Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.cer
File:                     85BC1E89231501C6B1D18A71517860BF9606AC7B.cer (raw, json)
Hash identifier:          t1IyZt1P2prAdxw4tYV9VmjRI+LOj1r9YOuKMhTQykc=
Subject key identifier:   85:BC:1E:89:23:15:01:C6:B1:D1:8A:71:51:78:60:BF:96:06:AC:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1709D351A017C1C690CE13D79B5EF9F4A6CC14F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 05 Nov 2023 04:55:10 +0000
Certificate not after:    Sun 03 Nov 2024 05:00:10 +0000
Subordinate resources:    AS: 267201
                          IP: 45.230.164.0/22
                          IP: 2804:49c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:09:d3:51:a0:17:c1:c6:90:ce:13:d7:9b:5e:f9:f4:a6:cc:14:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  5 04:55:10 2023 GMT
            Not After : Nov  3 05:00:10 2024 GMT
        Subject: CN=85BC1E89231501C6B1D18A71517860BF9606AC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:40:a5:3b:91:50:83:a4:6f:00:d5:6b:4a:
                    94:71:b5:5f:ef:ab:5c:50:52:d0:ba:9d:c1:33:bb:
                    c0:b9:b3:52:fe:45:22:65:35:73:62:f5:40:b7:06:
                    3e:ae:f4:7a:0c:84:67:ca:01:a1:9c:eb:58:66:5c:
                    a2:1d:2d:be:c8:ff:d2:ee:58:2b:b8:51:8d:ab:16:
                    16:2e:f5:a9:2b:11:9f:4f:21:9c:4b:19:72:2b:e6:
                    a3:fb:6c:47:e1:d7:96:48:3e:f4:2a:c9:c8:e9:b0:
                    1c:b6:86:72:59:03:c0:4a:97:e0:bf:f3:40:0b:03:
                    4e:41:c6:47:3d:f7:d1:b8:a9:d7:1a:f7:97:57:3f:
                    3d:da:71:4b:f4:0b:44:09:1d:7e:b1:28:78:b7:0b:
                    21:db:0b:62:c8:ea:1a:c2:ae:ae:96:c9:75:d7:fd:
                    17:8f:fe:01:62:75:4c:e2:fc:d1:d6:6e:55:4b:a9:
                    7e:a1:6a:d9:4d:a2:c0:d4:90:7e:a4:e1:68:86:ae:
                    34:1b:39:8f:78:2d:96:5b:ad:5d:7a:b9:82:d0:11:
                    4e:b9:5f:50:a0:f6:f3:ff:60:f4:11:07:85:2b:91:
                    d7:34:3f:90:46:f5:a8:41:a2:18:21:d1:3d:5f:30:
                    9a:98:f3:d4:d1:1a:4c:58:a2:5b:f2:f7:d0:d9:21:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:BC:1E:89:23:15:01:C6:B1:D1:8A:71:51:78:60:BF:96:06:AC:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.164.0/22
                IPv6:
                  2804:49c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267201

    Signature Algorithm: sha256WithRSAEncryption
         49:1b:45:17:b6:13:ac:ad:10:55:8c:65:28:fc:af:e0:1c:78:
         c4:62:73:a6:12:ad:68:cb:36:1f:52:be:76:46:a3:e4:db:16:
         af:32:ae:5f:2c:32:77:13:a7:89:1b:4d:be:18:f4:ae:63:13:
         b3:e9:e1:00:9b:17:59:dc:2d:f3:4e:77:c4:8e:b3:ee:0e:e8:
         89:ef:3d:51:c6:bd:67:fd:8b:10:c5:2f:09:41:11:f8:53:fb:
         de:41:6c:66:54:ea:4e:12:00:42:11:97:53:f1:8f:a4:c2:f9:
         6e:aa:1b:09:9f:73:3b:a0:33:b7:65:a7:ae:6b:d1:86:ec:91:
         3e:3e:f9:39:e0:67:cc:55:26:5a:9d:52:80:17:47:d8:e1:4b:
         93:99:74:4b:a8:91:72:37:19:09:69:ef:a8:bc:48:07:1a:4d:
         d1:81:19:57:5a:90:40:a9:76:66:52:b4:6e:af:3b:b4:84:6f:
         25:53:70:87:45:1c:c0:18:97:43:40:a1:d3:71:10:19:73:1d:
         74:20:6c:ba:d5:9d:73:e3:6e:3b:86:fb:0c:f1:9e:4e:2c:9e:
         64:f2:f5:7d:12:23:a2:52:c9:af:38:b3:b5:ec:0e:3f:df:d1:
         1a:2b:78:90:f2:89:60:fb:80:1b:73:69:19:a8:dd:05:9e:02:
         71:f4:00:50
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUFwnTUaAXwcaQzhPXm1759KbMFPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDUwNDU1MTBaFw0yNDExMDMwNTAwMTBaMDMxMTAvBgNV
BAMTKDg1QkMxRTg5MjMxNTAxQzZCMUQxOEE3MTUxNzg2MEJGOTYwNkFDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvUClO5FQg6RvANVrSpRxtV/v
q1xQUtC6ncEzu8C5s1L+RSJlNXNi9UC3Bj6u9HoMhGfKAaGc61hmXKIdLb7I/9Lu
WCu4UY2rFhYu9akrEZ9PIZxLGXIr5qP7bEfh15ZIPvQqycjpsBy2hnJZA8BKl+C/
80ALA05Bxkc999G4qdca95dXPz3acUv0C0QJHX6xKHi3CyHbC2LI6hrCrq6WyXXX
/ReP/gFidUzi/NHWblVLqX6hatlNosDUkH6k4WiGrjQbOY94LZZbrV16uYLQEU65
X1Cg9vP/YPQRB4Urkdc0P5BG9ahBohgh0T1fMJqY89TRGkxYolvy99DZIUv7AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFvB6JIxUBxrHR
inFReGC/lgasezAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FajFaenh0NHFXSkQySjRIYVFlZ1ZtaHRya1FmalBrWFJu
RVhXMXhHU0MxaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRWoxWnp4dDRxV0pEMko0SGFRZWdWbWh0cmtRZmpQa1hS
bkVYVzF4R1NDMWgvMC84NUJDMUU4OTIzMTUwMUM2QjFEMThBNzE1MTc4NjBCRjk2
MDZBQzdCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5qQwDQQCAAIwBwMF
ACgEScAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBPBMA0GCSqGSIb3DQEBCwUA
A4IBAQBJG0UXthOsrRBVjGUo/K/gHHjEYnOmEq1oyzYfUr52RqPk2xavMq5fLDJ3
E6eJG02+GPSuYxOz6eEAmxdZ3C3zTnfEjrPuDuiJ7z1Rxr1n/YsQxS8JQRH4U/ve
QWxmVOpOEgBCEZdT8Y+kwvluqhsJn3M7oDO3Zaeua9GG7JE+Pvk54GfMVSZanVKA
F0fY4UuTmXRLqJFyNxkJae+ovEgHGk3RgRlXWpBAqXZmUrRurzu0hG8lU3CHRRzA
GJdDQKHTcRAZcx10IGy61Z1z4247hvsM8Z5OLJ5k8vV9EiOiUsmvOLO17A4/39Ea
K3iQ8olg+4Abc2kZqN0FngJx9ABQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org