Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/92B9C4A5BE445105804B6AE4DB58415327CB00E5.cer
File:                     92B9C4A5BE445105804B6AE4DB58415327CB00E5.cer (raw, json)
Hash identifier:          NmKWH0wrob1PM4audiy92A9eF0PjvAGUhgzKhuk75aI=
Subject key identifier:   92:B9:C4:A5:BE:44:51:05:80:4B:6A:E4:DB:58:41:53:27:CB:00:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FBA18DB50A39E012507AE36EAFFFDD77BC31D1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/92B9C4A5BE445105804B6AE4DB58415327CB00E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 02:30:06 +0000
Certificate not after:    Tue 11 Mar 2025 02:35:06 +0000
Subordinate resources:    AS: 267351
                          IP: 45.234.4.0/22
                          IP: 2804:4c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ba:18:db:50:a3:9e:01:25:07:ae:36:ea:ff:fd:d7:7b:c3:1d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 02:30:06 2024 GMT
            Not After : Mar 11 02:35:06 2025 GMT
        Subject: CN=92B9C4A5BE445105804B6AE4DB58415327CB00E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:d1:4e:e5:4e:ab:dc:e3:6d:a0:8f:dc:9d:
                    9e:25:d3:4f:de:51:6c:52:5a:e3:21:ed:09:c8:b1:
                    ad:b4:2c:c7:d5:18:e2:7e:8a:b9:65:23:4e:7d:61:
                    04:c3:20:9f:58:0e:57:c4:fd:47:14:6c:5b:76:9c:
                    e1:fe:71:39:8c:ee:b4:18:45:5e:a4:ec:38:97:ee:
                    59:9f:17:32:68:e0:1f:03:77:96:2f:9e:36:46:4c:
                    a4:03:2d:10:21:f1:1c:52:7b:3c:26:bd:f8:c7:b5:
                    92:89:c1:14:8d:c4:b8:b6:18:04:0f:bf:b7:a4:07:
                    71:c0:a2:4e:a2:7d:f6:52:df:37:0a:bd:13:8d:a6:
                    43:72:73:a8:80:98:c8:93:b1:e0:02:f4:62:b8:73:
                    f9:1c:b2:fe:56:d0:73:93:cd:24:8f:be:97:11:34:
                    02:ad:37:ca:1d:3c:d2:e5:c6:f3:e5:f1:08:dd:42:
                    0f:b9:7a:b2:17:0f:f1:63:1a:0b:1e:bb:39:00:86:
                    77:34:13:d3:99:46:cd:71:d7:51:d1:83:d4:7c:37:
                    d4:2d:08:da:3b:a2:4b:5b:17:02:7b:21:29:69:e1:
                    b8:e3:d4:7e:d2:84:75:dc:59:14:e9:f1:4c:3b:72:
                    cc:06:32:74:7a:8e:b3:62:bb:3a:e1:b9:d1:1c:1d:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:B9:C4:A5:BE:44:51:05:80:4B:6A:E4:DB:58:41:53:27:CB:00:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/92B9C4A5BE445105804B6AE4DB58415327CB00E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22
                IPv6:
                  2804:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267351

    Signature Algorithm: sha256WithRSAEncryption
         97:78:00:03:42:d7:0f:59:2c:0d:98:7d:cb:c5:82:c5:36:74:
         14:98:07:af:91:76:b0:7f:21:51:81:dd:b6:c1:68:8f:60:78:
         88:12:35:21:69:db:72:31:8f:e6:b3:1d:dd:a1:6d:50:96:a1:
         18:3a:47:09:0b:ac:93:ce:8f:ed:ff:94:a2:6a:e2:94:b0:f3:
         fb:72:ab:e6:34:17:2d:04:48:7d:ab:61:50:1d:c5:3b:30:c9:
         f7:ee:83:14:e1:5b:a0:bd:d4:d8:63:c6:8d:ef:21:26:11:fd:
         d9:16:0a:fc:a4:5c:b9:62:de:55:64:0c:a3:3a:7e:25:7e:84:
         b4:15:5e:77:7e:4a:1f:24:67:36:44:b2:0b:ad:4b:d9:1a:e9:
         56:98:62:97:2c:24:59:e3:9d:9f:4f:43:14:92:af:5d:9a:86:
         db:3c:82:7d:5a:71:9a:c6:20:f2:73:13:05:33:8f:6c:50:df:
         11:e7:31:f4:d6:4e:7d:b6:d8:05:00:a7:2b:45:fb:02:c4:24:
         fa:83:24:67:04:1f:ca:2f:8c:2d:e1:05:f3:7d:74:2a:20:96:
         88:b6:a4:34:be:f7:b4:e6:c9:a9:7f:04:ae:0f:dd:a6:56:41:
         ea:6a:03:76:62:9f:6b:2f:32:38:42:09:46:df:59:4c:c6:c6:
         e2:5c:2d:bd
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUP7oY21CjngElB6426v/913vDHRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIwMjMwMDZaFw0yNTAzMTEwMjM1MDZaMDMxMTAvBgNV
BAMTKDkyQjlDNEE1QkU0NDUxMDU4MDRCNkFFNERCNTg0MTUzMjdDQjAwRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxstFO5U6r3ONtoI/cnZ4l00/e
UWxSWuMh7QnIsa20LMfVGOJ+irllI059YQTDIJ9YDlfE/UcUbFt2nOH+cTmM7rQY
RV6k7DiX7lmfFzJo4B8Dd5YvnjZGTKQDLRAh8RxSezwmvfjHtZKJwRSNxLi2GAQP
v7ekB3HAok6iffZS3zcKvRONpkNyc6iAmMiTseAC9GK4c/kcsv5W0HOTzSSPvpcR
NAKtN8odPNLlxvPl8QjdQg+5erIXD/FjGgseuzkAhnc0E9OZRs1x11HRg9R8N9Qt
CNo7oktbFwJ7ISlp4bjj1H7ShHXcWRTp8Uw7cswGMnR6jrNiuzrhudEcHYVFAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSucSlvkRRBYBL
auTbWEFTJ8sA5TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HNU5pZnRzVWJ1cDF1VFk4amprc0FRZ1VyUHoxMWNuaFMz
RTg3NWNVaEV1RC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhT
M0U4NzVjVWhFdUQvMC85MkI5QzRBNUJFNDQ1MTA1ODA0QjZBRTREQjU4NDE1MzI3
Q0IwMEU1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt6gQwDQQCAAIwBwMF
ACgETCAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBRXMA0GCSqGSIb3DQEBCwUA
A4IBAQCXeAADQtcPWSwNmH3LxYLFNnQUmAevkXawfyFRgd22wWiPYHiIEjUhadty
MY/msx3doW1QlqEYOkcJC6yTzo/t/5SiauKUsPP7cqvmNBctBEh9q2FQHcU7MMn3
7oMU4VugvdTYY8aN7yEmEf3ZFgr8pFy5Yt5VZAyjOn4lfoS0FV53fkofJGc2RLIL
rUvZGulWmGKXLCRZ452fT0MUkq9dmobbPIJ9WnGaxiDycxMFM49sUN8R5zH01k59
ttgFAKcrRfsCxCT6gyRnBB/KL4wt4QXzfXQqIJaItqQ0vve05smpfwSuD92mVkHq
agN2Yp9rLzI4QglG31lMxsbiXC29
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org