Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.cer
File:                     92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.cer (raw, json)
Hash identifier:          EdFvCWrUxCXnWWFyH46kTbaeY4eIAKrBnnB9C7Mulg4=
Subject key identifier:   92:E5:B8:9C:7E:B2:62:98:94:30:4D:3B:6F:1C:A5:1C:11:EB:8E:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62D4566629774E2E20FE6D291E645E6A461BEC1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Feb 2023 13:42:15 +0000
Certificate not after:    Fri 23 Feb 2024 13:47:15 +0000
Subordinate resources:    AS: 267219
                          IP: 45.231.212.0/23
                          IP: 2804:4a1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d4:56:66:29:77:4e:2e:20:fe:6d:29:1e:64:5e:6a:46:1b:ec:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 13:42:15 2023 GMT
            Not After : Feb 23 13:47:15 2024 GMT
        Subject: CN=92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:9d:e6:49:4f:94:66:54:49:ef:a5:1d:65:
                    3f:d1:5e:d3:e8:16:45:f2:d9:50:5a:4e:29:aa:82:
                    e8:40:14:8d:69:6e:5f:6b:cb:76:c1:16:44:d5:ed:
                    37:d7:8f:10:b2:8b:d8:28:34:be:db:96:74:0d:0a:
                    9f:04:07:47:5c:58:37:f8:9a:4b:d1:a9:0a:c2:18:
                    d3:f6:df:66:77:e9:1b:b1:07:83:37:6f:d2:53:11:
                    06:36:69:07:3d:18:f8:94:0c:3d:d4:c2:c3:c2:95:
                    48:aa:6a:ae:9f:f7:b2:98:81:d6:3f:2d:04:78:bc:
                    f1:c2:dd:53:2f:dd:9e:05:3a:32:d4:71:3c:e6:df:
                    df:70:11:c5:ea:a2:11:af:1f:80:3e:51:a0:80:98:
                    8a:3f:08:cd:60:f4:4f:80:46:a1:52:4b:a6:08:4e:
                    04:b6:5e:52:18:23:1a:7d:3f:fb:4c:f1:de:f4:0e:
                    1d:29:95:7b:ad:ce:34:bb:07:44:9d:28:a3:88:0a:
                    55:58:6d:24:56:ba:c6:54:54:d3:3f:f0:81:6e:ce:
                    64:1b:5b:08:5c:e5:b4:93:cf:58:f8:fc:48:aa:80:
                    83:32:c3:9d:19:e2:84:21:4d:10:b5:52:63:ae:f6:
                    9a:cf:06:ab:fd:ea:e1:35:7c:ad:65:da:c9:60:fd:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:E5:B8:9C:7E:B2:62:98:94:30:4D:3B:6F:1C:A5:1C:11:EB:8E:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.212.0/23
                IPv6:
                  2804:4a1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267219

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:f2:55:b1:a7:f0:7d:86:9c:f2:b1:47:0a:9d:14:78:19:
         40:48:f3:b3:11:91:b2:b3:1f:3f:32:b4:2f:02:e9:30:20:49:
         4a:a8:a2:d0:37:34:88:42:fa:80:9e:50:da:5b:4d:c4:eb:4e:
         ab:89:8b:a3:d5:ea:5d:28:b5:5f:c1:f0:b7:9d:1e:2a:17:32:
         bc:70:6a:6d:0b:18:a2:c8:d3:f3:a3:e9:1b:25:71:03:6e:fc:
         91:5a:f3:f9:e7:a1:c2:43:c9:f8:49:72:7e:69:3a:d6:b6:25:
         6d:de:39:a6:c1:36:fc:ed:81:e8:f9:10:85:b8:d3:3e:cf:4d:
         d5:83:bf:48:45:9c:3e:f7:7a:34:69:f3:4f:8c:32:82:e3:af:
         71:03:53:39:64:ce:47:81:e6:a7:b5:dc:fc:83:c1:78:74:f8:
         19:83:fc:0a:68:64:cf:d6:b6:0e:54:51:24:1d:dc:94:74:2f:
         59:56:92:00:e8:99:cf:07:44:57:ae:b0:db:de:59:4a:8e:e4:
         2f:19:f3:6e:95:3b:f7:1e:cb:3c:17:a0:bb:62:65:26:74:cf:
         13:4f:84:fd:82:82:a7:03:c3:29:0b:35:7c:73:11:e3:b3:f1:
         e2:b7:b7:fc:38:26:3b:bf:65:7c:07:46:4b:e7:68:6f:f3:e1:
         bd:3b:98:13
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUYtRWZil3Ti4g/m0pHmReakYb7B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMjQxMzQyMTVaFw0yNDAyMjMxMzQ3MTVaMDMxMTAvBgNV
BAMTKDkyRTVCODlDN0VCMjYyOTg5NDMwNEQzQjZGMUNBNTFDMTFFQjhFQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZx53mSU+UZlRJ76UdZT/RXtPo
FkXy2VBaTimqguhAFI1pbl9ry3bBFkTV7TfXjxCyi9goNL7blnQNCp8EB0dcWDf4
mkvRqQrCGNP232Z36RuxB4M3b9JTEQY2aQc9GPiUDD3UwsPClUiqaq6f97KYgdY/
LQR4vPHC3VMv3Z4FOjLUcTzm399wEcXqohGvH4A+UaCAmIo/CM1g9E+ARqFSS6YI
TgS2XlIYIxp9P/tM8d70Dh0plXutzjS7B0SdKKOIClVYbSRWusZUVNM/8IFuzmQb
Wwhc5bSTz1j4/EiqgIMyw50Z4oQhTRC1UmOu9prPBqv96uE1fK1l2slg/anrAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSS5bicfrJimJQw
TTtvHKUcEeuOojAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80eTJoaFhZRWVLM3VKWXQyVEtwM1BQRjU5TXFXeGdFM25X
M1hhRzg4azZMNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80eTJoaFhZRWVLM3VKWXQyVEtwM1BQRjU5TXFXeGdFM25X
M1hhRzg4azZMNC8wLzkyRTVCODlDN0VCMjYyOTg5NDMwNEQzQjZGMUNBNTFDMTFF
QjhFQTIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS3n1DANBAIAAjAHAwUA
KARKHDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEE9MwDQYJKoZIhvcNAQELBQAD
ggEBAI5M8lWxp/B9hpzysUcKnRR4GUBI87MRkbKzHz8ytC8C6TAgSUqootA3NIhC
+oCeUNpbTcTrTquJi6PV6l0otV/B8LedHioXMrxwam0LGKLI0/Oj6RslcQNu/JFa
8/nnocJDyfhJcn5pOta2JW3eOabBNvztgej5EIW40z7PTdWDv0hFnD73ejRp80+M
MoLjr3EDUzlkzkeB5qe13PyDwXh0+BmD/ApoZM/Wtg5UUSQd3JR0L1lWkgDomc8H
RFeusNveWUqO5C8Z826VO/ceyzwXoLtiZSZ0zxNPhP2CgqcDwykLNXxzEeOz8eK3
t/w4Jju/ZXwHRkvnaG/z4b07mBM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org