Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.cer
File:                     7C0967496D9B879D984F400EFDAE9073C30F0EBD.cer (raw, json)
Hash identifier:          Uua44wIBmxV1c1ih0pZAWKaIS/nWeAf+XURbLMRqpH4=
Subject key identifier:   7C:09:67:49:6D:9B:87:9D:98:4F:40:0E:FD:AE:90:73:C3:0F:0E:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F1B8A3EE839150A8309DAF23624F192FC0E7355
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Feb 2024 07:31:14 +0000
Certificate not after:    Sat 15 Feb 2025 07:36:14 +0000
Subordinate resources:    AS: 268281
                          IP: 45.237.140.0/22
                          IP: 2804:4ec4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1b:8a:3e:e8:39:15:0a:83:09:da:f2:36:24:f1:92:fc:0e:73:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 17 07:31:14 2024 GMT
            Not After : Feb 15 07:36:14 2025 GMT
        Subject: CN=7C0967496D9B879D984F400EFDAE9073C30F0EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:dd:e9:5a:d2:e9:70:44:3b:83:2a:39:36:
                    2f:f2:cd:ce:ca:38:93:b1:b1:05:e1:18:34:9a:15:
                    24:0d:ca:d5:79:39:6b:c8:7b:00:74:16:05:39:a4:
                    d0:72:0a:54:3d:09:93:d5:51:8b:f8:45:a2:33:cd:
                    11:3e:31:98:5d:19:6b:51:7f:14:bd:18:87:5a:0e:
                    56:51:2b:1c:84:fe:37:55:7f:e4:1d:e4:09:e6:69:
                    44:fe:56:d3:f9:10:88:f0:b6:d0:11:21:f0:89:8f:
                    08:a3:51:c4:e0:38:62:13:16:ab:55:65:78:c4:f0:
                    99:87:e2:96:41:db:54:35:99:86:96:cd:18:f6:10:
                    b8:06:3c:44:77:eb:a1:04:1f:c2:5c:85:d7:80:2d:
                    90:e0:1b:c6:ba:ce:b0:6c:13:63:11:30:ba:1f:1e:
                    0b:69:3d:dc:cc:7d:e5:70:de:37:99:fd:e8:b3:85:
                    61:af:dc:54:d5:1a:73:7d:1a:80:89:5a:0c:5a:35:
                    56:50:44:04:51:88:ff:8f:60:bf:22:2e:62:59:5f:
                    8e:5d:4a:11:f7:08:53:91:97:eb:9e:42:0d:ef:5f:
                    a5:d6:94:58:cf:6f:d0:02:e2:36:5d:37:2e:59:67:
                    31:2c:b6:96:9a:21:11:86:1c:56:a5:29:e1:ca:93:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:09:67:49:6D:9B:87:9D:98:4F:40:0E:FD:AE:90:73:C3:0F:0E:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.140.0/22
                IPv6:
                  2804:4ec4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268281

    Signature Algorithm: sha256WithRSAEncryption
         af:5b:38:3b:1e:72:27:91:2a:cf:2d:b9:63:28:d5:d9:85:0f:
         4d:07:7b:3e:41:b2:76:ad:f9:a6:c9:d5:55:77:2d:9d:7a:b5:
         9d:a0:7e:43:55:00:e1:18:f4:85:11:15:ec:53:cc:66:4c:d8:
         33:81:26:fc:41:85:16:a5:9f:8a:35:2c:f9:56:3d:cd:92:71:
         d9:6e:a7:1f:a3:8b:78:52:6a:04:e5:b8:26:7c:ed:e7:b2:f3:
         af:2f:51:93:c0:d0:8f:00:a0:bd:35:b0:75:d5:ec:37:e9:1d:
         16:c5:1c:ce:2d:29:c6:e9:7d:49:ed:96:43:4d:0e:af:34:3e:
         8e:4d:eb:87:10:0e:31:42:9c:a6:13:d6:24:1c:88:c0:97:05:
         41:3f:62:f1:a8:7c:6d:8e:5d:6d:2b:46:0d:67:4a:dc:7c:d6:
         8f:20:6c:4a:5a:53:c1:b1:42:82:9c:59:de:bd:f0:a8:8e:a2:
         8a:e7:fb:86:a9:08:93:ad:82:9a:c3:ef:d5:37:e9:0b:ee:d7:
         71:30:28:a1:2b:2c:f9:23:03:54:f7:ef:b7:d8:94:e6:29:43:
         c2:78:dc:83:60:b6:93:20:30:1b:64:1c:eb:bf:f6:33:7d:f2:
         0d:77:5f:75:37:45:4a:42:50:3f:a4:c5:47:dd:b4:1f:b0:56:
         a2:0c:4e:f0
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPxuKPug5FQqDCdryNiTxkvwOc1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTcwNzMxMTRaFw0yNTAyMTUwNzM2MTRaMDMxMTAvBgNV
BAMTKDdDMDk2NzQ5NkQ5Qjg3OUQ5ODRGNDAwRUZEQUU5MDczQzMwRjBFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUs93pWtLpcEQ7gyo5Ni/yzc7K
OJOxsQXhGDSaFSQNytV5OWvIewB0FgU5pNByClQ9CZPVUYv4RaIzzRE+MZhdGWtR
fxS9GIdaDlZRKxyE/jdVf+Qd5AnmaUT+VtP5EIjwttARIfCJjwijUcTgOGITFqtV
ZXjE8JmH4pZB21Q1mYaWzRj2ELgGPER366EEH8JchdeALZDgG8a6zrBsE2MRMLof
HgtpPdzMfeVw3jeZ/eizhWGv3FTVGnN9GoCJWgxaNVZQRARRiP+PYL8iLmJZX45d
ShH3CFORl+ueQg3vX6XWlFjPb9AC4jZdNy5ZZzEstpaaIRGGHFalKeHKk/udAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8CWdJbZuHnZhP
QA79rpBzww8OvTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IODhVZEhVVHNCN1ViVW1EVnZ5SEp0UFg1OTNpcnRlclh6
REprU0VnZzQ1RC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IODhVZEhVVHNCN1ViVW1EVnZ5SEp0UFg1OTNpcnRlclh6
REprU0VnZzQ1RC8wLzdDMDk2NzQ5NkQ5Qjg3OUQ5ODRGNDAwRUZEQUU5MDczQzMw
RjBFQkQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3tjDANBAIAAjAHAwUA
KAROxDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF/kwDQYJKoZIhvcNAQELBQAD
ggEBAK9bODsecieRKs8tuWMo1dmFD00Hez5Bsnat+abJ1VV3LZ16tZ2gfkNVAOEY
9IURFexTzGZM2DOBJvxBhRaln4o1LPlWPc2Scdlupx+ji3hSagTluCZ87eey868v
UZPA0I8AoL01sHXV7DfpHRbFHM4tKcbpfUntlkNNDq80Po5N64cQDjFCnKYT1iQc
iMCXBUE/YvGofG2OXW0rRg1nStx81o8gbEpaU8GxQoKcWd698KiOoorn+4apCJOt
gprD79U36Qvu13EwKKErLPkjA1T377fYlOYpQ8J43INgtpMgMBtkHOu/9jN98g13
X3U3RUpCUD+kxUfdtB+wVqIMTvA=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org