Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B961AD590C8A0651EBFEE46F007C9219D59270C9.cer
File:                     B961AD590C8A0651EBFEE46F007C9219D59270C9.cer (raw, json)
Hash identifier:          mqx+5z0uw1Bi/tbyY6cqV8wAWhaeprgLfaPxBs+pIrM=
Subject key identifier:   B9:61:AD:59:0C:8A:06:51:EB:FE:E4:6F:00:7C:92:19:D5:92:70:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C85B8EAB71551BBE8672903E837C0A4113FF2D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4iM1e3ZN7ampov324uiUEt3bnygYTo4UhB54PkhoKQ6/0/B961AD590C8A0651EBFEE46F007C9219D59270C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4iM1e3ZN7ampov324uiUEt3bnygYTo4UhB54PkhoKQ6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Mar 2022 16:06:16 +0000
Certificate not after:    Tue 14 Mar 2023 16:11:16 +0000
Subordinate resources:    AS: 266396
                          IP: 170.239.228.0/22
                          IP: 2804:3734::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:85:b8:ea:b7:15:51:bb:e8:67:29:03:e8:37:c0:a4:11:3f:f2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 16:06:16 2022 GMT
            Not After : Mar 14 16:11:16 2023 GMT
        Subject: CN=B961AD590C8A0651EBFEE46F007C9219D59270C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:52:3e:bc:e8:6d:c7:5f:fd:91:f5:ce:bf:
                    c1:e3:3d:07:d1:e6:fd:61:68:83:35:51:99:93:e6:
                    ac:18:84:cd:ac:92:5f:21:98:f5:b4:c9:af:20:0c:
                    eb:18:b3:c4:3f:38:80:07:f7:68:66:8a:12:1c:4c:
                    f8:8f:6a:4a:79:5a:08:a0:ea:be:55:db:42:6e:c7:
                    87:7e:06:35:b6:18:a9:d1:7a:ac:03:18:98:da:c9:
                    35:7e:7b:0c:2d:12:d1:43:06:37:0a:71:16:d8:bd:
                    87:8c:39:3e:1b:1e:54:e4:08:79:70:78:e0:b8:c5:
                    e5:93:e6:d0:dc:67:89:44:45:84:67:60:07:09:8a:
                    2f:0e:0c:c6:e0:94:fc:b3:d3:c7:3e:8f:e0:9c:65:
                    01:6e:94:24:3b:21:75:74:2b:7a:8c:8c:0b:71:95:
                    75:d9:2d:95:5a:c3:09:c2:52:f6:ae:32:c7:ab:47:
                    b1:7c:84:9a:fb:79:81:19:58:d4:1b:11:7a:f1:65:
                    4b:1d:fd:9f:c5:24:c1:89:4b:b5:d9:20:5c:81:8b:
                    f3:2d:f7:eb:1b:39:3c:ca:f3:e6:ea:5e:2b:78:fc:
                    a6:b6:00:75:0b:09:2a:1b:53:43:1b:62:01:d7:c4:
                    f4:48:72:69:83:6a:28:ce:31:0d:c9:f7:b6:59:2d:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:61:AD:59:0C:8A:06:51:EB:FE:E4:6F:00:7C:92:19:D5:92:70:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4iM1e3ZN7ampov324uiUEt3bnygYTo4UhB54PkhoKQ6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4iM1e3ZN7ampov324uiUEt3bnygYTo4UhB54PkhoKQ6/0/B961AD590C8A0651EBFEE46F007C9219D59270C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.228.0/22
                IPv6:
                  2804:3734::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266396

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:03:5f:5a:d2:85:be:0f:07:59:14:1d:4a:3e:db:02:f0:
         39:df:4f:4e:d6:5e:91:b7:42:14:2b:87:c3:be:86:38:45:42:
         41:82:d6:29:13:ba:74:cb:f1:46:33:ff:83:70:79:64:93:1e:
         75:83:d8:72:d0:26:92:a5:0f:71:1f:60:7c:ea:02:c9:93:ce:
         10:7c:e3:a7:0c:1c:9b:c5:2e:a3:a9:4a:66:52:e6:6c:d5:de:
         1a:7a:02:56:c4:ca:2c:f7:dd:d1:79:e0:27:9f:01:53:5c:70:
         f3:15:04:92:d5:10:5e:f0:96:20:b5:a2:80:2e:e2:17:01:cb:
         90:8c:99:a0:6a:57:dd:fd:c0:50:e7:02:5a:0d:6b:ba:ef:14:
         52:e3:ba:31:7a:86:a5:3a:ed:6f:61:89:37:0d:25:63:1f:2c:
         71:43:27:06:0e:a0:a0:a7:90:a8:b9:7b:75:55:cf:93:66:c6:
         35:6b:f0:f9:30:fc:94:40:4d:08:16:58:39:70:0b:d4:26:40:
         bb:63:fd:31:ad:5c:ce:2f:91:9b:f2:04:22:6c:9d:95:1f:02:
         e4:89:4a:21:1d:03:95:67:bc:d9:2f:6d:64:a3:43:00:2a:b8:
         77:04:6a:7e:75:4b:91:8d:ef:f1:9a:fc:8d:c1:d5:91:ac:24:
         f8:7c:76:92
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUbIW46rcVUbvoZykD6DfApBE/8tkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAzMTUxNjA2MTZaFw0yMzAzMTQxNjExMTZaMDMxMTAvBgNV
BAMTKEI5NjFBRDU5MEM4QTA2NTFFQkZFRTQ2RjAwN0M5MjE5RDU5MjcwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguFI+vOhtx1/9kfXOv8HjPQfR
5v1haIM1UZmT5qwYhM2skl8hmPW0ya8gDOsYs8Q/OIAH92hmihIcTPiPakp5Wgig
6r5V20Jux4d+BjW2GKnReqwDGJjayTV+ewwtEtFDBjcKcRbYvYeMOT4bHlTkCHlw
eOC4xeWT5tDcZ4lERYRnYAcJii8ODMbglPyz08c+j+CcZQFulCQ7IXV0K3qMjAtx
lXXZLZVawwnCUvauMserR7F8hJr7eYEZWNQbEXrxZUsd/Z/FJMGJS7XZIFyBi/Mt
9+sbOTzK8+bqXit4/Ka2AHULCSobU0MbYgHXxPRIcmmDaijOMQ3J97ZZLUxXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5Ya1ZDIoGUev+
5G8AfJIZ1ZJwyTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CNGlNMWUzWk43YW1wb3YzMjR1aVVFdDNibnlnWVRvNFVo
QjU0UGtob0tRNi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQjRpTTFlM1pON2FtcG92MzI0dWlVRXQzYm55Z1lUbzRV
aEI1NFBraG9LUTYvMC9COTYxQUQ1OTBDOEEwNjUxRUJGRUU0NkYwMDdDOTIxOUQ1
OTI3MEM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKq7+QwDQQCAAIwBwMF
ACgENzQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBCcMA0GCSqGSIb3DQEBCwUA
A4IBAQCQCwNfWtKFvg8HWRQdSj7bAvA5309O1l6Rt0IUK4fDvoY4RUJBgtYpE7p0
y/FGM/+DcHlkkx51g9hy0CaSpQ9xH2B86gLJk84QfOOnDBybxS6jqUpmUuZs1d4a
egJWxMos993ReeAnnwFTXHDzFQSS1RBe8JYgtaKALuIXAcuQjJmgalfd/cBQ5wJa
DWu67xRS47oxeoalOu1vYYk3DSVjHyxxQycGDqCgp5CouXt1Vc+TZsY1a/D5MPyU
QE0IFlg5cAvUJkC7Y/0xrVzOL5Gb8gQibJ2VHwLkiUohHQOVZ7zZL21ko0MAKrh3
BGp+dUuRje/xmvyNwdWRrCT4fHaS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org