Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/975C7D29F19FD2A49A2887380BACFC3EAFAAC244.cer
File:                     975C7D29F19FD2A49A2887380BACFC3EAFAAC244.cer (raw, json)
Hash identifier:          7bSqeHaUBTlKk38ijdbmGh7X8/kpNAhxRK3JQ8/K2xI=
Subject key identifier:   97:5C:7D:29:F1:9F:D2:A4:9A:28:87:38:0B:AC:FC:3E:AF:AA:C2:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AAC69AFC76163366CFBF0BCF3C7BC01EE357636
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/975C7D29F19FD2A49A2887380BACFC3EAFAAC244.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 05 Feb 2023 16:59:06 +0000
Certificate not after:    Sun 04 Feb 2024 17:04:06 +0000
Subordinate resources:    AS: 268205
                          IP: 45.236.48.0/22
                          IP: 2804:4d90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ac:69:af:c7:61:63:36:6c:fb:f0:bc:f3:c7:bc:01:ee:35:76:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  5 16:59:06 2023 GMT
            Not After : Feb  4 17:04:06 2024 GMT
        Subject: CN=975C7D29F19FD2A49A2887380BACFC3EAFAAC244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:5d:77:5e:8d:22:0f:5d:07:3e:14:19:33:
                    02:47:ee:b0:8d:1d:d2:16:a8:20:b2:27:d8:ec:8b:
                    ad:f0:3b:40:c8:78:30:44:ce:69:0d:30:38:c6:9d:
                    4d:f7:b3:77:01:7e:2c:8a:04:16:68:b6:fc:fa:29:
                    22:86:c5:5d:92:61:f3:46:ba:01:34:b5:fb:2f:65:
                    bc:8c:da:75:43:a6:5a:5c:29:42:69:75:47:6c:b0:
                    7d:d3:26:45:d1:eb:c0:b0:98:81:9b:8d:45:8a:27:
                    6b:17:cc:e7:06:47:07:07:31:6d:4c:f2:d7:30:c2:
                    10:8d:d3:c5:03:15:70:13:0d:43:07:19:44:82:33:
                    66:9c:44:53:e2:7b:13:14:bb:8c:56:2e:63:0f:b7:
                    0f:bb:eb:c3:17:85:e1:03:96:78:b6:f3:e2:0a:56:
                    d4:24:e4:a5:73:90:99:c6:06:c5:79:a4:9c:6a:fb:
                    8f:77:40:0d:91:35:d1:75:b2:f3:48:7d:bb:58:1e:
                    28:a3:94:cd:76:71:af:98:4d:8d:f6:79:4d:0f:bb:
                    46:a2:0d:c9:a0:ec:b4:29:59:cf:9f:5f:c5:fc:0d:
                    6f:9e:0d:33:58:de:6d:cd:5d:ff:0d:1d:c3:b4:11:
                    df:f9:87:4d:ac:f4:73:5c:64:54:a6:4c:22:b3:1c:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:5C:7D:29:F1:9F:D2:A4:9A:28:87:38:0B:AC:FC:3E:AF:AA:C2:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/975C7D29F19FD2A49A2887380BACFC3EAFAAC244.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/22
                IPv6:
                  2804:4d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268205

    Signature Algorithm: sha256WithRSAEncryption
         49:89:e2:ca:8b:9c:ee:f0:2d:43:11:65:7f:c8:c6:c4:fb:28:
         43:b6:77:44:bc:0f:0a:79:63:db:4b:d7:41:50:82:5d:14:58:
         8f:6d:65:71:27:9b:67:76:76:be:fb:25:70:74:b1:e1:1c:d3:
         03:99:18:43:6c:df:2b:68:0c:1f:66:99:01:fb:f4:71:ca:67:
         e4:02:37:34:0f:77:38:55:a7:c3:df:2f:4f:6c:a0:73:84:20:
         26:dc:52:22:a5:b6:77:9c:76:fc:00:78:4c:81:c4:49:38:bd:
         ad:19:d1:ed:d7:c2:a0:16:47:cd:b4:c1:39:5d:e5:f7:c9:40:
         7c:6f:82:36:76:8a:db:ca:30:ca:31:6a:cc:59:da:bd:25:be:
         c1:a2:7e:42:b5:bd:56:fc:ec:69:c0:18:28:de:95:ea:8e:44:
         4f:28:9b:69:68:07:2c:c0:9a:c7:50:35:0b:e8:f8:e1:0e:6e:
         e3:13:a7:86:08:13:c8:28:be:97:96:c0:05:81:28:78:4a:04:
         f0:11:cf:8f:d4:4a:d7:e7:e9:fb:a7:dc:1c:4c:60:5c:bd:fa:
         7f:9e:1c:75:a1:f9:6d:67:4f:32:29:02:7a:d7:b8:fb:d7:6e:
         c0:1c:05:ea:2f:c3:7b:8a:8e:4c:43:da:d4:0d:7c:ff:1d:0b:
         56:59:2e:82
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUKqxpr8dhYzZs+/C888e8Ae41djYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMDUxNjU5MDZaFw0yNDAyMDQxNzA0MDZaMDMxMTAvBgNV
BAMTKDk3NUM3RDI5RjE5RkQyQTQ5QTI4ODczODBCQUNGQzNFQUZBQUMyNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb6113Xo0iD10HPhQZMwJH7rCN
HdIWqCCyJ9jsi63wO0DIeDBEzmkNMDjGnU33s3cBfiyKBBZotvz6KSKGxV2SYfNG
ugE0tfsvZbyM2nVDplpcKUJpdUdssH3TJkXR68CwmIGbjUWKJ2sXzOcGRwcHMW1M
8tcwwhCN08UDFXATDUMHGUSCM2acRFPiexMUu4xWLmMPtw+768MXheEDlni28+IK
VtQk5KVzkJnGBsV5pJxq+493QA2RNdF1svNIfbtYHiijlM12ca+YTY32eU0Pu0ai
Dcmg7LQpWc+fX8X8DW+eDTNY3m3NXf8NHcO0Ed/5h02s9HNcZFSmTCKzHI1BAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXXH0p8Z/SpJoo
hzgLrPw+r6rCRDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IREpaWExZUGQxREx6RHB6ZTRmYlN5RlYyUzFMaTl0NFZl
cWFZa0pKN1Q0Ry8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IREpaWExZUGQxREx6RHB6ZTRmYlN5RlYyUzFMaTl0NFZl
cWFZa0pKN1Q0Ry8wLzk3NUM3RDI5RjE5RkQyQTQ5QTI4ODczODBCQUNGQzNFQUZB
QUMyNDQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3sMDANBAIAAjAHAwUA
KARNkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF60wDQYJKoZIhvcNAQELBQAD
ggEBAEmJ4sqLnO7wLUMRZX/IxsT7KEO2d0S8Dwp5Y9tL10FQgl0UWI9tZXEnm2d2
dr77JXB0seEc0wOZGENs3ytoDB9mmQH79HHKZ+QCNzQPdzhVp8PfL09soHOEICbc
UiKltnecdvwAeEyBxEk4va0Z0e3XwqAWR820wTld5ffJQHxvgjZ2itvKMMoxasxZ
2r0lvsGifkK1vVb87GnAGCjeleqORE8om2loByzAmsdQNQvo+OEObuMTp4YIE8go
vpeWwAWBKHhKBPARz4/UStfn6fun3BxMYFy9+n+eHHWh+W1nTzIpAnrXuPvXbsAc
Beovw3uKjkxD2tQNfP8dC1ZZLoI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org