Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE42C6643057B482587A822C60FFD8A85EB45BDB.cer
File:                     CE42C6643057B482587A822C60FFD8A85EB45BDB.cer (raw, json)
Hash identifier:          2FfcgoI52cW3j1OlnVyNe8ycmI0PmzOAcqquyXpQEiQ=
Subject key identifier:   CE:42:C6:64:30:57:B4:82:58:7A:82:2C:60:FF:D8:A8:5E:B4:5B:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       660189E3CCD2F2ACAC3681D7C31357D40A542322
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/CE42C6643057B482587A822C60FFD8A85EB45BDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 02:04:36 +0000
Certificate not after:    Thu 15 Aug 2024 02:09:36 +0000
Subordinate resources:    AS: 265027
                          IP: 170.150.96.0/22
                          IP: 2804:31a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:01:89:e3:cc:d2:f2:ac:ac:36:81:d7:c3:13:57:d4:0a:54:23:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 02:04:36 2023 GMT
            Not After : Aug 15 02:09:36 2024 GMT
        Subject: CN=CE42C6643057B482587A822C60FFD8A85EB45BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:40:70:76:4f:ce:15:55:d7:0e:7d:42:2c:
                    66:30:06:b2:a8:2b:c7:87:72:3f:2f:d4:cf:02:b0:
                    8b:ee:64:e8:71:99:be:50:2f:3f:0f:7f:d0:d1:47:
                    b7:f0:b0:33:59:3b:9d:a8:f3:d8:73:27:18:7b:a4:
                    45:e9:84:83:27:88:7b:e4:bb:48:05:b5:0b:47:05:
                    58:49:90:c5:c3:d5:4f:bb:a9:5e:26:42:b4:d3:67:
                    05:71:3f:e2:9e:42:e7:fc:de:7a:4f:19:9a:1a:ae:
                    10:f6:73:3e:67:55:43:48:1f:ff:56:85:83:d0:5b:
                    ac:b7:d4:e0:d1:e2:3f:ae:da:6c:57:f1:10:f9:e6:
                    07:d9:80:33:bc:9d:72:b6:47:b5:8a:84:83:d6:e7:
                    8c:55:fb:93:f6:c0:c0:63:ca:56:b7:23:55:4f:cf:
                    6d:af:e1:43:c9:5c:84:35:9e:a3:36:c1:35:c2:90:
                    87:70:5f:d6:df:46:22:43:f1:40:fe:4a:a4:e8:cb:
                    dd:a2:6e:46:06:b1:e6:c2:7c:c9:71:f4:ed:bb:ec:
                    f9:9c:4a:25:40:68:28:f8:49:0e:a3:cc:07:4c:63:
                    77:d5:1c:c4:ac:17:7c:d3:ca:e6:40:bb:58:52:1f:
                    e1:66:16:13:a0:ac:f5:0b:06:a7:ac:2a:d0:44:20:
                    e6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:42:C6:64:30:57:B4:82:58:7A:82:2C:60:FF:D8:A8:5E:B4:5B:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/CE42C6643057B482587A822C60FFD8A85EB45BDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.96.0/22
                IPv6:
                  2804:31a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265027

    Signature Algorithm: sha256WithRSAEncryption
         b6:3b:0f:92:cb:c9:26:8d:50:b2:58:59:59:f0:e1:9a:d7:d1:
         3e:01:fd:62:24:f3:44:80:fd:75:41:58:dd:65:2d:8f:ef:0c:
         9e:ff:7a:1d:b3:d6:61:0e:07:c3:ff:fb:42:c9:20:e5:ff:0b:
         07:36:72:5f:f9:cd:83:6a:d0:05:af:33:36:52:7d:c4:89:59:
         cc:9d:4c:0a:f5:58:b7:e2:e4:43:b7:03:95:46:e0:1a:67:f4:
         97:d6:07:75:99:03:b7:b4:59:41:93:79:00:80:1f:08:bf:b8:
         1b:81:aa:fd:aa:9b:be:67:26:12:57:1e:1c:68:4c:de:9f:a3:
         0c:ed:f5:78:73:b9:43:b4:c2:c8:6e:0f:df:ff:a9:22:e0:8c:
         d7:36:7d:1a:c6:b3:fc:57:2d:ac:b5:d9:39:32:46:34:25:46:
         85:3a:f3:c7:c7:c1:b4:9e:c2:02:7b:52:6a:9a:35:b4:59:33:
         d1:57:fe:b6:4e:65:f4:6a:67:d1:8c:47:06:1f:7e:11:26:11:
         35:ff:63:8c:6b:59:d0:7c:4c:a7:e3:fe:ef:54:07:bb:62:bb:
         9d:4f:50:c0:b6:6f:f2:ca:e8:73:8a:41:d5:be:dd:c2:41:45:
         df:53:7c:fc:2f:00:8e:38:06:db:73:c6:27:9e:cf:be:2e:f1:
         c0:ea:82:bf
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUZgGJ48zS8qysNoHXwxNX1ApUIyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTcwMjA0MzZaFw0yNDA4MTUwMjA5MzZaMDMxMTAvBgNV
BAMTKENFNDJDNjY0MzA1N0I0ODI1ODdBODIyQzYwRkZEOEE4NUVCNDVCREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdW0Bwdk/OFVXXDn1CLGYwBrKo
K8eHcj8v1M8CsIvuZOhxmb5QLz8Pf9DRR7fwsDNZO52o89hzJxh7pEXphIMniHvk
u0gFtQtHBVhJkMXD1U+7qV4mQrTTZwVxP+KeQuf83npPGZoarhD2cz5nVUNIH/9W
hYPQW6y31ODR4j+u2mxX8RD55gfZgDO8nXK2R7WKhIPW54xV+5P2wMBjyla3I1VP
z22v4UPJXIQ1nqM2wTXCkIdwX9bfRiJD8UD+SqToy92ibkYGsebCfMlx9O277Pmc
SiVAaCj4SQ6jzAdMY3fVHMSsF3zTyuZAu1hSH+FmFhOgrPULBqesKtBEIOb9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOQsZkMFe0glh6
gixg/9ioXrRb2zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HaXNnMVpncm9CM2lLRk1ybVhCdUJmdm0zY0xBU01EelA4
dmdHaVRSNGMyei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR2lzZzFaZ3JvQjNpS0ZNcm1YQnVCZnZtM2NMQVNNRHpQ
OHZnR2lUUjRjMnovMC9DRTQyQzY2NDMwNTdCNDgyNTg3QTgyMkM2MEZGRDhBODVF
QjQ1QkRCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqlmAwDQQCAAIwBwMF
ACgEMaAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAtDMA0GCSqGSIb3DQEBCwUA
A4IBAQC2Ow+Sy8kmjVCyWFlZ8OGa19E+Af1iJPNEgP11QVjdZS2P7wye/3ods9Zh
DgfD//tCySDl/wsHNnJf+c2DatAFrzM2Un3EiVnMnUwK9Vi34uRDtwOVRuAaZ/SX
1gd1mQO3tFlBk3kAgB8Iv7gbgar9qpu+ZyYSVx4caEzen6MM7fV4c7lDtMLIbg/f
/6ki4IzXNn0axrP8Vy2stdk5MkY0JUaFOvPHx8G0nsICe1JqmjW0WTPRV/62TmX0
amfRjEcGH34RJhE1/2OMa1nQfEyn4/7vVAe7YrudT1DAtm/yyuhzikHVvt3CQUXf
U3z8LwCOOAbbc8Ynns++LvHA6oK/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org