Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/96D2B2A36EF8A06C60E14DADC7B39C4CF7DFC3FF.cer
File:                     96D2B2A36EF8A06C60E14DADC7B39C4CF7DFC3FF.cer (raw, json)
Hash identifier:          5qE/5Arl8BbQna2FVKKh7kthpwftr6ofnCmneWkNT2c=
Subject key identifier:   96:D2:B2:A3:6E:F8:A0:6C:60:E1:4D:AD:C7:B3:9C:4C:F7:DF:C3:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       509E7A89EEFED291CBD43B949B420139A25F5847
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/96D2B2A36EF8A06C60E14DADC7B39C4CF7DFC3FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 17:55:09 +0000
Certificate not after:    Fri 24 May 2024 18:00:09 +0000
Subordinate resources:    AS: 266003
                          IP: 181.191.96.0/22
                          IP: 2804:4118::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9e:7a:89:ee:fe:d2:91:cb:d4:3b:94:9b:42:01:39:a2:5f:58:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 17:55:09 2023 GMT
            Not After : May 24 18:00:09 2024 GMT
        Subject: CN=96D2B2A36EF8A06C60E14DADC7B39C4CF7DFC3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:30:5c:30:de:29:cf:57:1b:69:18:35:ef:
                    0f:86:b5:27:cc:0c:f9:48:68:cf:7c:1d:84:47:fb:
                    8a:62:a5:10:17:1d:23:e7:9c:87:6e:f6:bc:ac:15:
                    20:61:1f:e5:a0:bb:e0:76:c5:4a:14:ef:94:a6:e4:
                    9e:b6:ea:7a:17:32:d5:d8:df:a2:67:60:4b:1f:da:
                    d7:0e:26:b6:4a:b1:46:6f:9e:c6:00:9e:a9:a7:de:
                    6f:ec:09:fd:aa:74:0f:f6:b1:94:37:16:9a:64:37:
                    23:86:e1:45:ff:69:53:a4:33:43:27:b7:7d:80:36:
                    46:4e:b5:82:f2:c2:68:83:56:8f:a3:90:03:c1:bb:
                    35:98:f8:82:fc:aa:46:43:e3:80:03:6c:46:9a:70:
                    ac:11:7e:d7:9e:58:88:e6:01:03:f4:c1:e5:d7:0f:
                    b3:3b:fe:82:ee:cf:12:4f:79:fd:60:fd:b2:74:3a:
                    36:67:02:22:37:48:ed:e4:cf:b8:c1:c9:13:c9:08:
                    f9:72:6b:11:3c:2e:f5:34:ae:c5:43:a4:1b:25:a7:
                    07:bc:b4:5f:d1:cd:87:d8:aa:32:b3:74:20:ac:f3:
                    50:fe:31:1e:a0:68:e0:22:79:a7:d2:5e:b4:d3:88:
                    fd:02:83:df:59:a7:c1:6a:df:73:fa:75:1b:f1:0f:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:D2:B2:A3:6E:F8:A0:6C:60:E1:4D:AD:C7:B3:9C:4C:F7:DF:C3:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/96D2B2A36EF8A06C60E14DADC7B39C4CF7DFC3FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.96.0/22
                IPv6:
                  2804:4118::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266003

    Signature Algorithm: sha256WithRSAEncryption
         a5:44:ab:c9:65:31:71:50:bf:58:94:3e:51:5e:dd:e3:7b:52:
         55:47:5e:d7:68:6c:82:82:a6:30:4d:e0:0e:5f:00:4b:2c:45:
         7b:56:5e:fc:ca:72:86:2f:90:75:eb:27:6a:f5:c0:23:b2:67:
         1a:64:dc:53:69:f3:83:45:7d:4f:7c:4d:b0:b5:4e:4b:9f:7e:
         f2:f0:8c:bd:d8:2e:09:b8:04:dd:0f:72:0b:86:40:7f:e4:10:
         ea:cf:42:e0:5c:98:d0:21:df:25:88:7f:ed:e2:0e:c1:a5:a7:
         f7:30:87:ea:fc:51:5e:2a:b0:61:24:43:49:44:53:95:fe:72:
         7c:fb:e0:c9:25:38:1a:1f:07:46:15:e0:54:85:4a:9b:6d:48:
         df:28:da:6f:75:89:4d:56:72:ea:27:1e:83:e3:e2:1f:cc:de:
         5a:ea:9a:1f:9c:f7:7c:1b:56:5f:87:c9:37:28:5d:6d:84:24:
         a0:09:a6:66:e8:95:26:66:76:ae:b4:b2:1a:c2:fe:1f:bd:25:
         06:00:eb:34:fc:3e:b9:a5:36:60:38:e0:65:af:e1:2b:24:6e:
         b2:bb:8e:3c:45:15:ab:cc:d1:cf:e1:8f:86:a8:eb:57:bd:4d:
         15:a5:98:f0:03:ed:35:c9:45:41:d3:df:c1:49:bb:0c:f1:22:
         03:f1:ea:24
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUUJ56ie7+0pHL1DuUm0IBOaJfWEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjYxNzU1MDlaFw0yNDA1MjQxODAwMDlaMDMxMTAvBgNV
BAMTKDk2RDJCMkEzNkVGOEEwNkM2MEUxNERBREM3QjM5QzRDRjdERkMzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bTBcMN4pz1cbaRg17w+GtSfM
DPlIaM98HYRH+4pipRAXHSPnnIdu9rysFSBhH+Wgu+B2xUoU75Sm5J626noXMtXY
36JnYEsf2tcOJrZKsUZvnsYAnqmn3m/sCf2qdA/2sZQ3FppkNyOG4UX/aVOkM0Mn
t32ANkZOtYLywmiDVo+jkAPBuzWY+IL8qkZD44ADbEaacKwRfteeWIjmAQP0weXX
D7M7/oLuzxJPef1g/bJ0OjZnAiI3SO3kz7jByRPJCPlyaxE8LvU0rsVDpBslpwe8
tF/RzYfYqjKzdCCs81D+MR6gaOAieafSXrTTiP0Cg99Zp8Fq33P6dRvxDwBbAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSW0rKjbvigbGDh
Ta3Hs5xM99/D/zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EMWR1RXVGOGVMQnRpV3FlQjZ6Rm52R2pKczdOdnRCbnUz
N2JvcktWempkSC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51
Mzdib3JLVnpqZEgvMC85NkQyQjJBMzZFRjhBMDZDNjBFMTREQURDN0IzOUM0Q0Y3
REZDM0ZGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK1v2AwDQQCAAIwBwMF
ACgEQRgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA8TMA0GCSqGSIb3DQEBCwUA
A4IBAQClRKvJZTFxUL9YlD5RXt3je1JVR17XaGyCgqYwTeAOXwBLLEV7Vl78ynKG
L5B16ydq9cAjsmcaZNxTafODRX1PfE2wtU5Ln37y8Iy92C4JuATdD3ILhkB/5BDq
z0LgXJjQId8liH/t4g7Bpaf3MIfq/FFeKrBhJENJRFOV/nJ8++DJJTgaHwdGFeBU
hUqbbUjfKNpvdYlNVnLqJx6D4+IfzN5a6pofnPd8G1Zfh8k3KF1thCSgCaZm6JUm
ZnautLIawv4fvSUGAOs0/D65pTZgOOBlr+ErJG6yu448RRWrzNHP4Y+GqOtXvU0V
pZjwA+01yUVB09/BSbsM8SID8eok
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org