31:
         76:54:6b:8d:76:2f:4c:b9:ad:40:7a:8e:24:0c:28:25:ca:12:
         bc:02:73:a7
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUJQfOlzo4m1fuE5qhxbxdona4jnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjcxOTMzMTBaFw0yNDExMjUxOTM4MTBaMDMxMTAvBgNV
BAMTKENFMURCNkY0RTI2NTA2QzBCQkFBNTc2RUVCNDIwREFFQkZBQkMzNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC40t+GRToTq0txU07EQLustA/
MvOMMPwpst1koZ7CNZuy71VS+MXZz2AyD4ViQs029cmnxu+cmIojv3ghBYTlz+Xi
Oxd+WpfJ4MhJ/ScR+vbpMLUWGcFwQoGdfDB4bXqLLrhRvmZuYvUT9FznIIyGy8Sc
4fxoW1sXgpwvug3f2p72IFaXoineP2Jhj9EqKYg3LCPF5373oQ5VtwMMSoR8p/Dl
tV1PmBRRa3qfsQZ/qEvd4pHkLJdQficfBBd7Vj1Zr5iBeEopfRtPI5fhR0AOBcm3
BKhlqc7qt9xog9H9gVjMD4j2k6Wlx9emssrTTjKfAWsZ1c8JrC5Q0rbD6IBRAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOHbb04mUGwLuq
V27rQg2uv6vDSTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BTkpZaVp1UVZBNkI2eVRoTFY4TG1rNVkydmNkaHptZE5Q
eEdwOTZSWjE3Sy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQU5KWWladVFWQTZCNnlUaExWOExtazVZMnZjZGh6bWRO
UHhHcDk2UloxN0svMC9DRTFEQjZGNEUyNjUwNkMwQkJBQTU3NkVFQjQyMERBRUJG
QUJDMzQ5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMBcEAgABMBEDAwCPagMEBLEIYAMEB7Hc
ADANBAIAAjAHAwUAKAEAijAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAz8MwDQYJ
KoZIhvcNAQELBQADggEBALQwhjwTSOsTXIWgIsMhrtdhazZZbc6VrrIrd3ALPt4c
FofyIT49N0UCtlLTK6atl6g8S3Eof1BDPfqFeIxDuCAdUGyXukSiUIK5cGa+f3j3
NErBDJzLdsVfBNmgUPwGcifjh8iiouUKwTUDJIlrCcWpHx14SRGRdiOXt29Vpsmt
4jmFpdLXqY+Yhyj5YuHyIE35xjzr+o1dA+TOAuAl2n3HjIMDAp1v0gr2k9zH2bZE
RWfYHGjOBfmJyOE1WeBKls64jHwV7dk0IHVFId4kjRMcyxE0ccNpRSsUyq60mHDE
urr4lABUe3uVMXZUa412L0y5rUB6jiQMKCXKErwCc6c=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org