Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/90CCAB28CAE2F9BF3875E94539AA173D2D889CC4.cer
File:                     90CCAB28CAE2F9BF3875E94539AA173D2D889CC4.cer (raw, json)
Hash identifier:          VwY+uu5rPg4u/JeuldLrL3SLbWs4DUyL32SpQtHlj0g=
Subject key identifier:   90:CC:AB:28:CA:E2:F9:BF:38:75:E9:45:39:AA:17:3D:2D:88:9C:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43214A8AC4F7245291D7A7F151515BB4BCE3166A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/90CCAB28CAE2F9BF3875E94539AA173D2D889CC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Sep 2022 20:35:40 +0000
Certificate not after:    Thu 21 Sep 2023 20:40:40 +0000
Subordinate resources:    AS: 268809
                          IP: 45.173.100.0/22
                          IP: 2804:5af4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:21:4a:8a:c4:f7:24:52:91:d7:a7:f1:51:51:5b:b4:bc:e3:16:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 20:35:40 2022 GMT
            Not After : Sep 21 20:40:40 2023 GMT
        Subject: CN=90CCAB28CAE2F9BF3875E94539AA173D2D889CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:50:4d:55:a8:fa:cd:64:e0:41:e6:08:0a:
                    5c:ec:58:7a:79:01:47:3e:88:bc:87:06:84:cc:cd:
                    d2:4b:1c:67:d8:3f:2d:bd:8f:4b:d4:c1:fa:e5:a8:
                    b9:f6:33:d9:9a:a9:ba:98:98:92:5b:73:ba:ff:69:
                    dc:63:6d:5f:f1:f3:3c:2d:3d:52:ae:c2:1a:f2:12:
                    c1:2d:e4:c2:5d:13:e0:a1:3c:b9:b4:64:2d:c9:2b:
                    0a:a3:ad:9a:31:f0:79:05:2b:9f:7e:5f:c3:14:6a:
                    78:3e:c4:3e:61:d7:a7:c9:87:f7:1c:d9:9d:ee:0d:
                    5c:65:b7:97:85:fa:e5:d2:f7:45:74:e9:44:1a:a0:
                    47:2c:47:5a:19:16:05:1a:26:03:5e:f2:1c:82:e4:
                    bb:9f:68:96:4c:85:6b:00:f4:28:c3:4f:ac:4b:c8:
                    f0:fd:ce:cb:97:9b:80:ea:23:63:46:a7:e4:b7:f4:
                    47:0b:37:01:61:83:f2:a6:08:bf:ba:1d:fe:62:4f:
                    a0:ea:9a:a9:a5:67:bf:ff:85:6e:38:90:fa:24:2b:
                    6f:bc:4d:83:bf:97:95:fc:8c:51:45:b9:7a:84:88:
                    39:f0:db:af:f1:bc:00:2d:8d:a8:d6:52:bc:98:e0:
                    0a:fc:fd:c1:59:0f:45:c3:87:7f:eb:8e:0d:f1:68:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:CC:AB:28:CA:E2:F9:BF:38:75:E9:45:39:AA:17:3D:2D:88:9C:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/90CCAB28CAE2F9BF3875E94539AA173D2D889CC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.100.0/22
                IPv6:
                  2804:5af4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268809

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:14:78:a3:c7:e8:e0:e9:3e:c0:e4:4d:16:96:88:89:d3:
         aa:87:9b:55:c2:91:72:c6:cf:33:64:ef:dc:d8:ad:fc:f1:a9:
         42:cb:2c:42:7f:b8:e1:b7:55:65:f9:b3:e8:aa:79:61:be:24:
         9e:50:0d:c6:9f:c7:bc:8a:a9:f1:8d:e9:3c:a5:a1:f2:18:1e:
         2a:81:8c:cc:77:16:a9:f9:64:6b:bf:81:90:3a:a6:a1:a7:f7:
         34:76:e1:95:8d:4e:99:73:79:59:b6:eb:f1:32:f7:a2:65:c9:
         50:4a:f2:5b:f8:66:21:d0:73:61:b6:ff:79:6e:b1:65:cd:b5:
         f1:94:0c:51:98:b7:2c:3e:76:8d:8f:c4:8a:dc:1e:f1:2f:1b:
         f2:fc:84:d2:39:74:34:a1:e8:a9:eb:69:f6:3e:67:10:08:b7:
         c5:33:c6:a0:37:95:44:3d:9b:c0:98:07:7c:3a:20:89:56:61:
         ae:a9:96:d1:d6:b4:27:de:10:36:29:8c:eb:62:27:fb:88:37:
         c4:c0:97:03:b8:7c:ed:78:30:f1:60:2f:d8:23:72:2d:71:71:
         ca:ea:76:2e:b7:77:bf:b3:84:dc:1c:ea:85:8b:4d:ec:35:31:
         45:a9:b3:ac:9f:a7:94:69:d9:88:7b:72:ca:3b:d7:c6:5e:7c:
         d5:e7:b8:71
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQyFKisT3JFKR16fxUVFbtLzjFmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MjIyMDM1NDBaFw0yMzA5MjEyMDQwNDBaMDMxMTAvBgNV
BAMTKDkwQ0NBQjI4Q0FFMkY5QkYzODc1RTk0NTM5QUExNzNEMkQ4ODlDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jFBNVaj6zWTgQeYIClzsWHp5
AUc+iLyHBoTMzdJLHGfYPy29j0vUwfrlqLn2M9maqbqYmJJbc7r/adxjbV/x8zwt
PVKuwhryEsEt5MJdE+ChPLm0ZC3JKwqjrZox8HkFK59+X8MUang+xD5h16fJh/cc
2Z3uDVxlt5eF+uXS90V06UQaoEcsR1oZFgUaJgNe8hyC5LufaJZMhWsA9CjDT6xL
yPD9zsuXm4DqI2NGp+S39EcLNwFhg/KmCL+6Hf5iT6DqmqmlZ7//hW44kPokK2+8
TYO/l5X8jFFFuXqEiDnw26/xvAAtjajWUryY4Ar8/cFZD0XDh3/rjg3xaEwpAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQzKsoyuL5vzh1
6UU5qhc9LYicxDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yQUtrc0RlVEJMTUNHbWpaSHVxdjYxTnRYV0NZSlc2czRt
VktqN0xKTWZNbS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yQUtrc0RlVEJMTUNHbWpaSHVxdjYxTnRYV0NZSlc2czRt
VktqN0xKTWZNbS8wLzkwQ0NBQjI4Q0FFMkY5QkYzODc1RTk0NTM5QUExNzNEMkQ4
ODlDQzQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2tZDANBAIAAjAHAwUA
KARa9DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGgkwDQYJKoZIhvcNAQELBQAD
ggEBAAY6FHijx+jg6T7A5E0WloiJ06qHm1XCkXLGzzNk79zYrfzxqULLLEJ/uOG3
VWX5s+iqeWG+JJ5QDcafx7yKqfGN6TylofIYHiqBjMx3Fqn5ZGu/gZA6pqGn9zR2
4ZWNTplzeVm26/Ey96JlyVBK8lv4ZiHQc2G2/3lusWXNtfGUDFGYtyw+do2PxIrc
HvEvG/L8hNI5dDSh6KnrafY+ZxAIt8UzxqA3lUQ9m8CYB3w6IIlWYa6pltHWtCfe
EDYpjOtiJ/uIN8TAlwO4fO14MPFgL9gjci1xccrqdi63d7+zhNwc6oWLTew1MUWp
s6yfp5Rp2Yh7cso718ZefNXnuHE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org