Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CED12942F9155F85AD79411B143D3B85417B5D3D.cer
File:                     CED12942F9155F85AD79411B143D3B85417B5D3D.cer (raw, json)
Hash identifier:          psQk9q9RijO6qSViQYyrvKm4v2aQv6bHhBWELCg5DBU=
Subject key identifier:   CE:D1:29:42:F9:15:5F:85:AD:79:41:1B:14:3D:3B:85:41:7B:5D:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C61C7E2033FF7930EE3070EFADDE7722AF70A2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/CED12942F9155F85AD79411B143D3B85417B5D3D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 18:17:40 +0000
Certificate not after:    Fri 07 Mar 2025 18:22:40 +0000
Subordinate resources:    AS: 269617
                          IP: 45.190.8.0/22
                          IP: 2804:6744::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:61:c7:e2:03:3f:f7:93:0e:e3:07:0e:fa:dd:e7:72:2a:f7:0a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 18:17:40 2024 GMT
            Not After : Mar  7 18:22:40 2025 GMT
        Subject: CN=CED12942F9155F85AD79411B143D3B85417B5D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:8e:6e:da:0f:45:62:fd:c6:13:1e:bf:b5:
                    5f:78:06:5f:08:e9:c4:66:c4:ca:5b:66:4a:f4:d1:
                    b4:75:72:97:d5:7b:4e:fa:42:97:4d:5a:66:bc:f1:
                    18:12:24:37:26:47:83:49:12:3a:77:b7:ac:ed:91:
                    ff:12:a9:6b:0c:f3:70:52:48:db:8f:e1:66:c9:ed:
                    6d:fa:91:c7:96:2a:1b:d8:9c:b0:84:03:17:db:21:
                    36:a4:07:78:a7:d9:6d:dc:7b:ec:e3:18:55:69:8a:
                    ec:f2:44:47:be:d9:4d:ec:f9:27:7e:f4:13:80:6d:
                    21:2f:4c:46:fb:cc:eb:01:95:02:42:b8:61:47:1d:
                    d1:dd:d7:a6:59:98:2a:a0:3b:28:71:85:a5:27:c3:
                    32:cf:9c:3f:1d:ae:c6:b1:6c:b1:2e:55:ff:9f:3d:
                    03:57:73:03:70:ba:88:b6:81:73:75:fc:bc:72:30:
                    04:dd:39:af:88:18:76:cf:8b:a3:04:1f:ef:a1:a6:
                    be:77:fe:1f:78:87:15:ab:f4:07:e5:24:6a:6e:1e:
                    14:c5:e5:37:12:06:ac:a1:7a:c4:33:74:7a:b7:47:
                    8f:94:d3:c2:c5:9f:8b:8d:cb:0f:7b:82:9d:5e:6c:
                    68:d8:b3:85:f1:83:83:02:eb:5e:54:21:cc:7b:dd:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:D1:29:42:F9:15:5F:85:AD:79:41:1B:14:3D:3B:85:41:7B:5D:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/CED12942F9155F85AD79411B143D3B85417B5D3D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.8.0/22
                IPv6:
                  2804:6744::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269617

    Signature Algorithm: sha256WithRSAEncryption
         25:02:51:9f:cd:6c:08:50:99:12:bd:48:81:45:4c:9e:29:40:
         63:9f:e2:ff:2b:74:41:40:ab:e2:d3:6f:f1:b5:a8:53:0e:8d:
         02:cb:3e:15:7d:56:68:06:7d:eb:cf:ff:66:62:83:ab:e1:7a:
         c3:43:10:b7:44:05:d5:c5:64:b7:3c:d6:59:ce:5b:df:93:8b:
         c6:7b:2d:05:5e:2e:a9:8d:50:e6:f8:94:ec:94:5d:2b:44:e9:
         97:0e:e0:9b:0c:8b:59:35:90:82:bb:c8:20:14:92:26:cf:32:
         57:19:de:c5:6b:b4:7a:4b:9e:67:5d:3b:24:aa:81:6e:42:0c:
         95:6e:60:94:05:99:d9:fe:f4:ea:27:2f:0a:ec:72:b8:a7:19:
         a7:36:fe:e8:0e:7b:92:d8:69:db:9c:d1:7c:a6:08:a1:fb:3e:
         c2:94:d1:73:1b:bb:e7:fe:a9:9a:e3:29:39:87:51:9a:53:86:
         74:38:9e:4b:31:94:e3:2b:7b:f3:2a:04:dc:6f:25:e8:f4:ea:
         ce:c1:06:f9:84:e3:c1:59:62:04:30:19:8a:de:7f:4a:c6:ce:
         2a:01:7b:cf:c8:cf:c2:c5:69:01:f0:c1:56:ea:f3:75:f7:1a:
         e2:4f:6d:56:66:46:cf:7a:8f:0e:a8:95:3d:f6:f4:e9:ab:18:
         75:5d:da:80
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUfGHH4gM/95MO4wcO+t3ncir3CiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDgxODE3NDBaFw0yNTAzMDcxODIyNDBaMDMxMTAvBgNV
BAMTKENFRDEyOTQyRjkxNTVGODVBRDc5NDExQjE0M0QzQjg1NDE3QjVEM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XY5u2g9FYv3GEx6/tV94Bl8I
6cRmxMpbZkr00bR1cpfVe076QpdNWma88RgSJDcmR4NJEjp3t6ztkf8SqWsM83BS
SNuP4WbJ7W36kceWKhvYnLCEAxfbITakB3in2W3ce+zjGFVpiuzyREe+2U3s+Sd+
9BOAbSEvTEb7zOsBlQJCuGFHHdHd16ZZmCqgOyhxhaUnwzLPnD8drsaxbLEuVf+f
PQNXcwNwuoi2gXN1/LxyMATdOa+IGHbPi6MEH++hpr53/h94hxWr9AflJGpuHhTF
5TcSBqyhesQzdHq3R4+U08LFn4uNyw97gp1ebGjYs4Xxg4MC615UIcx73QknAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTO0SlC+RVfha15
QRsUPTuFQXtdPTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zTFEzc1JOdXFubUNNOVh1THJqTVVXNkFzdno3VkVyTDdY
Sk1zMzU2OEZoei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM0xRM3NSTnVxbm1DTTlYdUxyak1VVzZBc3Z6N1ZFckw3
WEpNczM1NjhGaHovMC9DRUQxMjk0MkY5MTU1Rjg1QUQ3OTQxMUIxNDNEM0I4NTQx
N0I1RDNELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvggwDQQCAAIwBwMF
ACgEZ0QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB0xMA0GCSqGSIb3DQEBCwUA
A4IBAQAlAlGfzWwIUJkSvUiBRUyeKUBjn+L/K3RBQKvi02/xtahTDo0Cyz4VfVZo
Bn3rz/9mYoOr4XrDQxC3RAXVxWS3PNZZzlvfk4vGey0FXi6pjVDm+JTslF0rROmX
DuCbDItZNZCCu8ggFJImzzJXGd7Fa7R6S55nXTskqoFuQgyVbmCUBZnZ/vTqJy8K
7HK4pxmnNv7oDnuS2GnbnNF8pgih+z7ClNFzG7vn/qma4yk5h1GaU4Z0OJ5LMZTj
K3vzKgTcbyXo9OrOwQb5hOPBWWIEMBmK3n9Kxs4qAXvPyM/CxWkB8MFW6vN19xri
T21WZkbPeo8OqJU99vTpqxh1XdqA
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org