Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer
File:                     97071FFFD8FB901780C3CDDCBFF099B99B961467.cer (raw, json)
Hash identifier:          20KBMxjmQeNjBvQOQzkmy2Q4wtyYS5tX9avV/dzHb2A=
Subject key identifier:   97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F11D0B615F288A1F88E74EFB276B7C864EE89DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 10:43:20 +0000
Certificate not after:    Thu 12 Sep 2024 10:48:20 +0000
Subordinate resources:    AS: 268245
                          IP: 45.236.204.0/22
                          IP: 2804:4e30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:11:d0:b6:15:f2:88:a1:f8:8e:74:ef:b2:76:b7:c8:64:ee:89:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 10:43:20 2023 GMT
            Not After : Sep 12 10:48:20 2024 GMT
        Subject: CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:d7:fc:b3:f4:53:f1:11:6d:41:f7:c5:e9:
                    93:e6:7a:d9:f5:f5:f3:c3:8d:81:94:0c:60:6f:58:
                    e8:fc:99:07:57:4f:33:82:9b:29:9b:25:20:6c:3e:
                    82:a2:26:99:9b:f6:5d:ff:e4:14:73:f8:53:d2:8c:
                    04:18:cf:86:f7:c2:08:6a:68:cd:1c:3b:03:4b:34:
                    46:0d:02:93:0c:5b:6a:31:83:df:2d:6c:16:fa:f8:
                    98:00:7d:d5:06:7e:15:b0:8e:2d:8f:d6:8a:da:6a:
                    a8:f9:75:0e:cd:c1:ed:02:cf:ff:dd:33:91:74:c3:
                    7a:f0:2a:89:f3:15:5f:ea:24:6c:13:35:56:6a:c3:
                    e8:ce:1d:de:c3:4b:ed:5b:77:4c:1e:44:97:5f:46:
                    12:00:76:17:33:23:1e:c9:ee:6f:97:37:0d:48:88:
                    1f:81:66:f9:65:93:50:98:89:b9:57:70:e2:c9:51:
                    29:27:ba:3d:a8:8a:78:9e:a7:f5:00:58:47:8c:35:
                    d2:44:dc:2a:eb:18:23:29:c2:60:32:dd:24:a5:df:
                    82:69:6b:90:e2:e1:70:3a:1d:24:59:b0:6b:0e:9f:
                    03:42:1c:f1:e0:be:64:66:7f:40:84:c6:3b:1e:6c:
                    52:3c:20:31:27:28:60:e0:a7:0e:57:4c:07:24:aa:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.204.0/22
                IPv6:
                  2804:4e30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268245

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:9a:b4:c2:44:51:5e:fe:07:76:c9:54:55:57:c6:1b:8c:
         b2:ff:50:47:35:87:c8:18:a7:b7:bb:57:69:1c:bc:a6:c3:bb:
         88:38:53:1e:d5:62:df:60:35:5e:d4:3d:8c:ed:ff:53:fa:14:
         8f:ae:32:5d:8f:d2:83:6f:52:b7:55:31:80:d8:c1:25:8f:03:
         94:ea:da:2a:e7:ff:86:3a:e9:90:f0:d5:84:01:12:0b:78:5d:
         12:a8:5b:5c:9d:63:5d:4d:1b:ad:ab:89:27:83:14:30:5f:20:
         11:72:d2:92:22:55:42:6a:ee:fb:c9:6f:ac:c8:de:c8:e6:17:
         8b:90:6d:89:69:4a:a8:e9:a3:74:35:7e:fa:d3:a2:cc:0d:5a:
         63:e8:0a:79:24:37:8e:48:83:71:16:3e:4e:84:8e:f5:2e:9b:
         c3:10:60:04:26:92:f4:eb:1a:86:2f:bd:70:fa:2e:a2:b2:9c:
         4a:20:a7:a3:be:8c:e8:26:39:56:d4:56:53:06:5d:9d:f5:9e:
         31:e5:81:54:62:c3:7f:72:ad:24:cc:3b:e1:00:f6:b0:72:eb:
         1c:71:22:2f:d7:b1:8f:71:91:cd:f2:57:8b:ab:c6:91:2e:a0:
         14:c9:86:53:89:a3:22:79:3d:89:21:e3:fd:40:38:f8:8d:83:
         0a:52:98:4b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXxHQthXyiKH4jnTvsna3yGTuidowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTQxMDQzMjBaFw0yNDA5MTIxMDQ4MjBaMDMxMTAvBgNV
BAMTKDk3MDcxRkZGRDhGQjkwMTc4MEMzQ0REQ0JGRjA5OUI5OUI5NjE0NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxtf8s/RT8RFtQffF6ZPmetn1
9fPDjYGUDGBvWOj8mQdXTzOCmymbJSBsPoKiJpmb9l3/5BRz+FPSjAQYz4b3wghq
aM0cOwNLNEYNApMMW2oxg98tbBb6+JgAfdUGfhWwji2P1oraaqj5dQ7Nwe0Cz//d
M5F0w3rwKonzFV/qJGwTNVZqw+jOHd7DS+1bd0weRJdfRhIAdhczIx7J7m+XNw1I
iB+BZvllk1CYiblXcOLJUSknuj2oiniep/UAWEeMNdJE3CrrGCMpwmAy3SSl34Jp
a5Di4XA6HSRZsGsOnwNCHPHgvmRmf0CExjsebFI8IDEnKGDgpw5XTAckqlBhAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXBx//2PuQF4DD
zdy/8Jm5m5YUZzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IZ3Q0aldOTGFlREdDbW5Mcm42Tkt5Y2RqZDZkVkp0Vlg4
SHVOOGh5WkF6YS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSGd0NGpXTkxhZURHQ21uTHJuNk5LeWNkamQ2ZFZKdFZY
OEh1TjhoeVpBemEvMC85NzA3MUZGRkQ4RkI5MDE3ODBDM0NERENCRkYwOTlCOTlC
OTYxNDY3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7MwwDQQCAAIwBwMF
ACgETjAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBfVMA0GCSqGSIb3DQEBCwUA
A4IBAQCe/Zq0wkRRXv4HdslUVVfGG4yy/1BHNYfIGKe3u1dpHLymw7uIOFMe1WLf
YDVe1D2M7f9T+hSPrjJdj9KDb1K3VTGA2MEljwOU6toq5/+GOumQ8NWEARILeF0S
qFtcnWNdTRutq4kngxQwXyARctKSIlVCau77yW+syN7I5heLkG2JaUqo6aN0NX76
06LMDVpj6Ap5JDeOSINxFj5OhI71LpvDEGAEJpL06xqGL71w+i6ispxKIKejvozo
JjlW1FZTBl2d9Z4x5YFUYsN/cq0kzDvhAPawcusccSIv17GPcZHN8leLq8aRLqAU
yYZTiaMieT2JIeP9QDj4jYMKUphL
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org