Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
File:                     CA230167CDE901C71120C1F72B8414F772B2EDD7.cer (raw, json)
Hash identifier:          oZbLzRmJwbyEjt0/5VrLdPVkxLhKmTIiziL6JBXs/zo=
Subject key identifier:   CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FA400D81BB44380AB9FDE9969059D52AC739CF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Mar 2024 00:29:03 +0000
Certificate not after:    Sat 29 Mar 2025 00:34:03 +0000
Subordinate resources:    AS: 264208
                          IP: 138.97.224.0/22
                          IP: 2804:2434::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a4:00:d8:1b:b4:43:80:ab:9f:de:99:69:05:9d:52:ac:73:9c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 00:29:03 2024 GMT
            Not After : Mar 29 00:34:03 2025 GMT
        Subject: CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:81:a1:f1:a8:c0:dd:51:d5:cf:61:6f:27:
                    55:ec:61:1d:6d:e0:ab:3e:c6:17:53:66:a9:e8:54:
                    86:a3:30:77:7b:df:7e:08:75:9e:5f:4c:ab:12:43:
                    f7:04:6a:26:6f:2d:15:ff:41:f2:cf:28:b4:3d:31:
                    3e:9b:26:be:17:62:bf:f3:b5:fd:37:6e:bc:7b:d0:
                    d8:87:22:a7:e5:2d:bb:8f:a5:ac:0a:22:91:3e:06:
                    39:f4:a1:16:d5:27:51:0a:db:02:f2:af:03:cf:96:
                    d3:e3:56:ed:0a:53:27:e9:93:03:da:d1:a1:66:d5:
                    a2:dc:b9:3a:78:c7:db:3c:81:f7:8c:c9:47:43:34:
                    34:6e:a3:2e:77:b0:6b:01:79:d0:88:b0:ab:b5:c8:
                    55:e3:d0:3d:bd:e1:74:94:27:f5:8f:1c:d3:c9:0a:
                    15:4f:e5:b0:db:9f:59:d4:2f:3f:1d:df:13:82:17:
                    dd:22:95:61:7c:a0:10:f9:b3:15:4c:2e:2e:bf:29:
                    62:8a:b5:b0:55:91:d1:0e:cd:50:fb:9b:df:9d:96:
                    0f:9f:bb:07:10:7f:0b:fd:73:a0:51:13:cb:2e:05:
                    8f:31:23:27:fa:ae:ab:0b:11:50:25:6d:58:cc:2d:
                    2b:ae:f8:3f:da:02:3e:ca:8a:7e:f9:92:2d:b0:4f:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.224.0/22
                IPv6:
                  2804:2434::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264208

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:0e:05:4c:ed:6d:16:2d:04:f0:48:32:12:f5:63:59:8e:
         d7:61:28:91:54:1d:9b:8f:57:6e:ec:f9:0f:a9:6b:01:93:cb:
         61:ab:dd:94:c4:0a:7e:d6:c5:5a:00:35:8d:39:ce:8c:90:26:
         67:cb:a7:e8:66:0f:50:5f:aa:e5:1b:f0:43:cd:ab:a3:ac:1a:
         d5:86:74:9d:f6:d6:b5:1c:2f:73:24:56:04:7b:a6:fa:86:e7:
         ba:ca:6d:13:f2:26:fb:92:7d:b2:4b:02:68:2f:1c:3e:49:02:
         a3:fd:84:a8:08:d1:01:e2:8e:16:7a:78:0a:49:08:23:41:5e:
         c3:f6:2a:87:d1:7f:2d:23:92:c0:a0:02:44:78:cd:41:bd:40:
         0e:6b:84:1e:34:55:db:4b:0c:de:0d:5f:19:36:0d:60:4c:f4:
         2f:9f:75:b2:c7:28:9d:1c:55:12:b5:7f:7d:bf:9c:e8:97:0f:
         0d:a4:0c:d7:d4:9d:3c:91:1f:18:75:a5:fb:48:38:b0:b2:a0:
         2d:4b:df:ce:68:c9:8c:d5:a9:61:14:2d:3f:eb:e0:d9:0f:1d:
         08:d3:d5:ab:cc:4d:ba:09:12:36:b8:c9:9b:a5:1f:3d:35:5a:
         ad:c7:e7:5d:68:6d:13:90:75:ca:f9:49:02:6c:aa:8c:dc:c4:
         28:38:13:79
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUb6QA2Bu0Q4Crn96ZaQWdUqxznPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMzAwMDI5MDNaFw0yNTAzMjkwMDM0MDNaMDMxMTAvBgNV
BAMTKENBMjMwMTY3Q0RFOTAxQzcxMTIwQzFGNzJCODQxNEY3NzJCMkVERDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCalYGh8ajA3VHVz2FvJ1XsYR1t
4Ks+xhdTZqnoVIajMHd7334IdZ5fTKsSQ/cEaiZvLRX/QfLPKLQ9MT6bJr4XYr/z
tf03brx70NiHIqflLbuPpawKIpE+Bjn0oRbVJ1EK2wLyrwPPltPjVu0KUyfpkwPa
0aFm1aLcuTp4x9s8gfeMyUdDNDRuoy53sGsBedCIsKu1yFXj0D294XSUJ/WPHNPJ
ChVP5bDbn1nULz8d3xOCF90ilWF8oBD5sxVMLi6/KWKKtbBVkdEOzVD7m9+dlg+f
uwcQfwv9c6BRE8suBY8xIyf6rqsLEVAlbVjMLSuu+D/aAj7Kin75ki2wT8KdAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKIwFnzekBxxEg
wfcrhBT3crLt1zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CU0szS2RmNG9ja1ZYZ0ZtNExHNWtQNXpVNHhSU2c0TTNF
TkIzTDhRa003VS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQlNLM0tkZjRvY2tWWGdGbTRMRzVrUDV6VTR4UlNnNE0z
RU5CM0w4UWtNN1UvMC9DQTIzMDE2N0NERTkwMUM3MTEyMEMxRjcyQjg0MTRGNzcy
QjJFREQ3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKYeAwDQQCAAIwBwMF
ACgEJDQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAgQMA0GCSqGSIb3DQEBCwUA
A4IBAQCCnw4FTO1tFi0E8EgyEvVjWY7XYSiRVB2bj1du7PkPqWsBk8thq92UxAp+
1sVaADWNOc6MkCZny6foZg9QX6rlG/BDzaujrBrVhnSd9ta1HC9zJFYEe6b6hue6
ym0T8ib7kn2ySwJoLxw+SQKj/YSoCNEB4o4WengKSQgjQV7D9iqH0X8tI5LAoAJE
eM1BvUAOa4QeNFXbSwzeDV8ZNg1gTPQvn3WyxyidHFUStX99v5zolw8NpAzX1J08
kR8YdaX7SDiwsqAtS9/OaMmM1alhFC0/6+DZDx0I09WrzE26CRI2uMmbpR89NVqt
x+ddaG0TkHXK+UkCbKqM3MQoOBN5
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org