Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/105EE2E9B0841F943B8E95EFE6199C4857135745.cer
File:                     105EE2E9B0841F943B8E95EFE6199C4857135745.cer (raw, json)
Hash identifier:          jw8S9MU/4UWqwEDJTJg8pDyE0SYsYfZU7ahEekm2IMA=
Subject key identifier:   10:5E:E2:E9:B0:84:1F:94:3B:8E:95:EF:E6:19:9C:48:57:13:57:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47F8F2DFC027434C8076FC54565AD4E6F9C12B42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/105EE2E9B0841F943B8E95EFE6199C4857135745.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 18:36:59 +0000
Certificate not after:    Wed 25 Sep 2024 18:41:59 +0000
Subordinate resources:    AS: 61734
                          IP: 131.72.164.0/22
                          IP: 2804:1b8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f8:f2:df:c0:27:43:4c:80:76:fc:54:56:5a:d4:e6:f9:c1:2b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 18:36:59 2023 GMT
            Not After : Sep 25 18:41:59 2024 GMT
        Subject: CN=105EE2E9B0841F943B8E95EFE6199C4857135745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:47:2d:f3:e3:e5:c0:43:da:28:d4:3c:2e:
                    52:86:17:05:76:d1:fc:aa:3a:9b:1a:75:f2:dc:e2:
                    1a:b1:d5:08:d8:8d:fb:f1:34:dd:0f:01:7d:03:e9:
                    55:4c:64:d8:e1:1f:c1:a1:05:b5:62:a1:0b:fd:a9:
                    05:29:fa:1c:45:e2:71:e7:b1:f3:90:44:34:52:a2:
                    d3:8e:5d:cd:1e:4d:d1:87:31:0f:47:c8:a7:ad:45:
                    4a:7f:ac:c1:12:a1:59:06:c4:0e:4f:2c:65:75:57:
                    4d:42:62:bb:48:e1:6b:3d:19:0d:26:ea:f7:84:07:
                    3e:7d:88:84:6a:27:e4:69:df:87:36:6d:0f:2f:f9:
                    97:92:87:f2:2e:e1:1c:2a:d3:22:09:de:a9:b2:5a:
                    e2:14:76:17:02:b7:55:3c:40:4a:f9:b6:79:38:19:
                    04:38:8b:6f:a0:4f:9f:b1:71:17:a0:04:09:ba:b9:
                    60:b4:44:ea:93:23:3a:c7:42:8b:6f:56:58:fe:eb:
                    96:41:0e:30:a7:e1:71:40:91:2c:54:f0:18:1a:45:
                    d7:30:56:98:fd:48:1b:43:ef:c9:56:1f:33:f6:5b:
                    6a:fb:e7:3f:db:ca:d7:29:92:e9:4e:0b:df:32:37:
                    6a:51:a2:73:6c:d7:72:cb:51:65:6d:a1:69:ef:17:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:5E:E2:E9:B0:84:1F:94:3B:8E:95:EF:E6:19:9C:48:57:13:57:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/105EE2E9B0841F943B8E95EFE6199C4857135745.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.164.0/22
                IPv6:
                  2804:1b8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61734

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:c6:07:fe:24:20:d3:09:18:a5:c3:d4:e9:11:6e:31:cd:
         5a:39:4b:56:d1:68:d8:e6:50:03:ec:ca:d0:63:1d:d5:b9:b0:
         a9:a5:ad:59:e6:57:48:3e:b5:e1:30:53:90:3e:65:ca:fd:3f:
         f4:c0:2f:c9:ed:6a:09:19:6c:e7:05:62:30:24:d3:0d:2a:b3:
         cc:8f:5a:7c:19:a5:cb:41:88:70:ea:7b:f6:29:0c:44:ae:1b:
         9a:4d:01:aa:8a:33:06:ca:1a:80:f6:ae:db:d1:06:df:0c:66:
         26:06:c4:7e:3a:17:d6:36:33:02:5c:d8:39:eb:1c:90:5e:a8:
         2c:78:86:7e:91:a7:51:d5:e4:51:f9:0c:d5:50:05:50:5b:07:
         93:20:da:a8:1c:dd:50:cf:00:eb:1a:47:da:a4:34:8b:44:7e:
         b1:32:e2:af:0b:60:17:85:65:eb:7c:7e:00:1a:fc:c8:0d:d4:
         49:63:ed:67:44:33:b3:6f:ac:4d:aa:70:92:d4:50:c7:73:71:
         09:07:54:eb:66:4d:9a:5f:c5:c0:d9:e2:10:b1:2d:59:a2:61:
         8d:9c:8d:94:ed:42:17:e2:ee:cb:46:83:92:de:0d:76:24:8a:
         8b:02:aa:2a:fe:f6:f7:4b:3e:8e:73:b5:fc:07:cb:59:c1:95:
         8c:95:82:08
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUR/jy38AnQ0yAdvxUVlrU5vnBK0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjcxODM2NTlaFw0yNDA5MjUxODQxNTlaMDMxMTAvBgNV
BAMTKDEwNUVFMkU5QjA4NDFGOTQzQjhFOTVFRkU2MTk5QzQ4NTcxMzU3NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMUct8+PlwEPaKNQ8LlKGFwV2
0fyqOpsadfLc4hqx1QjYjfvxNN0PAX0D6VVMZNjhH8GhBbVioQv9qQUp+hxF4nHn
sfOQRDRSotOOXc0eTdGHMQ9HyKetRUp/rMESoVkGxA5PLGV1V01CYrtI4Ws9GQ0m
6veEBz59iIRqJ+Rp34c2bQ8v+ZeSh/Iu4Rwq0yIJ3qmyWuIUdhcCt1U8QEr5tnk4
GQQ4i2+gT5+xcRegBAm6uWC0ROqTIzrHQotvVlj+65ZBDjCn4XFAkSxU8BgaRdcw
Vpj9SBtD78lWHzP2W2r75z/bytcpkulOC98yN2pRonNs13LLUWVtoWnvFwbrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQXuLpsIQflDuO
le/mGZxIVxNXRTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83Y1NwTW5SNmd2YkhDVnpiRVFSaGE1YkZYelJ6YjlFZ3lN
SEZ6aDhVYWhQRS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN2NTcE1uUjZndmJIQ1Z6YkVRUmhhNWJGWHpSemI5RWd5
TUhGemg4VWFoUEUvMC8xMDVFRTJFOUIwODQxRjk0M0I4RTk1RUZFNjE5OUM0ODU3
MTM1NzQ1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKDSKQwDQQCAAIwBwMF
ACgEG4wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPEmMA0GCSqGSIb3DQEBCwUA
A4IBAQAP58YH/iQg0wkYpcPU6RFuMc1aOUtW0WjY5lAD7MrQYx3VubCppa1Z5ldI
PrXhMFOQPmXK/T/0wC/J7WoJGWznBWIwJNMNKrPMj1p8GaXLQYhw6nv2KQxErhua
TQGqijMGyhqA9q7b0QbfDGYmBsR+OhfWNjMCXNg56xyQXqgseIZ+kadR1eRR+QzV
UAVQWweTINqoHN1QzwDrGkfapDSLRH6xMuKvC2AXhWXrfH4AGvzIDdRJY+1nRDOz
b6xNqnCS1FDHc3EJB1TrZk2aX8XA2eIQsS1ZomGNnI2U7UIX4u7LRoOS3g12JIqL
Aqoq/vb3Sz6Oc7X8B8tZwZWMlYII
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org