Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B290B52C86E0EFC61208B8BF9A45E362192D87F.cer
File:                     0B290B52C86E0EFC61208B8BF9A45E362192D87F.cer (raw, json)
Hash identifier:          /CmjzNunVFsbOXg/Rc6kGMrU9eMRm9MF319i1BRiGOM=
Subject key identifier:   0B:29:0B:52:C8:6E:0E:FC:61:20:8B:8B:F9:A4:5E:36:21:92:D8:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       363DC488EFCFF96FFB510ECA32C17E17019789CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/0B290B52C86E0EFC61208B8BF9A45E362192D87F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 01:30:40 +0000
Certificate not after:    Thu 21 Nov 2024 01:35:40 +0000
Subordinate resources:    AS: 271599
                          IP: 45.174.196.0/22
                          IP: 2804:7e0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3d:c4:88:ef:cf:f9:6f:fb:51:0e:ca:32:c1:7e:17:01:97:89:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 01:30:40 2023 GMT
            Not After : Nov 21 01:35:40 2024 GMT
        Subject: CN=0B290B52C86E0EFC61208B8BF9A45E362192D87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:6f:a3:cc:96:bb:e2:c1:5b:97:9f:3a:84:
                    05:17:e5:e9:7a:6f:d7:e1:92:9b:a8:7c:f2:02:9a:
                    1c:53:4c:3c:c5:17:81:a3:90:43:47:68:3f:68:79:
                    90:0e:ae:dd:1f:55:21:bd:51:28:ab:ff:41:97:c7:
                    13:52:50:9b:fd:34:72:b3:61:b0:b6:94:78:4f:75:
                    7d:91:10:e8:43:cf:47:96:71:5b:dc:f4:3f:ff:c0:
                    56:9e:3d:73:30:40:68:b1:79:84:41:91:da:b1:71:
                    e3:85:a4:0a:81:78:05:1e:45:ee:65:a7:8c:8d:50:
                    df:29:73:b9:fc:ea:d2:b5:8a:30:f6:ae:98:c7:d5:
                    a5:b7:69:48:62:10:d1:0f:56:08:e4:f6:56:9b:8c:
                    e1:23:cd:33:8d:90:5b:44:62:ae:5e:2e:72:cd:f7:
                    f7:c6:2d:5e:89:9f:37:68:df:b9:aa:bd:fa:26:f4:
                    d2:c3:ee:21:54:2c:79:4c:01:b4:41:aa:0f:59:b1:
                    5f:f4:4f:15:19:b3:3e:9e:e0:55:5f:15:1a:32:34:
                    58:3e:62:46:f8:90:65:cd:0d:e7:5a:2f:24:a7:80:
                    9a:14:3a:04:fe:b7:7c:f5:cb:ef:d4:f8:3e:b1:05:
                    1f:fc:da:34:75:84:cf:a9:42:f5:85:c3:8f:9a:e6:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:29:0B:52:C8:6E:0E:FC:61:20:8B:8B:F9:A4:5E:36:21:92:D8:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/0B290B52C86E0EFC61208B8BF9A45E362192D87F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/22
                IPv6:
                  2804:7e0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271599

    Signature Algorithm: sha256WithRSAEncryption
         0f:a7:fe:f7:b9:12:fc:38:f4:2e:1b:80:0e:38:76:97:2f:47:
         7f:2c:42:c6:f7:3d:c2:ac:7b:59:13:5e:00:47:5b:47:3a:c8:
         ad:2e:27:eb:c3:8f:d0:b6:48:a9:ed:5c:ae:16:1e:47:81:77:
         9b:d5:97:95:af:35:09:3b:4b:d4:af:00:a4:d7:56:66:c7:37:
         57:5d:4b:a6:aa:a5:24:1c:55:9c:71:d9:65:54:e8:6a:48:b9:
         2c:4e:73:86:85:d3:65:99:3b:3c:00:fa:5f:bd:72:15:18:b0:
         b3:ea:2f:23:80:05:3a:45:8f:03:47:50:9e:e7:2d:a1:db:80:
         ab:25:1a:40:47:e4:5f:5f:54:4b:81:42:28:b0:3d:0b:05:38:
         e4:a4:bf:64:a6:75:1f:4f:ff:73:d1:9c:93:95:ff:60:a7:91:
         2c:43:fa:e0:2b:ab:ab:ec:c4:d7:9a:04:12:f2:39:ef:4a:66:
         ba:52:ed:c8:6f:4e:4e:2d:4b:7c:cd:ee:5c:8f:1e:78:cd:71:
         f2:62:04:cc:7a:f4:67:7b:37:d4:d3:21:e8:79:be:f8:51:e4:
         82:77:4b:85:50:56:b1:08:ce:ca:47:a7:a4:01:f4:5e:4d:af:
         94:2c:b0:d9:3a:03:6b:3b:74:2d:48:f7:b2:e8:28:73:50:f9:
         90:8a:34:40
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNj3EiO/P+W/7UQ7KMsF+FwGXic8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjMwMTMwNDBaFw0yNDExMjEwMTM1NDBaMDMxMTAvBgNV
BAMTKDBCMjkwQjUyQzg2RTBFRkM2MTIwOEI4QkY5QTQ1RTM2MjE5MkQ4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPG+jzJa74sFbl586hAUX5el6
b9fhkpuofPICmhxTTDzFF4GjkENHaD9oeZAOrt0fVSG9USir/0GXxxNSUJv9NHKz
YbC2lHhPdX2REOhDz0eWcVvc9D//wFaePXMwQGixeYRBkdqxceOFpAqBeAUeRe5l
p4yNUN8pc7n86tK1ijD2rpjH1aW3aUhiENEPVgjk9labjOEjzTONkFtEYq5eLnLN
9/fGLV6Jnzdo37mqvfom9NLD7iFULHlMAbRBqg9ZsV/0TxUZsz6e4FVfFRoyNFg+
Ykb4kGXNDedaLySngJoUOgT+t3z1y+/U+D6xBR/82jR1hM+pQvWFw4+a5kAZAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLKQtSyG4O/GEg
i4v5pF42IZLYfzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydlBLZ29YaG9WTkJOZlg0SDJSRUVGWjFQVm1GOFI4WG1V
OHExVVVkaW1HYi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMnZQS2dvWGhvVk5CTmZYNEgyUkVFRloxUFZtRjhSOFht
VThxMVVVZGltR2IvMC8wQjI5MEI1MkM4NkUwRUZDNjEyMDhCOEJGOUE0NUUzNjIx
OTJEODdGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItrsQwDQQCAAIwBwMF
ACgEfgwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCTvMA0GCSqGSIb3DQEBCwUA
A4IBAQAPp/73uRL8OPQuG4AOOHaXL0d/LELG9z3CrHtZE14AR1tHOsitLifrw4/Q
tkip7VyuFh5HgXeb1ZeVrzUJO0vUrwCk11ZmxzdXXUumqqUkHFWccdllVOhqSLks
TnOGhdNlmTs8APpfvXIVGLCz6i8jgAU6RY8DR1Ce5y2h24CrJRpAR+RfX1RLgUIo
sD0LBTjkpL9kpnUfT/9z0ZyTlf9gp5EsQ/rgK6ur7MTXmgQS8jnvSma6Uu3Ib05O
LUt8ze5cjx54zXHyYgTMevRnezfU0yHoeb74UeSCd0uFUFaxCM7KR6ekAfReTa+U
LLDZOgNrO3QtSPey6ChzUPmQijRA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org