Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/70F0903FEC8E58709311CC568B0267B574D52BC1.cer
File:                     70F0903FEC8E58709311CC568B0267B574D52BC1.cer (raw, json)
Hash identifier:          nZKMtF9ZOmSLljXVfQZZodcFje8VWfEGZm+R/igCvdI=
Subject key identifier:   70:F0:90:3F:EC:8E:58:70:93:11:CC:56:8B:02:67:B5:74:D5:2B:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B3253DB415C9E0F3C9B5C593E7BE74FE0790A72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/70F0903FEC8E58709311CC568B0267B574D52BC1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Apr 2022 00:29:58 +0000
Certificate not after:    Mon 10 Apr 2023 00:34:58 +0000
Subordinate resources:    AS: 265135
                          IP: 143.255.20.0/22
                          IP: 2804:2b1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:32:53:db:41:5c:9e:0f:3c:9b:5c:59:3e:7b:e7:4f:e0:79:0a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 00:29:58 2022 GMT
            Not After : Apr 10 00:34:58 2023 GMT
        Subject: CN=70F0903FEC8E58709311CC568B0267B574D52BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:84:28:06:2b:4e:81:3e:99:44:cc:f4:ab:
                    81:4f:8b:12:8e:ac:3e:2b:9c:89:e8:3f:f2:11:bf:
                    e8:f1:b3:83:64:ff:9c:ee:05:31:68:0f:9c:95:31:
                    dc:cf:66:9d:aa:bc:78:21:ed:cc:55:c0:47:64:2f:
                    87:10:99:31:93:3f:a2:94:3b:33:93:f4:05:ab:fe:
                    b0:58:66:97:fe:7f:6c:65:e3:5f:22:a3:ac:a7:5a:
                    d1:8f:73:9a:7b:2a:88:9d:29:7e:66:45:93:2a:ee:
                    15:60:d9:88:51:c5:87:30:73:6b:13:9d:d8:f1:19:
                    c1:5d:6d:34:12:9b:17:c9:f4:54:83:76:bc:d7:aa:
                    47:28:e1:ad:69:f5:c4:fe:02:bc:36:04:65:07:ac:
                    04:c6:18:8f:41:bc:9d:f1:ea:2f:13:b1:f5:de:b6:
                    ca:72:95:0d:53:28:28:a3:a9:91:ba:20:f5:93:bf:
                    ef:48:3b:8d:bd:da:2f:cd:16:b2:ce:f8:e2:a8:2f:
                    7e:16:7d:08:cc:9e:14:9d:7d:7c:e7:b6:ca:e4:e5:
                    4c:72:17:33:5e:44:8e:7b:79:8c:20:0c:e6:b0:f3:
                    ff:65:b0:b1:32:f2:a7:06:e4:bb:a9:5b:38:f3:97:
                    51:31:d3:26:56:43:3d:4b:38:77:79:bf:66:7a:80:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:F0:90:3F:EC:8E:58:70:93:11:CC:56:8B:02:67:B5:74:D5:2B:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/70F0903FEC8E58709311CC568B0267B574D52BC1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.20.0/22
                IPv6:
                  2804:2b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265135

    Signature Algorithm: sha256WithRSAEncryption
         67:54:16:97:3d:20:83:d9:37:ff:0a:4e:0b:67:ae:6c:92:c8:
         5a:fe:55:c7:c4:74:ba:11:ab:66:56:7e:c1:a0:d7:0a:28:07:
         68:4c:24:87:24:24:ac:81:05:22:5f:b4:8f:d2:d9:7b:58:51:
         9a:ab:cb:3b:e9:47:52:11:39:69:49:16:96:47:80:66:c6:5e:
         da:7b:af:d2:23:56:07:a2:84:38:4c:d6:6e:f3:54:08:3b:23:
         07:6c:1a:f9:90:66:2e:70:15:f5:d7:44:51:72:4a:7b:ee:30:
         95:db:9c:d9:86:97:45:a6:78:1c:af:54:3b:87:da:31:a8:cf:
         4f:4d:63:ad:32:6b:b8:ee:7f:fd:27:a9:ec:6d:54:4d:95:14:
         30:77:1f:00:6f:e6:79:5a:84:e6:eb:25:9c:4f:ea:73:98:60:
         b2:23:b0:db:85:4a:5a:7c:55:cc:a9:31:3c:61:9d:7e:e4:79:
         cb:c2:cd:ab:f6:96:68:a5:7b:ef:c0:37:a2:65:b5:3a:a7:b2:
         86:ad:c7:9b:8c:0c:a4:88:ec:8a:d0:a3:3a:88:d7:c9:a6:6e:
         b6:22:14:a9:56:7c:e4:58:d9:3e:48:59:0b:7b:2c:5b:98:0a:
         54:af:d6:d7:a7:0c:dc:44:40:03:bc:bf:72:fd:68:d6:37:36:
         2b:18:a7:2c
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUOzJT20Fcng88m1xZPnvnT+B5CnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA0MTEwMDI5NThaFw0yMzA0MTAwMDM0NThaMDMxMTAvBgNV
BAMTKDcwRjA5MDNGRUM4RTU4NzA5MzExQ0M1NjhCMDI2N0I1NzRENTJCQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfVIQoBitOgT6ZRMz0q4FPixKO
rD4rnInoP/IRv+jxs4Nk/5zuBTFoD5yVMdzPZp2qvHgh7cxVwEdkL4cQmTGTP6KU
OzOT9AWr/rBYZpf+f2xl418io6ynWtGPc5p7KoidKX5mRZMq7hVg2YhRxYcwc2sT
ndjxGcFdbTQSmxfJ9FSDdrzXqkco4a1p9cT+Arw2BGUHrATGGI9BvJ3x6i8TsfXe
tspylQ1TKCijqZG6IPWTv+9IO4292i/NFrLO+OKoL34WfQjMnhSdfXzntsrk5Uxy
FzNeRI57eYwgDOaw8/9lsLEy8qcG5LupWzjzl1Ex0yZWQz1LOHd5v2Z6gEapAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRw8JA/7I5YcJMR
zFaLAme1dNUrwTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83Q2RqajlTa21ZVVZkdXVMU2RmOVFuU1dwTmRhbTN0Qlc2
ZXBiM0xpMnpoZi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83Q2RqajlTa21ZVVZkdXVMU2RmOVFuU1dwTmRhbTN0Qlc2
ZXBiM0xpMnpoZi8wLzcwRjA5MDNGRUM4RTU4NzA5MzExQ0M1NjhCMDI2N0I1NzRE
NTJCQzEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo//FDANBAIAAjAHAwUA
KAQrHDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC68wDQYJKoZIhvcNAQELBQAD
ggEBAGdUFpc9IIPZN/8KTgtnrmySyFr+VcfEdLoRq2ZWfsGg1wooB2hMJIckJKyB
BSJftI/S2XtYUZqryzvpR1IROWlJFpZHgGbGXtp7r9IjVgeihDhM1m7zVAg7Iwds
GvmQZi5wFfXXRFFySnvuMJXbnNmGl0WmeByvVDuH2jGoz09NY60ya7juf/0nqext
VE2VFDB3HwBv5nlahObrJZxP6nOYYLIjsNuFSlp8VcypMTxhnX7kecvCzav2lmil
e+/AN6JltTqnsoatx5uMDKSI7IrQozqI18mmbrYiFKlWfORY2T5IWQt7LFuYClSv
1tenDNxEQAO8v3L9aNY3NisYpyw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org