Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer
File:                     92014ED18F77F0D942921A5E834CE76EC5930713.cer (raw, json)
Hash identifier:          8xqkm6uCUq2rKZQctksDTVJ1NfP3VkUdBSfwUKbU0Ds=
Subject key identifier:   92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A3BC450FD1BA0F8C342556C81279073B2F21032
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/92014ED18F77F0D942921A5E834CE76EC5930713.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 12:25:13 +0000
Certificate not after:    Tue 18 Feb 2025 12:30:13 +0000
Subordinate resources:    AS: 268437
                          IP: 45.160.20.0/22
                          IP: 2804:5134::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3b:c4:50:fd:1b:a0:f8:c3:42:55:6c:81:27:90:73:b2:f2:10:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 12:25:13 2024 GMT
            Not After : Feb 18 12:30:13 2025 GMT
        Subject: CN=92014ED18F77F0D942921A5E834CE76EC5930713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:84:6f:f4:22:fc:d0:66:40:ce:7a:ad:9d:
                    67:af:96:1e:0d:cf:0b:c7:47:ef:ce:f7:ab:5c:e8:
                    76:bd:d5:08:77:90:36:57:20:4f:50:d1:2f:58:de:
                    a8:59:88:4c:58:42:29:0e:30:5c:e3:43:f4:ba:f0:
                    af:1a:b4:ce:41:11:2b:eb:c7:cb:da:b9:2c:da:02:
                    56:4b:64:f3:dc:7f:94:53:85:e4:d6:94:dd:be:71:
                    3f:d3:c2:75:15:78:c7:db:cd:d6:20:d6:f8:38:33:
                    85:50:e6:a3:91:72:1a:17:79:96:e8:8a:bb:0c:ac:
                    f1:56:11:54:af:16:0f:84:ba:a9:90:d5:92:88:ee:
                    dd:94:33:93:e3:d3:2e:eb:a6:f4:49:03:90:e4:4e:
                    8b:a2:35:09:f2:a2:6d:e4:14:29:ae:9b:68:9c:b8:
                    8e:42:94:27:70:37:fd:48:bd:69:13:7e:06:2a:69:
                    08:ba:80:89:b4:5c:b7:59:be:9b:c1:48:11:aa:18:
                    43:17:b0:d6:3a:89:24:6e:9f:c3:d1:92:3f:f9:ec:
                    66:e4:dc:f5:26:0c:b1:99:9d:a9:7d:32:75:f7:bb:
                    e0:27:c8:0c:49:4b:9f:c3:53:92:96:6b:29:c4:f6:
                    71:38:d2:76:8b:b8:53:18:a5:90:ed:e8:a6:fb:bb:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/92014ED18F77F0D942921A5E834CE76EC5930713.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.20.0/22
                IPv6:
                  2804:5134::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268437

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:be:73:42:37:1d:a7:77:e8:15:0b:03:56:de:b3:31:81:
         ae:64:67:47:25:cd:37:e7:da:5f:2b:13:7e:33:36:b3:ef:38:
         e3:27:28:02:91:e3:de:59:2b:d2:75:83:17:ca:72:e1:ad:94:
         b7:29:b9:1e:65:81:3f:ac:ae:68:86:a0:a9:fb:fa:13:d6:24:
         43:ec:49:6c:fc:79:41:4f:15:a5:89:86:25:29:99:c4:56:59:
         e4:48:d4:52:51:4a:84:52:7d:67:76:97:97:44:bd:03:47:80:
         ce:af:d7:1a:84:f6:df:c1:dc:b8:32:7f:58:bb:8c:ab:e8:88:
         82:06:a7:11:28:98:d6:04:42:f3:09:af:a1:76:a9:8e:e9:1b:
         24:92:d6:1c:33:5f:88:37:e4:01:ed:af:01:fa:9e:e5:f8:fd:
         50:a3:f0:98:7d:a2:a0:95:c7:db:66:69:11:8e:82:ef:24:21:
         c1:4b:ad:39:1a:8b:da:9b:1e:24:31:c7:c8:1d:7e:d1:74:35:
         9b:11:27:fd:6f:a0:19:ae:57:7d:a8:5e:65:cd:9a:3e:05:38:
         f3:93:19:76:c6:0e:21:16:53:27:64:3d:a9:ec:d6:2b:c6:cd:
         2e:e9:b5:c5:7c:ff:ac:65:98:bc:56:15:b7:93:66:bd:97:22:
         40:8d:9a:94
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUejvEUP0boPjDQlVsgSeQc7LyEDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjAxMjI1MTNaFw0yNTAyMTgxMjMwMTNaMDMxMTAvBgNV
BAMTKDkyMDE0RUQxOEY3N0YwRDk0MjkyMUE1RTgzNENFNzZFQzU5MzA3MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aoRv9CL80GZAznqtnWevlh4N
zwvHR+/O96tc6Ha91Qh3kDZXIE9Q0S9Y3qhZiExYQikOMFzjQ/S68K8atM5BESvr
x8vauSzaAlZLZPPcf5RTheTWlN2+cT/TwnUVeMfbzdYg1vg4M4VQ5qORchoXeZbo
irsMrPFWEVSvFg+EuqmQ1ZKI7t2UM5Pj0y7rpvRJA5DkTouiNQnyom3kFCmum2ic
uI5ClCdwN/1IvWkTfgYqaQi6gIm0XLdZvpvBSBGqGEMXsNY6iSRun8PRkj/57Gbk
3PUmDLGZnal9MnX3u+AnyAxJS5/DU5KWaynE9nE40naLuFMYpZDt6Kb7u3vHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSAU7Rj3fw2UKS
Gl6DTOduxZMHEzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85N2RiVE5XTXlGTnpBVU42OXF1UzFNN3VIMUtCYWUxTmpI
RVJpdUh5M3VYMS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85N2RiVE5XTXlGTnpBVU42OXF1UzFNN3VIMUtCYWUxTmpI
RVJpdUh5M3VYMS8wLzkyMDE0RUQxOEY3N0YwRDk0MjkyMUE1RTgzNENFNzZFQzU5
MzA3MTMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2gFDANBAIAAjAHAwUA
KARRNDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGJUwDQYJKoZIhvcNAQELBQAD
ggEBACn5vnNCNx2nd+gVCwNW3rMxga5kZ0clzTfn2l8rE34zNrPvOOMnKAKR495Z
K9J1gxfKcuGtlLcpuR5lgT+srmiGoKn7+hPWJEPsSWz8eUFPFaWJhiUpmcRWWeRI
1FJRSoRSfWd2l5dEvQNHgM6v1xqE9t/B3Lgyf1i7jKvoiIIGpxEomNYEQvMJr6F2
qY7pGySS1hwzX4g35AHtrwH6nuX4/VCj8Jh9oqCVx9tmaRGOgu8kIcFLrTkai9qb
HiQxx8gdftF0NZsRJ/1voBmuV32oXmXNmj4FOPOTGXbGDiEWUydkPans1ivGzS7p
tcV8/6xlmLxWFbeTZr2XIkCNmpQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org