Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.cer
File:                     870C2AD8E67C6E1CC63AAB945280201586BAC84A.cer (raw, json)
Hash identifier:          MYmOqEo12fLChXxOjJmYa5pxf/FbPK4oHDDqiJ7QaGA=
Subject key identifier:   87:0C:2A:D8:E6:7C:6E:1C:C6:3A:AB:94:52:80:20:15:86:BA:C8:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DB9F5A18E66ACDD58C77F11D7BB6A73C0F3ACDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 18:55:53 +0000
Certificate not after:    Thu 27 Mar 2025 19:00:53 +0000
Subordinate resources:    AS: 269523
                          IP: 45.188.68.0/22
                          IP: 2804:65ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b9:f5:a1:8e:66:ac:dd:58:c7:7f:11:d7:bb:6a:73:c0:f3:ac:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 18:55:53 2024 GMT
            Not After : Mar 27 19:00:53 2025 GMT
        Subject: CN=870C2AD8E67C6E1CC63AAB945280201586BAC84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:44:5d:eb:c4:fa:fd:56:e2:b4:ce:30:59:
                    ef:b0:a1:f0:b5:d9:6c:4e:fd:45:a3:b2:16:7d:05:
                    7d:f8:91:fe:19:47:3f:22:16:92:44:3a:38:b4:ee:
                    42:07:ad:c3:c8:65:de:d0:69:5e:59:0e:62:95:4a:
                    77:14:b6:b3:19:9c:22:63:66:cc:63:63:f2:08:20:
                    0e:58:2a:65:2b:10:d9:ed:0b:26:e1:05:49:35:eb:
                    b8:8f:22:47:a4:9f:6b:36:46:d2:d4:87:7b:9c:35:
                    da:f3:c8:3b:d9:25:d5:07:3a:4a:10:5e:af:51:bf:
                    ad:46:96:02:15:10:85:8b:0f:1a:95:14:f9:71:39:
                    0e:96:9c:b6:b0:8f:ab:4b:e0:83:b9:f8:4b:79:84:
                    99:c4:d9:ba:9c:9f:9c:f1:3e:e2:40:50:c5:07:e3:
                    86:c8:8c:70:07:6b:8b:25:ad:a3:89:70:4a:7f:7c:
                    5c:da:aa:65:60:34:26:ca:d2:b8:6b:6b:28:5b:2b:
                    54:da:85:15:be:04:ac:36:8d:58:a2:2e:33:6a:be:
                    28:a3:c5:bc:94:37:ba:4f:35:1a:d8:50:af:64:cd:
                    35:0d:a0:1b:83:e1:fc:93:8f:56:55:ee:9a:87:ce:
                    3a:d3:0b:f1:7e:e8:73:4b:9a:43:b3:de:7b:43:a9:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:0C:2A:D8:E6:7C:6E:1C:C6:3A:AB:94:52:80:20:15:86:BA:C8:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.68.0/22
                IPv6:
                  2804:65ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269523

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:57:3c:2d:58:a5:bf:3d:c8:05:1b:f8:84:ff:45:36:41:
         b1:30:fa:42:5b:f9:96:c2:30:31:4e:77:c4:fc:48:c0:c3:52:
         26:69:3c:3c:51:4c:b6:05:8b:bc:9c:1d:81:0a:cd:a6:e6:ad:
         cf:7d:e2:8d:99:2c:3f:96:4c:e6:52:64:a3:78:f7:32:99:49:
         5c:c7:7b:ff:fe:49:db:b2:18:3f:8f:60:14:ef:4c:7b:55:ac:
         53:f5:75:f0:c1:b4:62:39:63:5f:73:16:44:e4:1d:3d:90:15:
         ba:96:9d:4b:9a:7f:4d:3c:58:38:7b:9d:12:97:4e:2c:e9:4b:
         99:2f:92:50:91:bd:4f:20:7a:8d:17:14:d8:70:b4:20:f9:8e:
         57:b8:21:89:67:51:ec:28:d5:ea:5b:e0:7c:56:86:b8:3a:12:
         9c:06:35:7b:ae:e5:cf:1b:bc:28:03:f4:d5:12:d9:21:a2:67:
         99:16:76:3c:74:02:6a:64:45:82:c9:b1:f8:69:ef:21:bb:12:
         78:40:85:2b:c8:fc:ed:a8:55:ac:91:21:87:6b:70:aa:ea:d6:
         45:18:59:f8:12:60:06:be:14:8c:17:b7:66:e4:65:82:48:b4:
         25:1d:cd:78:1b:c8:f6:a8:2e:3a:08:1d:41:71:3f:1e:1c:31:
         7a:7c:c1:cc
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTbn1oY5mrN1Yx38R17tqc8DzrN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjgxODU1NTNaFw0yNTAzMjcxOTAwNTNaMDMxMTAvBgNV
BAMTKDg3MEMyQUQ4RTY3QzZFMUNDNjNBQUI5NDUyODAyMDE1ODZCQUM4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmERd68T6/VbitM4wWe+wofC1
2WxO/UWjshZ9BX34kf4ZRz8iFpJEOji07kIHrcPIZd7QaV5ZDmKVSncUtrMZnCJj
ZsxjY/IIIA5YKmUrENntCybhBUk167iPIkekn2s2RtLUh3ucNdrzyDvZJdUHOkoQ
Xq9Rv61GlgIVEIWLDxqVFPlxOQ6WnLawj6tL4IO5+Et5hJnE2bqcn5zxPuJAUMUH
44bIjHAHa4slraOJcEp/fFzaqmVgNCbK0rhrayhbK1TahRW+BKw2jViiLjNqviij
xbyUN7pPNRrYUK9kzTUNoBuD4fyTj1ZV7pqHzjrTC/F+6HNLmkOz3ntDqfbDAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHDCrY5nxuHMY6
q5RSgCAVhrrISjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CQXRIeTk0UFp4ZXVIOThKTnhEenJ0dXdwN0w0SFdKcFAx
QzQ0Z25mdUVRdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQkF0SHk5NFBaeGV1SDk4Sk54RHpydHV3cDdMNEhXSnBQ
MUM0NGduZnVFUXQvMC84NzBDMkFEOEU2N0M2RTFDQzYzQUFCOTQ1MjgwMjAxNTg2
QkFDODRBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvEQwDQQCAAIwBwMF
ACgEZewwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBzTMA0GCSqGSIb3DQEBCwUA
A4IBAQCLmVc8LVilvz3IBRv4hP9FNkGxMPpCW/mWwjAxTnfE/EjAw1ImaTw8UUy2
BYu8nB2BCs2m5q3PfeKNmSw/lkzmUmSjePcymUlcx3v//knbshg/j2AU70x7VaxT
9XXwwbRiOWNfcxZE5B09kBW6lp1Lmn9NPFg4e50Sl04s6UuZL5JQkb1PIHqNFxTY
cLQg+Y5XuCGJZ1HsKNXqW+B8Voa4OhKcBjV7ruXPG7woA/TVEtkhomeZFnY8dAJq
ZEWCybH4ae8huxJ4QIUryPztqFWskSGHa3Cq6tZFGFn4EmAGvhSMF7dm5GWCSLQl
Hc14G8j2qC46CB1BcT8eHDF6fMHM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org