Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
File:                     867EA8A0A69F78E626EF5B45180018958C3CA167.cer (raw, json)
Hash identifier:          aAVMMwcFvVla8kiWKNFhwSSAzxX/eyob3d+VLxgJ3LI=
Subject key identifier:   86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C74047A8ADFB1B059693C52E2799ECE7200F14E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 12:15:07 +0000
Certificate not after:    Fri 27 Sep 2024 12:20:07 +0000
Subordinate resources:    AS: 267345
                          IP: 45.234.80.0/22
                          IP: 2804:4c0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:74:04:7a:8a:df:b1:b0:59:69:3c:52:e2:79:9e:ce:72:00:f1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 12:15:07 2023 GMT
            Not After : Sep 27 12:20:07 2024 GMT
        Subject: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:70:e3:9e:10:a7:18:d0:4d:a9:ef:e8:a1:
                    f8:97:0f:a5:3a:ca:45:54:ab:a1:0a:83:03:c7:04:
                    08:00:79:ad:49:31:df:7e:f8:8f:20:2e:35:0e:44:
                    48:09:8b:b0:fe:de:05:77:85:88:61:b8:d2:f3:57:
                    e4:8c:ed:d6:0e:1a:ea:22:bf:04:ca:59:4a:58:bf:
                    68:9c:22:84:1e:a5:a7:ca:4f:8e:fc:3c:18:b5:0e:
                    2f:2b:c6:27:3d:05:dd:43:58:05:15:e9:6c:ea:6c:
                    36:ce:c3:5d:10:7f:1c:5f:69:6d:59:94:e6:3f:16:
                    62:cb:a1:18:16:58:aa:cb:cc:9c:f4:aa:3d:64:57:
                    b1:1c:81:00:55:d8:22:ff:b4:ac:5c:a7:6c:2f:51:
                    10:fc:31:14:0e:bd:a4:97:db:29:6d:7f:72:98:f5:
                    6b:51:c5:fc:c0:ea:c9:65:39:35:8e:f5:6f:33:44:
                    ac:36:a1:75:50:4d:25:55:b0:5b:59:27:75:a0:11:
                    5f:26:47:9b:ea:69:ab:cf:8f:d2:f7:cd:75:79:8d:
                    75:02:f7:33:07:e8:92:3c:46:89:f0:33:82:56:fd:
                    20:db:fe:53:1b:f7:b3:12:a7:44:ef:90:42:03:ef:
                    ef:54:3c:a5:47:bb:ec:5b:ef:20:85:b6:c1:56:54:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.80.0/22
                IPv6:
                  2804:4c0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267345

    Signature Algorithm: sha256WithRSAEncryption
         b4:28:e8:e5:d7:0d:14:00:d3:c7:e9:0d:09:8b:8b:b1:51:e9:
         99:a6:a8:0a:42:31:37:51:65:c6:0b:37:fc:05:98:78:76:35:
         fa:43:02:dd:bd:81:a2:95:16:3c:18:0c:4d:71:af:15:bb:ed:
         ac:01:e8:5d:62:9b:3a:1e:af:2a:a3:92:19:3b:92:4c:bf:5c:
         54:9c:af:09:27:22:20:a1:90:11:24:57:a8:10:5a:0f:eb:0d:
         bf:7b:f5:3e:01:10:70:8e:b1:8f:b5:b0:ae:44:29:15:5e:b8:
         af:fb:9f:63:95:5f:cc:b2:04:a1:17:7a:39:c3:5a:53:a2:76:
         9b:84:68:30:db:0d:1f:47:2e:da:0d:f7:7c:84:cb:39:9e:3b:
         f2:64:94:b7:59:8b:86:1e:e7:42:25:63:07:06:0d:18:5f:76:
         35:b6:6e:0d:58:31:3a:a0:0d:92:77:01:1c:f1:d3:70:60:a6:
         a7:a3:86:05:58:fa:b1:88:bd:a6:f5:94:c6:ce:a3:f6:6c:fe:
         d9:1f:33:88:32:a8:07:e8:7b:f2:1a:0c:37:48:69:f5:d8:c9:
         7d:89:de:da:90:1d:63:e9:59:2a:75:4d:1b:47:49:4f:58:86:
         c0:45:d6:0a:9b:83:a8:20:f9:7b:ea:cf:65:7c:e6:32:57:1b:
         dc:b8:12:b9
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUXHQEeorfsbBZaTxS4nmeznIA8U4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjkxMjE1MDdaFw0yNDA5MjcxMjIwMDdaMDMxMTAvBgNV
BAMTKDg2N0VBOEEwQTY5Rjc4RTYyNkVGNUI0NTE4MDAxODk1OEMzQ0ExNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYXDjnhCnGNBNqe/oofiXD6U6
ykVUq6EKgwPHBAgAea1JMd9++I8gLjUOREgJi7D+3gV3hYhhuNLzV+SM7dYOGuoi
vwTKWUpYv2icIoQepafKT478PBi1Di8rxic9Bd1DWAUV6WzqbDbOw10QfxxfaW1Z
lOY/FmLLoRgWWKrLzJz0qj1kV7EcgQBV2CL/tKxcp2wvURD8MRQOvaSX2yltf3KY
9WtRxfzA6sllOTWO9W8zRKw2oXVQTSVVsFtZJ3WgEV8mR5vqaavPj9L3zXV5jXUC
9zMH6JI8RonwM4JW/SDb/lMb97MSp0TvkEID7+9UPKVHu+xb7yCFtsFWVFCbAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGfqigpp945ibv
W0UYABiVjDyhZzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3eDJaeHNodnVhY1BoMktT
RW1IcUZMUW9IVS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3eDJaeHNodnVhY1BoMktT
RW1IcUZMUW9IVS8wLzg2N0VBOEEwQTY5Rjc4RTYyNkVGNUI0NTE4MDAxODk1OEMz
Q0ExNjcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3qUDANBAIAAjAHAwUA
KARMDDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFFEwDQYJKoZIhvcNAQELBQAD
ggEBALQo6OXXDRQA08fpDQmLi7FR6ZmmqApCMTdRZcYLN/wFmHh2NfpDAt29gaKV
FjwYDE1xrxW77awB6F1imzoeryqjkhk7kky/XFScrwknIiChkBEkV6gQWg/rDb97
9T4BEHCOsY+1sK5EKRVeuK/7n2OVX8yyBKEXejnDWlOidpuEaDDbDR9HLtoN93yE
yzmeO/JklLdZi4Ye50IlYwcGDRhfdjW2bg1YMTqgDZJ3ARzx03BgpqejhgVY+rGI
vab1lMbOo/Zs/tkfM4gyqAfoe/IaDDdIafXYyX2J3tqQHWPpWSp1TRtHSU9YhsBF
1gqbg6gg+Xvqz2V85jJXG9y4Erk=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org