Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D6783F0BFD6E60803B96383BFD33CA038488478.cer
File:                     0D6783F0BFD6E60803B96383BFD33CA038488478.cer (raw, json)
Hash identifier:          xUg9gw54q4fmLbFoZbIseyXMrIIms/+zBVNyQyNuNYE=
Subject key identifier:   0D:67:83:F0:BF:D6:E6:08:03:B9:63:83:BF:D3:3C:A0:38:48:84:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34F9B7322CDEF0850560E23037A4CA7AA72DC1CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/0D6783F0BFD6E60803B96383BFD33CA038488478.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Feb 2023 13:33:23 +0000
Certificate not after:    Thu 08 Feb 2024 13:38:23 +0000
Subordinate resources:    AS: 267328
                          IP: 45.233.152.0/22
                          IP: 2804:4bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f9:b7:32:2c:de:f0:85:05:60:e2:30:37:a4:ca:7a:a7:2d:c1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 13:33:23 2023 GMT
            Not After : Feb  8 13:38:23 2024 GMT
        Subject: CN=0D6783F0BFD6E60803B96383BFD33CA038488478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:8e:13:83:3e:45:e3:bb:44:58:7a:69:dd:
                    92:83:26:e1:09:05:8b:9b:47:e2:4e:db:b3:31:04:
                    c4:03:28:19:12:3f:02:75:c0:68:93:db:59:c8:e7:
                    c0:7c:da:1d:c3:59:5f:e1:89:4c:36:9d:b0:04:7a:
                    38:3a:8d:d0:f4:94:77:be:1d:59:4a:f0:88:b6:65:
                    47:56:6c:74:0c:97:f2:91:2e:d3:81:8c:29:bc:e4:
                    df:2e:45:b5:0f:d3:d2:c7:f4:6d:a3:48:13:48:e3:
                    d9:41:7e:0a:aa:02:4b:ec:66:20:35:bd:76:29:86:
                    ad:5a:bd:c9:41:f9:0c:0d:24:a3:6a:a6:ea:52:74:
                    a6:cb:b8:e7:15:f5:83:1d:b3:10:54:c9:ab:cb:b1:
                    59:d1:af:2f:da:f1:a4:a0:31:9f:21:89:fd:1f:a8:
                    81:65:b2:69:52:97:54:85:bc:eb:fb:26:c4:ce:d2:
                    ff:cb:20:8c:ec:50:dc:ee:ec:09:56:0a:0c:55:02:
                    f3:2b:64:39:80:a9:1d:09:a3:c3:c6:34:4e:44:b9:
                    a9:4e:f4:f3:c7:c5:03:eb:00:42:ac:81:76:9b:9e:
                    35:9b:c5:5e:9a:91:5f:5b:55:15:ae:b4:fe:95:17:
                    a6:6e:c0:c6:07:8a:98:47:c0:b0:f5:1d:7e:a0:bf:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:67:83:F0:BF:D6:E6:08:03:B9:63:83:BF:D3:3C:A0:38:48:84:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/0D6783F0BFD6E60803B96383BFD33CA038488478.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.152.0/22
                IPv6:
                  2804:4bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267328

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:18:87:4a:53:d1:3e:ba:e5:31:3d:cf:ae:b8:1b:ae:53:
         2e:8f:3b:63:4b:16:27:59:b9:87:df:0e:6f:ef:12:0a:3b:9a:
         9f:2b:18:1a:5b:47:75:18:06:ad:9d:af:6f:4f:11:60:10:1e:
         fc:27:3b:45:4d:cd:8c:80:f9:76:cd:f8:ee:00:7a:d7:57:04:
         83:56:85:0c:d2:a2:03:f5:e3:68:ee:aa:c3:48:3b:67:42:68:
         26:9b:cb:e6:27:f8:d5:dc:63:ba:92:db:3f:3e:c1:74:30:9e:
         93:9c:b4:56:14:87:3e:ec:ad:5a:95:fe:32:25:0c:2f:91:7c:
         bb:4d:be:d5:c8:5f:ac:c4:2c:33:eb:a0:99:78:62:b7:05:cc:
         ee:f2:fa:2a:a7:aa:44:27:a5:d5:aa:13:7b:1c:5f:b3:ae:e9:
         f5:75:8e:c1:64:e2:e2:27:1d:82:6e:f1:31:d5:71:04:a6:bd:
         d3:67:8b:98:ad:e0:09:33:3d:6a:e2:2b:9b:61:9e:1f:78:d0:
         ac:04:d4:ab:24:b9:74:8a:1f:fd:c7:7a:4d:cf:5a:ab:67:54:
         e4:21:02:90:69:58:a5:71:fb:1b:34:51:0a:28:57:08:f3:98:
         60:b6:0d:45:6f:b8:05:93:90:05:f5:72:7d:06:0e:82:53:56:
         f1:78:7a:b0
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUNPm3Mize8IUFYOIwN6TKeqctwcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMDkxMzMzMjNaFw0yNDAyMDgxMzM4MjNaMDMxMTAvBgNV
BAMTKDBENjc4M0YwQkZENkU2MDgwM0I5NjM4M0JGRDMzQ0EwMzg0ODg0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGY4Tgz5F47tEWHpp3ZKDJuEJ
BYubR+JO27MxBMQDKBkSPwJ1wGiT21nI58B82h3DWV/hiUw2nbAEejg6jdD0lHe+
HVlK8Ii2ZUdWbHQMl/KRLtOBjCm85N8uRbUP09LH9G2jSBNI49lBfgqqAkvsZiA1
vXYphq1avclB+QwNJKNqpupSdKbLuOcV9YMdsxBUyavLsVnRry/a8aSgMZ8hif0f
qIFlsmlSl1SFvOv7JsTO0v/LIIzsUNzu7AlWCgxVAvMrZDmAqR0Jo8PGNE5EualO
9PPHxQPrAEKsgXabnjWbxV6akV9bVRWutP6VF6ZuwMYHiphHwLD1HX6gv2MBAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNZ4Pwv9bmCAO5
Y4O/0zygOEiEeDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RFlaR2JQOHJmTUpYOU1jTGdTZkNBTDhZRlNhZEV3c2dI
NVpQYTJCaGdBVS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RFlaR2JQOHJmTUpYOU1jTGdTZkNBTDhZRlNhZEV3c2dI
NVpQYTJCaGdBVS8wLzBENjc4M0YwQkZENkU2MDgwM0I5NjM4M0JGRDMzQ0EwMzg0
ODg0NzgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3pmDANBAIAAjAHAwUA
KARLxDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFEAwDQYJKoZIhvcNAQELBQAD
ggEBAEfnGIdKU9E+uuUxPc+uuBuuUy6PO2NLFidZuYffDm/vEgo7mp8rGBpbR3UY
Bq2dr29PEWAQHvwnO0VNzYyA+XbN+O4AetdXBINWhQzSogP142juqsNIO2dCaCab
y+Yn+NXcY7qS2z8+wXQwnpOctFYUhz7srVqV/jIlDC+RfLtNvtXIX6zELDProJl4
YrcFzO7y+iqnqkQnpdWqE3scX7Ou6fV1jsFk4uInHYJu8THVcQSmvdNni5it4Akz
PWriK5thnh940KwE1KskuXSKH/3Hek3PWqtnVOQhApBpWKVx+xs0UQooVwjzmGC2
DUVvuAWTkAX1cn0GDoJTVvF4erA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org