Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.cer
File:                     37B8A9720C647536D52213E76F8A399EB36DE1DE.cer (raw, json)
Hash identifier:          dv1ZgZ5N4QspUgSDlFGhpnQsj4t8aPPxcNY/rVQy7hw=
Subject key identifier:   37:B8:A9:72:0C:64:75:36:D5:22:13:E7:6F:8A:39:9E:B3:6D:E1:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       665A4AE9E8C676688A8643351F60873E987FA001
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jan 2023 13:58:38 +0000
Certificate not after:    Wed 03 Jan 2024 14:03:38 +0000
Subordinate resources:    AS: 271290
                          IP: 200.4.104.0/22
                          IP: 2804:7930::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5a:4a:e9:e8:c6:76:68:8a:86:43:35:1f:60:87:3e:98:7f:a0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 13:58:38 2023 GMT
            Not After : Jan  3 14:03:38 2024 GMT
        Subject: CN=37B8A9720C647536D52213E76F8A399EB36DE1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:fe:bf:25:4f:6c:38:d9:9c:93:ac:2f:bc:
                    59:e8:54:03:c0:8f:32:c4:b8:36:72:1e:e4:ee:49:
                    13:32:06:73:68:ed:bc:0f:a5:24:4a:15:19:5f:b9:
                    b7:05:bb:c0:d0:b9:91:16:7b:02:25:de:37:fc:10:
                    4c:90:12:76:a1:2d:5c:8f:2a:04:7f:22:ed:1f:af:
                    52:86:13:5f:ec:74:7c:3f:78:fd:45:54:78:37:65:
                    b8:d7:ba:2e:bd:11:20:66:e0:83:b7:d2:0d:21:77:
                    3b:48:6f:ec:95:45:d4:7c:b3:3a:20:5c:4f:64:10:
                    98:b6:96:59:81:af:63:62:17:22:a5:65:29:be:cd:
                    e6:89:ed:f9:c1:7a:62:f9:c1:eb:37:be:2b:4a:20:
                    98:98:2d:4e:01:d3:dc:52:81:97:6f:31:ad:ef:0a:
                    4c:17:21:1c:d8:a4:7f:c2:9e:01:d3:32:bd:df:82:
                    1a:7e:81:95:ec:6d:21:56:81:45:ef:67:6c:86:57:
                    90:c1:de:a0:81:8d:1e:97:76:18:d4:3f:5d:31:45:
                    e4:0c:8d:2f:d0:d7:ec:8d:b3:24:2d:c8:52:97:35:
                    89:84:f7:4a:4d:04:28:ea:e0:01:3c:36:71:0a:5a:
                    91:35:4b:9c:1e:65:19:db:86:6e:1a:88:e1:8a:94:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:B8:A9:72:0C:64:75:36:D5:22:13:E7:6F:8A:39:9E:B3:6D:E1:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.104.0/22
                IPv6:
                  2804:7930::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271290

    Signature Algorithm: sha256WithRSAEncryption
         9d:72:42:2e:bb:39:67:bc:99:8f:2a:75:91:1b:84:ad:9b:b5:
         40:54:a1:35:cf:b5:17:a3:94:38:30:17:4e:87:ee:19:fa:e3:
         3c:d0:20:33:f7:6c:33:28:a6:88:8c:5a:b0:70:4c:46:41:9b:
         16:de:7f:85:6c:b5:71:3f:bd:bd:73:91:a7:37:2d:b3:56:24:
         50:e7:75:05:cd:fc:be:60:1e:b1:ed:19:88:f7:28:1c:12:63:
         5a:15:92:0c:10:ff:72:9f:bf:e8:37:87:b5:da:19:fd:dd:4e:
         da:45:0d:7c:ce:a7:a1:af:5d:ef:33:eb:2f:e6:ad:ea:5f:93:
         cc:e2:b5:a6:a9:24:16:80:36:f6:ea:2c:4c:43:78:3f:d1:71:
         4f:d9:c4:de:7e:9b:e5:bb:d5:11:6d:d0:40:19:10:e0:00:c8:
         f5:10:1e:f4:69:3a:c7:73:43:bd:01:d4:45:4f:13:89:a9:76:
         c2:12:57:a0:ea:4d:99:d0:34:7f:21:f1:1a:61:7f:3c:f7:4e:
         59:3c:99:a6:d3:52:13:c7:f5:e6:c8:e6:76:84:5f:b9:b4:2d:
         72:bd:f2:63:d3:36:94:8b:00:a6:ad:ca:01:ef:52:7d:7d:ce:
         94:9e:be:9a:66:d9:f2:72:18:4c:ee:79:c3:c0:b5:06:55:cd:
         dc:62:b9:50
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZlpK6ejGdmiKhkM1H2CHPph/oAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMDQxMzU4MzhaFw0yNDAxMDMxNDAzMzhaMDMxMTAvBgNV
BAMTKDM3QjhBOTcyMEM2NDc1MzZENTIyMTNFNzZGOEEzOTlFQjM2REUxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7q/6/JU9sONmck6wvvFnoVAPA
jzLEuDZyHuTuSRMyBnNo7bwPpSRKFRlfubcFu8DQuZEWewIl3jf8EEyQEnahLVyP
KgR/Iu0fr1KGE1/sdHw/eP1FVHg3ZbjXui69ESBm4IO30g0hdztIb+yVRdR8szog
XE9kEJi2llmBr2NiFyKlZSm+zeaJ7fnBemL5wes3vitKIJiYLU4B09xSgZdvMa3v
CkwXIRzYpH/CngHTMr3fghp+gZXsbSFWgUXvZ2yGV5DB3qCBjR6XdhjUP10xReQM
jS/Q1+yNsyQtyFKXNYmE90pNBCjq4AE8NnEKWpE1S5weZRnbhm4aiOGKlIgbAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3uKlyDGR1NtUi
E+dvijmes23h3jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DQjdSWm9hOUNEVjJzZ1R5dDdjUTV6WDVITjRFUHByNWpq
RXFmYUNpTWRWNy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DQjdSWm9hOUNEVjJzZ1R5dDdjUTV6WDVITjRFUHByNWpq
RXFmYUNpTWRWNy8wLzM3QjhBOTcyMEM2NDc1MzZENTIyMTNFNzZGOEEzOTlFQjM2
REUxREUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsgEaDANBAIAAjAHAwUA
KAR5MDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEI7owDQYJKoZIhvcNAQELBQAD
ggEBAJ1yQi67OWe8mY8qdZEbhK2btUBUoTXPtRejlDgwF06H7hn64zzQIDP3bDMo
poiMWrBwTEZBmxbef4VstXE/vb1zkac3LbNWJFDndQXN/L5gHrHtGYj3KBwSY1oV
kgwQ/3Kfv+g3h7XaGf3dTtpFDXzOp6GvXe8z6y/mrepfk8zitaapJBaANvbqLExD
eD/RcU/ZxN5+m+W71RFt0EAZEOAAyPUQHvRpOsdzQ70B1EVPE4mpdsISV6DqTZnQ
NH8h8Rphfzz3Tlk8mabTUhPH9ebI5naEX7m0LXK98mPTNpSLAKatygHvUn19zpSe
vppm2fJyGEzuecPAtQZVzdxiuVA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org