Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20665061761E849FB4A4C6CB0AAE049A970A8774.cer
File:                     20665061761E849FB4A4C6CB0AAE049A970A8774.cer (raw, json)
Hash identifier:          3KWkYa/8YAy4gHzRZNVDc3NyoUJQxbeSJtUiQQZT00c=
Subject key identifier:   20:66:50:61:76:1E:84:9F:B4:A4:C6:CB:0A:AE:04:9A:97:0A:87:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FF6F1A6069E23F401EAC5CF137D0F87A4AF5F8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EiJ2SCddXHCTRufbMDXyCfKmMM8sf5ehXWCEZiQJYAYx/0/20665061761E849FB4A4C6CB0AAE049A970A8774.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EiJ2SCddXHCTRufbMDXyCfKmMM8sf5ehXWCEZiQJYAYx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 13:55:07 +0000
Certificate not after:    Fri 02 Aug 2024 14:00:07 +0000
Subordinate resources:    AS: 267268
                          IP: 45.232.128.0/22
                          IP: 2804:4adc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f6:f1:a6:06:9e:23:f4:01:ea:c5:cf:13:7d:0f:87:a4:af:5f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 13:55:07 2023 GMT
            Not After : Aug  2 14:00:07 2024 GMT
        Subject: CN=20665061761E849FB4A4C6CB0AAE049A970A8774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:80:1c:b2:56:a1:43:b7:ca:62:80:5b:70:
                    06:54:17:37:6b:bf:70:ca:bd:83:d5:3f:a1:53:b1:
                    11:8b:85:5d:f3:61:9b:f1:f4:59:d0:76:02:e6:33:
                    c3:ba:9e:f8:07:28:50:3d:d1:8d:15:d1:dd:b9:61:
                    c0:d2:33:7e:0b:dd:a2:22:2a:9e:c5:c3:f1:30:81:
                    63:43:49:c2:a8:8a:f1:4d:a8:45:7e:83:60:cf:16:
                    d8:b1:05:a7:fc:84:cc:7b:33:82:09:bb:02:55:38:
                    ba:18:e5:94:af:09:9b:b3:d9:f5:6f:65:60:15:cb:
                    a4:c0:da:25:b8:5a:e4:10:6b:f8:a5:ae:9e:fe:7e:
                    8b:2d:fe:45:35:3c:97:e7:8b:f6:96:91:ff:40:75:
                    35:49:b4:ec:3c:c7:b8:9c:10:2a:c0:cd:bc:8a:94:
                    1a:eb:0f:88:29:57:2a:45:4a:ae:ab:64:39:ba:ee:
                    90:fa:46:c2:e6:ff:46:ad:f8:de:52:8d:ed:55:30:
                    23:24:46:9e:a2:00:d9:3c:ee:09:85:bb:a6:66:df:
                    23:53:11:58:ae:87:91:2f:3d:66:56:7c:e4:48:de:
                    a6:97:af:6f:f7:17:99:6a:fa:92:b7:88:9a:34:2f:
                    79:0c:5b:23:42:c6:24:71:dd:b1:ed:37:a2:95:d5:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:66:50:61:76:1E:84:9F:B4:A4:C6:CB:0A:AE:04:9A:97:0A:87:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiJ2SCddXHCTRufbMDXyCfKmMM8sf5ehXWCEZiQJYAYx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiJ2SCddXHCTRufbMDXyCfKmMM8sf5ehXWCEZiQJYAYx/0/20665061761E849FB4A4C6CB0AAE049A970A8774.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.128.0/22
                IPv6:
                  2804:4adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267268

    Signature Algorithm: sha256WithRSAEncryption
         4a:db:02:ad:19:b4:b4:85:b0:47:82:1a:fe:9a:2b:ec:c3:42:
         3a:16:8a:8c:36:63:4e:a4:15:39:5b:d8:cb:5e:b1:43:d3:43:
         da:a2:01:1f:93:a6:31:a6:1c:04:58:f8:5a:72:4b:20:58:44:
         27:23:eb:02:39:20:d7:f9:6b:2b:ad:0c:70:b1:32:e6:10:de:
         ef:f6:c9:86:a5:90:22:61:64:59:27:56:f4:3b:74:ad:ef:bd:
         bb:c4:9d:60:bc:dc:9a:60:7d:c5:b0:7b:7d:e4:6f:2e:4f:57:
         03:ed:d3:95:5d:90:34:01:7d:b3:67:5c:73:c1:7f:11:e3:c4:
         b4:38:8f:4f:30:dc:1b:5c:37:89:fc:48:40:e2:5e:75:8c:e9:
         22:f7:45:b8:4f:01:ed:c9:e3:a1:e4:0f:a4:40:ea:f3:0f:29:
         f2:9f:cc:52:03:07:d0:91:99:91:24:a5:af:7e:1e:bc:b1:d4:
         96:0a:1f:cf:4c:a9:28:26:d8:5c:43:52:82:66:bf:86:a6:51:
         40:40:ba:cb:1a:f5:2c:c9:04:85:38:d6:b5:d2:3f:01:18:9a:
         5d:85:b8:18:6c:81:1c:57:6e:0a:ca:85:7b:4b:23:cd:26:ed:
         69:b1:71:56:fd:1e:2c:19:48:4a:21:d5:48:8a:f3:c4:8f:39:
         ee:11:96:0d
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUD/bxpgaeI/QB6sXPE30Ph6SvX40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MDQxMzU1MDdaFw0yNDA4MDIxNDAwMDdaMDMxMTAvBgNV
BAMTKDIwNjY1MDYxNzYxRTg0OUZCNEE0QzZDQjBBQUUwNDlBOTcwQTg3NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUH4AcslahQ7fKYoBbcAZUFzdr
v3DKvYPVP6FTsRGLhV3zYZvx9FnQdgLmM8O6nvgHKFA90Y0V0d25YcDSM34L3aIi
Kp7Fw/EwgWNDScKoivFNqEV+g2DPFtixBaf8hMx7M4IJuwJVOLoY5ZSvCZuz2fVv
ZWAVy6TA2iW4WuQQa/ilrp7+fost/kU1PJfni/aWkf9AdTVJtOw8x7icECrAzbyK
lBrrD4gpVypFSq6rZDm67pD6RsLm/0at+N5Sje1VMCMkRp6iANk87gmFu6Zm3yNT
EViuh5EvPWZWfORI3qaXr2/3F5lq+pK3iJo0L3kMWyNCxiRx3bHtN6KV1VcXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgZlBhdh6En7Sk
xssKrgSalwqHdDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FaUoyU0NkZFhIQ1RSdWZiTURYeUNmS21NTThzZjVlaFhX
Q0VaaVFKWUFZeC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRWlKMlNDZGRYSENUUnVmYk1EWHlDZkttTU04c2Y1ZWhY
V0NFWmlRSllBWXgvMC8yMDY2NTA2MTc2MUU4NDlGQjRBNEM2Q0IwQUFFMDQ5QTk3
MEE4Nzc0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt6IAwDQQCAAIwBwMF
ACgEStwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBQEMA0GCSqGSIb3DQEBCwUA
A4IBAQBK2wKtGbS0hbBHghr+mivsw0I6FoqMNmNOpBU5W9jLXrFD00PaogEfk6Yx
phwEWPhacksgWEQnI+sCOSDX+WsrrQxwsTLmEN7v9smGpZAiYWRZJ1b0O3St7727
xJ1gvNyaYH3FsHt95G8uT1cD7dOVXZA0AX2zZ1xzwX8R48S0OI9PMNwbXDeJ/EhA
4l51jOki90W4TwHtyeOh5A+kQOrzDynyn8xSAwfQkZmRJKWvfh68sdSWCh/PTKko
JthcQ1KCZr+GplFAQLrLGvUsyQSFONa10j8BGJpdhbgYbIEcV24KyoV7SyPNJu1p
sXFW/R4sGUhKIdVIivPEjznuEZYN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org