Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer
File:                     7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer (raw, json)
Hash identifier:          T1L36mpJj6b1HT4JlKjC7inmR4Ml8ICi87QcURUZJEs=
Subject key identifier:   79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2442AF4E03395E3EE1367C72FD205999928BCBC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 02:56:14 +0000
Certificate not after:    Thu 02 Jan 2025 03:01:14 +0000
Subordinate resources:    AS: 267324
                          IP: 45.233.132.0/22
                          IP: 2804:4bb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:af:4e:03:39:5e:3e:e1:36:7c:72:fd:20:59:99:92:8b:cb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 02:56:14 2024 GMT
            Not After : Jan  2 03:01:14 2025 GMT
        Subject: CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:20:67:90:30:c8:e1:07:6a:66:8a:23:89:
                    8b:79:84:32:9f:61:1b:64:0c:d9:e5:19:0b:36:72:
                    7b:79:7a:7f:f4:42:63:ac:e9:e2:d9:1e:68:c9:d6:
                    40:23:eb:cc:b1:e4:ff:16:a3:d2:13:f4:7f:2c:95:
                    1d:ea:c8:ad:bd:dc:22:02:30:cc:95:44:3a:44:88:
                    43:1d:df:2f:fe:a9:1b:d1:d7:f9:93:7e:43:52:ba:
                    a5:af:fc:b0:6a:be:79:50:30:25:6a:0d:06:a7:4d:
                    95:76:a2:68:f0:c5:c8:fe:e7:19:29:1a:c9:48:f1:
                    08:7f:20:a0:90:0b:58:cd:4a:3e:f0:3c:be:3a:b9:
                    6c:45:3a:89:01:87:0c:28:1f:b3:7f:ed:8c:69:d6:
                    e0:c6:9c:0c:f1:b1:9f:80:00:c8:54:f6:5b:b2:b0:
                    33:39:0f:10:84:48:92:ee:1a:9c:81:69:cf:b7:5a:
                    a4:85:05:20:14:e8:c2:df:88:26:3e:8f:15:e9:6b:
                    58:2c:87:76:84:ba:17:2f:56:ab:4e:7b:43:05:e6:
                    51:23:8d:54:f6:81:f4:e7:01:d6:85:40:5c:af:17:
                    77:12:21:10:7e:fb:38:29:05:e9:14:fd:03:8d:51:
                    72:e5:96:8f:b7:be:2b:1c:89:5c:2f:25:71:a0:0b:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.132.0/22
                IPv6:
                  2804:4bb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267324

    Signature Algorithm: sha256WithRSAEncryption
         a6:fc:f5:6e:0e:f6:48:3f:6c:38:14:07:6c:b2:03:ea:75:ea:
         84:93:bf:bb:cf:9b:4a:3a:d7:ab:fd:1d:66:c9:ad:d0:12:8f:
         27:48:b3:5d:af:55:1b:7a:18:3b:94:c4:9e:b9:e7:ac:70:fe:
         a9:92:a0:81:7a:ff:27:78:11:54:6c:24:8b:be:49:ea:b6:5b:
         90:b5:a4:7a:cd:94:fb:74:98:2c:47:73:2b:f6:78:bd:0e:78:
         aa:e2:d8:ee:f5:b2:74:f3:9c:0e:96:b1:c5:9f:5a:43:df:81:
         a8:79:46:ff:5c:b0:29:30:e4:30:7b:c7:35:3d:bf:fd:38:d7:
         eb:ba:e5:df:73:4e:87:fd:12:e9:fd:7e:13:b5:b9:9c:d9:f3:
         89:18:ea:72:d5:7c:54:56:90:0e:dc:20:c3:31:0e:c3:6f:b7:
         e3:26:e3:d0:93:c3:49:af:e1:c9:93:f9:95:63:ee:d3:cf:3b:
         85:b4:5a:1d:f5:35:a7:3c:3d:16:50:64:92:d7:4e:c8:55:b3:
         37:52:6f:da:75:c8:d9:3a:a4:63:0e:05:c3:64:f3:0f:ff:ff:
         ba:22:91:c6:68:2b:36:89:9f:e8:f1:fd:28:90:f0:d7:5a:c6:
         ac:1e:32:77:c2:c5:7b:16:58:8b:a2:2e:09:ec:cd:06:ec:a9:
         e4:c4:b3:02
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUJEKvTgM5Xj7hNnxy/SBZmZKLy8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDQwMjU2MTRaFw0yNTAxMDIwMzAxMTRaMDMxMTAvBgNV
BAMTKDc5MTJGOEQ5QUJDODlEMkE4OEU5QUQwMzMxQzNGMkYxQjMyOTY2NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FiBnkDDI4QdqZoojiYt5hDKf
YRtkDNnlGQs2cnt5en/0QmOs6eLZHmjJ1kAj68yx5P8Wo9IT9H8slR3qyK293CIC
MMyVRDpEiEMd3y/+qRvR1/mTfkNSuqWv/LBqvnlQMCVqDQanTZV2omjwxcj+5xkp
GslI8Qh/IKCQC1jNSj7wPL46uWxFOokBhwwoH7N/7Yxp1uDGnAzxsZ+AAMhU9luy
sDM5DxCESJLuGpyBac+3WqSFBSAU6MLfiCY+jxXpa1gsh3aEuhcvVqtOe0MF5lEj
jVT2gfTnAdaFQFyvF3cSIRB++zgpBekU/QONUXLllo+3visciVwvJXGgC9JPAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5EvjZq8idKojp
rQMxw/LxsylmXjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9INHlwTFV3ZTJrdm5tamdYWW5OWkR5RDJTM0pjNlFzeWdv
VGFBOE1STDlpbi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9INHlwTFV3ZTJrdm5tamdYWW5OWkR5RDJTM0pjNlFzeWdv
VGFBOE1STDlpbi8wLzc5MTJGOEQ5QUJDODlEMkE4OEU5QUQwMzMxQzNGMkYxQjMy
OTY2NUUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3phDANBAIAAjAHAwUA
KARLsDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFDwwDQYJKoZIhvcNAQELBQAD
ggEBAKb89W4O9kg/bDgUB2yyA+p16oSTv7vPm0o616v9HWbJrdASjydIs12vVRt6
GDuUxJ6556xw/qmSoIF6/yd4EVRsJIu+Seq2W5C1pHrNlPt0mCxHcyv2eL0OeKri
2O71snTznA6WscWfWkPfgah5Rv9csCkw5DB7xzU9v/041+u65d9zTof9Eun9fhO1
uZzZ84kY6nLVfFRWkA7cIMMxDsNvt+Mm49CTw0mv4cmT+ZVj7tPPO4W0Wh31Nac8
PRZQZJLXTshVszdSb9p1yNk6pGMOBcNk8w///7oikcZoKzaJn+jx/SiQ8Ndaxqwe
MnfCxXsWWIuiLgnszQbsqeTEswI=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org