Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/697F3E21C390D6B023D9968CF1E3CE95E3655C9F.cer
File:                     697F3E21C390D6B023D9968CF1E3CE95E3655C9F.cer (raw, json)
Hash identifier:          juypk0kw1Qw/grcnT8z8t+0o1m4FMMFgSbZqguEZmKQ=
Subject key identifier:   69:7F:3E:21:C3:90:D6:B0:23:D9:96:8C:F1:E3:CE:95:E3:65:5C:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75421BC18FD54B4D23C9A0C6617AB88CCEA5AFC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/697F3E21C390D6B023D9968CF1E3CE95E3655C9F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Jul 2022 14:06:06 +0000
Certificate not after:    Fri 07 Jul 2023 14:11:06 +0000
Subordinate resources:    AS: 268057
                          IP: 45.168.108.0/22
                          IP: 2804:574c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:42:1b:c1:8f:d5:4b:4d:23:c9:a0:c6:61:7a:b8:8c:ce:a5:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  8 14:06:06 2022 GMT
            Not After : Jul  7 14:11:06 2023 GMT
        Subject: CN=697F3E21C390D6B023D9968CF1E3CE95E3655C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:44:11:92:90:08:4d:d5:7b:0d:53:2d:ca:
                    85:fe:83:0a:0a:b0:83:2d:7f:f2:7a:dc:da:9e:3a:
                    7e:4b:f0:4d:38:00:52:d3:81:97:ef:e0:d7:3c:23:
                    c5:25:d4:17:19:06:2b:50:22:77:d5:08:51:28:bb:
                    fc:eb:4b:e4:d6:a0:b4:e9:e3:f5:eb:8a:f0:47:25:
                    e5:89:79:11:0c:d8:63:c3:33:60:58:9d:16:ab:31:
                    5f:a8:f4:7b:18:a7:b8:1b:51:44:04:98:37:54:91:
                    45:47:40:7e:fe:91:f0:b7:2f:4e:e4:77:84:31:e2:
                    dd:f1:ca:07:cd:21:e1:39:d1:fa:59:82:e1:59:8b:
                    d5:58:5d:8f:80:27:da:c4:d8:bb:5b:ae:97:32:13:
                    be:df:3c:91:31:6f:5e:6e:2f:f3:d9:d3:c2:4f:de:
                    4c:e4:0e:99:bb:96:7e:81:c9:91:8a:4d:f2:8f:95:
                    6e:26:ef:40:e6:46:63:5b:b8:57:e9:1d:2f:d1:0e:
                    f4:df:a7:7d:55:cf:90:20:e8:e5:8a:25:63:1b:74:
                    b8:c9:ec:f0:dd:74:23:fe:ef:6f:22:f1:6e:4d:bd:
                    14:90:96:ea:f6:48:8d:e3:c3:5a:c0:08:03:f9:d8:
                    d9:e0:05:9b:6a:a4:7a:6a:1a:8e:ad:da:4a:17:6f:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:7F:3E:21:C3:90:D6:B0:23:D9:96:8C:F1:E3:CE:95:E3:65:5C:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/697F3E21C390D6B023D9968CF1E3CE95E3655C9F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.108.0/22
                IPv6:
                  2804:574c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268057

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:75:fc:4b:0a:06:fa:cf:d6:27:8d:f3:c2:ee:c2:25:75:
         b6:fd:3f:28:6e:74:8a:0c:7f:94:e5:89:ba:08:a7:09:0a:f7:
         40:21:e7:95:6e:b3:33:8f:73:90:78:c5:72:6e:55:59:f8:ef:
         d3:ba:50:f1:62:e1:40:48:b0:ec:83:a1:b4:ea:89:12:4f:9e:
         c3:e0:a0:3a:00:26:b1:b2:9b:07:4a:cf:52:31:c9:ef:3c:5e:
         03:1a:01:44:44:46:00:55:ad:7c:f9:87:fe:ab:f8:19:7f:25:
         97:f1:3c:36:13:70:02:1a:b0:b6:77:af:02:a2:cc:57:2f:d4:
         9f:6e:85:da:01:dc:06:23:08:a6:d4:f8:a9:b5:69:6c:07:f1:
         e3:c5:53:db:a8:f1:ea:88:6c:9c:c5:81:0e:8d:84:00:7b:18:
         6f:51:5d:1d:77:9b:b1:ae:4c:ec:37:3f:ac:14:a8:57:a3:fe:
         ac:88:da:50:ec:2e:21:db:8b:ef:0d:52:05:1a:0e:7d:74:1b:
         f5:62:2b:5d:2e:63:56:9e:5b:ab:8c:6d:05:20:43:c2:fc:27:
         f2:91:28:39:54:23:82:cc:14:cb:2b:98:aa:14:45:bd:e9:54:
         e7:66:a3:1a:ab:a0:60:41:93:1b:95:fc:fe:22:65:63:22:ab:
         8d:9c:bf:d5
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUdUIbwY/VS00jyaDGYXq4jM6lr8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MDgxNDA2MDZaFw0yMzA3MDcxNDExMDZaMDMxMTAvBgNV
BAMTKDY5N0YzRTIxQzM5MEQ2QjAyM0Q5OTY4Q0YxRTNDRTk1RTM2NTVDOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnx0QRkpAITdV7DVMtyoX+gwoK
sIMtf/J63NqeOn5L8E04AFLTgZfv4Nc8I8Ul1BcZBitQInfVCFEou/zrS+TWoLTp
4/XrivBHJeWJeREM2GPDM2BYnRarMV+o9HsYp7gbUUQEmDdUkUVHQH7+kfC3L07k
d4Qx4t3xygfNIeE50fpZguFZi9VYXY+AJ9rE2LtbrpcyE77fPJExb15uL/PZ08JP
3kzkDpm7ln6ByZGKTfKPlW4m70DmRmNbuFfpHS/RDvTfp31Vz5Ag6OWKJWMbdLjJ
7PDddCP+728i8W5NvRSQlur2SI3jw1rACAP52NngBZtqpHpqGo6t2koXb3UHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpfz4hw5DWsCPZ
lozx486V42VcnzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FbkhSRXNOcEx2aUtDd2I1TEFBZXlMRWFEV0tXU1ljMmtC
YW5ZTHFXNzk0di8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FbkhSRXNOcEx2aUtDd2I1TEFBZXlMRWFEV0tXU1ljMmtC
YW5ZTHFXNzk0di8wLzY5N0YzRTIxQzM5MEQ2QjAyM0Q5OTY4Q0YxRTNDRTk1RTM2
NTVDOUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2obDANBAIAAjAHAwUA
KARXTDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFxkwDQYJKoZIhvcNAQELBQAD
ggEBAD8edfxLCgb6z9YnjfPC7sIldbb9PyhudIoMf5TliboIpwkK90Ah55VuszOP
c5B4xXJuVVn479O6UPFi4UBIsOyDobTqiRJPnsPgoDoAJrGymwdKz1Ixye88XgMa
AURERgBVrXz5h/6r+Bl/JZfxPDYTcAIasLZ3rwKizFcv1J9uhdoB3AYjCKbU+Km1
aWwH8ePFU9uo8eqIbJzFgQ6NhAB7GG9RXR13m7GuTOw3P6wUqFej/qyI2lDsLiHb
i+8NUgUaDn10G/ViK10uY1aeW6uMbQUgQ8L8J/KRKDlUI4LMFMsrmKoURb3pVOdm
oxqroGBBkxuV/P4iZWMiq42cv9U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org