Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/05A7095263E993E7A22572EC998DF5905D60BD70.cer
File:                     05A7095263E993E7A22572EC998DF5905D60BD70.cer (raw, json)
Hash identifier:          ci/55bSe8/vjQ9dw/HaqUSTPRYp8gxpNrh1FKFQE9dc=
Subject key identifier:   05:A7:09:52:63:E9:93:E7:A2:25:72:EC:99:8D:F5:90:5D:60:BD:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3ED1C037876F5E635DCD2C135286C330607498BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/05A7095263E993E7A22572EC998DF5905D60BD70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Sep 2023 10:34:49 +0000
Certificate not after:    Sat 07 Sep 2024 10:39:49 +0000
Subordinate resources:    AS: 265010
                          IP: 170.84.100.0/22
                          IP: 2804:3160::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d1:c0:37:87:6f:5e:63:5d:cd:2c:13:52:86:c3:30:60:74:98:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  9 10:34:49 2023 GMT
            Not After : Sep  7 10:39:49 2024 GMT
        Subject: CN=05A7095263E993E7A22572EC998DF5905D60BD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:17:50:51:c7:1e:db:fc:c6:45:60:1c:5a:
                    1d:05:0f:66:af:50:8b:04:9a:1f:7d:f5:04:67:76:
                    53:02:2c:f1:27:c5:c2:49:f1:72:c0:8d:2f:c8:e2:
                    64:5e:8e:ee:f0:16:b4:98:9c:d5:eb:7a:fe:31:0e:
                    f9:af:20:d4:f1:d9:94:a6:ac:04:6a:ba:69:84:ca:
                    43:65:d4:f4:ad:d5:a2:ff:27:66:63:77:4b:c1:33:
                    b9:a2:f2:b9:5b:3a:1a:43:49:fe:75:14:57:28:b3:
                    04:cd:f0:c4:65:32:99:ec:2e:c5:3b:5c:f7:67:94:
                    9f:1d:cd:b1:66:80:97:0e:a4:14:1a:88:9c:88:49:
                    10:9d:3d:09:80:02:5c:3a:91:5f:24:f4:72:88:ff:
                    49:ac:c5:df:d3:30:16:f6:cb:23:b6:d6:ae:b9:d1:
                    89:61:ef:ef:99:6d:95:20:ed:eb:d7:23:9b:73:ea:
                    b3:8e:0f:d8:1f:54:d0:bc:3c:4d:f8:c3:6a:a7:29:
                    5e:28:ea:29:a9:51:b9:46:c0:eb:89:88:d0:72:19:
                    31:2b:2f:42:0d:5d:77:bd:24:aa:03:3f:20:ec:1f:
                    4e:91:14:b6:ff:cf:9b:6d:24:5c:e6:85:26:d5:0f:
                    0d:76:89:ad:20:40:0e:14:cb:0b:2a:f0:5f:6e:3d:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:A7:09:52:63:E9:93:E7:A2:25:72:EC:99:8D:F5:90:5D:60:BD:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/05A7095263E993E7A22572EC998DF5905D60BD70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.100.0/22
                IPv6:
                  2804:3160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265010

    Signature Algorithm: sha256WithRSAEncryption
         10:21:01:84:01:9c:50:23:1d:b6:77:23:37:8e:5e:8b:64:af:
         4e:ce:8b:4c:50:78:25:7c:37:d4:d3:51:51:88:db:fd:11:f2:
         8f:7c:43:9d:94:c0:d9:fa:8c:7a:25:6c:47:64:a1:8d:b3:a3:
         4a:2f:92:18:af:72:f6:a7:05:24:2d:d5:5b:36:1d:a8:52:85:
         88:97:2e:44:53:d1:9b:80:4d:b8:34:bf:ed:2a:33:aa:c6:0c:
         56:af:ba:38:ed:ff:c1:14:2e:73:89:f9:d3:60:e4:76:c5:d8:
         f4:26:23:a9:c5:b7:8a:89:ea:e3:3d:f4:c4:68:62:22:d0:59:
         e6:05:d2:dc:a3:93:ff:25:ed:7a:38:5a:7f:00:ac:c3:19:80:
         e7:9f:fb:ee:10:78:d5:26:c6:cd:92:ab:33:f6:8b:ea:fb:00:
         1a:2a:f2:89:e6:cd:29:5d:8a:8a:89:b7:cb:f3:b5:4f:78:b3:
         8c:2e:1d:6a:7e:f0:4e:61:16:f3:d3:89:87:27:28:69:3e:18:
         0a:09:d1:ac:e4:57:38:ad:47:df:00:57:01:22:a9:ba:ba:26:
         4d:16:99:dd:73:63:33:e6:bf:fb:75:16:d6:64:03:68:a6:f7:
         1c:2c:65:89:53:7f:27:98:fd:a2:9e:a9:8e:a6:e7:21:0a:f3:
         f5:20:a3:98
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPtHAN4dvXmNdzSwTUobDMGB0mLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDkxMDM0NDlaFw0yNDA5MDcxMDM5NDlaMDMxMTAvBgNV
BAMTKDA1QTcwOTUyNjNFOTkzRTdBMjI1NzJFQzk5OERGNTkwNUQ2MEJENzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYhdQUcce2/zGRWAcWh0FD2av
UIsEmh999QRndlMCLPEnxcJJ8XLAjS/I4mReju7wFrSYnNXrev4xDvmvINTx2ZSm
rARqummEykNl1PSt1aL/J2Zjd0vBM7mi8rlbOhpDSf51FFcoswTN8MRlMpnsLsU7
XPdnlJ8dzbFmgJcOpBQaiJyISRCdPQmAAlw6kV8k9HKI/0msxd/TMBb2yyO21q65
0Ylh7++ZbZUg7evXI5tz6rOOD9gfVNC8PE34w2qnKV4o6impUblGwOuJiNByGTEr
L0INXXe9JKoDPyDsH06RFLb/z5ttJFzmhSbVDw12ia0gQA4Uywsq8F9uPdobAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQFpwlSY+mT56Il
cuyZjfWQXWC9cDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zQ2hRajU0THFSckR6SjhkU2dUSEJ1V3ZXSkdnQlpKRVFp
dXZKb0pnVnVSdy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zQ2hRajU0THFSckR6SjhkU2dUSEJ1V3ZXSkdnQlpKRVFp
dXZKb0pnVnVSdy8wLzA1QTcwOTUyNjNFOTkzRTdBMjI1NzJFQzk5OERGNTkwNUQ2
MEJENzAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpUZDANBAIAAjAHAwUA
KAQxYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECzIwDQYJKoZIhvcNAQELBQAD
ggEBABAhAYQBnFAjHbZ3IzeOXotkr07Oi0xQeCV8N9TTUVGI2/0R8o98Q52UwNn6
jHolbEdkoY2zo0ovkhivcvanBSQt1Vs2HahShYiXLkRT0ZuATbg0v+0qM6rGDFav
ujjt/8EULnOJ+dNg5HbF2PQmI6nFt4qJ6uM99MRoYiLQWeYF0tyjk/8l7Xo4Wn8A
rMMZgOef++4QeNUmxs2SqzP2i+r7ABoq8onmzSldioqJt8vztU94s4wuHWp+8E5h
FvPTiYcnKGk+GAoJ0azkVzitR98AVwEiqbq6Jk0Wmd1zYzPmv/t1FtZkA2im9xws
ZYlTfyeY/aKeqY6m5yEK8/Ugo5g=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org