Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/95E1693FF13666AA38EC78930BDDEC7BC961CF0B.cer
File:                     95E1693FF13666AA38EC78930BDDEC7BC961CF0B.cer (raw, json)
Hash identifier:          DJlTtXDxXWgANlYCl62QTYIcnG6vJsvEp5/m9NylmHE=
Subject key identifier:   95:E1:69:3F:F1:36:66:AA:38:EC:78:93:0B:DD:EC:7B:C9:61:CF:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       677732169B0AC169F6CBA740FD044799D9D94579
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/95E1693FF13666AA38EC78930BDDEC7BC961CF0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Nov 2021 20:09:14 +0000
Certificate not after:    Mon 31 Oct 2022 20:14:14 +0000
Subordinate resources:    AS: 266222
                          IP: 192.140.24.0/22
                          IP: 2804:3c94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:77:32:16:9b:0a:c1:69:f6:cb:a7:40:fd:04:47:99:d9:d9:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 20:09:14 2021 GMT
            Not After : Oct 31 20:14:14 2022 GMT
        Subject: CN=95E1693FF13666AA38EC78930BDDEC7BC961CF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:ec:99:d0:b0:00:e0:75:b8:28:48:48:41:
                    1d:e6:88:eb:97:3d:37:50:97:eb:e3:4c:30:6a:9a:
                    b6:94:3f:cb:b3:7c:8f:25:9b:8d:ce:4d:36:49:a5:
                    5a:fd:26:91:74:2b:a1:c0:40:8c:ba:a9:d6:52:86:
                    4e:57:34:62:d7:ec:22:b0:3e:ee:57:a9:7c:f2:55:
                    71:84:7d:d3:a7:a9:ef:3b:10:c3:f0:3f:20:79:12:
                    11:1e:18:f2:f5:d8:7f:6a:dc:78:8e:6b:61:b8:39:
                    80:f2:5e:6c:c8:f2:43:88:c0:7d:95:59:7b:0d:59:
                    3c:a6:33:c4:c7:47:3d:b5:9a:2c:8f:bb:00:17:44:
                    d1:82:26:03:24:6f:47:a5:36:db:ad:59:b4:f8:29:
                    d5:c2:69:23:0d:d1:39:06:e0:02:40:5d:c4:f1:3d:
                    a2:6a:f1:90:65:49:9b:33:33:74:0e:3e:f4:d9:0b:
                    72:d6:88:c9:38:b0:35:8a:b1:9d:1c:ad:89:5b:de:
                    d0:2e:6b:94:43:03:78:65:d6:6d:d3:b9:67:c1:f0:
                    28:4d:66:93:4c:9d:9f:dd:af:4c:09:6f:aa:d7:d0:
                    09:58:0e:0e:84:b9:03:6b:f6:0c:c0:44:22:97:a0:
                    b8:ad:18:85:e4:80:ac:bb:66:c7:e4:ee:1c:a9:da:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:E1:69:3F:F1:36:66:AA:38:EC:78:93:0B:DD:EC:7B:C9:61:CF:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/95E1693FF13666AA38EC78930BDDEC7BC961CF0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.24.0/22
                IPv6:
                  2804:3c94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266222

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:d5:8c:03:4a:67:35:a2:5d:8d:48:42:51:ee:27:86:f6:
         70:93:36:74:91:c2:a6:c6:6c:00:ec:07:0c:bf:79:ad:74:38:
         1b:b8:7d:63:7c:d0:93:36:4e:eb:ff:bf:b6:df:da:cf:eb:43:
         eb:d1:b8:38:9b:fb:57:d2:24:ce:ba:c1:29:ca:b0:15:08:da:
         24:ee:aa:41:ce:e4:a8:8f:a7:9b:8e:a8:2e:9c:38:20:3a:85:
         1a:9a:8b:81:4c:c4:5d:89:92:a1:96:9d:d9:19:c4:86:10:d8:
         d2:a3:1a:7b:95:b3:0f:3a:06:79:0a:a3:8d:8b:11:e8:ca:8b:
         ac:55:3c:45:ec:95:67:79:31:0c:ea:b3:e4:94:9a:bd:3f:75:
         fb:30:0c:72:11:ed:90:e1:17:a5:13:91:f8:f5:4f:a5:35:5c:
         aa:43:c8:c5:5a:1e:e9:a7:6a:02:82:60:66:bd:e0:6e:6f:a1:
         72:e6:79:19:16:35:03:ed:36:c7:4a:a3:60:d9:47:55:e9:0c:
         40:ea:25:d2:3e:b4:7e:9d:ac:83:c7:2e:1f:08:ba:df:1a:80:
         09:81:7b:31:fd:ad:ce:4b:f2:ef:0d:e5:fb:e7:f0:ac:67:89:
         96:54:7e:cc:fc:ab:4e:3f:3f:ca:24:6c:77:11:37:fe:92:8c:
         21:92:1f:2c
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUZ3cyFpsKwWn2y6dA/QRHmdnZRXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTExMDEyMDA5MTRaFw0yMjEwMzEyMDE0MTRaMDMxMTAvBgNV
BAMTKDk1RTE2OTNGRjEzNjY2QUEzOEVDNzg5MzBCRERFQzdCQzk2MUNGMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVh+yZ0LAA4HW4KEhIQR3miOuX
PTdQl+vjTDBqmraUP8uzfI8lm43OTTZJpVr9JpF0K6HAQIy6qdZShk5XNGLX7CKw
Pu5XqXzyVXGEfdOnqe87EMPwPyB5EhEeGPL12H9q3HiOa2G4OYDyXmzI8kOIwH2V
WXsNWTymM8THRz21miyPuwAXRNGCJgMkb0elNtutWbT4KdXCaSMN0TkG4AJAXcTx
PaJq8ZBlSZszM3QOPvTZC3LWiMk4sDWKsZ0crYlb3tAua5RDA3hl1m3TuWfB8ChN
ZpNMnZ/dr0wJb6rX0AlYDg6EuQNr9gzARCKXoLitGIXkgKy7Zsfk7hyp2gldAgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSV4Wk/8TZmqjjs
eJML3ex7yWHPCzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9aNDNmZXlyamJ6ZXFVQ201VkhGTnV4ZXI2cWNmc3N2c2Rj
VVZjQ1dkUHdGLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL1o0M2ZleXJqYnplcVVDbTVWSEZOdXhlcjZxY2Zzc3ZzZGNV
VmNDV2RQd0YvMC85NUUxNjkzRkYxMzY2NkFBMzhFQzc4OTMwQkRERUM3QkM5NjFD
RjBCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALAjBgwDQQCAAIwBwMFACgE
PJQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA/uMA0GCSqGSIb3DQEBCwUAA4IB
AQCeD9WMA0pnNaJdjUhCUe4nhvZwkzZ0kcKmxmwA7AcMv3mtdDgbuH1jfNCTNk7r
/7+239rP60Pr0bg4m/tX0iTOusEpyrAVCNok7qpBzuSoj6ebjqgunDggOoUamouB
TMRdiZKhlp3ZGcSGENjSoxp7lbMPOgZ5CqONixHoyousVTxF7JVneTEM6rPklJq9
P3X7MAxyEe2Q4RelE5H49U+lNVyqQ8jFWh7pp2oCgmBmveBub6Fy5nkZFjUD7TbH
SqNg2UdV6QxA6iXSPrR+nayDxy4fCLrfGoAJgXsx/a3OS/LvDeX75/CsZ4mWVH7M
/KtOPz/KJGx3ETf+kowhkh8s
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org