Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/75897DC2EBB00E393067640B505085332FA325D0.cer
File:                     75897DC2EBB00E393067640B505085332FA325D0.cer (raw, json)
Hash identifier:          j0NqqzAfQI1pZ67qtY68RGXVMOLKWtNTSL0Mg9Ia0x4=
Subject key identifier:   75:89:7D:C2:EB:B0:0E:39:30:67:64:0B:50:50:85:33:2F:A3:25:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65AA4D686C87B702607654542C0800B667287ACA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/75897DC2EBB00E393067640B505085332FA325D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 13:21:15 +0000
Certificate not after:    Wed 10 Apr 2024 13:26:15 +0000
Subordinate resources:    AS: 267388
                          IP: 45.4.156.0/22
                          IP: 45.7.0.0/22
                          IP: 45.234.248.0/22
                          IP: 131.196.40.0/22
                          IP: 132.255.44.0/22
                          IP: 2804:4cbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:aa:4d:68:6c:87:b7:02:60:76:54:54:2c:08:00:b6:67:28:7a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 13:21:15 2023 GMT
            Not After : Apr 10 13:26:15 2024 GMT
        Subject: CN=75897DC2EBB00E393067640B505085332FA325D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:9a:7e:76:14:49:3b:d0:75:e2:9f:b8:c4:
                    e9:5a:0d:e5:fd:fe:98:7c:73:d5:af:b4:c1:67:64:
                    76:cb:8b:f9:79:1c:23:04:bd:dd:ef:51:5a:35:df:
                    f4:bc:d6:e9:09:2d:ea:13:29:c9:fd:35:17:73:60:
                    6b:2e:87:78:be:a2:7d:ec:fd:4c:68:78:53:f8:e7:
                    c5:ed:43:ed:a4:ca:77:49:36:7c:de:57:2c:62:24:
                    b0:a0:1f:16:13:e2:c1:1e:85:24:d1:8b:73:7a:84:
                    92:fb:ad:88:a5:40:5a:91:eb:8d:9f:2b:5a:8d:71:
                    c3:de:82:d6:69:ff:38:ec:36:2e:58:80:92:9b:6d:
                    3c:72:bc:ce:cf:f8:85:d5:51:00:4c:41:98:0c:2c:
                    85:70:5d:7d:96:44:d4:2f:c0:18:d8:74:1b:6e:80:
                    3d:d7:fa:e3:01:f0:7b:6e:80:00:f1:84:12:73:51:
                    7e:93:aa:b5:4b:6f:9c:47:2e:46:43:c9:64:cd:d8:
                    d0:c1:2b:58:8b:a1:db:8c:29:9f:6f:e9:6f:50:d5:
                    0d:1b:61:01:10:e5:bb:6d:15:76:bd:f3:ee:77:60:
                    87:af:6c:f8:4d:86:ce:6e:e9:ff:0e:91:c7:f6:72:
                    46:8a:e2:a7:c7:57:0d:88:5c:db:58:d1:75:4d:45:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:89:7D:C2:EB:B0:0E:39:30:67:64:0B:50:50:85:33:2F:A3:25:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/75897DC2EBB00E393067640B505085332FA325D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.156.0/22
                  45.7.0.0/22
                  45.234.248.0/22
                  131.196.40.0/22
                  132.255.44.0/22
                IPv6:
                  2804:4cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267388

    Signature Algorithm: sha256WithRSAEncryption
         27:98:2f:f0:2d:21:8a:a6:38:18:1f:82:05:9f:78:5d:a6:92:
         9c:36:c8:a8:32:2c:d8:fa:6e:69:1a:57:be:d0:7e:e2:d9:0b:
         de:01:dc:fe:cb:1c:2a:df:8d:6c:cc:b9:4a:4d:fb:81:18:d9:
         44:f2:e8:e7:a8:b9:eb:51:f8:1c:93:c1:d2:26:3b:b9:12:fa:
         a7:98:f0:79:47:89:7d:27:81:ee:39:b5:48:ac:eb:01:8e:1c:
         d6:d4:48:93:42:65:4b:23:da:20:ec:d9:a6:11:ec:f1:24:08:
         d8:d1:18:1a:23:84:2b:26:16:0c:78:4c:88:ca:f8:3c:f4:3d:
         b9:94:ef:fe:03:80:96:71:27:d6:6e:81:6c:65:4c:1e:28:8f:
         40:68:74:b2:f1:c4:cd:15:77:0b:06:06:88:a6:fb:c0:89:6f:
         0e:e3:2c:e3:9e:6c:85:0e:ad:98:50:eb:6b:5f:cc:3e:f8:3f:
         77:e7:ff:b0:76:90:5b:fa:ad:11:5f:7b:53:ce:6e:03:9d:bc:
         64:b3:a4:da:0f:3d:c4:37:a9:17:3e:6d:54:24:4a:c5:47:74:
         d1:1e:b0:91:16:bc:e8:cc:28:6b:b9:24:7e:b1:06:9b:e7:bf:
         57:ae:62:1c:08:24:0f:95:19:ec:1c:ec:46:26:09:f4:08:95:
         76:61:e3:c7
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgIUZapNaGyHtwJgdlRULAgAtmcoesowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTIxMzIxMTVaFw0yNDA0MTAxMzI2MTVaMDMxMTAvBgNV
BAMTKDc1ODk3REMyRUJCMDBFMzkzMDY3NjQwQjUwNTA4NTMzMkZBMzI1RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEApp+dhRJO9B14p+4xOlaDeX9
/ph8c9WvtMFnZHbLi/l5HCMEvd3vUVo13/S81ukJLeoTKcn9NRdzYGsuh3i+on3s
/UxoeFP458XtQ+2kyndJNnzeVyxiJLCgHxYT4sEehSTRi3N6hJL7rYilQFqR642f
K1qNccPegtZp/zjsNi5YgJKbbTxyvM7P+IXVUQBMQZgMLIVwXX2WRNQvwBjYdBtu
gD3X+uMB8HtugADxhBJzUX6TqrVLb5xHLkZDyWTN2NDBK1iLoduMKZ9v6W9Q1Q0b
YQEQ5bttFXa98+53YIevbPhNhs5u6f8Okcf2ckaK4qfHVw2IXNtY0XVNRdhBAgMB
AAGjggMyMIIDLjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR1iX3C67AOOTBn
ZAtQUIUzL6Ml0DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84NGNQQjZLa3hjUjlYWm9pTDhwaG8zYVlwSjFkdXJLRXNH
SERqcEhidEc3Yy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84NGNQQjZLa3hjUjlYWm9pTDhwaG8zYVlwSjFkdXJLRXNH
SERqcEhidEc3Yy8wLzc1ODk3REMyRUJCMDBFMzkzMDY3NjQwQjUwNTA4NTMzMkZB
MzI1RDAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAi0EnAMEAi0HAAMEAi3q
+AMEAoPEKAMEAoT/LDANBAIAAjAHAwUAKARMvDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMEFHwwDQYJKoZIhvcNAQELBQADggEBACeYL/AtIYqmOBgfggWfeF2mkpw2
yKgyLNj6bmkaV77QfuLZC94B3P7LHCrfjWzMuUpN+4EY2UTy6OeouetR+ByTwdIm
O7kS+qeY8HlHiX0nge45tUis6wGOHNbUSJNCZUsj2iDs2aYR7PEkCNjRGBojhCsm
Fgx4TIjK+Dz0PbmU7/4DgJZxJ9ZugWxlTB4oj0BodLLxxM0VdwsGBoim+8CJbw7j
LOOebIUOrZhQ62tfzD74P3fn/7B2kFv6rRFfe1PObgOdvGSzpNoPPcQ3qRc+bVQk
SsVHdNEesJEWvOjMKGu5JH6xBpvnv1euYhwIJA+VGewc7EYmCfQIlXZh48c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org