Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.cer
File:                     67888316D81746EE5C19F9656CE9D9B96EE806AA.cer (raw, json)
Hash identifier:          VadaT9QM7U6IrK5JK04satrHndbIAjvwccbb7C51Fqg=
Subject key identifier:   67:88:83:16:D8:17:46:EE:5C:19:F9:65:6C:E9:D9:B9:6E:E8:06:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F34DD854FEE8D623E007568023AA5E455CB5570
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Nov 2023 02:57:30 +0000
Certificate not after:    Thu 31 Oct 2024 03:02:30 +0000
Subordinate resources:    AS: 264004
                          IP: 143.0.72.0/22
                          IP: 2804:2938::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:34:dd:85:4f:ee:8d:62:3e:00:75:68:02:3a:a5:e4:55:cb:55:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  2 02:57:30 2023 GMT
            Not After : Oct 31 03:02:30 2024 GMT
        Subject: CN=67888316D81746EE5C19F9656CE9D9B96EE806AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:e7:88:32:32:1f:02:f5:79:4b:26:f0:63:
                    3e:e6:0b:60:ea:8e:03:c5:71:1a:2a:d0:39:e0:6e:
                    31:ed:7f:6d:c6:1f:80:82:21:8e:49:f1:b8:07:c8:
                    f4:31:35:6c:9e:8a:bd:46:1b:25:a9:a9:86:d6:52:
                    ff:e1:77:fe:79:56:04:37:f8:d5:ab:97:5f:b6:9a:
                    6b:b7:06:d9:12:c3:4d:06:97:4d:b7:3e:ae:84:c2:
                    d3:5b:4b:67:cc:0d:c4:20:53:93:7d:10:36:7b:a7:
                    7f:7d:d9:05:7d:9a:7c:bd:fe:5b:5f:59:0e:46:a7:
                    be:2b:72:c0:f6:4a:3d:c8:22:9a:56:9e:ce:3b:26:
                    fb:31:4c:29:15:93:52:60:e2:08:e6:5f:f8:a7:73:
                    4f:90:ee:d9:c5:5b:5e:81:e7:0b:75:e9:f1:2b:1d:
                    81:29:8d:9a:24:57:f4:4c:0a:05:a1:ed:1c:0e:2a:
                    28:83:32:90:05:00:ba:86:d6:93:d0:6e:b8:81:59:
                    ae:57:ef:ea:3c:8f:32:34:a4:9a:13:8c:70:4f:c8:
                    1c:16:6a:25:15:98:81:b0:dc:87:e1:fe:9a:18:14:
                    02:d8:7d:5d:98:1b:9e:9a:34:68:ae:2e:28:c5:84:
                    9a:8b:be:09:2b:3e:f2:7f:de:4a:fc:aa:a8:e4:0a:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:88:83:16:D8:17:46:EE:5C:19:F9:65:6C:E9:D9:B9:6E:E8:06:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.72.0/22
                IPv6:
                  2804:2938::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264004

    Signature Algorithm: sha256WithRSAEncryption
         8a:a7:e7:d6:58:3d:c8:e4:fe:56:dd:b4:77:24:90:af:f6:27:
         e1:ed:c4:27:c0:c7:4d:f1:a9:37:ba:bf:e9:be:70:e4:d1:22:
         07:a6:30:69:8a:c2:34:94:9d:6d:e4:14:4a:3e:a5:54:9e:0b:
         7a:e5:7d:8f:f5:ab:a3:94:0e:1c:37:8a:dc:c3:56:63:01:98:
         3d:40:04:8d:a0:1d:1a:86:cb:55:47:4e:29:ec:bb:fa:a3:b3:
         a9:1c:9d:f2:ee:07:ac:50:b4:2f:a7:41:f4:59:17:ca:0f:79:
         6c:c9:44:ae:6b:23:2f:6a:ee:1e:61:0c:61:50:d9:af:d1:56:
         6e:a7:1d:d1:b3:ae:63:03:be:35:54:64:ac:16:10:e8:c0:11:
         b9:d5:14:4d:18:a0:75:4d:53:28:51:f9:ae:25:ed:6f:d1:32:
         a3:45:92:a1:70:be:50:0f:d6:f8:2d:8c:3e:9a:68:b7:8b:5b:
         45:69:88:aa:52:24:25:d4:45:fe:ed:05:32:12:dd:ea:cb:28:
         b9:f2:50:08:2b:51:94:98:a3:ec:72:29:20:37:a8:15:36:15:
         04:d8:5e:82:9c:32:bb:af:a4:e2:5a:64:d2:9b:af:bb:b5:c1:
         b7:cf:d8:9c:9a:77:aa:6b:5f:98:eb:cd:00:2c:da:22:a7:98:
         07:54:d2:8d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUDzTdhU/ujWI+AHVoAjql5FXLVXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDIwMjU3MzBaFw0yNDEwMzEwMzAyMzBaMDMxMTAvBgNV
BAMTKDY3ODg4MzE2RDgxNzQ2RUU1QzE5Rjk2NTZDRTlEOUI5NkVFODA2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPm+eIMjIfAvV5SybwYz7mC2Dq
jgPFcRoq0DngbjHtf23GH4CCIY5J8bgHyPQxNWyeir1GGyWpqYbWUv/hd/55VgQ3
+NWrl1+2mmu3BtkSw00Gl023Pq6EwtNbS2fMDcQgU5N9EDZ7p3992QV9mny9/ltf
WQ5Gp74rcsD2Sj3IIppWns47JvsxTCkVk1Jg4gjmX/inc0+Q7tnFW16B5wt16fEr
HYEpjZokV/RMCgWh7RwOKiiDMpAFALqG1pPQbriBWa5X7+o8jzI0pJoTjHBPyBwW
aiUVmIGw3Ifh/poYFALYfV2YG56aNGiuLijFhJqLvgkrPvJ/3kr8qqjkCvGJAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRniIMW2BdG7lwZ
+WVs6dm5bugGqjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GVG80cXByS0hzdFBtRW1VVjI1SEF0cUZ1U1lwRDlBQnN1
WmFna2dTWFg3eC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GVG80cXByS0hzdFBtRW1VVjI1SEF0cUZ1U1lwRDlBQnN1
WmFna2dTWFg3eC8wLzY3ODg4MzE2RDgxNzQ2RUU1QzE5Rjk2NTZDRTlEOUI5NkVF
ODA2QUEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo8ASDANBAIAAjAHAwUA
KAQpODAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEB0QwDQYJKoZIhvcNAQELBQAD
ggEBAIqn59ZYPcjk/lbdtHckkK/2J+HtxCfAx03xqTe6v+m+cOTRIgemMGmKwjSU
nW3kFEo+pVSeC3rlfY/1q6OUDhw3itzDVmMBmD1ABI2gHRqGy1VHTinsu/qjs6kc
nfLuB6xQtC+nQfRZF8oPeWzJRK5rIy9q7h5hDGFQ2a/RVm6nHdGzrmMDvjVUZKwW
EOjAEbnVFE0YoHVNUyhR+a4l7W/RMqNFkqFwvlAP1vgtjD6aaLeLW0VpiKpSJCXU
Rf7tBTIS3erLKLnyUAgrUZSYo+xyKSA3qBU2FQTYXoKcMruvpOJaZNKbr7u1wbfP
2Jyad6prX5jrzQAs2iKnmAdU0o0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org