Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/291D71FDFAFF07833854C25F5FBE1CB1F0FD4580.cer
File:                     291D71FDFAFF07833854C25F5FBE1CB1F0FD4580.cer (raw, json)
Hash identifier:          LHDRNqwKyEW8gvH6j2XIBXOGV3v67qcgojZvXFCCwiw=
Subject key identifier:   29:1D:71:FD:FA:FF:07:83:38:54:C2:5F:5F:BE:1C:B1:F0:FD:45:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47E43665A468B0627A425BA4CA8D113A7273F9EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/291D71FDFAFF07833854C25F5FBE1CB1F0FD4580.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jul 2021 20:57:48 +0000
Certificate not after:    Thu 28 Jul 2022 21:02:48 +0000
Subordinate resources:    AS: 267669
                          IP: 45.224.192.0/22
                          IP: 2804:450c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e4:36:65:a4:68:b0:62:7a:42:5b:a4:ca:8d:11:3a:72:73:f9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 20:57:48 2021 GMT
            Not After : Jul 28 21:02:48 2022 GMT
        Subject: CN=291D71FDFAFF07833854C25F5FBE1CB1F0FD4580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:c4:e3:1a:a1:c6:5e:aa:fd:57:9c:ae:4c:
                    35:c0:14:eb:13:59:48:51:37:91:03:69:4e:01:9b:
                    04:76:9b:54:37:42:75:b9:e5:f2:be:d5:b8:62:46:
                    4b:22:2d:a4:98:37:15:1c:fe:92:c5:fc:68:ea:64:
                    3b:be:33:da:23:50:02:79:b2:73:5c:f6:6e:90:a3:
                    66:58:72:c9:f7:de:60:c0:32:0e:69:d9:65:4e:40:
                    fc:48:8c:f7:f6:e8:1c:fe:fa:5a:39:5c:66:4d:5c:
                    d6:ec:a2:56:57:ae:87:e1:54:37:4e:87:87:0b:ad:
                    4d:29:00:da:c0:df:c8:f0:21:7b:0f:01:50:8d:d4:
                    d1:b9:e3:fc:76:5a:a8:66:84:d5:db:88:35:87:5b:
                    5b:df:41:11:25:f5:b8:0d:2d:e1:f7:73:71:50:1e:
                    d2:bf:4c:4d:d4:84:e1:0f:3d:0e:b3:93:a4:47:7f:
                    30:96:23:d8:29:6c:5c:3b:72:d6:d0:2c:db:b1:67:
                    d0:5c:1e:66:f5:b3:f4:7e:f2:99:31:a6:ba:f1:e5:
                    12:44:00:94:de:ff:c6:80:90:8e:17:e0:4e:82:f5:
                    b1:3c:aa:3f:6d:bc:d5:3d:47:ad:22:01:33:1f:2a:
                    c9:4f:6a:98:1e:46:a0:47:23:6c:dc:d3:ef:05:c2:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:1D:71:FD:FA:FF:07:83:38:54:C2:5F:5F:BE:1C:B1:F0:FD:45:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/291D71FDFAFF07833854C25F5FBE1CB1F0FD4580.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.192.0/22
                IPv6:
                  2804:450c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267669

    Signature Algorithm: sha256WithRSAEncryption
         a1:70:1b:7c:53:5a:0f:5c:14:b2:39:8e:62:37:0a:f9:5a:be:
         c0:d6:ac:08:f9:78:90:84:fa:e2:48:cc:79:f8:01:d4:55:07:
         1e:09:7b:82:60:b2:ec:82:7f:19:0e:f9:05:e9:97:a0:7b:43:
         06:61:88:19:a0:b4:52:80:09:1f:2f:45:cf:5c:2f:24:13:48:
         cb:df:82:4f:4b:37:dd:b9:21:b1:6e:05:40:bf:33:c8:74:13:
         60:14:c7:7e:6b:f0:5c:99:a0:f5:0f:05:23:69:25:fe:3e:09:
         f2:cc:2a:da:32:d3:01:22:49:85:fc:8c:11:fb:22:6b:44:6d:
         0e:c0:6e:d9:6d:09:1d:6a:ef:5f:72:a8:9d:07:c6:df:77:16:
         88:ac:d1:74:09:84:e1:40:44:f7:80:69:e7:10:d5:ed:9f:f2:
         f9:86:db:3e:78:06:d4:6e:a0:d8:dd:2c:e1:de:54:8e:f1:90:
         35:da:ba:da:95:93:a0:ab:60:e8:55:97:72:a2:3f:97:05:59:
         71:14:6a:6b:17:89:8a:a0:b2:0c:bf:e8:d8:cd:35:7c:cf:8b:
         3b:75:3f:59:c9:51:2d:a1:47:d6:14:21:e5:88:e7:d8:7f:5c:
         5e:35:a9:ed:c4:1d:66:e0:a9:a3:74:3b:1e:d4:c4:f8:dd:5a:
         6d:ea:ca:67
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUR+Q2ZaRosGJ6Qlukyo0ROnJz+ewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTA3MjkyMDU3NDhaFw0yMjA3MjgyMTAyNDhaMDMxMTAvBgNV
BAMTKDI5MUQ3MUZERkFGRjA3ODMzODU0QzI1RjVGQkUxQ0IxRjBGRDQ1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC888TjGqHGXqr9V5yuTDXAFOsT
WUhRN5EDaU4BmwR2m1Q3QnW55fK+1bhiRksiLaSYNxUc/pLF/GjqZDu+M9ojUAJ5
snNc9m6Qo2ZYcsn33mDAMg5p2WVOQPxIjPf26Bz++lo5XGZNXNbsolZXrofhVDdO
h4cLrU0pANrA38jwIXsPAVCN1NG54/x2WqhmhNXbiDWHW1vfQREl9bgNLeH3c3FQ
HtK/TE3UhOEPPQ6zk6RHfzCWI9gpbFw7ctbQLNuxZ9BcHmb1s/R+8pkxprrx5RJE
AJTe/8aAkI4X4E6C9bE8qj9tvNU9R60iATMfKslPapgeRqBHI2zc0+8FwtLPAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpHXH9+v8HgzhU
wl9fvhyx8P1FgDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Dc0I2WTU5Y2lZSjI4cVplZjM3WENiSmpkNXFxZ3B0UVJ3
eGt1RHcyemlvdS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ3NCNlk1OWNpWUoyOHFaZWYzN1hDYkpqZDVxcWdwdFFS
d3hrdUR3Mnppb3UvMC8yOTFENzFGREZBRkYwNzgzMzg1NEMyNUY1RkJFMUNCMUYw
RkQ0NTgwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt4MAwDQQCAAIwBwMF
ACgERQwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBWVMA0GCSqGSIb3DQEBCwUA
A4IBAQChcBt8U1oPXBSyOY5iNwr5Wr7A1qwI+XiQhPriSMx5+AHUVQceCXuCYLLs
gn8ZDvkF6Zege0MGYYgZoLRSgAkfL0XPXC8kE0jL34JPSzfduSGxbgVAvzPIdBNg
FMd+a/BcmaD1DwUjaSX+PgnyzCraMtMBIkmF/IwR+yJrRG0OwG7ZbQkdau9fcqid
B8bfdxaIrNF0CYThQET3gGnnENXtn/L5hts+eAbUbqDY3Szh3lSO8ZA12rralZOg
q2DoVZdyoj+XBVlxFGprF4mKoLIMv+jYzTV8z4s7dT9ZyVEtoUfWFCHliOfYf1xe
NantxB1m4KmjdDse1MT43Vpt6spn
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org