Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer
File:                     CF178172195A182C594FB724DD7B684E9210DA90.cer (raw, json)
Hash identifier:          8eHMoYbySC94rVmKlr7Xk61rM5Hkx938Yb5723WNvRE=
Subject key identifier:   CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B5DA8B8FC1AC412A56B791CBDCFF2A456DB656E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 21:10:09 +0000
Certificate not after:    Fri 25 Oct 2024 21:15:09 +0000
Subordinate resources:    AS: 266608
                          IP: 45.7.196.0/22
                          IP: 2804:3e98::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5d:a8:b8:fc:1a:c4:12:a5:6b:79:1c:bd:cf:f2:a4:56:db:65:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 21:10:09 2023 GMT
            Not After : Oct 25 21:15:09 2024 GMT
        Subject: CN=CF178172195A182C594FB724DD7B684E9210DA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:34:69:62:2e:86:40:11:dd:ff:08:f4:7a:
                    dc:d7:21:91:d5:50:14:fa:b1:f7:05:56:40:29:f8:
                    f9:35:b6:3c:cf:43:23:b5:e1:2e:83:25:ee:c8:00:
                    75:67:b8:ca:56:e7:bf:cb:6d:ef:45:d1:3f:ce:23:
                    64:f1:f2:4c:98:1a:bd:b4:d3:dc:6d:eb:96:d0:2f:
                    82:c2:c3:11:9a:38:26:53:3b:d3:f9:0a:a2:1e:b4:
                    44:b6:2c:73:e0:18:8f:79:01:cc:37:b1:0c:b1:67:
                    2f:46:58:d4:06:5a:ff:e3:3e:e3:e2:cd:62:ed:1d:
                    16:e8:98:3e:bf:67:be:d6:ea:87:b4:91:e5:0a:44:
                    f2:33:a8:2d:b3:f0:9c:6a:a5:80:70:d4:c4:15:e3:
                    6d:dd:00:5a:9e:2d:ca:6c:f3:a9:f5:d6:d4:b2:df:
                    ff:a1:cd:77:0d:18:5f:6e:5d:a7:c2:dd:89:d4:e4:
                    a7:6b:64:8f:a0:30:43:66:db:87:a3:1f:24:ac:c2:
                    ce:3d:e6:ec:81:fd:bc:38:32:36:c7:7d:12:a2:5e:
                    dd:0b:1f:79:3b:17:15:c3:1a:36:8c:7b:05:64:62:
                    56:2f:f3:6f:00:91:9d:12:d9:f1:86:2e:c0:a3:f9:
                    bf:2b:98:17:68:92:70:b4:9b:2b:27:23:34:c4:4b:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.196.0/22
                IPv6:
                  2804:3e98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266608

    Signature Algorithm: sha256WithRSAEncryption
         86:11:79:65:3d:9a:36:b1:80:ef:d2:1d:35:6c:b9:55:99:d9:
         df:7b:2f:ed:a0:7a:9b:c4:83:64:42:b2:9d:8c:ae:88:a8:cf:
         02:76:22:1e:7e:61:26:e3:d3:cf:f0:4c:13:c0:79:e6:d5:0b:
         51:03:df:87:76:34:b9:8b:85:0c:0b:3a:e3:30:5b:88:13:04:
         3a:b4:57:ab:14:7d:f0:ed:59:c0:68:6c:af:ac:08:56:d3:80:
         6a:6d:24:ae:64:4d:72:6b:c4:ef:ba:63:9e:6b:2f:2f:2a:55:
         a5:43:91:23:fa:c8:8b:26:13:be:e5:bd:71:04:12:02:ac:3a:
         a2:1a:1d:95:80:2b:02:23:a8:92:ca:fc:22:43:2a:0f:ec:ee:
         63:d3:9d:de:aa:7a:e5:f2:0a:29:b2:6d:0c:03:5b:92:9f:cd:
         6f:3b:47:69:27:6c:b2:95:94:96:89:e5:26:2e:f6:f9:af:7a:
         c9:0c:9e:81:a4:4f:e5:2d:39:f2:f5:ea:73:41:5b:97:9a:67:
         cd:f0:29:e2:ab:df:f6:bb:f8:bc:26:ee:06:9b:bd:bd:c9:a8:
         c7:ee:42:ad:4e:44:9b:26:17:6a:db:ea:eb:10:b3:d4:07:8b:
         ea:56:35:42:01:a6:33:ac:ee:c2:cf:b7:12:a8:b8:f1:f5:1a:
         eb:05:41:92
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUC12ouPwaxBKla3kcvc/ypFbbZW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjcyMTEwMDlaFw0yNDEwMjUyMTE1MDlaMDMxMTAvBgNV
BAMTKENGMTc4MTcyMTk1QTE4MkM1OTRGQjcyNEREN0I2ODRFOTIxMERBOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFDRpYi6GQBHd/wj0etzXIZHV
UBT6sfcFVkAp+Pk1tjzPQyO14S6DJe7IAHVnuMpW57/Lbe9F0T/OI2Tx8kyYGr20
09xt65bQL4LCwxGaOCZTO9P5CqIetES2LHPgGI95Acw3sQyxZy9GWNQGWv/jPuPi
zWLtHRbomD6/Z77W6oe0keUKRPIzqC2z8JxqpYBw1MQV423dAFqeLcps86n11tSy
3/+hzXcNGF9uXafC3YnU5KdrZI+gMENm24ejHySsws495uyB/bw4MjbHfRKiXt0L
H3k7FxXDGjaMewVkYlYv828AkZ0S2fGGLsCj+b8rmBdoknC0mysnIzTES+mNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPF4FyGVoYLFlP
tyTde2hOkhDakDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85VWpDb3c1cDE1cGJtc3VpNlFhZjZ4QXd3d3JaTFptVzZq
Q0ttbTc3d05vcS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOVVqQ293NXAxNXBibXN1aTZRYWY2eEF3d3dyWkxabVc2
akNLbW03N3dOb3EvMC9DRjE3ODE3MjE5NUExODJDNTk0RkI3MjRERDdCNjg0RTky
MTBEQTkwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItB8QwDQQCAAIwBwMF
ACgEPpgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBFwMA0GCSqGSIb3DQEBCwUA
A4IBAQCGEXllPZo2sYDv0h01bLlVmdnfey/toHqbxINkQrKdjK6IqM8CdiIefmEm
49PP8EwTwHnm1QtRA9+HdjS5i4UMCzrjMFuIEwQ6tFerFH3w7VnAaGyvrAhW04Bq
bSSuZE1ya8TvumOeay8vKlWlQ5Ej+siLJhO+5b1xBBICrDqiGh2VgCsCI6iSyvwi
QyoP7O5j053eqnrl8gopsm0MA1uSn81vO0dpJ2yylZSWieUmLvb5r3rJDJ6BpE/l
LTny9epzQVuXmmfN8Cniq9/2u/i8Ju4Gm729yajH7kKtTkSbJhdq2+rrELPUB4vq
VjVCAaYzrO7Cz7cSqLjx9RrrBUGS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org