Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5.cer
File:                     95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5.cer (raw, json)
Hash identifier:          nH2x6F0j4A/dNb8KaIwGpOyO04YEVCQHI4SLkvGgEqc=
Subject key identifier:   95:F5:71:33:EC:60:83:B0:C1:B4:A3:75:D3:8D:6E:F5:EA:38:DA:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1871E2914BE3ACBCD45C76CBBC172ADBC58E3531
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 18:29:59 +0000
Certificate not after:    Mon 09 Sep 2024 18:34:59 +0000
Subordinate resources:    AS: 268556
                          IP: 45.163.172.0/22
                          IP: 2804:5300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:71:e2:91:4b:e3:ac:bc:d4:5c:76:cb:bc:17:2a:db:c5:8e:35:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 18:29:59 2023 GMT
            Not After : Sep  9 18:34:59 2024 GMT
        Subject: CN=95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:06:67:45:82:93:80:30:47:e8:4f:5b:9e:f5:
                    2f:b4:ee:be:aa:82:6d:9c:0e:13:46:05:49:33:83:
                    83:81:c9:93:30:42:4f:13:b0:5a:9d:a0:68:dd:36:
                    e1:2b:60:b2:18:13:4d:09:91:c8:a2:38:c4:19:e8:
                    16:52:98:7d:68:80:93:6e:5e:72:18:fc:d6:ef:a6:
                    5c:d1:e5:a0:30:b8:34:cb:74:c2:b3:27:c9:29:0c:
                    de:01:f2:d9:07:92:06:3d:84:21:1c:63:7d:eb:6e:
                    37:e2:a0:b2:56:08:c9:b7:cb:91:96:60:17:85:3f:
                    e6:68:aa:ec:ff:4e:66:39:c0:27:f6:8b:24:95:a0:
                    0c:29:32:fb:54:e3:95:07:6a:fe:46:86:8a:f8:d7:
                    33:ee:54:26:15:68:a9:66:60:98:08:58:ea:e4:83:
                    44:15:23:f0:d7:44:8e:9b:3b:a3:34:cd:b4:79:ee:
                    31:7b:5d:51:21:51:e7:94:d8:48:4b:ea:cf:46:bd:
                    3e:ea:31:86:0f:3c:78:39:51:22:ef:48:84:92:46:
                    16:eb:0d:40:d5:b1:7a:5c:24:78:9a:8c:99:59:de:
                    8b:73:ac:f8:c8:3a:51:78:61:d1:9f:b7:61:17:44:
                    31:ba:f4:05:ef:f7:38:78:d0:b9:cd:f5:f5:ee:7b:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:F5:71:33:EC:60:83:B0:C1:B4:A3:75:D3:8D:6E:F5:EA:38:DA:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/22
                IPv6:
                  2804:5300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268556

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:73:d4:35:5e:68:82:f5:94:dd:47:9e:9f:5a:79:c7:91:
         84:c3:4d:e8:31:ae:96:20:3c:10:e0:d9:b3:38:41:32:ef:01:
         25:af:ea:a6:d8:fa:53:b5:ea:c6:1f:b7:31:b1:e1:f7:a1:27:
         6c:58:88:a9:90:b3:33:a5:7d:3d:59:4a:2b:62:47:db:67:f3:
         d8:8e:6b:43:b9:e6:69:49:2c:31:f9:fa:bc:2d:90:3d:0e:08:
         4e:69:4b:f3:f6:e0:be:8a:e9:ae:cb:6b:7e:16:e2:b2:b5:58:
         e2:6e:29:8c:0e:aa:33:48:54:77:58:e3:b7:f0:4e:60:bd:ca:
         ba:9a:e4:01:8b:17:f1:3d:95:6e:31:60:e6:98:80:68:a1:7f:
         ef:58:ab:fd:14:20:52:86:23:5f:c1:9c:d0:e1:d7:19:02:c9:
         a2:d4:50:bd:32:c4:92:fe:fe:6d:33:86:0a:8a:68:b0:fd:bd:
         9d:7e:93:ec:af:69:05:2b:9d:8d:1e:52:d8:41:0d:f8:15:1f:
         6c:e5:c6:0e:46:58:eb:5e:5b:51:62:1e:66:23:00:c3:69:67:
         4a:d5:e2:0a:88:7c:cc:23:e5:37:7d:4d:db:4f:41:51:7b:eb:
         9d:33:cd:29:8f:cc:e9:ee:2a:9b:1a:cf:4a:ea:2e:0f:3a:d9:
         34:08:f7:de
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUGHHikUvjrLzUXHbLvBcq28WONTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTExODI5NTlaFw0yNDA5MDkxODM0NTlaMDMxMTAvBgNV
BAMTKDk1RjU3MTMzRUM2MDgzQjBDMUI0QTM3NUQzOEQ2RUY1RUEzOERBRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzBmdFgpOAMEfoT1ue9S+07r6q
gm2cDhNGBUkzg4OByZMwQk8TsFqdoGjdNuErYLIYE00JkciiOMQZ6BZSmH1ogJNu
XnIY/NbvplzR5aAwuDTLdMKzJ8kpDN4B8tkHkgY9hCEcY33rbjfioLJWCMm3y5GW
YBeFP+Zoquz/TmY5wCf2iySVoAwpMvtU45UHav5Ghor41zPuVCYVaKlmYJgIWOrk
g0QVI/DXRI6bO6M0zbR57jF7XVEhUeeU2EhL6s9GvT7qMYYPPHg5USLvSISSRhbr
DUDVsXpcJHiajJlZ3otzrPjIOlF4YdGft2EXRDG69AXv9zh40LnN9fXue7zbAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSV9XEz7GCDsMG0
o3XTjW716jja1TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5
bXdDM0N5TTNoLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5
bXdDM0N5TTNoLzAvOTVGNTcxMzNFQzYwODNCMEMxQjRBMzc1RDM4RDZFRjVFQTM4
REFENS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaOsMA0EAgACMAcDBQAo
BFMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQZDDANBgkqhkiG9w0BAQsFAAOC
AQEAcsNz1DVeaIL1lN1Hnp9aeceRhMNN6DGuliA8EODZszhBMu8BJa/qptj6U7Xq
xh+3MbHh96EnbFiIqZCzM6V9PVlKK2JH22fz2I5rQ7nmaUksMfn6vC2QPQ4ITmlL
8/bgvorprstrfhbisrVY4m4pjA6qM0hUd1jjt/BOYL3KuprkAYsX8T2VbjFg5piA
aKF/71ir/RQgUoYjX8Gc0OHXGQLJotRQvTLEkv7+bTOGCoposP29nX6T7K9pBSud
jR5S2EEN+BUfbOXGDkZY615bUWIeZiMAw2lnStXiCoh8zCPlN31N209BUXvrnTPN
KY/M6e4qmxrPSuouDzrZNAj33g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org