Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97C839E24A5A3273FC9BAF7B2BE2547CB4F9FEDB.cer
File:                     97C839E24A5A3273FC9BAF7B2BE2547CB4F9FEDB.cer (raw, json)
Hash identifier:          AX67fFge6KX+R/iwzLmBRrZLZjQqSjl2WDbWCMRw68U=
Subject key identifier:   97:C8:39:E2:4A:5A:32:73:FC:9B:AF:7B:2B:E2:54:7C:B4:F9:FE:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E99C8210888922B01193E3ECBDB3AA1223279E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/97C839E24A5A3273FC9BAF7B2BE2547CB4F9FEDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Nov 2023 19:14:20 +0000
Certificate not after:    Tue 26 Nov 2024 19:19:20 +0000
Subordinate resources:    AS: 269537
                          IP: 45.188.168.0/22
                          IP: 2804:6624::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:99:c8:21:08:88:92:2b:01:19:3e:3e:cb:db:3a:a1:22:32:79:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 28 19:14:20 2023 GMT
            Not After : Nov 26 19:19:20 2024 GMT
        Subject: CN=97C839E24A5A3273FC9BAF7B2BE2547CB4F9FEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:c7:05:de:05:b1:9e:42:26:0a:6e:da:14:
                    85:a4:9f:aa:79:26:c6:4b:44:97:dc:b1:fb:42:be:
                    33:24:75:e1:1a:33:16:22:81:63:9b:78:0c:05:4b:
                    d8:51:23:f2:72:f5:0c:9b:2d:08:3b:14:77:c2:1c:
                    a1:cc:22:6d:3a:94:0e:81:84:02:0d:58:43:a5:24:
                    e1:50:f8:21:18:c2:d3:3b:10:90:ca:d8:51:d3:8e:
                    c7:8e:3e:dd:6b:04:5f:40:60:2c:ae:a0:ba:d9:4e:
                    c2:b9:3a:ce:ae:aa:a7:04:11:46:3a:05:23:2d:b6:
                    34:24:07:5d:43:0f:7b:a2:23:9e:94:6e:5c:24:8e:
                    dd:71:5b:f3:3f:77:01:60:1d:32:84:e7:3e:5a:21:
                    26:64:3e:10:5c:4f:18:89:d9:9a:92:72:31:a4:7a:
                    97:20:49:06:45:cf:80:c5:a0:9e:5d:4b:e2:35:ca:
                    62:ec:d2:2e:88:66:25:d2:03:79:a7:8f:3e:cd:62:
                    9a:a2:6c:26:8e:cc:a9:d4:d3:e8:07:e2:a4:68:c1:
                    30:8c:e7:67:62:7e:a5:95:ac:4d:a7:9a:61:a9:a2:
                    0b:d6:64:6b:4e:c4:38:21:b0:67:52:57:39:37:8c:
                    85:15:b0:80:50:de:90:09:53:e2:0f:8b:cc:49:4c:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:C8:39:E2:4A:5A:32:73:FC:9B:AF:7B:2B:E2:54:7C:B4:F9:FE:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/97C839E24A5A3273FC9BAF7B2BE2547CB4F9FEDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.168.0/22
                IPv6:
                  2804:6624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269537

    Signature Algorithm: sha256WithRSAEncryption
         44:db:35:e3:ed:0a:12:3a:b5:ba:c5:b3:b6:07:cf:1c:8e:cd:
         fd:98:3f:f7:96:90:5e:fb:42:d5:a5:cb:4c:96:8e:3d:ca:2d:
         06:72:f7:9a:66:c4:89:f6:f8:88:a5:6d:f1:77:3f:c6:bb:ca:
         a1:79:94:9f:88:76:1c:10:a3:ff:93:61:f4:93:37:ef:07:50:
         7a:bc:41:52:d3:a3:ab:48:5a:a4:e4:4b:02:4c:c6:0d:21:e9:
         65:d2:e5:08:0d:f1:28:7e:bc:d9:c0:1d:8c:31:34:83:8a:8d:
         24:96:04:ef:8a:5e:87:b0:b3:eb:9e:2c:34:5c:14:26:9d:e8:
         ba:c9:67:e0:86:c2:c7:82:23:6f:43:df:8a:75:c8:fa:bf:1b:
         5a:df:83:fe:7f:00:b4:a1:a2:e2:37:e9:e7:52:b1:db:a5:f7:
         d3:97:74:1f:12:e1:5a:87:bc:8a:aa:50:f7:bb:04:8a:c5:ff:
         39:c8:83:20:23:6d:01:de:91:35:aa:45:42:0a:a3:c1:93:fe:
         3a:d1:08:fd:6a:b9:59:cb:1f:ca:01:a4:9a:f0:a0:1a:85:f4:
         6a:b6:9b:95:ad:30:35:cc:06:e7:ec:07:e5:ae:a1:54:f7:2c:
         bb:b0:cd:f0:d1:f1:61:21:03:ba:02:78:3a:6c:43:44:81:4e:
         0e:a9:49:0a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUHpnIIQiIkisBGT4+y9s6oSIyeeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjgxOTE0MjBaFw0yNDExMjYxOTE5MjBaMDMxMTAvBgNV
BAMTKDk3QzgzOUUyNEE1QTMyNzNGQzlCQUY3QjJCRTI1NDdDQjRGOUZFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqE8cF3gWxnkImCm7aFIWkn6p5
JsZLRJfcsftCvjMkdeEaMxYigWObeAwFS9hRI/Jy9QybLQg7FHfCHKHMIm06lA6B
hAINWEOlJOFQ+CEYwtM7EJDK2FHTjseOPt1rBF9AYCyuoLrZTsK5Os6uqqcEEUY6
BSMttjQkB11DD3uiI56Ublwkjt1xW/M/dwFgHTKE5z5aISZkPhBcTxiJ2ZqScjGk
epcgSQZFz4DFoJ5dS+I1ymLs0i6IZiXSA3mnjz7NYpqibCaOzKnU0+gH4qRowTCM
52difqWVrE2nmmGpogvWZGtOxDghsGdSVzk3jIUVsIBQ3pAJU+IPi8xJTJsJAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXyDniSloyc/yb
r3sr4lR8tPn+2zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERDJHQm5uZVVpWkh2azN6VW9QYmtpczZmeW02UlF2aVVR
NnZNNlJDdjFUeC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERDJHQm5uZVVpWkh2azN6VW9QYmtpczZmeW02UlF2aVVR
NnZNNlJDdjFUeC8wLzk3QzgzOUUyNEE1QTMyNzNGQzlCQUY3QjJCRTI1NDdDQjRG
OUZFREIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi28qDANBAIAAjAHAwUA
KARmJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHOEwDQYJKoZIhvcNAQELBQAD
ggEBAETbNePtChI6tbrFs7YHzxyOzf2YP/eWkF77QtWly0yWjj3KLQZy95pmxIn2
+IilbfF3P8a7yqF5lJ+IdhwQo/+TYfSTN+8HUHq8QVLTo6tIWqTkSwJMxg0h6WXS
5QgN8Sh+vNnAHYwxNIOKjSSWBO+KXoews+ueLDRcFCad6LrJZ+CGwseCI29D34p1
yPq/G1rfg/5/ALShouI36edSsdul99OXdB8S4VqHvIqqUPe7BIrF/znIgyAjbQHe
kTWqRUIKo8GT/jrRCP1quVnLH8oBpJrwoBqF9Gq2m5WtMDXMBufsB+WuoVT3LLuw
zfDR8WEhA7oCeDpsQ0SBTg6pSQo=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:02:33 2025 by rpki-client