Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB7A76C2666109A977B1A4CC005601156FA43A1A.cer
File:                     CB7A76C2666109A977B1A4CC005601156FA43A1A.cer (raw, json)
Hash identifier:          86Pl5Zxss3hfgr9cogdkahW9c+4uZawtt7/vAJ87xuk=
Subject key identifier:   CB:7A:76:C2:66:61:09:A9:77:B1:A4:CC:00:56:01:15:6F:A4:3A:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52FDFAA06192606A260637E8F295B0C02C16551A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/CB7A76C2666109A977B1A4CC005601156FA43A1A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Jan 2023 23:01:12 +0000
Certificate not after:    Tue 30 Jan 2024 23:06:12 +0000
Subordinate resources:    AS: 268349
                          IP: 45.239.4.0/22
                          IP: 2804:4fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fd:fa:a0:61:92:60:6a:26:06:37:e8:f2:95:b0:c0:2c:16:55:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 23:01:12 2023 GMT
            Not After : Jan 30 23:06:12 2024 GMT
        Subject: CN=CB7A76C2666109A977B1A4CC005601156FA43A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:d0:91:c0:d8:f1:d0:af:51:0f:68:9c:54:
                    cd:44:78:f6:54:4c:47:37:7e:69:c5:27:3e:59:20:
                    65:d3:3c:42:82:a9:84:0f:ad:ce:ee:38:e0:81:b6:
                    36:15:3d:c7:b0:44:d0:7f:a0:c3:42:48:aa:9d:16:
                    75:3b:4d:1e:9e:ad:9a:2e:e2:e2:7e:e3:7b:fa:d1:
                    b7:89:f2:e6:26:d0:d0:8f:29:fb:e7:e2:a2:c0:fa:
                    dc:33:8f:ee:58:dc:b3:8e:0e:07:af:e2:f3:6a:42:
                    ec:2d:17:85:df:33:3c:59:a8:bf:06:7d:43:41:8b:
                    34:df:d2:b5:74:4c:16:b8:41:38:e2:d4:d2:dc:10:
                    8b:c9:9a:3d:2f:89:92:c5:08:4b:a5:03:29:32:f6:
                    29:ab:91:8b:90:e1:22:dd:22:79:50:9d:55:02:90:
                    f8:fd:70:50:03:09:a2:c3:37:a6:89:a8:3b:01:da:
                    84:16:a6:eb:61:7f:14:d8:62:5f:af:79:2e:ee:a7:
                    a7:80:25:1f:ec:8f:29:8f:a4:e9:3f:af:14:39:f0:
                    97:ec:a4:9e:8c:ed:ec:85:04:e8:df:c2:eb:fc:b7:
                    b0:75:f7:d7:41:e1:ab:d1:83:70:df:94:45:5a:f0:
                    cf:5a:89:80:94:e6:5f:0a:1b:93:b8:56:0b:99:13:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:7A:76:C2:66:61:09:A9:77:B1:A4:CC:00:56:01:15:6F:A4:3A:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/CB7A76C2666109A977B1A4CC005601156FA43A1A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.4.0/22
                IPv6:
                  2804:4fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268349

    Signature Algorithm: sha256WithRSAEncryption
         a0:60:f9:43:18:ce:40:f2:5a:36:e8:5e:78:3f:81:d7:b1:cc:
         6c:9b:03:b3:c0:68:66:b7:8c:84:e0:14:27:8c:29:d8:83:61:
         90:a9:3b:48:c2:cc:db:e4:ed:c0:fa:1c:2d:bc:c5:de:79:99:
         32:b0:2a:5b:ba:8d:6a:9b:66:32:a9:2c:b8:8a:ed:e3:96:93:
         4a:5f:3c:0d:83:ab:f8:10:3b:4f:c8:3a:36:33:9f:83:1f:6f:
         7d:73:d4:e6:69:ab:33:bb:0e:7f:fe:96:35:63:68:b9:1b:11:
         52:ff:c8:27:86:dc:c8:5a:74:28:84:c0:01:21:ac:ce:74:a4:
         75:5b:d4:db:68:88:16:05:32:1e:5a:ee:9a:96:43:be:be:ad:
         3b:c4:a8:d2:5f:aa:10:6c:91:77:95:02:18:80:db:a2:57:dd:
         c3:38:27:77:7f:f8:12:51:28:3e:72:8c:e2:7f:49:fd:fd:ea:
         1f:91:5a:dd:a4:fc:3d:8d:c0:df:f9:4b:96:7b:8a:b6:f8:9a:
         c0:37:0c:b5:d4:18:f2:ea:33:39:b3:2e:30:1a:cc:43:13:1e:
         d5:34:12:42:ff:a2:3e:af:fb:4b:34:54:0a:f1:e2:8a:6e:37:
         58:80:87:93:de:b9:57:5b:ca:1b:2a:74:6f:11:62:2a:29:3e:
         bd:58:93:80
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUUv36oGGSYGomBjfo8pWwwCwWVRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMzEyMzAxMTJaFw0yNDAxMzAyMzA2MTJaMDMxMTAvBgNV
BAMTKENCN0E3NkMyNjY2MTA5QTk3N0IxQTRDQzAwNTYwMTE1NkZBNDNBMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1m9CRwNjx0K9RD2icVM1EePZU
TEc3fmnFJz5ZIGXTPEKCqYQPrc7uOOCBtjYVPcewRNB/oMNCSKqdFnU7TR6erZou
4uJ+43v60beJ8uYm0NCPKfvn4qLA+twzj+5Y3LOODgev4vNqQuwtF4XfMzxZqL8G
fUNBizTf0rV0TBa4QTji1NLcEIvJmj0viZLFCEulAyky9imrkYuQ4SLdInlQnVUC
kPj9cFADCaLDN6aJqDsB2oQWputhfxTYYl+veS7up6eAJR/sjymPpOk/rxQ58Jfs
pJ6M7eyFBOjfwuv8t7B199dB4avRg3DflEVa8M9aiYCU5l8KG5O4VguZE4fFAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLenbCZmEJqXex
pMwAVgEVb6Q6GjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83RzNiZzVDb3VpUWZ0UlhMTGdEZEZtSmh4TGpESjhiQ1E0
ZHN6RGF6WGgxRy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83RzNiZzVDb3VpUWZ0UlhMTGdEZEZtSmh4TGpESjhiQ1E0
ZHN6RGF6WGgxRy8wL0NCN0E3NkMyNjY2MTA5QTk3N0IxQTRDQzAwNTYwMTE1NkZB
NDNBMUEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3vBDANBAIAAjAHAwUA
KARPyDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGD0wDQYJKoZIhvcNAQELBQAD
ggEBAKBg+UMYzkDyWjboXng/gdexzGybA7PAaGa3jITgFCeMKdiDYZCpO0jCzNvk
7cD6HC28xd55mTKwKlu6jWqbZjKpLLiK7eOWk0pfPA2Dq/gQO0/IOjYzn4Mfb31z
1OZpqzO7Dn/+ljVjaLkbEVL/yCeG3MhadCiEwAEhrM50pHVb1NtoiBYFMh5a7pqW
Q76+rTvEqNJfqhBskXeVAhiA26JX3cM4J3d/+BJRKD5yjOJ/Sf396h+RWt2k/D2N
wN/5S5Z7irb4msA3DLXUGPLqMzmzLjAazEMTHtU0EkL/oj6v+0s0VArx4opuN1iA
h5PeuVdbyhsqdG8RYiopPr1Yk4A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org