Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/101687DB28E9017370D90DC90364B28B389BBC83.cer
File:                     101687DB28E9017370D90DC90364B28B389BBC83.cer (raw, json)
Hash identifier:          2OLTfrK5rBa5RCczxCeNdI37OdtUnkFxihrAaZ+3uRM=
Subject key identifier:   10:16:87:DB:28:E9:01:73:70:D9:0D:C9:03:64:B2:8B:38:9B:BC:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62B109ACA06DB48938DF3A4F0622948901FDF6F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/101687DB28E9017370D90DC90364B28B389BBC83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 19:31:01 +0000
Certificate not after:    Tue 17 Jan 2023 19:36:01 +0000
Subordinate resources:    AS: 266358
                          IP: 170.239.212.0/22
                          IP: 2804:3698::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b1:09:ac:a0:6d:b4:89:38:df:3a:4f:06:22:94:89:01:fd:f6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 19:31:01 2022 GMT
            Not After : Jan 17 19:36:01 2023 GMT
        Subject: CN=101687DB28E9017370D90DC90364B28B389BBC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:d9:c4:53:b9:ab:23:84:2f:f3:66:1f:d3:
                    72:6e:4f:9d:be:94:c0:19:6a:37:af:a9:a9:f4:31:
                    73:59:c9:4a:13:df:70:30:6c:cc:5e:69:09:5d:a9:
                    b2:ec:b0:6f:6d:74:5b:62:a7:af:19:10:44:7e:5b:
                    d7:4a:00:f0:17:96:e5:98:65:3b:89:ce:59:51:a9:
                    69:04:5f:94:44:72:53:b5:81:65:94:07:b9:f9:8b:
                    d9:5f:2c:e4:2d:e6:38:34:e0:40:ed:94:63:d0:f5:
                    5f:1f:78:d9:f5:f8:0f:9b:e3:de:3a:15:25:fe:b8:
                    8d:21:f1:e8:37:45:14:54:60:30:89:cd:e5:4e:61:
                    3e:1c:3b:09:14:26:b3:ba:2a:70:85:ff:a9:2f:6d:
                    65:6f:20:fe:ec:42:fe:36:33:44:7b:18:b1:a9:22:
                    56:45:bf:aa:22:84:ce:3e:5d:53:b2:ac:dc:7d:61:
                    a8:c9:05:21:95:77:1b:06:1c:07:94:28:96:ac:a1:
                    21:02:13:4a:0b:68:2d:95:24:cb:be:ee:ae:b6:bc:
                    e7:08:f0:31:5f:ed:c7:cf:ad:82:09:31:bd:db:49:
                    c4:33:b9:6e:11:aa:17:86:2c:a0:8c:5a:aa:ba:22:
                    88:8f:97:f3:17:d4:1f:ea:2d:3c:1d:7c:09:f4:b5:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:16:87:DB:28:E9:01:73:70:D9:0D:C9:03:64:B2:8B:38:9B:BC:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/101687DB28E9017370D90DC90364B28B389BBC83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.212.0/22
                IPv6:
                  2804:3698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266358

    Signature Algorithm: sha256WithRSAEncryption
         30:59:f8:20:4e:e4:bf:64:07:f1:0c:cb:e1:1c:30:27:e9:db:
         ed:68:a1:7d:33:94:4d:30:32:1b:6f:a9:cc:ad:ec:71:11:e1:
         18:fb:bc:4f:72:2e:65:63:cb:bb:79:27:62:37:9c:3a:f3:d6:
         ca:b8:35:dc:41:c3:97:ec:6d:cd:c6:dc:b3:cc:05:26:2b:b1:
         d1:02:c0:68:a7:80:34:23:3e:33:5f:93:6b:f4:25:e2:93:da:
         fc:a1:81:f1:1d:54:af:c1:59:06:a0:16:46:62:c4:ca:62:4d:
         6d:3c:5f:b0:8c:42:f7:f6:d2:c7:f9:89:ac:4e:46:af:4c:17:
         05:2f:97:53:eb:d7:98:b0:54:72:d6:2b:2c:30:c5:27:1c:13:
         de:53:97:40:d7:c4:1f:16:32:a8:63:e8:e4:f2:be:ac:73:a4:
         a8:d9:b2:b7:f1:0f:4d:9f:5e:17:bf:eb:ea:37:e0:c9:d8:4b:
         2c:3f:71:ef:9d:4f:a0:47:dc:b7:72:7f:bc:77:95:54:bd:8f:
         ea:12:a9:f8:6c:d7:96:90:e6:a4:16:58:1c:2d:16:e3:9e:a4:
         aa:90:4b:76:08:b1:a5:5e:d4:da:57:b5:65:3f:b7:31:cd:95:
         a8:26:72:94:b6:f3:8b:18:b8:de:0a:7e:d9:38:45:00:81:e1:
         59:b8:ed:b7
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUYrEJrKBttIk43zpPBiKUiQH99vQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAxMTgxOTMxMDFaFw0yMzAxMTcxOTM2MDFaMDMxMTAvBgNV
BAMTKDEwMTY4N0RCMjhFOTAxNzM3MEQ5MERDOTAzNjRCMjhCMzg5QkJDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jdnEU7mrI4Qv82Yf03JuT52+
lMAZajevqan0MXNZyUoT33AwbMxeaQldqbLssG9tdFtip68ZEER+W9dKAPAXluWY
ZTuJzllRqWkEX5REclO1gWWUB7n5i9lfLOQt5jg04EDtlGPQ9V8feNn1+A+b4946
FSX+uI0h8eg3RRRUYDCJzeVOYT4cOwkUJrO6KnCF/6kvbWVvIP7sQv42M0R7GLGp
IlZFv6oihM4+XVOyrNx9YajJBSGVdxsGHAeUKJasoSECE0oLaC2VJMu+7q62vOcI
8DFf7cfPrYIJMb3bScQzuW4RqheGLKCMWqq6IoiPl/MX1B/qLTwdfAn0tZR3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQFofbKOkBc3DZ
DckDZLKLOJu8gzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FOGd3R1FtVnN5R01xTFhmTmhBQ1pubTFrcG5UVjdQSFJV
eXM2VkRnRjR0Ni8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FOGd3R1FtVnN5R01xTFhmTmhBQ1pubTFrcG5UVjdQSFJV
eXM2VkRnRjR0Ni8wLzEwMTY4N0RCMjhFOTAxNzM3MEQ5MERDOTAzNjRCMjhCMzg5
QkJDODMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrv1DANBAIAAjAHAwUA
KAQ2mDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEHYwDQYJKoZIhvcNAQELBQAD
ggEBADBZ+CBO5L9kB/EMy+EcMCfp2+1ooX0zlE0wMhtvqcyt7HER4Rj7vE9yLmVj
y7t5J2I3nDrz1sq4NdxBw5fsbc3G3LPMBSYrsdECwGingDQjPjNfk2v0JeKT2vyh
gfEdVK/BWQagFkZixMpiTW08X7CMQvf20sf5iaxORq9MFwUvl1Pr15iwVHLWKyww
xSccE95Tl0DXxB8WMqhj6OTyvqxzpKjZsrfxD02fXhe/6+o34MnYSyw/ce+dT6BH
3Ldyf7x3lVS9j+oSqfhs15aQ5qQWWBwtFuOepKqQS3YIsaVe1NpXtWU/tzHNlagm
cpS284sYuN4Kftk4RQCB4Vm47bc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org