Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D20A1285FD824B33D201655E524D8DC800C8E98B.cer
File:                     D20A1285FD824B33D201655E524D8DC800C8E98B.cer (raw, json)
Hash identifier:          7ZZua24597j4+QjRDZHVVlxVgBEAeewCsyZC0+TSOJU=
Subject key identifier:   D2:0A:12:85:FD:82:4B:33:D2:01:65:5E:52:4D:8D:C8:00:C8:E9:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01298942E738E78CD762D738E1EE95C07A22F263
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D20A1285FD824B33D201655E524D8DC800C8E98B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 15:13:50 +0000
Certificate not after:    Fri 13 Sep 2024 15:18:50 +0000
Subordinate resources:    AS: 268782
                          IP: 45.172.240.0/22
                          IP: 2804:5a94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:29:89:42:e7:38:e7:8c:d7:62:d7:38:e1:ee:95:c0:7a:22:f2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 15:13:50 2023 GMT
            Not After : Sep 13 15:18:50 2024 GMT
        Subject: CN=D20A1285FD824B33D201655E524D8DC800C8E98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:a8:dc:99:95:84:e5:f8:57:7a:62:b4:32:
                    20:9d:5a:6e:cc:ee:54:a3:66:5f:27:77:86:6c:af:
                    58:7a:fc:1b:bc:c8:b0:fb:69:29:97:e0:c5:0e:9d:
                    02:66:92:95:59:0f:fa:66:c8:c2:1c:7e:51:26:dd:
                    3b:b1:a4:9c:75:a7:f4:d6:c2:6f:6f:61:b5:87:aa:
                    c5:29:d3:e7:20:ce:96:45:5f:cf:a7:ca:31:40:99:
                    23:d6:0f:86:84:90:b5:64:bc:4b:92:95:0b:1d:f2:
                    59:64:7c:c6:9d:63:11:8d:62:bd:fd:48:03:89:ef:
                    de:82:61:e9:34:c0:af:e2:f5:b7:c9:be:4c:e9:5b:
                    a7:85:fd:b0:6d:2d:ff:63:f4:79:44:ea:d9:4a:90:
                    43:eb:df:93:a8:44:4a:68:6a:9f:99:71:33:85:1e:
                    73:56:f1:06:fa:4f:31:39:75:d9:76:73:e5:c9:cc:
                    2e:a0:ae:36:79:37:a8:99:94:f6:6a:53:e7:c9:04:
                    04:2e:2e:fa:fc:bf:b1:e5:98:ff:7d:a5:3c:9b:af:
                    ff:54:80:5c:86:7d:2b:26:b7:f4:c6:18:ac:13:6a:
                    5f:2e:44:69:cf:f2:f8:8f:a0:f9:8c:3a:ad:9e:e8:
                    39:2e:07:14:02:bd:37:e2:f1:60:0f:61:d2:55:d3:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:0A:12:85:FD:82:4B:33:D2:01:65:5E:52:4D:8D:C8:00:C8:E9:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D20A1285FD824B33D201655E524D8DC800C8E98B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.240.0/22
                IPv6:
                  2804:5a94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268782

    Signature Algorithm: sha256WithRSAEncryption
         2a:83:6d:66:de:25:25:63:8e:16:71:cc:16:e6:3c:e9:74:af:
         b3:b8:66:97:b4:2b:bf:fe:d8:aa:61:53:fe:83:6c:de:96:8b:
         89:64:51:7d:0b:5e:c1:a3:cd:5c:9e:43:92:10:3f:85:b3:7b:
         cb:c9:80:83:d4:f4:49:b1:cd:07:28:e6:3f:81:b7:1a:d3:26:
         60:51:32:80:ac:d3:03:0a:ef:bb:8d:df:dd:43:d4:c2:aa:e9:
         23:34:6b:2f:75:e6:19:07:ef:9f:06:23:4d:22:30:42:43:a7:
         74:d5:02:98:14:d6:24:34:a5:ff:3e:eb:15:d1:ce:f4:52:f0:
         f0:57:e8:94:a9:55:d8:3a:a7:26:47:f9:16:6b:bc:11:0a:e2:
         e1:0a:82:1e:e5:01:3b:15:b1:b2:e3:4f:f7:fa:67:19:4b:cd:
         ed:55:cb:2a:2c:64:50:84:64:94:c0:2e:9f:01:5f:6b:9d:6b:
         8c:dc:12:6d:84:88:61:9c:66:06:2a:54:78:3f:b5:b3:5d:04:
         77:b6:54:5a:8f:6a:20:dd:30:b6:1c:cf:c0:14:f9:55:cc:f3:
         64:d0:14:63:23:c3:e6:58:cf:54:f2:d2:89:e1:32:22:a3:aa:
         ee:13:34:04:b6:8b:64:6e:10:46:80:a2:75:bd:68:be:2f:40:
         ed:32:06:d1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUASmJQuc454zXYtc44e6VwHoi8mMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTUxNTEzNTBaFw0yNDA5MTMxNTE4NTBaMDMxMTAvBgNV
BAMTKEQyMEExMjg1RkQ4MjRCMzNEMjAxNjU1RTUyNEQ4REM4MDBDOEU5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC716jcmZWE5fhXemK0MiCdWm7M
7lSjZl8nd4Zsr1h6/Bu8yLD7aSmX4MUOnQJmkpVZD/pmyMIcflEm3TuxpJx1p/TW
wm9vYbWHqsUp0+cgzpZFX8+nyjFAmSPWD4aEkLVkvEuSlQsd8llkfMadYxGNYr39
SAOJ796CYek0wK/i9bfJvkzpW6eF/bBtLf9j9HlE6tlKkEPr35OoREpoap+ZcTOF
HnNW8Qb6TzE5ddl2c+XJzC6grjZ5N6iZlPZqU+fJBAQuLvr8v7HlmP99pTybr/9U
gFyGfSsmt/TGGKwTal8uRGnP8viPoPmMOq2e6DkuBxQCvTfi8WAPYdJV09eFAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSChKF/YJLM9IB
ZV5STY3IAMjpizAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84eVJOYVNUQ0taOWJrb2FGd2VGTGpUc3JHRzZ5S2JBZnlk
ZDZqUjZtaUpabi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5
ZGQ2alI2bWlKWm4vMC9EMjBBMTI4NUZEODI0QjMzRDIwMTY1NUU1MjREOERDODAw
QzhFOThCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItrPAwDQQCAAIwBwMF
ACgEWpQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBnuMA0GCSqGSIb3DQEBCwUA
A4IBAQAqg21m3iUlY44WccwW5jzpdK+zuGaXtCu//tiqYVP+g2zelouJZFF9C17B
o81cnkOSED+Fs3vLyYCD1PRJsc0HKOY/gbca0yZgUTKArNMDCu+7jd/dQ9TCqukj
NGsvdeYZB++fBiNNIjBCQ6d01QKYFNYkNKX/PusV0c70UvDwV+iUqVXYOqcmR/kW
a7wRCuLhCoIe5QE7FbGy40/3+mcZS83tVcsqLGRQhGSUwC6fAV9rnWuM3BJthIhh
nGYGKlR4P7WzXQR3tlRaj2og3TC2HM/AFPlVzPNk0BRjI8PmWM9U8tKJ4TIio6ru
EzQEtotkbhBGgKJ1vWi+L0DtMgbR
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org