Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6A544FC8FD5D5BFCC5CC8567FBFC5FEE0FC2E63.cer
File:                     E6A544FC8FD5D5BFCC5CC8567FBFC5FEE0FC2E63.cer (raw, json)
Hash identifier:          JPFHg6Qv8lQ3wbTnbE66zqYXSCblQZsjDr7kS7evQiU=
Subject key identifier:   E6:A5:44:FC:8F:D5:D5:BF:CC:5C:C8:56:7F:BF:C5:FE:E0:FC:2E:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68D4F187FEAD9BCFC2C944DDB44B08E5D68E375B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/E6A544FC8FD5D5BFCC5CC8567FBFC5FEE0FC2E63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 12 Nov 2023 15:32:42 +0000
Certificate not after:    Sun 10 Nov 2024 15:37:42 +0000
Subordinate resources:    AS: 269252
                          IP: 45.181.220.0/22
                          IP: 2804:61b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d4:f1:87:fe:ad:9b:cf:c2:c9:44:dd:b4:4b:08:e5:d6:8e:37:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 12 15:32:42 2023 GMT
            Not After : Nov 10 15:37:42 2024 GMT
        Subject: CN=E6A544FC8FD5D5BFCC5CC8567FBFC5FEE0FC2E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:75:10:b4:3e:a7:2c:56:47:be:48:79:2e:
                    46:7c:09:12:e8:7e:67:8a:49:85:b5:59:aa:8a:52:
                    cd:69:d8:1d:89:0d:16:94:03:31:aa:2e:90:69:ea:
                    3a:ea:69:46:b4:12:b5:61:9a:f1:6f:dd:27:17:19:
                    85:34:43:1d:74:57:41:92:9a:84:ef:39:c4:46:db:
                    59:94:c1:f3:6f:cc:6b:ad:b5:44:36:3b:be:c0:59:
                    76:57:07:46:89:bb:77:3a:03:0f:93:1b:a5:24:4e:
                    94:e3:7c:f0:5c:82:b6:94:97:30:bd:b2:58:12:3a:
                    6b:7b:39:d9:4f:e5:0b:b1:5c:0d:5f:44:f2:94:5e:
                    1b:52:91:bb:19:cc:4b:7d:2b:8e:7a:e6:25:ae:6a:
                    db:41:93:5d:91:66:1f:e8:ca:51:4e:67:02:03:57:
                    ed:54:e9:11:7b:2c:57:37:8d:61:3b:76:8c:0e:27:
                    fd:e2:63:50:5f:74:71:1f:c7:67:b8:5e:88:7c:07:
                    57:80:72:6e:96:77:52:09:d8:c6:5b:12:41:b5:8c:
                    58:c5:55:c4:46:58:de:fd:e2:52:4a:2e:fa:c1:23:
                    71:ed:f1:21:bc:26:04:d5:5d:78:fb:52:b1:17:05:
                    2f:90:16:0a:87:55:0b:01:ea:76:4b:d7:a6:db:b6:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:A5:44:FC:8F:D5:D5:BF:CC:5C:C8:56:7F:BF:C5:FE:E0:FC:2E:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/E6A544FC8FD5D5BFCC5CC8567FBFC5FEE0FC2E63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.220.0/22
                IPv6:
                  2804:61b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269252

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:21:f2:7d:df:ee:10:eb:3e:8b:92:76:0e:19:8a:03:cd:
         a6:69:c0:c3:b1:53:c6:02:85:7d:83:cd:b3:8c:31:40:83:31:
         82:b6:09:73:83:d8:ea:79:6d:fe:08:ab:56:e0:ea:2d:6a:10:
         0e:7f:5a:73:3f:f5:d9:3e:7f:b9:79:2d:8e:9b:96:4b:04:f6:
         c7:ba:78:2f:2a:bc:ce:09:ea:a7:ee:c8:29:4b:03:bd:82:d3:
         1c:b2:47:5f:86:89:bd:55:b7:6b:4e:75:60:13:69:e8:ea:85:
         78:ec:13:70:04:15:5e:2e:55:b0:0f:9f:ca:ac:19:12:3a:24:
         a3:57:90:f3:4e:2c:36:96:f1:3c:00:9a:c7:21:0f:51:2b:83:
         5e:a5:9b:3d:ef:f1:f9:4f:50:c5:23:d4:5b:8a:2a:ca:79:81:
         0c:4c:37:03:be:9f:02:8f:ab:31:1a:99:5a:56:1e:47:8d:a5:
         bc:6b:ed:0d:51:86:c7:45:01:16:9b:61:2f:44:03:30:e9:7f:
         ad:5c:1c:10:fb:ac:58:1c:6a:63:7b:72:84:08:ad:ff:18:a1:
         d6:64:13:87:3e:f5:6b:51:9e:ee:7a:be:17:7f:88:89:22:50:
         ee:54:75:0f:59:79:19:7e:8f:3e:a3:ca:0b:67:39:1d:17:1e:
         bc:3d:71:7c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaNTxh/6tm8/CyUTdtEsI5daON1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMTIxNTMyNDJaFw0yNDExMTAxNTM3NDJaMDMxMTAvBgNV
BAMTKEU2QTU0NEZDOEZENUQ1QkZDQzVDQzg1NjdGQkZDNUZFRTBGQzJFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhHUQtD6nLFZHvkh5LkZ8CRLo
fmeKSYW1WaqKUs1p2B2JDRaUAzGqLpBp6jrqaUa0ErVhmvFv3ScXGYU0Qx10V0GS
moTvOcRG21mUwfNvzGuttUQ2O77AWXZXB0aJu3c6Aw+TG6UkTpTjfPBcgraUlzC9
slgSOmt7OdlP5QuxXA1fRPKUXhtSkbsZzEt9K4565iWuattBk12RZh/oylFOZwID
V+1U6RF7LFc3jWE7dowOJ/3iY1BfdHEfx2e4Xoh8B1eAcm6Wd1IJ2MZbEkG1jFjF
VcRGWN794lJKLvrBI3Ht8SG8JgTVXXj7UrEXBS+QFgqHVQsB6nZL16bbtgB1AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTmpUT8j9XVv8xc
yFZ/v8X+4PwuYzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CWFE2TkFWUlpic3k1RGhnWDJrYVVMTUZNUG9tTG8zVUNa
MnRSRXFFazNINi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQlhRNk5BVlJaYnN5NURoZ1gya2FVTE1GTVBvbUxvM1VD
WjJ0UkVxRWszSDYvMC9FNkE1NDRGQzhGRDVENUJGQ0M1Q0M4NTY3RkJGQzVGRUUw
RkMyRTYzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIttdwwDQQCAAIwBwMF
ACgEYbgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBvEMA0GCSqGSIb3DQEBCwUA
A4IBAQBdGiHyfd/uEOs+i5J2DhmKA82macDDsVPGAoV9g82zjDFAgzGCtglzg9jq
eW3+CKtW4OotahAOf1pzP/XZPn+5eS2Om5ZLBPbHungvKrzOCeqn7sgpSwO9gtMc
skdfhom9VbdrTnVgE2no6oV47BNwBBVeLlWwD5/KrBkSOiSjV5DzTiw2lvE8AJrH
IQ9RK4NepZs97/H5T1DFI9RbiirKeYEMTDcDvp8Cj6sxGplaVh5HjaW8a+0NUYbH
RQEWm2EvRAMw6X+tXBwQ+6xYHGpje3KECK3/GKHWZBOHPvVrUZ7uer4Xf4iJIlDu
VHUPWXkZfo8+o8oLZzkdFx68PXF8
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org