Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/201D961C19F6C809EE4F7D3A5116C849028A4B1B.cer
File:                     201D961C19F6C809EE4F7D3A5116C849028A4B1B.cer (raw, json)
Hash identifier:          629o4CFW1SY4PwZJ7Q0iK6qglTbiaDaFZgr5W04g430=
Subject key identifier:   20:1D:96:1C:19:F6:C8:09:EE:4F:7D:3A:51:16:C8:49:02:8A:4B:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43DD7872DB70EC7975F168143E2A45080D62162B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/201D961C19F6C809EE4F7D3A5116C849028A4B1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 13:30:41 +0000
Certificate not after:    Fri 21 Oct 2022 13:35:41 +0000
Subordinate resources:    AS: 269556
                          IP: 45.187.196.0/22
                          IP: 2804:6668::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:78:72:db:70:ec:79:75:f1:68:14:3e:2a:45:08:0d:62:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 13:30:41 2021 GMT
            Not After : Oct 21 13:35:41 2022 GMT
        Subject: CN=201D961C19F6C809EE4F7D3A5116C849028A4B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:b1:37:45:35:39:39:a0:00:3c:bc:eb:e0:
                    83:7d:8c:db:6d:f4:bf:72:44:87:35:67:f3:17:5e:
                    5c:6b:48:21:3d:eb:3a:09:cb:aa:a8:43:26:fb:9b:
                    e2:7b:0c:aa:d1:cb:51:6c:12:50:7e:81:be:31:7e:
                    83:94:48:10:ce:92:87:41:f7:72:7e:8a:f9:4a:0d:
                    c0:d9:8d:0d:f0:55:b6:84:94:c6:c6:e1:a6:b2:93:
                    74:df:5f:6a:24:ec:c5:0d:89:49:2e:d7:2f:0f:8b:
                    52:01:71:39:f2:f8:37:75:71:74:ff:8e:f4:98:07:
                    0b:5e:0d:60:d0:62:55:0b:b8:c4:e4:ba:30:8e:fb:
                    a9:85:fe:98:06:40:b7:55:fb:06:04:8d:46:d3:a0:
                    24:4b:07:1f:b4:60:d8:42:c4:b8:2a:9c:26:ed:66:
                    93:e6:d1:70:e0:17:0e:d6:3b:61:52:2e:0f:00:3b:
                    b7:8c:56:7b:13:1f:29:7a:3e:f3:0b:91:79:77:aa:
                    6f:47:f4:bd:4a:2d:47:42:ec:7a:25:3a:5c:cc:67:
                    31:99:94:ba:83:5f:4e:3d:90:8e:ac:cf:9b:6d:af:
                    60:c2:a8:92:de:4d:ae:ac:25:f2:16:bf:cd:3f:d9:
                    5c:d0:9f:51:12:b2:35:84:0e:ee:b6:40:0d:83:6e:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:1D:96:1C:19:F6:C8:09:EE:4F:7D:3A:51:16:C8:49:02:8A:4B:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/201D961C19F6C809EE4F7D3A5116C849028A4B1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.196.0/22
                IPv6:
                  2804:6668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269556

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:9e:37:09:ff:93:a6:04:9b:d4:08:8e:ef:61:f7:69:c3:
         40:b0:10:69:6c:fd:e3:b5:ca:4b:60:e6:3f:70:98:74:f1:4d:
         bc:29:57:cf:82:df:06:68:43:3a:08:10:df:e4:e9:65:6e:75:
         b1:63:e9:81:06:6e:da:c8:64:91:00:e5:83:ae:14:87:c4:da:
         89:d2:b8:91:df:f3:7f:d2:4d:02:fb:9c:19:9e:23:ef:71:7a:
         40:c9:11:28:6c:3a:2b:6e:5f:a3:9d:b6:a4:bd:87:4d:e7:1c:
         2e:81:1f:2c:bf:e1:a1:e5:61:dd:68:32:be:b2:19:17:35:80:
         e3:56:c3:0c:91:16:3e:77:83:e0:8a:3f:9d:18:d3:db:5f:4b:
         44:37:4b:d3:87:42:2e:67:20:ad:0a:64:e0:bf:84:79:bb:a2:
         27:86:c8:4b:c2:0c:ed:2f:3e:12:05:53:68:85:03:ae:70:0b:
         5e:82:f8:b4:8f:52:b8:07:31:4a:44:e6:51:aa:d0:27:42:d3:
         8c:db:dc:dc:5a:a9:d9:8b:7d:46:6a:26:6f:43:bb:e7:ea:80:
         01:5b:9e:6a:15:c0:6f:d9:6d:09:d7:5c:8e:70:82:0a:a8:f3:
         81:43:84:0a:0b:3b:b7:57:9f:9e:8e:9b:b0:b0:43:60:86:89:
         13:c2:ca:67
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQ914cttw7Hl18WgUPipFCA1iFiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEwMjIxMzMwNDFaFw0yMjEwMjExMzM1NDFaMDMxMTAvBgNV
BAMTKDIwMUQ5NjFDMTlGNkM4MDlFRTRGN0QzQTUxMTZDODQ5MDI4QTRCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36bE3RTU5OaAAPLzr4IN9jNtt
9L9yRIc1Z/MXXlxrSCE96zoJy6qoQyb7m+J7DKrRy1FsElB+gb4xfoOUSBDOkodB
93J+ivlKDcDZjQ3wVbaElMbG4aayk3TfX2ok7MUNiUku1y8Pi1IBcTny+Dd1cXT/
jvSYBwteDWDQYlULuMTkujCO+6mF/pgGQLdV+wYEjUbToCRLBx+0YNhCxLgqnCbt
ZpPm0XDgFw7WO2FSLg8AO7eMVnsTHyl6PvMLkXl3qm9H9L1KLUdC7HolOlzMZzGZ
lLqDX049kI6sz5ttr2DCqJLeTa6sJfIWv80/2VzQn1ESsjWEDu62QA2DboEnAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgHZYcGfbICe5P
fTpRFshJAopLGzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EMkhVdGlETDJ6Mm9UR25lU0oxNU43N2I3WWVRZXY2QUty
dnl4allkdkx3cC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EMkhVdGlETDJ6Mm9UR25lU0oxNU43N2I3WWVRZXY2QUty
dnl4allkdkx3cC8wLzIwMUQ5NjFDMTlGNkM4MDlFRTRGN0QzQTUxMTZDODQ5MDI4
QTRCMUIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi27xDANBAIAAjAHAwUA
KARmaDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHPQwDQYJKoZIhvcNAQELBQAD
ggEBAGw0njcJ/5OmBJvUCI7vYfdpw0CwEGls/eO1yktg5j9wmHTxTbwpV8+C3wZo
QzoIEN/k6WVudbFj6YEGbtrIZJEA5YOuFIfE2onSuJHf83/STQL7nBmeI+9xekDJ
EShsOituX6OdtqS9h03nHC6BHyy/4aHlYd1oMr6yGRc1gONWwwyRFj53g+CKP50Y
09tfS0Q3S9OHQi5nIK0KZOC/hHm7oieGyEvCDO0vPhIFU2iFA65wC16C+LSPUrgH
MUpE5lGq0CdC04zb3NxaqdmLfUZqJm9Du+fqgAFbnmoVwG/ZbQnXXI5wggqo84FD
hAoLO7dXn56Om7CwQ2CGiRPCymc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org