Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97D05E7B4CCA1EED5615FB7B8CB6F3027727877D.cer
File:                     97D05E7B4CCA1EED5615FB7B8CB6F3027727877D.cer (raw, json)
Hash identifier:          RTvU4PS0upMC0dr8jSyzJRVVmuJd+SThRhRonZljzfw=
Subject key identifier:   97:D0:5E:7B:4C:CA:1E:ED:56:15:FB:7B:8C:B6:F3:02:77:27:87:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       707F7F3A05820466F611B2356AF4F1A78339DA49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/97D05E7B4CCA1EED5615FB7B8CB6F3027727877D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Feb 2024 00:41:01 +0000
Certificate not after:    Fri 31 Jan 2025 00:46:01 +0000
Subordinate resources:    AS: 268676
                          IP: 45.165.132.0/22
                          IP: 2804:54e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7f:7f:3a:05:82:04:66:f6:11:b2:35:6a:f4:f1:a7:83:39:da:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 00:41:01 2024 GMT
            Not After : Jan 31 00:46:01 2025 GMT
        Subject: CN=97D05E7B4CCA1EED5615FB7B8CB6F3027727877D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:70:43:75:85:34:d6:08:b3:da:c5:4f:b5:
                    59:75:56:9b:9f:31:a3:ee:cb:36:5c:2b:0a:0f:1e:
                    31:d2:1b:86:1f:05:27:99:2e:8d:bd:df:12:bd:a8:
                    13:de:88:86:b3:14:e4:99:89:36:cb:a7:fd:be:58:
                    f3:44:91:02:d2:18:c3:d9:72:d5:e4:9d:7f:85:09:
                    59:53:7a:4d:01:b5:b9:12:81:b9:06:c4:59:67:9c:
                    e8:b9:b4:d2:c9:f6:89:99:0a:ce:80:8c:ca:89:0c:
                    ba:40:93:32:c6:68:1b:a4:3d:78:a7:79:ee:6d:08:
                    65:74:4b:92:de:ba:9c:25:d7:4c:8f:32:33:74:54:
                    fd:2f:86:1b:ef:77:25:f3:de:fd:e1:d2:ad:d5:4d:
                    2e:a7:e3:ee:4e:ba:ca:74:56:4f:69:1d:e1:bc:72:
                    00:b6:82:6f:a1:2a:86:fc:76:23:7b:c0:52:03:f6:
                    5b:89:9c:0d:dd:2d:3e:66:b3:07:d9:b7:0e:f5:ba:
                    67:30:c1:2a:a0:8a:fb:7f:03:f1:ea:0e:05:e9:a5:
                    8f:8d:1e:c1:35:9c:d9:8f:f8:0e:35:2a:74:a6:dd:
                    a6:43:1d:f3:83:98:a6:3e:05:fc:3f:dd:b6:be:d3:
                    3a:0b:d0:46:d8:89:a2:6b:cb:ab:b9:cc:c1:3d:47:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:D0:5E:7B:4C:CA:1E:ED:56:15:FB:7B:8C:B6:F3:02:77:27:87:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/97D05E7B4CCA1EED5615FB7B8CB6F3027727877D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.132.0/22
                IPv6:
                  2804:54e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268676

    Signature Algorithm: sha256WithRSAEncryption
         09:66:b5:f4:d7:8d:d0:7c:6a:2c:0a:3f:e1:2e:ec:96:75:2d:
         b3:3f:97:1c:a6:6c:dd:38:11:1c:e4:b3:95:90:dc:a9:91:e9:
         58:3f:9e:71:b9:7c:d0:f8:ec:ad:53:8c:c6:95:fa:32:a7:24:
         bc:0f:5a:26:34:d7:c2:98:6f:f7:28:b1:6c:87:72:89:76:86:
         c2:84:e6:8c:b5:21:19:ff:19:21:12:98:1e:8a:5d:c3:a4:91:
         d1:90:f4:ff:35:13:dd:de:ab:a7:89:58:8a:21:9d:65:d4:96:
         d7:fd:18:46:01:2f:03:c8:d6:3d:93:4e:d2:67:0f:57:4a:7a:
         3a:4c:07:02:ba:27:ce:3d:3a:10:1a:51:93:42:d1:3d:dd:61:
         94:05:59:b4:e1:d4:aa:95:73:34:8b:4d:1f:26:0b:4c:c4:27:
         90:5e:c9:97:8c:0d:a2:d9:a7:fb:ce:e7:0c:75:ae:90:c4:7a:
         db:58:23:56:b6:7c:bd:a5:b9:8c:05:f7:c7:86:6f:b7:bd:36:
         0a:b8:79:b2:6d:68:24:c9:8d:b0:ec:bc:c6:54:02:cd:05:0b:
         58:b8:a4:ac:90:93:75:61:e2:fe:0d:3b:49:e7:39:86:17:ab:
         7e:5b:cb:f8:a0:ba:a1:b0:42:53:96:11:38:cb:9d:f8:45:7b:
         b9:da:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org