Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/356DB07CF8617314D1E724F86FE180F52E3D1945.cer
File:                     356DB07CF8617314D1E724F86FE180F52E3D1945.cer (raw, json)
Hash identifier:          NLXhKGsvOx2Gky0hxqP4gr6FTD1EGtJ17mTw4XHzd4c=
Subject key identifier:   35:6D:B0:7C:F8:61:73:14:D1:E7:24:F8:6F:E1:80:F5:2E:3D:19:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CFB763B7E34605B6D5F301FD4B1F72EC38327B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/356DB07CF8617314D1E724F86FE180F52E3D1945.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Aug 2022 18:59:40 +0000
Certificate not after:    Tue 01 Aug 2023 19:04:40 +0000
Subordinate resources:    AS: 267420
                          IP: 45.235.160.0/22
                          IP: 170.231.208.0/22
                          IP: 2804:4d3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fb:76:3b:7e:34:60:5b:6d:5f:30:1f:d4:b1:f7:2e:c3:83:27:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 18:59:40 2022 GMT
            Not After : Aug  1 19:04:40 2023 GMT
        Subject: CN=356DB07CF8617314D1E724F86FE180F52E3D1945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:69:22:ab:08:95:ba:86:28:f0:8b:d1:14:
                    ef:a7:e1:9f:3c:f2:a9:f1:b4:06:8f:f2:5e:c2:53:
                    c0:4d:48:f3:01:3f:14:4b:c5:19:df:fa:c7:43:f0:
                    60:0c:3f:50:fa:a6:0c:08:4f:12:40:a3:e7:45:9b:
                    2d:65:44:a8:fc:10:8d:c1:e4:bf:39:06:62:10:d6:
                    88:8b:c8:85:bf:de:ab:b2:1f:d9:b0:6d:86:66:cc:
                    5c:b6:99:be:bc:33:de:73:ea:da:26:07:61:7b:b8:
                    17:b3:03:3c:37:d5:70:0c:af:99:a8:c6:7a:81:84:
                    0a:f7:42:19:f7:c6:6e:87:0f:92:80:75:13:c4:b6:
                    57:9d:2c:0b:66:3f:a0:39:9a:84:30:9c:f0:23:77:
                    6c:21:c5:ab:0b:ac:0f:33:c1:6a:9b:dc:43:37:7f:
                    63:c9:b0:79:7d:1b:93:3a:74:5d:05:16:5f:a4:64:
                    0f:1e:0b:95:9a:c0:83:69:94:61:8c:97:c1:2f:fd:
                    ab:f0:ee:4e:41:ed:99:b8:69:9a:dc:91:a5:c1:0c:
                    98:d0:e0:56:84:3c:54:bf:2a:7d:3d:7e:49:f4:4d:
                    ec:22:b8:67:9e:80:35:9d:6f:08:e8:4d:51:eb:c2:
                    7c:1a:4b:1c:81:dc:e8:43:c7:51:5c:7e:ee:9b:15:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:6D:B0:7C:F8:61:73:14:D1:E7:24:F8:6F:E1:80:F5:2E:3D:19:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/356DB07CF8617314D1E724F86FE180F52E3D1945.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22
                  170.231.208.0/22
                IPv6:
                  2804:4d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267420

    Signature Algorithm: sha256WithRSAEncryption
         ab:e7:ba:44:28:60:75:9a:79:08:a2:d3:a9:23:7b:75:09:0c:
         22:1c:5f:fd:df:f8:97:99:d6:57:4a:00:3d:b7:76:43:52:37:
         07:e5:a5:25:23:79:c7:e2:f6:de:cf:a1:b3:eb:3f:7c:9e:1b:
         72:de:6a:a8:24:6b:59:ac:a3:94:91:ef:29:13:1e:56:4a:9c:
         09:2a:da:d2:23:ba:99:a2:7c:40:60:32:8b:02:da:5f:50:a4:
         0d:57:72:3d:51:74:1a:9a:b5:16:8a:ab:16:14:3e:62:1b:83:
         9b:9e:be:f9:9e:43:c1:63:5f:8c:18:3d:82:75:bf:d2:f6:80:
         97:65:df:7f:cc:86:a7:71:ad:50:ed:90:5a:31:1d:c4:db:1a:
         b6:2d:ab:44:fd:42:59:23:5e:1e:75:06:c8:c2:be:13:94:eb:
         de:a9:cc:0e:37:72:f8:0c:1e:ca:56:f7:79:ff:4e:bd:23:f3:
         e6:ab:67:1b:9b:9b:e0:69:df:8a:85:21:bd:54:98:7e:a1:0d:
         65:c9:bf:37:3b:7c:d5:a9:e3:58:41:c7:15:60:12:01:58:d3:
         0f:34:01:30:ba:02:43:ba:e8:b2:9a:0f:3a:c3:5a:35:c9:61:
         06:66:a2:28:9f:ad:ed:2e:1b:3e:71:19:b3:d8:74:1d:2b:b0:
         ef:b0:85:0d
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUHPt2O340YFttXzAf1LH3LsODJ7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MDIxODU5NDBaFw0yMzA4MDExOTA0NDBaMDMxMTAvBgNV
BAMTKDM1NkRCMDdDRjg2MTczMTREMUU3MjRGODZGRTE4MEY1MkUzRDE5NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ22kiqwiVuoYo8IvRFO+n4Z88
8qnxtAaP8l7CU8BNSPMBPxRLxRnf+sdD8GAMP1D6pgwITxJAo+dFmy1lRKj8EI3B
5L85BmIQ1oiLyIW/3quyH9mwbYZmzFy2mb68M95z6tomB2F7uBezAzw31XAMr5mo
xnqBhAr3Qhn3xm6HD5KAdRPEtledLAtmP6A5moQwnPAjd2whxasLrA8zwWqb3EM3
f2PJsHl9G5M6dF0FFl+kZA8eC5WawINplGGMl8Ev/avw7k5B7Zm4aZrckaXBDJjQ
4FaEPFS/Kn09fkn0TewiuGeegDWdbwjoTVHrwnwaSxyB3OhDx1Fcfu6bFdRRAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1bbB8+GFzFNHn
JPhv4YD1Lj0ZRTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ic0I5U29GNGpGYml6bmY0ZHhLRG9lN1RzTHYxUUVMazMz
YnhiWGtIQTlQZy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ic0I5U29GNGpGYml6bmY0ZHhLRG9lN1RzTHYxUUVMazMz
YnhiWGtIQTlQZy8wLzM1NkRCMDdDRjg2MTczMTREMUU3MjRGODZGRTE4MEY1MkUz
RDE5NDUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi3roAMEAqrn0DANBAIA
AjAHAwUAKARNPDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFJwwDQYJKoZIhvcN
AQELBQADggEBAKvnukQoYHWaeQii06kje3UJDCIcX/3f+JeZ1ldKAD23dkNSNwfl
pSUjecfi9t7PobPrP3yeG3Leaqgka1mso5SR7ykTHlZKnAkq2tIjupmifEBgMosC
2l9QpA1Xcj1RdBqatRaKqxYUPmIbg5uevvmeQ8FjX4wYPYJ1v9L2gJdl33/Mhqdx
rVDtkFoxHcTbGrYtq0T9QlkjXh51BsjCvhOU696pzA43cvgMHspW93n/Tr0j8+ar
Zxubm+Bp34qFIb1UmH6hDWXJvzc7fNWp41hBxxVgEgFY0w80ATC6AkO66LKaDzrD
WjXJYQZmoiifre0uGz5xGbPYdB0rsO+whQ0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org