Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
File:                     D345B6970533DE54D08FAACFB67E42F987FCCE37.cer (raw, json)
Hash identifier:          7ymapNwRuW1Z0UXzmxNeqjnib3Fpm4k7qfliIxVoPvs=
Subject key identifier:   D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49DD9C155EE9BCAA71CC7E81513C185EF78ED689
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.mft
caRepository:             rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Sep 2022 14:15:21 +0000
Certificate not after:    Tue 05 Sep 2023 14:20:21 +0000
Subordinate resources:    AS: 263888
                          IP: 138.204.132.0/22
                          IP: 170.254.72.0/22
                          IP: 2804:2744::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:dd:9c:15:5e:e9:bc:aa:71:cc:7e:81:51:3c:18:5e:f7:8e:d6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 14:15:21 2022 GMT
            Not After : Sep  5 14:20:21 2023 GMT
        Subject: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:83:12:e2:66:29:c3:cf:5a:55:11:2e:75:10:
                    1f:e6:ca:97:dc:c3:b6:3a:66:cb:9d:5c:87:0c:24:
                    2f:2c:81:55:10:04:0c:18:70:71:c6:3d:58:4e:79:
                    67:d3:b4:7f:25:8f:3e:2c:f5:9f:07:69:54:e2:75:
                    d3:7f:2a:69:92:d7:79:6f:15:f1:67:30:2e:43:84:
                    6d:5a:44:fd:e7:fa:d0:5a:5b:9c:58:fc:0e:63:10:
                    66:05:fc:dd:f0:4a:c2:69:59:8b:5c:14:48:e8:da:
                    b9:f2:f7:09:ea:9d:5f:10:47:6a:24:19:84:49:21:
                    68:bb:55:af:2b:8b:67:f1:c5:ff:cc:cb:05:03:a0:
                    66:6f:56:e9:26:82:8b:e3:66:1b:d0:4a:89:e9:0b:
                    7f:74:04:1f:d7:22:01:7d:b2:da:fd:6c:87:e9:5b:
                    d1:fe:11:44:5d:6c:6f:d9:63:74:8b:ef:59:74:97:
                    cf:68:6b:c8:66:40:d2:4b:a2:dd:c9:d8:af:60:bb:
                    86:4a:c6:33:2a:64:bd:7c:aa:22:3a:17:24:4d:a8:
                    17:5f:65:91:6e:cb:4b:9e:ce:96:94:87:4b:aa:2b:
                    8a:07:e0:90:5a:a1:af:18:5a:d3:c8:79:bc:15:64:
                    fc:8e:ca:c4:9f:59:7f:e3:dc:4c:48:1f:4b:56:08:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.132.0/22
                  170.254.72.0/22
                IPv6:
                  2804:2744::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263888

    Signature Algorithm: sha256WithRSAEncryption
         31:47:b5:68:fc:bc:e2:e2:62:f4:b5:33:22:e0:f9:41:06:3b:
         68:ab:de:8d:e1:fd:87:59:e7:8f:71:d9:89:1f:3d:2a:41:dd:
         44:ad:12:16:63:66:b6:c6:31:d1:cc:23:db:a4:f3:63:55:41:
         4e:65:7d:98:3f:8f:ce:58:56:92:1a:37:fa:cf:dc:58:a1:33:
         bd:fa:c3:8a:53:61:62:8b:60:15:73:c0:5c:e3:9a:98:19:35:
         ad:41:ad:f5:68:cf:43:a0:76:f5:c2:61:4b:9e:f6:f0:d3:46:
         4f:59:7d:f1:e4:8b:d2:b4:a5:f1:7d:60:bb:89:c4:98:0f:10:
         55:99:f6:6d:5c:99:41:7c:41:2e:6e:34:8b:d5:93:6a:c1:19:
         ee:88:d4:69:eb:a4:4a:40:79:28:21:d8:8e:2f:95:44:10:f5:
         e5:a7:60:ba:d0:f0:d3:c4:40:b3:d7:25:cd:85:b0:ed:1a:97:
         a8:65:c4:28:c1:41:cb:e7:66:22:39:0b:5a:87:a0:df:bf:dd:
         42:47:38:a0:c8:e6:3b:34:1d:cc:f2:e8:52:1d:9b:39:ae:7c:
         30:32:dc:b9:01:71:88:7e:9f:9d:a7:d8:e8:f8:a0:ae:68:02:
         d4:b9:43:ef:45:78:79:e6:15:28:33:5c:04:5d:45:7d:03:e3:
         25:ba:4d:b8
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUSd2cFV7pvKpxzH6BUTwYXveO1okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MDYxNDE1MjFaFw0yMzA5MDUxNDIwMjFaMDMxMTAvBgNV
BAMTKEQzNDVCNjk3MDUzM0RFNTREMDhGQUFDRkI2N0U0MkY5ODdGQ0NFMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDygxLiZinDz1pVES51EB/mypfc
w7Y6ZsudXIcMJC8sgVUQBAwYcHHGPVhOeWfTtH8ljz4s9Z8HaVTiddN/KmmS13lv
FfFnMC5DhG1aRP3n+tBaW5xY/A5jEGYF/N3wSsJpWYtcFEjo2rny9wnqnV8QR2ok
GYRJIWi7Va8ri2fxxf/MywUDoGZvVukmgovjZhvQSonpC390BB/XIgF9str9bIfp
W9H+EURdbG/ZY3SL71l0l89oa8hmQNJLot3J2K9gu4ZKxjMqZL18qiI6FyRNqBdf
ZZFuy0uezpaUh0uqK4oH4JBaoa8YWtPIebwVZPyOysSfWX/j3ExIH0tWCMjbAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTRbaXBTPeVNCP
qs+2fkL5h/zONzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84MWlWcVo5bjlSU0pTWWF6dzNycXl5Y1VieEoxVndHcmZh
YnNlMmt3VjJnVC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84MWlWcVo5bjlSU0pTWWF6dzNycXl5Y1VieEoxVndHcmZh
YnNlMmt3VjJnVC8wL0QzNDVCNjk3MDUzM0RFNTREMDhGQUFDRkI2N0U0MkY5ODdG
Q0NFMzcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAorMhAMEAqr+SDANBAIA
AjAHAwUAKAQnRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBtAwDQYJKoZIhvcN
AQELBQADggEBADFHtWj8vOLiYvS1MyLg+UEGO2ir3o3h/YdZ549x2YkfPSpB3USt
EhZjZrbGMdHMI9uk82NVQU5lfZg/j85YVpIaN/rP3FihM736w4pTYWKLYBVzwFzj
mpgZNa1BrfVoz0OgdvXCYUue9vDTRk9ZffHki9K0pfF9YLuJxJgPEFWZ9m1cmUF8
QS5uNIvVk2rBGe6I1GnrpEpAeSgh2I4vlUQQ9eWnYLrQ8NPEQLPXJc2FsO0al6hl
xCjBQcvnZiI5C1qHoN+/3UJHOKDI5js0Hczy6FIdmzmufDAy3LkBcYh+n52n2Oj4
oK5oAtS5Q+9FeHnmFSgzXARdRX0D4yW6Tbg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org