Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer
File:                     E61E1840B192631B2DB9D62C5475E62173B11EB9.cer (raw, json)
Hash identifier:          INioj3DgzwTdq+xunItCED6ni5WCXy0Bbyf93V30wi8=
Subject key identifier:   E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       217CAAFD1DC627F88AF124585D904D5437E06011
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 15:51:09 +0000
Certificate not after:    Wed 26 Mar 2025 15:56:09 +0000
Subordinate resources:    AS: 268056
                          IP: 45.168.88.0/22
                          IP: 2804:5748::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7c:aa:fd:1d:c6:27:f8:8a:f1:24:58:5d:90:4d:54:37:e0:60:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 15:51:09 2024 GMT
            Not After : Mar 26 15:56:09 2025 GMT
        Subject: CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:b4:d1:b4:c8:29:29:e6:ea:f2:8f:0b:df:
                    d2:74:03:c5:b0:d6:71:a9:81:64:90:1f:cb:64:ac:
                    98:b7:d7:01:f7:10:ed:3e:fb:39:a7:ce:c3:d4:76:
                    a7:56:e0:4d:a2:0d:00:d9:ee:4a:f9:d9:d5:10:99:
                    f0:31:e3:4e:85:6c:35:86:e6:f6:ef:12:d3:97:ba:
                    65:6d:15:5e:f0:33:e1:24:5d:23:15:43:a8:c1:f3:
                    16:23:66:d8:28:00:74:47:47:8a:88:79:68:12:cc:
                    16:d7:31:6d:88:8d:18:cf:1c:99:5b:a3:f7:9a:3e:
                    1a:98:fd:61:40:3a:fe:af:4d:9a:4a:6f:17:ad:77:
                    0a:54:f3:59:57:cb:b3:a1:3e:e1:6d:64:76:27:68:
                    6d:5b:9a:70:9d:b6:2f:9d:c1:e9:62:07:15:fd:5b:
                    38:66:1b:20:ce:f8:1c:50:de:ec:fa:c9:6b:75:c0:
                    8e:54:20:e7:d5:04:66:72:97:aa:34:16:8a:fd:ab:
                    cf:6b:54:6c:cb:aa:6e:00:c0:fc:e1:ef:f8:3a:4a:
                    e5:9e:cf:77:8a:34:71:8d:c5:4b:5d:56:3e:11:8a:
                    dc:d0:30:ba:78:02:fa:8e:01:cb:1a:38:6b:77:e6:
                    c4:01:9f:d2:1f:94:80:95:34:ad:74:75:9d:66:69:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.88.0/22
                IPv6:
                  2804:5748::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268056

    Signature Algorithm: sha256WithRSAEncryption
         16:99:c9:0a:ff:53:cb:68:57:78:b3:67:7b:fa:16:a0:61:1f:
         a7:82:28:64:0b:c3:0e:ea:d2:18:b1:97:c2:a1:72:30:c0:8e:
         e3:cc:ce:82:01:71:fd:cf:e0:7b:41:c1:1b:80:d6:61:f5:67:
         27:a3:5a:01:bd:bc:49:f9:1e:5e:ed:cb:1c:18:b9:54:6e:1d:
         bd:b3:14:9a:8e:0c:10:a5:88:4a:cd:0f:b8:89:06:3c:3d:02:
         7c:f1:93:37:ab:7a:c4:9e:f1:19:30:00:41:fa:95:e7:e2:21:
         74:ed:f0:09:e4:9d:30:7e:0e:db:d9:fb:08:61:d5:20:74:03:
         ed:4c:ee:6b:1e:1f:f4:de:b0:7c:3c:d4:1f:72:5e:54:94:71:
         5b:77:0b:b8:2a:b3:3f:51:81:11:d5:00:d4:c5:0c:f9:04:49:
         0d:cc:74:e4:92:6c:e1:2c:24:0f:a1:5d:46:fb:08:1c:f4:e8:
         b0:16:5e:7c:3b:b2:dd:ab:85:6e:0a:af:8a:5e:ea:8a:c7:51:
         3d:ff:08:58:61:76:7f:63:b4:b1:56:ce:53:40:77:65:f0:33:
         b3:77:43:07:35:84:77:6a:7e:83:2a:c3:6d:62:81:e2:ca:51:
         65:f8:9d:2a:03:db:e4:62:57:fc:3d:08:a4:83:ea:8e:7c:03:
         46:24:c9:6b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUIXyq/R3GJ/iK8SRYXZBNVDfgYBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjcxNTUxMDlaFw0yNTAzMjYxNTU2MDlaMDMxMTAvBgNV
BAMTKEU2MUUxODQwQjE5MjYzMUIyREI5RDYyQzU0NzVFNjIxNzNCMTFFQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClybTRtMgpKebq8o8L39J0A8Ww
1nGpgWSQH8tkrJi31wH3EO0++zmnzsPUdqdW4E2iDQDZ7kr52dUQmfAx406FbDWG
5vbvEtOXumVtFV7wM+EkXSMVQ6jB8xYjZtgoAHRHR4qIeWgSzBbXMW2IjRjPHJlb
o/eaPhqY/WFAOv6vTZpKbxetdwpU81lXy7OhPuFtZHYnaG1bmnCdti+dweliBxX9
WzhmGyDO+BxQ3uz6yWt1wI5UIOfVBGZyl6o0For9q89rVGzLqm4AwPzh7/g6SuWe
z3eKNHGNxUtdVj4RitzQMLp4AvqOAcsaOGt35sQBn9IflICVNK10dZ1maUrjAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTmHhhAsZJjGy25
1ixUdeYhc7EeuTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HWnFGb0NLdlh3RWlDNk5lZW5jejZEd1F6SnpLbkZ1UWMy
UUppNDdXdWdGYS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR1pxRm9DS3ZYd0VpQzZOZWVuY3o2RHdRekp6S25GdVFj
MlFKaTQ3V3VnRmEvMC9FNjFFMTg0MEIxOTI2MzFCMkRCOUQ2MkM1NDc1RTYyMTcz
QjExRUI5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqFgwDQQCAAIwBwMF
ACgEV0gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBcYMA0GCSqGSIb3DQEBCwUA
A4IBAQAWmckK/1PLaFd4s2d7+hagYR+ngihkC8MO6tIYsZfCoXIwwI7jzM6CAXH9
z+B7QcEbgNZh9Wcno1oBvbxJ+R5e7cscGLlUbh29sxSajgwQpYhKzQ+4iQY8PQJ8
8ZM3q3rEnvEZMABB+pXn4iF07fAJ5J0wfg7b2fsIYdUgdAPtTO5rHh/03rB8PNQf
cl5UlHFbdwu4KrM/UYER1QDUxQz5BEkNzHTkkmzhLCQPoV1G+wgc9OiwFl58O7Ld
q4VuCq+KXuqKx1E9/whYYXZ/Y7SxVs5TQHdl8DOzd0MHNYR3an6DKsNtYoHiylFl
+J0qA9vkYlf8PQikg+qOfANGJMlr
-----END CERTIFICATE-----