Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer
File:                     9799B170CE0588DDA475C42D0FB5765AB69AB649.cer (raw, json)
Hash identifier:          6Z/R5TJwp9thMJl6SacAgGH7JlmGiDQo+VnJlBKmnFU=
Subject key identifier:   97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       652F549C22C3F10B6A702C406A5E8DD29D6C80FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 18:45:36 +0000
Certificate not after:    Fri 07 Feb 2025 18:50:36 +0000
Subordinate resources:    AS: 269195
                          IP: 45.179.188.0/22
                          IP: 2804:60d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2f:54:9c:22:c3:f1:0b:6a:70:2c:40:6a:5e:8d:d2:9d:6c:80:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 18:45:36 2024 GMT
            Not After : Feb  7 18:50:36 2025 GMT
        Subject: CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:04:a1:ad:13:df:8f:31:15:ea:6e:7e:4a:
                    0d:41:7e:d8:f7:28:60:30:40:16:8c:12:93:69:d6:
                    a9:ae:4c:88:dd:e8:b9:70:51:2e:eb:56:10:ed:0e:
                    b1:d7:f7:ac:0f:f8:32:eb:48:1d:e8:8e:a7:91:ac:
                    d9:fc:4d:6e:c7:c3:a3:5a:53:a2:b9:b3:e7:e7:94:
                    76:b4:e8:72:4e:31:84:20:7d:ec:88:06:c7:3d:d2:
                    b5:b4:7e:a8:fd:d1:15:33:20:c4:dd:9d:1e:a1:82:
                    14:7b:df:37:7b:b9:46:fc:81:58:b0:d3:53:95:83:
                    f3:dc:88:bf:44:23:d9:95:9c:90:1e:b9:be:4a:53:
                    c6:c6:ec:01:56:fd:58:f3:7e:86:35:6c:29:f1:8a:
                    f1:62:7d:e6:54:91:2e:af:6f:04:3b:14:da:07:52:
                    9f:15:00:85:8e:29:d1:54:ed:04:09:1e:09:a6:98:
                    64:34:ce:dc:7f:3f:66:6b:52:99:aa:c5:7d:9d:b0:
                    c0:54:0f:92:9f:ad:4a:a1:e1:91:a1:3f:f0:76:3f:
                    15:78:7f:1f:16:2b:70:22:11:0c:77:24:e9:e2:b4:
                    5f:31:a5:89:96:e0:78:35:2a:b5:95:04:24:d1:ab:
                    07:22:3c:51:15:d0:6e:58:3f:4c:2d:19:e3:06:7c:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.188.0/22
                IPv6:
                  2804:60d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269195

    Signature Algorithm: sha256WithRSAEncryption
         90:5f:7c:ff:3b:c9:2e:2b:aa:62:0f:9a:87:5b:9b:46:a0:6c:
         05:e1:47:2f:72:94:26:1f:6e:89:eb:a7:04:34:67:d3:72:0b:
         07:57:6e:d3:7a:da:4a:94:f8:b0:2a:85:3b:4a:d9:81:0a:5c:
         35:dc:45:49:46:a3:86:cc:dc:f9:9a:a6:14:2a:ba:bc:fb:43:
         a5:27:42:72:23:1b:9d:e2:48:d1:77:2d:b6:aa:3f:d0:45:68:
         1e:b5:2e:91:8e:ba:6c:44:ec:5a:f2:af:2b:d9:6e:7c:c9:cc:
         78:3e:18:c7:a9:f2:ab:fa:34:34:b1:94:15:81:49:b5:70:2a:
         8f:27:08:65:7e:88:f5:56:7d:cd:15:fc:f8:e0:cb:5e:4c:fc:
         38:c1:92:ce:6c:22:b5:73:59:08:9e:b9:b9:c4:62:7b:fb:03:
         5f:1f:6d:68:92:a9:b1:39:21:75:22:97:1e:17:94:e6:d5:76:
         28:a5:27:de:dd:23:ee:a2:c7:69:81:c6:7a:c0:c1:82:d4:15:
         bd:26:e4:ad:6c:9d:6c:84:12:6f:54:ad:4c:1a:04:98:6e:2c:
         2c:05:30:7e:b6:6a:e0:49:cd:8f:c5:1f:2b:f4:47:9b:5b:30:
         79:5b:ac:e8:12:d3:ae:bf:23:55:c1:9f:04:b7:6a:52:12:e7:
         e2:8f:bf:5e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZS9UnCLD8QtqcCxAal6N0p1sgP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDkxODQ1MzZaFw0yNTAyMDcxODUwMzZaMDMxMTAvBgNV
BAMTKDk3OTlCMTcwQ0UwNTg4RERBNDc1QzQyRDBGQjU3NjVBQjY5QUI2NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdQShrRPfjzEV6m5+Sg1Bftj3
KGAwQBaMEpNp1qmuTIjd6LlwUS7rVhDtDrHX96wP+DLrSB3ojqeRrNn8TW7Hw6Na
U6K5s+fnlHa06HJOMYQgfeyIBsc90rW0fqj90RUzIMTdnR6hghR73zd7uUb8gViw
01OVg/PciL9EI9mVnJAeub5KU8bG7AFW/VjzfoY1bCnxivFifeZUkS6vbwQ7FNoH
Up8VAIWOKdFU7QQJHgmmmGQ0ztx/P2ZrUpmqxX2dsMBUD5KfrUqh4ZGhP/B2PxV4
fx8WK3AiEQx3JOnitF8xpYmW4Hg1KrWVBCTRqwciPFEV0G5YP0wtGeMGfIffAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXmbFwzgWI3aR1
xC0PtXZatpq2STAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85REFRZDJ5M0dnYWk4UkpFc0xmdEZ0clVhOVp2R3J5MzlG
TVZZUVBIa25Mbi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85REFRZDJ5M0dnYWk4UkpFc0xmdEZ0clVhOVp2R3J5MzlG
TVZZUVBIa25Mbi8wLzk3OTlCMTcwQ0UwNTg4RERBNDc1QzQyRDBGQjU3NjVBQjY5
QUI2NDkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2zvDANBAIAAjAHAwUA
KARg2DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEG4swDQYJKoZIhvcNAQELBQAD
ggEBAJBffP87yS4rqmIPmodbm0agbAXhRy9ylCYfbonrpwQ0Z9NyCwdXbtN62kqU
+LAqhTtK2YEKXDXcRUlGo4bM3PmaphQqurz7Q6UnQnIjG53iSNF3LbaqP9BFaB61
LpGOumxE7FryryvZbnzJzHg+GMep8qv6NDSxlBWBSbVwKo8nCGV+iPVWfc0V/Pjg
y15M/DjBks5sIrVzWQieubnEYnv7A18fbWiSqbE5IXUilx4XlObVdiilJ97dI+6i
x2mBxnrAwYLUFb0m5K1snWyEEm9UrUwaBJhuLCwFMH62auBJzY/FHyv0R5tbMHlb
rOgS066/I1XBnwS3alIS5+KPv14=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org