Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer
File:                     968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer (raw, json)
Hash identifier:          6bqdezGRLTzuiHnJ8+YNos6XxQVURNedF2F3GuIU6wQ=
Subject key identifier:   96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40817E6B380F49BC9CFA0C7A72550634B84E5075
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Sep 2022 18:45:17 +0000
Certificate not after:    Wed 27 Sep 2023 18:50:17 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:7e:6b:38:0f:49:bc:9c:fa:0c:7a:72:55:06:34:b8:4e:50:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 28 18:45:17 2022 GMT
            Not After : Sep 27 18:50:17 2023 GMT
        Subject: CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:e6:4d:2a:14:01:69:bc:f5:2c:16:16:f7:
                    5a:8e:3c:26:fc:92:b0:3c:ec:6d:85:af:eb:83:e1:
                    d3:6a:9c:e0:26:98:40:29:ff:18:66:03:5a:12:c8:
                    54:42:dd:47:5b:6e:62:16:85:96:18:d5:6d:45:37:
                    18:39:c2:aa:27:11:d4:14:43:e7:1e:64:ff:5f:ff:
                    6d:50:77:98:7f:b4:b5:91:dc:9a:ec:69:f2:f4:d7:
                    2f:95:0e:3e:5a:86:5b:b7:62:12:27:f7:aa:da:24:
                    2a:e1:56:86:bb:71:0f:fa:8c:62:1e:e7:82:e8:29:
                    62:34:80:52:97:c4:11:5e:4e:51:ea:40:1c:c4:df:
                    97:16:05:2f:2b:b8:fa:a6:d4:c1:1b:e9:be:23:c9:
                    22:13:0f:73:0f:22:61:53:d9:b3:5f:c8:ef:cf:63:
                    48:2a:45:66:f8:a2:a8:c8:20:e6:8b:c0:e5:fe:d4:
                    72:cf:e6:bb:e1:7c:4c:da:61:c6:9f:d2:ab:45:93:
                    83:fd:3d:d3:a6:0f:a2:bf:14:03:e2:77:ae:e5:a3:
                    45:41:b1:44:98:7d:20:29:2f:60:40:e9:a3:e1:99:
                    39:f1:e6:29:0a:e7:38:4d:83:5a:02:fb:c5:b5:88:
                    d4:45:d1:91:f5:b9:a8:da:9b:4b:a4:b8:cd:4d:c4:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:bf:14:46:ce:80:a8:16:76:46:00:1d:ba:aa:16:fc:e9:
         80:00:4c:0d:2d:72:92:24:1b:a0:fa:c2:5d:c4:09:40:23:53:
         db:55:1d:6e:f6:4f:5e:d8:b6:32:87:d4:49:64:bd:8c:de:04:
         a4:a6:d4:c5:51:e7:94:e3:73:08:9e:47:f4:53:c5:c2:63:72:
         41:88:27:8d:68:6f:9b:cf:77:16:6a:9a:69:c5:d7:e5:00:79:
         b8:08:80:5d:16:c8:f0:f6:eb:92:56:b9:86:96:33:2d:30:71:
         ca:0d:8a:d2:49:2e:32:f1:d9:3a:9c:4c:0b:a6:ed:65:09:3d:
         b0:d6:9c:1b:a9:91:19:cf:9c:d1:17:94:a3:2d:5e:d3:6b:6c:
         5c:c7:10:9a:4c:b5:d6:fe:2e:86:aa:b5:b6:a1:0b:4b:1a:b3:
         bc:51:c6:1f:93:b2:7c:c1:f4:62:dc:09:9f:93:99:6b:de:f2:
         8a:7b:05:59:c7:43:57:d4:ec:ef:ed:21:f2:40:ad:4d:d7:98:
         1d:c4:6b:c6:a7:aa:79:b2:f5:21:a7:b6:86:54:aa:7f:8f:d6:
         0e:f7:d6:f4:e6:b6:8b:5c:dc:ac:db:2f:80:43:9d:79:ca:77:
         57:fe:cc:1c:fd:eb:a1:d8:e3:25:ec:a2:64:78:54:4e:f9:3e:
         e5:a4:57:25
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQIF+azgPSbyc+gx6clUGNLhOUHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MjgxODQ1MTdaFw0yMzA5MjcxODUwMTdaMDMxMTAvBgNV
BAMTKDk2OEU1Q0FFQUNCMUQ0RjM0MjU1QUVCRjUxQTc4QzE5NDA1NkUxREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLeZNKhQBabz1LBYW91qOPCb8
krA87G2Fr+uD4dNqnOAmmEAp/xhmA1oSyFRC3UdbbmIWhZYY1W1FNxg5wqonEdQU
Q+ceZP9f/21Qd5h/tLWR3JrsafL01y+VDj5ahlu3YhIn96raJCrhVoa7cQ/6jGIe
54LoKWI0gFKXxBFeTlHqQBzE35cWBS8ruPqm1MEb6b4jySITD3MPImFT2bNfyO/P
Y0gqRWb4oqjIIOaLwOX+1HLP5rvhfEzaYcaf0qtFk4P9PdOmD6K/FAPid67lo0VB
sUSYfSApL2BA6aPhmTnx5ikK5zhNg1oC+8W1iNRF0ZH1uajam0ukuM1NxAl5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWjlyurLHU80JV
rr9Rp4wZQFbh3DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BbVBqRUdlQ3ludDJiU1R1OHgxNEdWdWRXZnBXa2tmQWRX
dmdmdUZaV3JLZC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BbVBqRUdlQ3ludDJiU1R1OHgxNEdWdWRXZnBXa2tmQWRX
dmdmdUZaV3JLZC8wLzk2OEU1Q0FFQUNCMUQ0RjM0MjU1QUVCRjUxQTc4QzE5NDA1
NkUxREMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2nbDANBAIAAjAHAwUA
KARWdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFt8wDQYJKoZIhvcNAQELBQAD
ggEBACPyvxRGzoCoFnZGAB26qhb86YAATA0tcpIkG6D6wl3ECUAjU9tVHW72T17Y
tjKH1ElkvYzeBKSm1MVR55TjcwieR/RTxcJjckGIJ41ob5vPdxZqmmnF1+UAebgI
gF0WyPD265JWuYaWMy0wccoNitJJLjLx2TqcTAum7WUJPbDWnBupkRnPnNEXlKMt
XtNrbFzHEJpMtdb+LoaqtbahC0sas7xRxh+TsnzB9GLcCZ+TmWve8op7BVnHQ1fU
7O/tIfJArU3XmB3Ea8anqnmy9SGntoZUqn+P1g731vTmtotc3KzbL4BDnXnKd1f+
zBz966HY4yXsomR4VE75PuWkVyU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org