Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.cer
File:                     23CD2FFE6E6106531A65DE73B3F4F3302A761326.cer (raw, json)
Hash identifier:          MromrBnJY7HnNog2MQTEedLjuPG+PdKBfCncTey2DgI=
Subject key identifier:   23:CD:2F:FE:6E:61:06:53:1A:65:DE:73:B3:F4:F3:30:2A:76:13:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       191B9D62D3AF3C6E65C2D78D4FF374A9DEEED143
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Mar 2022 20:11:14 +0000
Certificate not after:    Mon 13 Mar 2023 20:16:14 +0000
Subordinate resources:    AS: 52756
                          IP: 170.245.134.0/23
                          IP: 177.11.252.0/24
                          IP: 2801:80:1c10::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1b:9d:62:d3:af:3c:6e:65:c2:d7:8d:4f:f3:74:a9:de:ee:d1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 20:11:14 2022 GMT
            Not After : Mar 13 20:16:14 2023 GMT
        Subject: CN=23CD2FFE6E6106531A65DE73B3F4F3302A761326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:35:7f:10:b7:f9:b7:e0:7c:8b:dd:78:9d:
                    1a:58:91:40:f1:cd:fe:c6:a1:1d:ff:0a:5e:aa:fb:
                    d6:55:3a:f9:ca:be:2d:50:fb:96:d7:0f:50:f1:b3:
                    4f:1e:ec:a3:f1:fa:c9:fb:09:0e:92:32:6b:95:3d:
                    e0:4b:51:96:13:92:3e:6b:31:af:bb:82:c1:16:ab:
                    7f:16:70:8d:ba:18:46:0f:b7:14:37:7e:09:5a:5c:
                    72:4b:e2:14:4b:bd:9a:7c:d4:41:e1:57:46:e5:53:
                    4a:87:4b:03:21:0e:54:68:e1:9f:8a:1a:0d:8a:02:
                    5b:d2:89:b4:db:c1:1e:3d:aa:e4:4d:1f:d6:f5:14:
                    48:7b:c0:18:5c:07:99:1a:d1:03:11:0c:b2:f5:43:
                    b9:0c:e1:c5:bf:84:55:57:82:e7:ac:ac:61:73:28:
                    d0:42:e6:3d:94:f9:41:ab:b7:ec:25:ae:14:a4:70:
                    f7:f2:06:38:ac:f6:4d:82:2c:a5:16:ea:33:f1:e3:
                    d2:d4:29:f3:d5:5a:76:e9:d5:28:b6:ca:69:a7:f9:
                    30:fe:f5:52:f3:09:8a:78:74:97:08:02:30:41:c8:
                    f0:8a:89:59:d3:d2:6c:7f:9a:7d:90:e5:b6:ef:69:
                    84:ef:35:71:f0:29:b8:1c:51:d9:03:e4:62:4e:02:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:CD:2F:FE:6E:61:06:53:1A:65:DE:73:B3:F4:F3:30:2A:76:13:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.134.0/23
                  177.11.252.0/24
                IPv6:
                  2801:80:1c10::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52756

    Signature Algorithm: sha256WithRSAEncryption
         6f:36:be:08:76:1c:d5:31:d5:e7:ca:d0:12:37:86:ee:76:ec:
         15:4e:5e:e5:1c:0f:59:2a:fd:1f:d4:89:84:57:19:69:dd:ec:
         81:cf:26:ea:27:15:ec:c8:19:34:bb:0c:7d:25:2e:3f:2b:2b:
         7e:cc:4b:43:67:eb:d7:d3:43:44:e3:de:a5:f7:c8:8c:6c:a9:
         34:53:ec:bb:98:ed:44:5d:03:29:26:5c:f9:5b:87:77:e8:49:
         10:96:10:bf:e7:d3:6c:a2:31:3c:2d:aa:3d:97:6d:36:7c:86:
         cc:37:90:5d:e0:c9:9a:84:38:90:52:bb:af:a1:9d:d6:05:82:
         5d:0b:1e:94:43:23:2e:57:8b:b6:75:7f:a9:2f:d4:1d:7e:c0:
         f9:6e:ed:f0:15:38:0a:e1:8f:72:79:e9:9b:9d:0a:82:18:50:
         22:7a:28:75:96:1b:88:5c:b4:60:c4:ce:ed:85:f9:31:ce:0b:
         86:d7:a1:08:5b:e7:7d:d8:24:24:b7:cf:8f:c5:d1:bf:66:0d:
         58:d9:59:a4:2c:b4:ae:98:51:44:74:03:d2:96:24:1c:3d:2f:
         fc:fe:9e:a8:f8:b9:32:94:a7:89:9b:7b:a2:6c:c3:d8:f2:82:
         15:34:0a:4b:7e:f3:f4:7e:1f:29:74:8a:0c:f2:5f:74:80:57:
         ab:6b:fe:ee
-----BEGIN CERTIFICATE-----
MIIGGDCCBQCgAwIBAgIUGRudYtOvPG5lwteNT/N0qd7u0UMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAzMTQyMDExMTRaFw0yMzAzMTMyMDE2MTRaMDMxMTAvBgNV
BAMTKDIzQ0QyRkZFNkU2MTA2NTMxQTY1REU3M0IzRjRGMzMwMkE3NjEzMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3DV/ELf5t+B8i914nRpYkUDx
zf7GoR3/Cl6q+9ZVOvnKvi1Q+5bXD1Dxs08e7KPx+sn7CQ6SMmuVPeBLUZYTkj5r
Ma+7gsEWq38WcI26GEYPtxQ3fglaXHJL4hRLvZp81EHhV0blU0qHSwMhDlRo4Z+K
Gg2KAlvSibTbwR49quRNH9b1FEh7wBhcB5ka0QMRDLL1Q7kM4cW/hFVXguesrGFz
KNBC5j2U+UGrt+wlrhSkcPfyBjis9k2CLKUW6jPx49LUKfPVWnbp1Si2ymmn+TD+
9VLzCYp4dJcIAjBByPCKiVnT0mx/mn2Q5bbvaYTvNXHwKbgcUdkD5GJOAmIpAgMB
AAGjggMiMIIDHjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjzS/+bmEGUxpl
3nOz9PMwKnYTJjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RGE1dENyZm1HczR3eFNxdlpOVGhZYkJ0MmFmTTZxeFA2
Y21iZXl5WTVxUC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RGE1dENyZm1HczR3eFNxdlpOVGhZYkJ0MmFmTTZxeFA2
Y21iZXl5WTVxUC8wLzIzQ0QyRkZFNkU2MTA2NTMxQTY1REU3M0IzRjRGMzMwMkE3
NjEzMjYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAar1hgMEALEL/DAPBAIA
AjAJAwcAKAEAgBwQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDOFDANBgkqhkiG
9w0BAQsFAAOCAQEAbza+CHYc1THV58rQEjeG7nbsFU5e5RwPWSr9H9SJhFcZad3s
gc8m6icV7MgZNLsMfSUuPysrfsxLQ2fr19NDROPepffIjGypNFPsu5jtRF0DKSZc
+VuHd+hJEJYQv+fTbKIxPC2qPZdtNnyGzDeQXeDJmoQ4kFK7r6Gd1gWCXQselEMj
LleLtnV/qS/UHX7A+W7t8BU4CuGPcnnpm50KghhQInoodZYbiFy0YMTO7YX5Mc4L
htehCFvnfdgkJLfPj8XRv2YNWNlZpCy0rphRRHQD0pYkHD0v/P6eqPi5MpSniZt7
omzD2PKCFTQKS37z9H4fKXSKDPJfdIBXq2v+7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org