Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.cer
File:                     B7DB3E0A126651244960D7A1605514B31F2F15AE.cer (raw, json)
Hash identifier:          YS0m1odpTONUXNaOZi6lKfF4d75cPkwXbhmSaLEeVO0=
Subject key identifier:   B7:DB:3E:0A:12:66:51:24:49:60:D7:A1:60:55:14:B3:1F:2F:15:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C45C077CC81BBC691AF2B85112044D99CBB51B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 16:42:37 +0000
Certificate not after:    Fri 14 Feb 2025 16:47:37 +0000
Subordinate resources:    AS: 268027
                          IP: 45.168.36.0/22
                          IP: 2804:56d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:45:c0:77:cc:81:bb:c6:91:af:2b:85:11:20:44:d9:9c:bb:51:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 16:42:37 2024 GMT
            Not After : Feb 14 16:47:37 2025 GMT
        Subject: CN=B7DB3E0A126651244960D7A1605514B31F2F15AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:40:de:5c:d4:4b:aa:4d:9d:3e:3e:97:c6:
                    66:b6:df:7e:cc:46:08:46:d7:b5:2b:0a:29:3d:09:
                    4b:ac:c5:fb:52:c9:ae:d3:37:bd:b7:9b:45:0b:8f:
                    c8:71:7e:1d:74:8b:8a:7b:d3:4d:e6:0f:3a:04:16:
                    70:36:db:a0:b3:cf:a3:2f:41:1b:14:83:10:a2:0e:
                    95:6a:61:ae:38:61:60:7a:0e:27:2c:11:2a:11:58:
                    b9:63:30:fa:38:54:d8:6f:9f:b4:a9:77:48:63:cf:
                    ab:7f:a8:af:01:2b:f9:42:ba:0e:5b:0c:6b:5c:17:
                    b4:ca:a7:6c:a2:a6:ea:42:e7:a2:bc:42:54:2c:85:
                    be:56:7b:a8:11:d7:8f:e4:1a:c5:8b:96:0c:03:96:
                    8c:68:53:43:43:3e:e3:f5:7d:6e:0d:86:7a:78:9a:
                    b9:4d:bd:60:1f:7a:b5:b9:93:ea:fc:bf:da:b2:fc:
                    b8:17:74:d0:fc:1f:30:9d:d9:76:25:08:55:dc:28:
                    ed:8e:f9:0c:68:b0:29:7e:fc:c6:67:64:b1:07:71:
                    bf:ec:8e:0d:b2:4d:c8:a7:c1:73:14:dc:1f:b9:2b:
                    25:16:21:e6:9e:93:09:14:42:b2:d7:2e:e0:0f:f3:
                    2e:5d:30:ef:39:a5:84:07:8c:10:8c:5a:f2:fb:a0:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:DB:3E:0A:12:66:51:24:49:60:D7:A1:60:55:14:B3:1F:2F:15:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.36.0/22
                IPv6:
                  2804:56d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268027

    Signature Algorithm: sha256WithRSAEncryption
         87:73:2d:d7:06:94:a5:e0:58:ec:13:68:15:0b:ee:c6:54:d3:
         da:f9:e2:d3:7e:00:28:f4:1b:67:a4:89:92:38:c9:5c:1e:fa:
         1c:69:7b:d0:fc:65:9b:9c:75:eb:59:ef:56:38:db:3f:e2:77:
         9b:c8:a3:7c:2e:30:2c:4b:4d:78:26:b8:eb:b8:14:25:7f:9b:
         38:8d:a4:b0:1a:02:09:74:e1:a9:df:82:d1:ef:7b:ce:db:8e:
         fa:33:a7:e2:f1:9d:0e:8c:bc:9a:8f:08:2a:bc:99:16:ba:ac:
         66:b6:38:bd:78:17:b3:d4:fd:18:a1:8a:a2:a0:f3:a0:f6:5d:
         b4:4f:46:6b:d2:6a:e2:7f:03:c3:30:6d:80:23:2b:10:f9:dd:
         4e:ad:b3:17:a2:82:cd:b7:6a:2f:83:82:03:0d:59:1e:a1:21:
         a2:5b:6e:9a:4b:42:f3:b3:dc:dc:81:79:53:39:86:d9:bc:89:
         34:ee:6d:21:68:e5:83:fe:93:69:8e:49:cd:ee:6d:a7:a0:74:
         89:bd:e3:47:05:d4:c5:2e:55:8d:26:37:5b:ec:eb:3e:f2:bc:
         f5:7b:d2:d9:79:a5:8e:53:6c:01:98:df:0b:98:df:15:24:9c:
         17:b1:68:33:79:44:8e:3a:43:ee:a7:c0:a7:58:b3:43:a5:b5:
         4e:35:7f:a8
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUbEXAd8yBu8aRryuFESBE2Zy7UbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTYxNjQyMzdaFw0yNTAyMTQxNjQ3MzdaMDMxMTAvBgNV
BAMTKEI3REIzRTBBMTI2NjUxMjQ0OTYwRDdBMTYwNTUxNEIzMUYyRjE1QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1okDeXNRLqk2dPj6Xxma2337M
RghG17UrCik9CUusxftSya7TN723m0ULj8hxfh10i4p7003mDzoEFnA226Czz6Mv
QRsUgxCiDpVqYa44YWB6DicsESoRWLljMPo4VNhvn7Spd0hjz6t/qK8BK/lCug5b
DGtcF7TKp2yipupC56K8QlQshb5We6gR14/kGsWLlgwDloxoU0NDPuP1fW4Nhnp4
mrlNvWAferW5k+r8v9qy/LgXdND8HzCd2XYlCFXcKO2O+QxosCl+/MZnZLEHcb/s
jg2yTcinwXMU3B+5KyUWIeaekwkUQrLXLuAP8y5dMO85pYQHjBCMWvL7oD8PAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS32z4KEmZRJElg
16FgVRSzHy8VrjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZ1NWV0ZuaVJpV2hGN1VNR1hkelVNQzhxS2R0TXNyS0Y3
MlFmWXJLdWlUZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMmdTVldGbmlSaVdoRjdVTUdYZHpVTUM4cUtkdE1zcktG
NzJRZllyS3VpVGYvMC9CN0RCM0UwQTEyNjY1MTI0NDk2MEQ3QTE2MDU1MTRCMzFG
MkYxNUFFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqCQwDQQCAAIwBwMF
ACgEVtgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBb7MA0GCSqGSIb3DQEBCwUA
A4IBAQCHcy3XBpSl4FjsE2gVC+7GVNPa+eLTfgAo9BtnpImSOMlcHvocaXvQ/GWb
nHXrWe9WONs/4nebyKN8LjAsS014JrjruBQlf5s4jaSwGgIJdOGp34LR73vO2476
M6fi8Z0OjLyajwgqvJkWuqxmtji9eBez1P0YoYqioPOg9l20T0Zr0mrifwPDMG2A
IysQ+d1OrbMXooLNt2ovg4IDDVkeoSGiW26aS0Lzs9zcgXlTOYbZvIk07m0haOWD
/pNpjknN7m2noHSJveNHBdTFLlWNJjdb7Os+8rz1e9LZeaWOU2wBmN8LmN8VJJwX
sWgzeUSOOkPup8CnWLNDpbVONX+o
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org