Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/979C5A0F5DD0DF2DE624BEF1D5F8D5FA55A7179F.cer
File:                     979C5A0F5DD0DF2DE624BEF1D5F8D5FA55A7179F.cer (raw, json)
Hash identifier:          hFEwpjUeFCetb3bZzufX/p2ofrzgyrD09h+QDs1/Cs8=
Subject key identifier:   97:9C:5A:0F:5D:D0:DF:2D:E6:24:BE:F1:D5:F8:D5:FA:55:A7:17:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4999F96651797B64817723764992A20C2B41A379
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/979C5A0F5DD0DF2DE624BEF1D5F8D5FA55A7179F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 18:55:56 +0000
Certificate not after:    Tue 17 Jan 2023 19:00:56 +0000
Subordinate resources:    AS: 268205
                          IP: 45.236.48.0/22
                          IP: 2804:4d90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:99:f9:66:51:79:7b:64:81:77:23:76:49:92:a2:0c:2b:41:a3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 18:55:56 2022 GMT
            Not After : Jan 17 19:00:56 2023 GMT
        Subject: CN=979C5A0F5DD0DF2DE624BEF1D5F8D5FA55A7179F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:d6:df:a6:7c:de:08:90:29:20:4c:73:3a:
                    f6:8a:72:04:ba:58:bc:5c:fc:00:82:ce:cb:ec:51:
                    99:2f:17:f8:a9:72:3e:1f:7f:36:47:59:ed:cf:a7:
                    76:f5:d1:73:86:e3:e3:c1:26:ae:4d:b8:b4:26:88:
                    62:1e:4d:7a:b7:ab:6a:a7:bc:e7:85:94:20:e5:e7:
                    67:cd:da:51:5d:bb:f4:15:83:1c:7b:86:d5:59:45:
                    e0:cf:5f:9f:d3:12:c3:b0:a4:2a:ca:e4:56:76:3c:
                    56:d5:0f:81:05:f1:7a:46:fb:a4:69:84:55:7a:50:
                    3b:62:a5:a5:27:3f:a5:21:cf:72:94:7e:4c:ad:bd:
                    3b:5e:7a:93:12:e5:95:60:08:14:15:ee:4b:89:cd:
                    53:42:de:d5:9f:d3:2f:3c:99:39:0e:10:f4:e3:c5:
                    58:c8:7f:64:a2:10:1a:f3:6c:3b:be:19:2b:aa:79:
                    a7:ed:ec:4a:d6:b2:69:53:6c:fb:d7:e2:bf:8f:8a:
                    84:d2:a0:f9:03:8a:31:fe:20:56:eb:ff:40:d6:4f:
                    fa:06:a2:3f:99:eb:9e:cf:59:14:dd:4d:13:7b:3f:
                    50:db:c5:9b:f5:64:3e:33:0a:b6:85:e8:51:8f:17:
                    bc:28:64:c4:fd:0c:c6:72:94:eb:8b:53:cf:73:52:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:9C:5A:0F:5D:D0:DF:2D:E6:24:BE:F1:D5:F8:D5:FA:55:A7:17:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/979C5A0F5DD0DF2DE624BEF1D5F8D5FA55A7179F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/22
                IPv6:
                  2804:4d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268205

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:dd:24:4e:aa:b1:4d:ed:ec:e5:fe:05:68:f1:53:81:d1:
         f8:6c:fa:98:b7:c9:c7:24:6b:73:ea:75:58:a5:87:6f:e0:ff:
         eb:22:4a:d9:c4:d1:d9:db:90:37:cc:df:57:90:17:5c:20:92:
         23:d1:2e:37:9f:c1:a4:a3:31:5e:0f:b8:25:56:ae:0a:78:cf:
         0f:0c:88:6a:28:93:ec:a4:d4:4b:64:03:d3:88:71:6d:08:21:
         f5:31:27:8b:af:72:b3:51:35:2e:cd:b2:2d:94:82:f3:68:00:
         44:87:e4:27:d6:d4:e4:7d:6c:99:cc:8b:ac:b6:1e:73:a3:c3:
         9f:ea:56:89:f2:a5:7f:3a:32:f1:eb:dd:92:02:7b:09:f0:e6:
         8d:43:da:a1:76:33:55:d7:eb:bf:bd:2d:93:fa:69:c3:0d:1e:
         f8:b6:45:4f:4d:3a:95:1f:97:81:44:8d:ab:cd:59:aa:11:a8:
         4d:dc:dd:31:27:76:69:ae:a5:3a:6c:a3:03:46:25:ac:b2:3a:
         b6:d9:4d:e0:69:98:ff:d7:ad:6b:10:93:a5:13:0f:58:22:52:
         ae:b1:b0:e4:26:c2:d1:39:ef:a7:ff:d7:c0:b1:5b:a9:d4:22:
         ef:71:e3:ad:c4:5a:e1:7e:92:bb:78:e6:cf:9d:6e:cc:f5:93:
         bc:35:14:9e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSZn5ZlF5e2SBdyN2SZKiDCtBo3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAxMTgxODU1NTZaFw0yMzAxMTcxOTAwNTZaMDMxMTAvBgNV
BAMTKDk3OUM1QTBGNUREMERGMkRFNjI0QkVGMUQ1RjhENUZBNTVBNzE3OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqcNbfpnzeCJApIExzOvaKcgS6
WLxc/ACCzsvsUZkvF/ipcj4ffzZHWe3Pp3b10XOG4+PBJq5NuLQmiGIeTXq3q2qn
vOeFlCDl52fN2lFdu/QVgxx7htVZReDPX5/TEsOwpCrK5FZ2PFbVD4EF8XpG+6Rp
hFV6UDtipaUnP6Uhz3KUfkytvTteepMS5ZVgCBQV7kuJzVNC3tWf0y88mTkOEPTj
xVjIf2SiEBrzbDu+GSuqeaft7ErWsmlTbPvX4r+PioTSoPkDijH+IFbr/0DWT/oG
oj+Z657PWRTdTRN7P1DbxZv1ZD4zCraF6FGPF7woZMT9DMZylOuLU89zUjx3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXnFoPXdDfLeYk
vvHV+NX6VacXnzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IREpaWExZUGQxREx6RHB6ZTRmYlN5RlYyUzFMaTl0NFZl
cWFZa0pKN1Q0Ry8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IREpaWExZUGQxREx6RHB6ZTRmYlN5RlYyUzFMaTl0NFZl
cWFZa0pKN1Q0Ry8wLzk3OUM1QTBGNUREMERGMkRFNjI0QkVGMUQ1RjhENUZBNTVB
NzE3OUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3sMDANBAIAAjAHAwUA
KARNkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF60wDQYJKoZIhvcNAQELBQAD
ggEBAEO93SROqrFN7ezl/gVo8VOB0fhs+pi3yccka3PqdVilh2/g/+siStnE0dnb
kDfM31eQF1wgkiPRLjefwaSjMV4PuCVWrgp4zw8MiGook+yk1EtkA9OIcW0IIfUx
J4uvcrNRNS7Nsi2UgvNoAESH5CfW1OR9bJnMi6y2HnOjw5/qVonypX86MvHr3ZIC
ewnw5o1D2qF2M1XX67+9LZP6acMNHvi2RU9NOpUfl4FEjavNWaoRqE3c3TEndmmu
pTpsowNGJayyOrbZTeBpmP/XrWsQk6UTD1giUq6xsOQmwtE576f/18CxW6nUIu9x
463EWuF+krt45s+dbsz1k7w1FJ4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org