Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/083FEC32402E9FD6568759768F87ED9714AC114D.cer
File:                     083FEC32402E9FD6568759768F87ED9714AC114D.cer (raw, json)
Hash identifier:          EyD96buGHFyxNgCuR5p+SuLt6f9C2mtO+i/6Y1JdOq8=
Subject key identifier:   08:3F:EC:32:40:2E:9F:D6:56:87:59:76:8F:87:ED:97:14:AC:11:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       674AFD36812596C5BD4AE2273EA1CAD0527AE41A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/083FEC32402E9FD6568759768F87ED9714AC114D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 23:26:22 +0000
Certificate not after:    Wed 05 Feb 2025 23:31:22 +0000
Subordinate resources:    AS: 268373
                          IP: 45.239.172.0/22
                          IP: 2804:502c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4a:fd:36:81:25:96:c5:bd:4a:e2:27:3e:a1:ca:d0:52:7a:e4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 23:26:22 2024 GMT
            Not After : Feb  5 23:31:22 2025 GMT
        Subject: CN=083FEC32402E9FD6568759768F87ED9714AC114D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:ab:58:11:e4:27:9b:a0:f2:57:84:1b:55:
                    37:86:d3:a0:3f:62:66:82:8c:57:1f:02:f2:e6:4c:
                    95:be:bb:3b:b3:6c:84:16:9b:58:5e:f8:c8:b5:d5:
                    3a:9e:63:17:61:c9:e4:f9:50:79:f6:d6:46:fd:c2:
                    3e:af:17:23:55:d7:c0:dc:fb:0a:e3:53:0a:a4:87:
                    93:70:f2:3b:a3:d6:30:d1:c5:30:7d:8c:09:95:11:
                    11:31:4a:15:2c:18:52:38:4a:22:bd:95:d8:ea:fd:
                    a9:a4:ec:e7:9c:bd:09:8a:09:44:55:1b:70:3e:22:
                    8c:30:fd:4c:ff:35:76:32:f7:69:cc:f8:04:6a:8c:
                    37:78:2c:74:b9:8f:f2:c0:d9:ef:b5:dd:eb:b7:38:
                    57:40:6c:fe:7e:b3:d9:68:8c:01:5a:c4:ef:ca:aa:
                    f7:21:bd:ac:53:69:80:72:29:d3:dd:f3:37:94:36:
                    d6:06:65:0a:2f:93:44:bd:22:e3:97:5a:54:eb:35:
                    ef:eb:e4:c4:59:c7:fb:6d:b6:34:cd:63:04:86:4c:
                    15:89:b0:31:9c:c2:7c:b7:1c:c3:b3:f9:89:5a:6d:
                    87:6c:ac:d5:54:23:c6:ba:bf:bb:5e:3e:a1:6d:1b:
                    a9:ba:5c:e6:1d:51:c7:62:a3:d6:e8:ba:62:5b:6c:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:3F:EC:32:40:2E:9F:D6:56:87:59:76:8F:87:ED:97:14:AC:11:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/083FEC32402E9FD6568759768F87ED9714AC114D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.172.0/22
                IPv6:
                  2804:502c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268373

    Signature Algorithm: sha256WithRSAEncryption
         7a:bc:97:e2:04:a0:81:e6:f4:98:54:5c:32:b3:0c:7c:61:78:
         19:b1:bf:95:23:ce:ea:0f:88:96:75:22:a4:05:8a:e1:fa:ba:
         4b:74:d1:2b:1e:e1:23:74:d0:c9:49:ce:32:04:ab:8d:b6:9a:
         64:36:f7:34:70:9c:c4:08:51:5a:01:d8:03:40:1e:ff:57:30:
         a2:93:3e:a5:79:80:c1:a3:e7:77:63:72:2b:4c:34:7c:9e:59:
         67:cc:49:96:cd:70:25:c1:de:4e:27:15:8b:bd:0e:01:40:db:
         f4:a4:84:6c:fe:c1:1e:8a:e8:f7:bd:f2:2f:6e:04:71:bb:df:
         8e:7c:74:f5:f0:66:82:05:20:62:b3:a1:2f:00:9a:c8:52:0f:
         f4:cb:a8:9b:9e:34:0c:8c:8f:42:e1:ca:d0:15:a0:bc:c8:f6:
         57:3e:f3:cd:cf:61:29:37:73:80:78:93:92:81:c7:19:42:b4:
         01:2d:8e:28:54:72:31:9f:12:28:b8:18:7c:e3:92:b4:95:c2:
         a8:5f:4b:29:3b:f6:7c:9f:69:c2:b4:f5:0f:52:1a:c5:c3:ac:
         25:63:dd:48:fb:9b:17:f6:c3:d7:c7:ea:16:3c:4a:12:68:03:
         0d:20:97:26:19:9a:78:47:7d:2d:cb:c0:d2:74:f5:f2:e4:07:
         2e:bd:85:7f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUZ0r9NoEllsW9SuInPqHK0FJ65BowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDcyMzI2MjJaFw0yNTAyMDUyMzMxMjJaMDMxMTAvBgNV
BAMTKDA4M0ZFQzMyNDAyRTlGRDY1Njg3NTk3NjhGODdFRDk3MTRBQzExNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9KtYEeQnm6DyV4QbVTeG06A/
YmaCjFcfAvLmTJW+uzuzbIQWm1he+Mi11TqeYxdhyeT5UHn21kb9wj6vFyNV18Dc
+wrjUwqkh5Nw8juj1jDRxTB9jAmVERExShUsGFI4SiK9ldjq/amk7OecvQmKCURV
G3A+Ioww/Uz/NXYy92nM+ARqjDd4LHS5j/LA2e+13eu3OFdAbP5+s9lojAFaxO/K
qvchvaxTaYByKdPd8zeUNtYGZQovk0S9IuOXWlTrNe/r5MRZx/tttjTNYwSGTBWJ
sDGcwny3HMOz+YlabYdsrNVUI8a6v7tePqFtG6m6XOYdUcdio9boumJbbKqfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIP+wyQC6f1laH
WXaPh+2XFKwRTTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80QXJ5b3lKMzRuR0dHY2ZFMVduR0NFY2lVY2s4UmRoMWdY
MkF1RkZpRHR2NC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNEFyeW95SjM0bkdHR2NmRTFXbkdDRWNpVWNrOFJkaDFn
WDJBdUZGaUR0djQvMC8wODNGRUMzMjQwMkU5RkQ2NTY4NzU5NzY4Rjg3RUQ5NzE0
QUMxMTRELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt76wwDQQCAAIwBwMF
ACgEUCwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBhVMA0GCSqGSIb3DQEBCwUA
A4IBAQB6vJfiBKCB5vSYVFwyswx8YXgZsb+VI87qD4iWdSKkBYrh+rpLdNErHuEj
dNDJSc4yBKuNtppkNvc0cJzECFFaAdgDQB7/VzCikz6leYDBo+d3Y3IrTDR8nlln
zEmWzXAlwd5OJxWLvQ4BQNv0pIRs/sEeiuj3vfIvbgRxu9+OfHT18GaCBSBis6Ev
AJrIUg/0y6ibnjQMjI9C4crQFaC8yPZXPvPNz2EpN3OAeJOSgccZQrQBLY4oVHIx
nxIouBh845K0lcKoX0spO/Z8n2nCtPUPUhrFw6wlY91I+5sX9sPXx+oWPEoSaAMN
IJcmGZp4R30ty8DSdPXy5AcuvYV/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org