Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
File:                     0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer (raw, json)
Hash identifier:          nsn2GRqXecBLuQFl/cv5iyMnu5HYVt98oiFbqiZYFLE=
Subject key identifier:   0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61D31A47D16EDBA4E7EF395AB3D3E5E0B9E57BDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Feb 2022 16:38:10 +0000
Certificate not after:    Mon 27 Feb 2023 16:43:10 +0000
Subordinate resources:    AS: 267256
                          IP: 45.232.48.0/22
                          IP: 2804:4aac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d3:1a:47:d1:6e:db:a4:e7:ef:39:5a:b3:d3:e5:e0:b9:e5:7b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 16:38:10 2022 GMT
            Not After : Feb 27 16:43:10 2023 GMT
        Subject: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:e3:96:39:20:a3:ea:0f:01:e8:59:41:f3:
                    29:9a:0d:78:fd:d9:ca:5b:8a:cb:f2:db:9d:14:de:
                    09:7b:b8:99:fa:14:24:11:0b:cc:2c:3b:2d:8f:aa:
                    97:4e:a9:3f:12:a1:7c:1b:7d:08:64:bb:3f:f8:77:
                    fb:d4:2b:38:74:63:7d:82:ce:8e:17:05:9b:02:7a:
                    82:90:17:80:db:76:2d:db:9a:98:d9:a9:74:43:9f:
                    ac:f6:69:57:c0:02:b8:98:c7:63:3a:c8:db:4c:e0:
                    8d:01:44:e6:20:a2:ac:38:73:ee:ff:d2:5b:08:06:
                    fe:e3:c3:4d:f4:72:74:78:8d:04:f0:66:4c:9a:78:
                    6e:81:94:a4:d8:8b:42:c9:9e:38:e5:bb:0b:56:77:
                    59:08:eb:c8:1b:f1:2d:8a:80:73:c3:3f:f3:64:05:
                    ca:39:c4:75:90:3b:6d:85:dd:49:37:f0:13:e5:c4:
                    b3:7e:3d:cd:62:96:fe:c1:f0:6f:d6:89:3d:30:1c:
                    eb:4c:e5:f6:44:c9:a6:bb:61:1a:b4:8c:51:66:d0:
                    86:06:95:f6:f1:dc:b7:7b:b2:b1:4d:e2:68:78:24:
                    b9:70:cc:88:ee:97:5e:9c:a0:21:4b:42:62:48:59:
                    0b:97:79:34:e1:a1:54:5d:c7:55:f5:61:1f:57:4c:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/22
                IPv6:
                  2804:4aac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267256

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:bf:4e:5a:dc:d9:a5:99:56:49:8d:12:6c:58:89:b0:72:
         22:e1:20:df:2f:63:6e:8f:f9:4a:e7:25:8f:48:a0:05:5f:d8:
         d4:c8:64:03:a3:7f:97:30:cd:e8:40:93:07:33:e4:90:8a:25:
         9b:61:27:d8:a6:85:df:8c:9c:3b:9d:69:2c:ca:31:c6:46:52:
         62:49:68:9d:1b:ea:b7:39:d0:bf:9a:be:2c:36:3a:5e:3c:7b:
         d0:37:e9:aa:30:10:94:24:89:db:5a:32:01:e2:3c:f5:5f:5c:
         3d:5e:eb:ea:e0:6b:45:de:ec:5b:dc:37:9d:3a:57:dc:ed:ee:
         c4:4c:8a:66:df:cc:82:a4:6e:c5:e8:0e:2f:9f:2f:81:d8:34:
         45:16:0e:86:7b:c4:3c:3a:17:e8:7d:95:d7:b4:53:c6:10:0c:
         85:00:b3:14:62:f2:b1:93:87:02:aa:4c:34:7c:0b:01:02:34:
         5d:5b:46:7b:83:52:dc:c2:3b:62:9a:4c:17:cf:be:d5:af:e4:
         65:52:85:66:49:8e:d4:a3:3f:1d:5d:e9:88:ea:20:04:4a:ea:
         b4:95:36:aa:6c:9b:f8:84:af:1d:1a:1c:c6:c3:45:63:36:9a:
         aa:6c:1d:fe:fa:89:1c:02:fb:11:0a:bf:7a:4a:0d:fe:b6:db:
         10:5d:5d:e6
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUYdMaR9Fu26Tn7zlas9Pl4Lnle94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAyMjgxNjM4MTBaFw0yMzAyMjcxNjQzMTBaMDMxMTAvBgNV
BAMTKDBEQzMzMDFGQ0JERTJCQTNDNEQyOUFGNThEQTYxNDUwNzJEMTAwNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EOOWOSCj6g8B6FlB8ymaDXj9
2cpbisvy250U3gl7uJn6FCQRC8wsOy2PqpdOqT8SoXwbfQhkuz/4d/vUKzh0Y32C
zo4XBZsCeoKQF4Dbdi3bmpjZqXRDn6z2aVfAAriYx2M6yNtM4I0BROYgoqw4c+7/
0lsIBv7jw030cnR4jQTwZkyaeG6BlKTYi0LJnjjluwtWd1kI68gb8S2KgHPDP/Nk
Bco5xHWQO22F3Uk38BPlxLN+Pc1ilv7B8G/WiT0wHOtM5fZEyaa7YRq0jFFm0IYG
lfbx3Ld7srFN4mh4JLlwzIjul16coCFLQmJIWQuXeTThoVRdx1X1YR9XTE1pAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNwzAfy94ro8TS
mvWNphRQctEAazAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zNWVLNGg4SGt5TFQ0OUhEaTFjUGNkaHU2c0NYcTRCNVBv
cURaNFBtWmtuaC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zNWVLNGg4SGt5TFQ0OUhEaTFjUGNkaHU2c0NYcTRCNVBv
cURaNFBtWmtuaC8wLzBEQzMzMDFGQ0JERTJCQTNDNEQyOUFGNThEQTYxNDUwNzJE
MTAwNkIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3oMDANBAIAAjAHAwUA
KARKrDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEE/gwDQYJKoZIhvcNAQELBQAD
ggEBADddv05a3NmlmVZJjRJsWImwciLhIN8vY26P+UrnJY9IoAVf2NTIZAOjf5cw
zehAkwcz5JCKJZthJ9imhd+MnDudaSzKMcZGUmJJaJ0b6rc50L+aviw2Ol48e9A3
6aowEJQkidtaMgHiPPVfXD1e6+rga0Xe7FvcN506V9zt7sRMimbfzIKkbsXoDi+f
L4HYNEUWDoZ7xDw6F+h9lde0U8YQDIUAsxRi8rGThwKqTDR8CwECNF1bRnuDUtzC
O2KaTBfPvtWv5GVShWZJjtSjPx1d6YjqIARK6rSVNqpsm/iErx0aHMbDRWM2mqps
Hf76iRwC+xEKv3pKDf622xBdXeY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org