Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91D97236B10E4FBEDE123CA07874969CB8E67A83.cer
File:                     91D97236B10E4FBEDE123CA07874969CB8E67A83.cer (raw, json)
Hash identifier:          Pt8SdoEWu/Jaqz7T1qhFKZvTYXNYPZfOB4dTgDHBhtw=
Subject key identifier:   91:D9:72:36:B1:0E:4F:BE:DE:12:3C:A0:78:74:96:9C:B8:E6:7A:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       799F194F330B97FE3C7067AC1D546D4D5CA6183A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/91D97236B10E4FBEDE123CA07874969CB8E67A83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 10:43:16 +0000
Certificate not after:    Thu 12 Sep 2024 10:48:16 +0000
Subordinate resources:    AS: 269079
                          IP: 45.179.132.0/22
                          IP: 2804:5f24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9f:19:4f:33:0b:97:fe:3c:70:67:ac:1d:54:6d:4d:5c:a6:18:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 10:43:16 2023 GMT
            Not After : Sep 12 10:48:16 2024 GMT
        Subject: CN=91D97236B10E4FBEDE123CA07874969CB8E67A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:92:ae:d5:c5:39:72:c7:ef:3d:f5:68:07:
                    57:a0:58:fd:2a:37:48:b1:3b:be:c5:03:08:77:3a:
                    41:02:cb:22:19:ac:80:d2:e0:52:ce:fa:ad:f8:e7:
                    99:68:81:ac:92:75:05:8b:ff:8a:97:55:58:d8:b6:
                    67:d3:a5:93:59:bd:66:dd:70:5e:d7:6f:e0:22:05:
                    7a:e0:23:46:bf:c4:76:3c:41:a2:c5:3c:97:1f:aa:
                    01:81:5f:de:e7:e6:3d:3b:7e:c7:de:da:1d:ca:bf:
                    41:28:b1:c4:1c:42:43:78:a4:57:fb:97:34:e7:69:
                    b4:9d:ef:71:ec:bd:01:78:9f:23:4e:62:d9:f7:7a:
                    a1:21:e9:e3:e4:e5:f6:5b:57:25:bb:d9:f3:f0:00:
                    ba:81:a1:64:c5:74:22:5a:d8:08:e7:05:a2:4f:69:
                    93:5c:cc:60:6c:32:d7:4f:7d:9d:a9:68:5e:34:08:
                    1a:96:f1:82:6b:15:07:1b:36:2d:bd:77:1a:3c:d8:
                    61:10:c6:2e:89:b8:a3:be:22:46:97:a4:59:42:08:
                    b7:6f:6a:64:d8:64:4e:27:a1:67:31:8d:1b:77:43:
                    34:29:e2:8a:c0:6e:e3:2c:db:51:21:1f:88:15:b9:
                    ba:fb:90:cb:8b:b1:dd:d2:a8:75:a9:31:7e:ef:46:
                    1d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:D9:72:36:B1:0E:4F:BE:DE:12:3C:A0:78:74:96:9C:B8:E6:7A:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/91D97236B10E4FBEDE123CA07874969CB8E67A83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.132.0/22
                IPv6:
                  2804:5f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269079

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:0d:c9:f8:4c:e7:ce:c7:02:52:40:c6:a3:13:ec:b8:3d:
         65:08:5f:e0:7c:1b:2b:d8:52:72:a3:85:da:57:0e:d2:f9:91:
         bc:30:30:dd:37:6c:1e:d5:a0:f9:d7:e6:b0:61:41:12:59:90:
         26:23:b0:ae:37:68:9e:17:63:bc:b4:a6:67:e0:44:a3:02:16:
         ae:6d:6c:d1:77:a4:41:6b:46:5a:02:d4:d4:81:a9:f0:b3:ef:
         c4:bc:28:4b:94:3f:25:0c:70:f4:1f:85:39:fd:f6:4c:64:c7:
         e2:86:e7:8f:09:c0:4a:1e:d3:76:dd:c7:25:8c:38:bf:4b:3c:
         e6:8f:5f:f5:3b:21:b3:db:75:eb:90:a6:07:a4:03:72:58:be:
         c5:67:b0:16:8b:6a:32:18:f8:e7:10:03:41:43:df:a1:c6:c6:
         8b:16:f1:ec:22:f6:21:74:16:55:2a:87:00:f1:fd:38:a8:20:
         d8:36:77:ea:f4:06:dd:53:fe:4d:eb:a1:40:6a:41:5e:13:cc:
         f5:21:d5:19:47:34:43:2c:b9:10:6e:41:8e:76:80:ad:6a:3d:
         b0:91:5e:b6:34:04:19:e1:35:4e:f7:aa:59:1d:91:7e:f7:00:
         58:42:99:f3:46:19:c3:13:b2:ab:b7:1b:ac:13:46:44:66:1d:
         41:e7:06:13
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUeZ8ZTzMLl/48cGesHVRtTVymGDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTQxMDQzMTZaFw0yNDA5MTIxMDQ4MTZaMDMxMTAvBgNV
BAMTKDkxRDk3MjM2QjEwRTRGQkVERTEyM0NBMDc4NzQ5NjlDQjhFNjdBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cJKu1cU5csfvPfVoB1egWP0q
N0ixO77FAwh3OkECyyIZrIDS4FLO+q3455logaySdQWL/4qXVVjYtmfTpZNZvWbd
cF7Xb+AiBXrgI0a/xHY8QaLFPJcfqgGBX97n5j07fsfe2h3Kv0EoscQcQkN4pFf7
lzTnabSd73HsvQF4nyNOYtn3eqEh6ePk5fZbVyW72fPwALqBoWTFdCJa2AjnBaJP
aZNczGBsMtdPfZ2paF40CBqW8YJrFQcbNi29dxo82GEQxi6JuKO+IkaXpFlCCLdv
amTYZE4noWcxjRt3QzQp4orAbuMs21EhH4gVubr7kMuLsd3SqHWpMX7vRh2lAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSR2XI2sQ5Pvt4S
PKB4dJacuOZ6gzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GandORm5ZYzNCazVGaHJUUlUxSEFldmNBR1RxRHFOeUtq
bVhqOWdFUGdwRC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlL
am1YajlnRVBncEQvMC85MUQ5NzIzNkIxMEU0RkJFREUxMjNDQTA3ODc0OTY5Q0I4
RTY3QTgzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIts4QwDQQCAAIwBwMF
ACgEXyQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBsXMA0GCSqGSIb3DQEBCwUA
A4IBAQAxLA3J+EznzscCUkDGoxPsuD1lCF/gfBsr2FJyo4XaVw7S+ZG8MDDdN2we
1aD51+awYUESWZAmI7CuN2ieF2O8tKZn4ESjAhaubWzRd6RBa0ZaAtTUganws+/E
vChLlD8lDHD0H4U5/fZMZMfihuePCcBKHtN23ccljDi/Szzmj1/1OyGz23XrkKYH
pANyWL7FZ7AWi2oyGPjnEANBQ9+hxsaLFvHsIvYhdBZVKocA8f04qCDYNnfq9Abd
U/5N66FAakFeE8z1IdUZRzRDLLkQbkGOdoCtaj2wkV62NAQZ4TVO96pZHZF+9wBY
QpnzRhnDE7KrtxusE0ZEZh1B5wYT
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org