Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97A40C863FAADF9ABB33CE041D04F1AEC3B88F16.cer
File:                     97A40C863FAADF9ABB33CE041D04F1AEC3B88F16.cer (raw, json)
Hash identifier:          0W+X/gDOTY/tkW/ht6SrlQ1V1lVTtbzZ7wR87n2C9pA=
Subject key identifier:   97:A4:0C:86:3F:AA:DF:9A:BB:33:CE:04:1D:04:F1:AE:C3:B8:8F:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43CFC2B364CB9386838744837B082B971A03559F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/0/97A40C863FAADF9ABB33CE041D04F1AEC3B88F16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 13:01:17 +0000
Certificate not after:    Mon 27 Jan 2025 13:06:17 +0000
Subordinate resources:    AS: 268335
                          IP: 45.238.100.0/22
                          IP: 2804:4f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cf:c2:b3:64:cb:93:86:83:87:44:83:7b:08:2b:97:1a:03:55:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 13:01:17 2024 GMT
            Not After : Jan 27 13:06:17 2025 GMT
        Subject: CN=97A40C863FAADF9ABB33CE041D04F1AEC3B88F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:37:1d:1c:8a:90:46:16:5f:50:cd:ad:ff:
                    e7:2a:16:ec:c6:6e:38:c4:14:3f:8a:aa:a4:fa:84:
                    02:15:c9:7f:da:5c:96:0e:9c:08:71:3b:f6:0d:f6:
                    e0:2f:72:36:af:09:5f:29:78:6b:4c:d1:ee:45:df:
                    87:ba:09:3f:1a:b5:c6:94:1d:07:22:3e:df:59:84:
                    5d:f8:64:8b:ce:97:ad:08:32:5d:9a:dc:db:3c:c5:
                    ea:a2:4a:e1:f2:87:a0:18:dd:ac:64:aa:d4:8a:64:
                    2b:fb:2a:5f:c5:f6:75:70:0e:58:15:f9:0e:9b:99:
                    79:46:b6:bb:80:67:d5:a6:37:07:63:c1:c7:cb:2a:
                    5e:8f:da:14:a9:f2:79:80:c5:20:ed:26:91:94:ef:
                    a9:12:03:c6:dd:6c:4f:cc:45:5c:47:8f:32:9b:ee:
                    1e:b5:ad:a6:e0:1a:72:79:23:8e:0b:3b:46:12:8f:
                    fe:70:5e:b2:43:6f:3a:df:00:77:bd:fd:73:ec:84:
                    f6:c4:62:c4:e7:55:b7:cb:9d:2f:72:a1:71:e3:a5:
                    58:b0:87:75:24:c3:51:1b:40:7f:33:fc:55:9f:bc:
                    4c:4e:34:00:16:5d:e2:ba:7b:4b:e6:4b:d4:4b:b2:
                    f4:e1:5a:c4:ec:3f:10:29:fc:23:c9:49:5c:29:b7:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:A4:0C:86:3F:AA:DF:9A:BB:33:CE:04:1D:04:F1:AE:C3:B8:8F:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/0/97A40C863FAADF9ABB33CE041D04F1AEC3B88F16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.100.0/22
                IPv6:
                  2804:4f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268335

    Signature Algorithm: sha256WithRSAEncryption
         a1:eb:03:5b:dc:fc:40:87:87:58:a2:08:2a:3a:14:1f:f2:ce:
         bc:16:67:2c:8e:ca:16:41:05:b2:79:0c:0a:e4:1a:91:e6:05:
         84:27:43:ae:b0:eb:e2:54:e2:83:4e:a5:ff:45:b7:3a:c9:9e:
         17:dd:04:4b:84:73:4f:63:ef:12:93:dc:82:85:f3:a3:13:dc:
         aa:52:61:21:cc:f3:09:6c:29:1c:75:09:11:53:fe:d5:cd:4d:
         17:55:e6:4a:8d:3d:36:e9:84:eb:ac:6c:59:4f:c5:01:52:15:
         f4:80:a1:d1:e5:72:af:49:d4:46:eb:63:e9:9d:9f:35:26:cf:
         86:ad:98:de:60:d2:68:6c:31:37:ce:81:8e:1b:35:f9:c0:9c:
         b5:1d:34:76:db:98:6a:9d:96:9d:88:8b:09:a3:cd:63:b0:26:
         da:39:e5:3f:87:f5:da:f5:36:a4:41:d4:1c:92:9b:28:f2:9a:
         f4:f7:e2:fb:f4:9e:90:1c:d9:80:e0:c1:a2:9d:f2:25:b8:9b:
         69:de:56:32:8f:99:1e:fa:a9:85:7f:be:d7:27:42:bf:74:9d:
         a0:be:a6:ae:58:57:49:bd:65:fb:d7:9b:67:d7:b9:36:48:07:
         e9:53:8c:d6:97:2c:e7:76:02:50:23:9f:a1:b4:8e:36:d3:14:
         d5:af:90:1e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQ8/Cs2TLk4aDh0SDewgrlxoDVZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjkxMzAxMTdaFw0yNTAxMjcxMzA2MTdaMDMxMTAvBgNV
BAMTKDk3QTQwQzg2M0ZBQURGOUFCQjMzQ0UwNDFEMDRGMUFFQzNCODhGMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmzcdHIqQRhZfUM2t/+cqFuzG
bjjEFD+KqqT6hAIVyX/aXJYOnAhxO/YN9uAvcjavCV8peGtM0e5F34e6CT8atcaU
HQciPt9ZhF34ZIvOl60IMl2a3Ns8xeqiSuHyh6AY3axkqtSKZCv7Kl/F9nVwDlgV
+Q6bmXlGtruAZ9WmNwdjwcfLKl6P2hSp8nmAxSDtJpGU76kSA8bdbE/MRVxHjzKb
7h61rabgGnJ5I44LO0YSj/5wXrJDbzrfAHe9/XPshPbEYsTnVbfLnS9yoXHjpViw
h3Ukw1EbQH8z/FWfvExONAAWXeK6e0vmS9RLsvThWsTsPxAp/CPJSVwpt1c3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXpAyGP6rfmrsz
zgQdBPGuw7iPFjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FQ2tWZ2J2cVdqZVB3V3lFZzVlM3JOOTN5aFJiQWpZa3lK
YU42bWhHZlpWNi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FQ2tWZ2J2cVdqZVB3V3lFZzVlM3JOOTN5aFJiQWpZa3lK
YU42bWhHZlpWNi8wLzk3QTQwQzg2M0ZBQURGOUFCQjMzQ0UwNDFEMDRGMUFFQzNC
ODhGMTYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3uZDANBAIAAjAHAwUA
KARPkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGC8wDQYJKoZIhvcNAQELBQAD
ggEBAKHrA1vc/ECHh1iiCCo6FB/yzrwWZyyOyhZBBbJ5DArkGpHmBYQnQ66w6+JU
4oNOpf9FtzrJnhfdBEuEc09j7xKT3IKF86MT3KpSYSHM8wlsKRx1CRFT/tXNTRdV
5kqNPTbphOusbFlPxQFSFfSAodHlcq9J1EbrY+mdnzUmz4atmN5g0mhsMTfOgY4b
NfnAnLUdNHbbmGqdlp2IiwmjzWOwJto55T+H9dr1NqRB1BySmyjymvT34vv0npAc
2YDgwaKd8iW4m2neVjKPmR76qYV/vtcnQr90naC+pq5YV0m9ZfvXm2fXuTZIB+lT
jNaXLOd2AlAjn6G0jjbTFNWvkB4=
-----END CERTIFICATE-----