Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.cer
File:                     892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.cer (raw, json)
Hash identifier:          TWfWGuM9W5NwJvwQ0VS8GmzH+Wj7SvA3Fi5KeJ2wgZc=
Subject key identifier:   89:2C:B5:47:8D:A1:F9:08:83:BE:5E:6C:A0:13:6E:FF:D2:1F:AF:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       165A75F2C3D0B0718C5FD9F0E1A307E65C47D492
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 11:25:58 +0000
Certificate not after:    Fri 24 Jan 2025 11:30:58 +0000
Subordinate resources:    AS: 269707
                          IP: 45.191.160.0/22
                          IP: 2804:68a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5a:75:f2:c3:d0:b0:71:8c:5f:d9:f0:e1:a3:07:e6:5c:47:d4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 11:25:58 2024 GMT
            Not After : Jan 24 11:30:58 2025 GMT
        Subject: CN=892CB5478DA1F90883BE5E6CA0136EFFD21FAF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:b6:11:e5:f0:af:25:1c:8e:c5:ca:1a:0b:
                    92:3d:d4:2c:a3:a4:81:3d:3d:d1:ac:e6:5d:14:a2:
                    2a:cf:b9:4a:92:3d:34:5d:44:8c:8e:33:1a:db:27:
                    2a:dc:fd:f2:de:ae:18:be:7e:20:67:06:27:01:63:
                    84:11:ed:09:6d:39:57:de:c3:34:f7:b5:aa:30:4e:
                    70:87:0b:4b:8b:c4:aa:47:0c:f1:cf:c7:b9:b1:56:
                    62:f2:39:3a:b9:29:70:c2:97:59:2f:0e:86:46:2f:
                    75:d7:4b:95:6b:c7:ed:5e:0e:f3:2c:7f:da:b2:f5:
                    46:ee:e1:96:fd:55:7c:ad:cd:da:c1:1a:f8:13:64:
                    2d:12:8c:e8:0b:35:9f:c3:f5:9d:0c:8a:e3:c9:63:
                    80:3b:fc:ea:85:8c:4f:0c:57:ff:12:f9:5d:74:27:
                    d2:45:98:60:d2:69:6a:4b:22:72:02:ed:f4:4e:75:
                    26:03:9f:d2:43:cb:6e:e8:e3:43:22:49:0e:5d:10:
                    6a:1d:09:fb:5e:71:e7:36:16:f5:c9:83:6a:b2:94:
                    b8:0a:7a:1c:b1:b3:30:3c:df:54:f5:4e:76:03:ca:
                    0a:90:b5:7c:01:7e:92:1c:85:be:4a:9a:d5:5a:db:
                    3c:20:99:e2:97:8f:57:8b:45:0b:2b:3f:61:8a:ed:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:2C:B5:47:8D:A1:F9:08:83:BE:5E:6C:A0:13:6E:FF:D2:1F:AF:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.160.0/22
                IPv6:
                  2804:68a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269707

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:0e:44:74:bc:b7:68:46:b2:47:2c:38:76:19:65:07:d9:
         a2:ce:81:7c:b1:5d:e0:28:3f:10:c5:ab:f7:58:58:69:08:eb:
         f0:cf:39:73:ce:58:cc:c3:ae:70:3e:1f:7a:79:02:b5:62:e1:
         92:c1:5e:0d:15:f9:1a:f3:96:87:dd:7b:12:31:ef:f3:4e:81:
         89:ad:8e:0b:24:57:4d:d4:94:46:fb:3f:d1:2d:41:a0:ec:1b:
         06:5f:68:16:fe:9d:da:06:9c:85:33:d5:2b:7c:45:47:b2:da:
         90:00:8d:39:1d:cb:e5:6d:78:7c:be:a2:a0:c4:d5:14:65:1e:
         73:36:39:aa:4d:58:11:3e:88:87:84:ad:36:36:b4:f4:6b:dc:
         af:42:cd:94:18:d6:d3:3e:44:8e:9e:5b:6f:41:2c:01:db:37:
         de:aa:cc:e2:2b:ca:73:4e:49:c8:4e:d6:7b:6a:8d:6f:b4:49:
         36:9c:f3:92:d1:f4:1d:c1:7b:26:ba:71:dd:0f:bb:4b:19:b8:
         94:8f:4c:32:eb:61:f1:f7:3f:f9:23:46:f9:43:78:5c:8c:a1:
         f7:c7:7b:f2:ee:b5:d0:8c:d5:4d:a8:d8:aa:e4:95:82:9f:69:
         5d:72:35:38:81:fb:80:86:ee:69:af:13:2f:56:b9:a7:47:57:
         d4:53:91:98
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFlp18sPQsHGMX9nw4aMH5lxH1JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjYxMTI1NThaFw0yNTAxMjQxMTMwNThaMDMxMTAvBgNV
BAMTKDg5MkNCNTQ3OERBMUY5MDg4M0JFNUU2Q0EwMTM2RUZGRDIxRkFGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWbYR5fCvJRyOxcoaC5I91Cyj
pIE9PdGs5l0UoirPuUqSPTRdRIyOMxrbJyrc/fLerhi+fiBnBicBY4QR7QltOVfe
wzT3taowTnCHC0uLxKpHDPHPx7mxVmLyOTq5KXDCl1kvDoZGL3XXS5Vrx+1eDvMs
f9qy9Ubu4Zb9VXytzdrBGvgTZC0SjOgLNZ/D9Z0MiuPJY4A7/OqFjE8MV/8S+V10
J9JFmGDSaWpLInIC7fROdSYDn9JDy27o40MiSQ5dEGodCftecec2FvXJg2qylLgK
ehyxszA831T1TnYDygqQtXwBfpIchb5KmtVa2zwgmeKXj1eLRQsrP2GK7SUZAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJLLVHjaH5CIO+
XmygE27/0h+vSDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yYVBDbmdMa2NMb2NrckFOc0tYdXV0VW9OcmQ0Tm81RFZ4
NjNCZmhDTDZNRy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yYVBDbmdMa2NMb2NrckFOc0tYdXV0VW9OcmQ0Tm81RFZ4
NjNCZmhDTDZNRy8wLzg5MkNCNTQ3OERBMUY5MDg4M0JFNUU2Q0EwMTM2RUZGRDIx
RkFGNDgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2/oDANBAIAAjAHAwUA
KARoqDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHYswDQYJKoZIhvcNAQELBQAD
ggEBAFtlDkR0vLdoRrJHLDh2GWUH2aLOgXyxXeAoPxDFq/dYWGkI6/DPOXPOWMzD
rnA+H3p5ArVi4ZLBXg0V+RrzlofdexIx7/NOgYmtjgskV03UlEb7P9EtQaDsGwZf
aBb+ndoGnIUz1St8RUey2pAAjTkdy+VteHy+oqDE1RRlHnM2OapNWBE+iIeErTY2
tPRr3K9CzZQY1tM+RI6eW29BLAHbN96qzOIrynNOSchO1ntqjW+0STac85LR9B3B
eya6cd0Pu0sZuJSPTDLrYfH3P/kjRvlDeFyMoffHe/LutdCM1U2o2KrklYKfaV1y
NTiB+4CG7mmvEy9WuadHV9RTkZg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org