Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.cer
File:                     61B9FF8A89F795308E791C6E8890EC95AD383E3C.cer (raw, json)
Hash identifier:          cfbFhVJwHfUd/k+PewDFqUGsJId7xtXYEbx/vmjQHWM=
Subject key identifier:   61:B9:FF:8A:89:F7:95:30:8E:79:1C:6E:88:90:EC:95:AD:38:3E:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30302EE190EB0A0CA804DB3FDB0FD9170786F40C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Aug 2023 19:18:57 +0000
Certificate not after:    Mon 26 Aug 2024 19:23:57 +0000
Subordinate resources:    AS: 269671
                          IP: 45.191.124.0/22
                          IP: 2804:6824::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:30:2e:e1:90:eb:0a:0c:a8:04:db:3f:db:0f:d9:17:07:86:f4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 28 19:18:57 2023 GMT
            Not After : Aug 26 19:23:57 2024 GMT
        Subject: CN=61B9FF8A89F795308E791C6E8890EC95AD383E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:c4:42:bc:73:20:49:cb:e9:2e:c8:84:2b:
                    50:e5:8f:75:07:9a:6e:1b:0b:e6:84:a2:1a:cb:08:
                    2b:60:ec:fa:ac:70:40:c3:9e:5c:82:85:2c:24:7a:
                    12:c3:c6:5f:f7:d6:de:81:0a:09:f2:18:cf:67:01:
                    6d:53:b2:20:c0:f1:93:ea:c7:18:d2:7c:1b:b7:c0:
                    c0:9e:a8:7e:46:c7:a4:25:6c:84:6f:5c:26:1e:a1:
                    f7:c0:dc:c9:74:56:15:98:7e:5a:2b:b1:89:18:3b:
                    21:38:a4:c9:34:ce:8e:38:39:ae:9c:a8:0a:f1:3f:
                    69:b6:cd:76:90:ee:8c:8c:32:a2:a8:c7:37:26:68:
                    db:61:a4:48:2f:80:7a:02:37:a4:8e:df:33:66:a4:
                    55:24:b0:29:73:e3:4e:8b:b6:0c:6d:6c:99:03:e7:
                    89:41:a7:13:d8:6e:0d:9f:eb:9e:54:68:65:fe:56:
                    f7:9f:8d:89:f9:d4:51:d0:70:eb:45:0a:03:1c:c5:
                    11:8e:db:a1:70:cf:10:a3:96:ef:02:8c:97:60:b6:
                    8a:9d:d9:ef:71:29:60:e7:94:13:49:b6:aa:12:95:
                    3d:0d:ba:37:b3:e7:f1:3c:05:73:f5:39:0a:ad:27:
                    fb:ca:fa:d0:f1:9d:49:52:bd:27:8d:be:aa:5f:75:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:B9:FF:8A:89:F7:95:30:8E:79:1C:6E:88:90:EC:95:AD:38:3E:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22
                IPv6:
                  2804:6824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269671

    Signature Algorithm: sha256WithRSAEncryption
         93:19:d6:50:49:b3:48:a9:fb:b8:c4:91:4b:19:21:df:08:7f:
         f3:59:09:58:79:cf:3f:92:fa:12:f5:fb:b9:92:54:91:ad:57:
         39:5c:e8:a8:09:0e:bf:e5:fa:f6:65:c9:30:ec:fa:2d:38:59:
         b3:23:1d:10:1a:bb:b2:ff:3c:96:b8:56:26:77:39:11:2d:22:
         aa:ef:ee:8c:86:bb:6f:3d:97:59:79:d2:17:83:f1:24:54:f2:
         9a:5f:68:2c:51:8d:6e:74:94:12:d0:3d:4d:55:42:88:6f:48:
         63:79:bd:ab:1b:7c:25:08:e2:b1:66:ac:41:9d:40:04:0e:cc:
         47:09:83:4a:a6:aa:f0:84:88:d6:7a:2c:48:69:1e:8e:c8:4f:
         9f:a2:42:79:05:ab:a9:bb:25:ef:29:f3:06:ba:07:6c:b5:57:
         4c:ef:ad:d9:02:0f:00:10:ab:57:32:bf:e6:86:fd:57:5e:59:
         7e:3c:5b:4f:e0:fd:75:18:af:7e:19:a0:c2:8f:14:06:6c:05:
         56:37:b4:92:28:7e:2e:eb:d1:e6:5c:e0:fa:da:c1:6c:0c:b1:
         b4:ae:73:b0:3b:4f:ee:0c:a3:bd:1a:4e:29:bc:a4:55:45:24:
         0d:b1:eb:47:0c:46:c6:3b:cc:2b:69:6c:09:1a:2d:28:20:9d:
         f9:d5:8c:50
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUMDAu4ZDrCgyoBNs/2w/ZFweG9AwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjgxOTE4NTdaFw0yNDA4MjYxOTIzNTdaMDMxMTAvBgNV
BAMTKDYxQjlGRjhBODlGNzk1MzA4RTc5MUM2RTg4OTBFQzk1QUQzODNFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v8RCvHMgScvpLsiEK1Dlj3UH
mm4bC+aEohrLCCtg7PqscEDDnlyChSwkehLDxl/31t6BCgnyGM9nAW1TsiDA8ZPq
xxjSfBu3wMCeqH5Gx6QlbIRvXCYeoffA3Ml0VhWYflorsYkYOyE4pMk0zo44Oa6c
qArxP2m2zXaQ7oyMMqKoxzcmaNthpEgvgHoCN6SO3zNmpFUksClz406LtgxtbJkD
54lBpxPYbg2f655UaGX+VvefjYn51FHQcOtFCgMcxRGO26FwzxCjlu8CjJdgtoqd
2e9xKWDnlBNJtqoSlT0Nujez5/E8BXP1OQqtJ/vK+tDxnUlSvSeNvqpfdVaHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhuf+KifeVMI55
HG6IkOyVrTg+PDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BWUpZUmNSVGtjTkJpQ0RqQTQyTm5TVGc0M25wRXJXNGhX
Qlprb3BpaUNMWS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BWUpZUmNSVGtjTkJpQ0RqQTQyTm5TVGc0M25wRXJXNGhX
Qlprb3BpaUNMWS8wLzYxQjlGRjhBODlGNzk1MzA4RTc5MUM2RTg4OTBFQzk1QUQz
ODNFM0MubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2/fDANBAIAAjAHAwUA
KARoJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHWcwDQYJKoZIhvcNAQELBQAD
ggEBAJMZ1lBJs0ip+7jEkUsZId8If/NZCVh5zz+S+hL1+7mSVJGtVzlc6KgJDr/l
+vZlyTDs+i04WbMjHRAau7L/PJa4ViZ3OREtIqrv7oyGu289l1l50heD8SRU8ppf
aCxRjW50lBLQPU1VQohvSGN5vasbfCUI4rFmrEGdQAQOzEcJg0qmqvCEiNZ6LEhp
Ho7IT5+iQnkFq6m7Je8p8wa6B2y1V0zvrdkCDwAQq1cyv+aG/VdeWX48W0/g/XUY
r34ZoMKPFAZsBVY3tJIofi7r0eZc4PrawWwMsbSuc7A7T+4Mo70aTim8pFVFJA2x
60cMRsY7zCtpbAkaLSggnfnVjFA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org