Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE61F9B772EF991D3A04A20C031279EE376E3199.cer
File:                     CE61F9B772EF991D3A04A20C031279EE376E3199.cer (raw, json)
Hash identifier:          sutzbc1tIxojVVqvv06a+7W5JBl/3wuD0hfVU3UKewY=
Subject key identifier:   CE:61:F9:B7:72:EF:99:1D:3A:04:A2:0C:03:12:79:EE:37:6E:31:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4567C6E39E5AB1290E54AB62ED0FB6F4D482A832
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/CE61F9B772EF991D3A04A20C031279EE376E3199.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 May 2023 00:45:09 +0000
Certificate not after:    Sun 26 May 2024 00:50:09 +0000
Subordinate resources:    AS: 266130
                          IP: 45.6.108.0/22
                          IP: 45.174.156.0/22
                          IP: 2804:3b1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:67:c6:e3:9e:5a:b1:29:0e:54:ab:62:ed:0f:b6:f4:d4:82:a8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 28 00:45:09 2023 GMT
            Not After : May 26 00:50:09 2024 GMT
        Subject: CN=CE61F9B772EF991D3A04A20C031279EE376E3199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:49:57:4f:ea:fc:d2:c8:ed:1a:8a:ff:0d:
                    a3:e0:50:8f:b3:ce:69:52:40:45:13:7e:e3:e7:f0:
                    87:16:83:ac:58:fa:19:37:ed:da:78:2b:47:9f:cb:
                    63:ec:3f:1f:c9:26:a3:11:f9:7e:a5:0c:5c:12:49:
                    b6:60:be:ed:e2:27:c5:8e:66:e6:aa:30:28:38:35:
                    12:5c:1d:2b:56:68:82:30:38:5b:53:52:67:93:12:
                    76:38:d2:36:a4:7f:6d:92:db:a1:b8:26:21:86:63:
                    37:49:44:fa:13:67:81:bb:88:0a:3e:bf:06:9d:94:
                    7c:33:77:c6:ae:34:37:0a:03:e9:ff:29:d5:9e:4d:
                    c9:3f:0e:65:9a:cc:d4:68:8f:fd:73:3a:65:a3:3b:
                    91:34:5b:b1:60:5c:55:35:3b:16:06:b8:60:45:b7:
                    e7:69:e9:11:c2:3d:45:be:87:7c:25:be:05:d8:0c:
                    b7:f5:34:40:25:f7:fe:d9:de:df:a6:1b:e0:2d:44:
                    be:ef:b0:e4:99:63:1c:57:83:8f:36:34:05:bd:e4:
                    b5:5e:26:f6:53:73:99:38:4f:5e:34:31:05:0a:7d:
                    1a:8b:26:0d:8e:23:94:7b:f5:a8:8f:24:02:24:ae:
                    70:3a:5b:71:2e:0b:f3:4c:c4:2c:bc:9b:9c:2f:41:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:61:F9:B7:72:EF:99:1D:3A:04:A2:0C:03:12:79:EE:37:6E:31:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/CE61F9B772EF991D3A04A20C031279EE376E3199.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.108.0/22
                  45.174.156.0/22
                IPv6:
                  2804:3b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266130

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:aa:2e:1d:31:e6:e8:67:73:40:ce:01:c5:ce:61:3b:69:
         38:0e:bb:7a:24:59:50:26:c4:08:80:a2:bf:20:31:e6:73:aa:
         c6:0f:df:9e:13:ad:6f:45:b5:b8:99:1f:7c:c3:38:0b:79:51:
         47:f4:4a:d1:ad:01:6a:de:bd:f4:00:c4:2c:1a:c9:68:1e:3a:
         72:75:cb:68:c0:21:6c:68:cb:6c:f4:33:bc:1f:be:aa:ce:9e:
         0f:74:7b:c3:04:f6:84:79:59:ec:84:4a:c2:5f:25:8d:5a:d4:
         ea:94:8a:43:87:77:1c:6c:6f:f2:68:04:66:23:1e:1e:3b:87:
         14:df:86:1b:1a:7b:1e:4b:d7:88:d5:89:ee:19:2b:e5:eb:da:
         8a:e7:34:6e:f2:0d:57:3a:a4:43:cf:50:f1:be:a3:02:82:e1:
         39:2e:40:47:24:31:da:92:58:d8:40:0c:aa:08:7a:41:d1:8d:
         bf:e8:2d:32:20:2a:3c:fb:39:7f:98:f9:ec:69:0a:1c:54:f1:
         8c:d1:f5:b7:73:64:a8:54:58:1b:5e:9b:42:32:2c:55:f0:4c:
         01:6b:9b:6c:79:74:9b:7c:a9:52:57:76:d4:22:75:36:1b:3f:
         e3:3a:0e:ec:d6:f5:03:59:1b:ba:a0:32:dc:99:69:a2:e5:d7:
         0f:ab:c0:e7
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIURWfG455asSkOVKti7Q+29NSCqDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjgwMDQ1MDlaFw0yNDA1MjYwMDUwMDlaMDMxMTAvBgNV
BAMTKENFNjFGOUI3NzJFRjk5MUQzQTA0QTIwQzAzMTI3OUVFMzc2RTMxOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0klXT+r80sjtGor/DaPgUI+z
zmlSQEUTfuPn8IcWg6xY+hk37dp4K0efy2PsPx/JJqMR+X6lDFwSSbZgvu3iJ8WO
ZuaqMCg4NRJcHStWaIIwOFtTUmeTEnY40jakf22S26G4JiGGYzdJRPoTZ4G7iAo+
vwadlHwzd8auNDcKA+n/KdWeTck/DmWazNRoj/1zOmWjO5E0W7FgXFU1OxYGuGBF
t+dp6RHCPUW+h3wlvgXYDLf1NEAl9/7Z3t+mG+AtRL7vsOSZYxxXg482NAW95LVe
JvZTc5k4T140MQUKfRqLJg2OI5R79aiPJAIkrnA6W3EuC/NMxCy8m5wvQUgHAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOYfm3cu+ZHToE
ogwDEnnuN24xmTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82a1FGMlp3NEJhbmVEUkxOTEJXWlJDdEQyWjIzSDU2empF
Zjh0dzY5QVlKRC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNmtRRjJadzRCYW5lRFJMTkxCV1pSQ3REMloyM0g1Nnpq
RWY4dHc2OUFZSkQvMC9DRTYxRjlCNzcyRUY5OTFEM0EwNEEyMEMwMzEyNzlFRTM3
NkUzMTk5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAItBmwDBAItrpwwDQQC
AAIwBwMFACgEOxwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA+SMA0GCSqGSIb3
DQEBCwUAA4IBAQBdKaouHTHm6GdzQM4Bxc5hO2k4Drt6JFlQJsQIgKK/IDHmc6rG
D9+eE61vRbW4mR98wzgLeVFH9ErRrQFq3r30AMQsGsloHjpydctowCFsaMts9DO8
H76qzp4PdHvDBPaEeVnshErCXyWNWtTqlIpDh3ccbG/yaARmIx4eO4cU34YbGnse
S9eI1YnuGSvl69qK5zRu8g1XOqRDz1DxvqMCguE5LkBHJDHakljYQAyqCHpB0Y2/
6C0yICo8+zl/mPnsaQocVPGM0fW3c2SoVFgbXptCMixV8EwBa5tseXSbfKlSV3bU
InU2Gz/jOg7s1vUDWRu6oDLcmWmi5dcPq8Dn
-----END CERTIFICATE-----