Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer
File:                     D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer (raw, json)
Hash identifier:          bTy/LqUXIiqZjbQ4ISZ9zNfVhqY+caEFQRKH2c3IFRY=
Subject key identifier:   D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15D6B2AD5AD1F94BA954F4BE376A9D8816B7AC70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 06:58:18 +0000
Certificate not after:    Thu 20 Feb 2025 07:03:18 +0000
Subordinate resources:    AS: 267091
                          IP: 45.229.20.0/22
                          IP: 2804:4800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d6:b2:ad:5a:d1:f9:4b:a9:54:f4:be:37:6a:9d:88:16:b7:ac:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 06:58:18 2024 GMT
            Not After : Feb 20 07:03:18 2025 GMT
        Subject: CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:18:fd:50:36:09:8d:c8:0d:38:71:d3:e6:
                    3c:7f:43:9b:db:5f:4c:e1:0b:3d:e2:93:e1:cb:c6:
                    19:50:35:4a:51:2f:8f:49:d3:6f:a1:42:a1:5d:de:
                    b3:f4:e5:31:39:fb:3f:28:7b:57:c8:78:e4:c0:54:
                    0a:93:95:a5:c0:2b:46:3d:68:48:ad:e5:9e:39:3d:
                    5b:3b:f0:2c:9a:8e:fb:7f:35:37:b6:87:d0:c9:97:
                    8f:d2:8d:04:ea:1f:73:ad:00:aa:4e:e7:88:62:a0:
                    5c:11:cd:12:1c:31:54:1e:ef:e8:31:c5:25:43:0d:
                    8c:87:25:ec:8d:0c:54:c3:6e:26:00:5e:73:a3:00:
                    f9:ba:82:51:ac:a1:4e:e1:47:2a:35:67:a9:f3:f6:
                    dc:bd:ed:82:f8:78:b4:f7:31:4e:f7:84:74:b1:12:
                    37:a5:21:af:bf:59:1e:ec:df:49:b9:41:93:90:ff:
                    6d:ee:67:73:f7:d5:3e:64:a5:2e:f5:cd:ed:2b:77:
                    49:b8:0a:6a:2e:4a:86:55:f2:4a:51:20:10:99:9a:
                    1c:1b:8e:79:95:e4:f3:5f:b5:d4:49:d0:4c:72:7c:
                    2a:fb:3d:ec:e8:54:31:b6:55:7e:25:75:45:06:3c:
                    c3:46:aa:f1:e5:9a:74:c0:48:9c:8f:bb:44:52:b8:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/22
                IPv6:
                  2804:4800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267091

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:fa:6d:94:ed:ef:65:24:1f:a5:70:e0:25:55:ef:ef:63:
         6a:60:fd:ec:5d:34:38:ee:61:10:83:fc:a1:9a:81:ed:06:79:
         ee:d9:e9:78:13:2d:3a:62:e7:b3:46:32:91:31:83:90:b0:41:
         47:df:5c:32:0f:66:22:39:c0:dd:07:eb:4a:a1:4a:a3:24:b1:
         b2:06:b4:6b:bc:d0:53:c0:d4:53:9d:f9:fa:fc:19:70:d6:15:
         35:19:ca:20:91:c7:4d:bf:27:76:0b:c2:ed:56:6b:53:f7:5e:
         27:8c:16:95:1f:e1:3c:89:8c:3a:45:39:40:aa:3f:14:cd:44:
         19:ab:c4:3b:eb:b9:46:ec:35:fd:56:50:fe:45:5d:6a:40:cc:
         a4:8d:b1:38:f0:54:34:bc:49:69:0f:82:a8:07:be:52:a5:0e:
         79:00:6a:6b:be:77:6c:b1:56:4f:8d:a6:51:22:31:91:81:47:
         35:c2:d3:d2:57:76:93:04:0c:f6:c3:a9:e9:30:6e:14:ef:47:
         4b:f8:08:bf:02:6a:c4:51:6d:f4:8f:44:f1:49:be:6a:da:a8:
         62:1c:ad:e0:0a:e1:87:28:1f:96:89:83:06:c7:56:01:11:20:
         cc:ea:e1:04:6d:68:33:25:9c:63:22:2d:68:c1:e8:15:db:10:
         25:ef:21:b3
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFdayrVrR+UupVPS+N2qdiBa3rHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjIwNjU4MThaFw0yNTAyMjAwNzAzMThaMDMxMTAvBgNV
BAMTKEQzRDRCNkI2QjdERjJDQzdBQzI4NUUyQTcxMkZGMzk5QTNCNjY3RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiBj9UDYJjcgNOHHT5jx/Q5vb
X0zhCz3ik+HLxhlQNUpRL49J02+hQqFd3rP05TE5+z8oe1fIeOTAVAqTlaXAK0Y9
aEit5Z45PVs78Cyajvt/NTe2h9DJl4/SjQTqH3OtAKpO54hioFwRzRIcMVQe7+gx
xSVDDYyHJeyNDFTDbiYAXnOjAPm6glGsoU7hRyo1Z6nz9ty97YL4eLT3MU73hHSx
EjelIa+/WR7s30m5QZOQ/23uZ3P31T5kpS71ze0rd0m4CmouSoZV8kpRIBCZmhwb
jnmV5PNftdRJ0ExyfCr7PezoVDG2VX4ldUUGPMNGqvHlmnTASJyPu0RSuKK1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTT1La2t98sx6wo
XipxL/OZo7Zn1zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84ZUJ3dFBvZWRQZzk2blo1bzRGa3FxWXBCOU5vOFp6bjdV
ZUM5UGg4cWRHVy8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84ZUJ3dFBvZWRQZzk2blo1bzRGa3FxWXBCOU5vOFp6bjdV
ZUM5UGg4cWRHVy8xL0QzRDRCNkI2QjdERjJDQzdBQzI4NUUyQTcxMkZGMzk5QTNC
NjY3RDcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3lFDANBAIAAjAHAwUA
KARIADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEE1MwDQYJKoZIhvcNAQELBQAD
ggEBADjr+m2U7e9lJB+lcOAlVe/vY2pg/exdNDjuYRCD/KGage0Gee7Z6XgTLTpi
57NGMpExg5CwQUffXDIPZiI5wN0H60qhSqMksbIGtGu80FPA1FOd+fr8GXDWFTUZ
yiCRx02/J3YLwu1Wa1P3XieMFpUf4TyJjDpFOUCqPxTNRBmrxDvruUbsNf1WUP5F
XWpAzKSNsTjwVDS8SWkPgqgHvlKlDnkAamu+d2yxVk+NplEiMZGBRzXC09JXdpME
DPbDqekwbhTvR0v4CL8CasRRbfSPRPFJvmraqGIcreAK4YcoH5aJgwbHVgERIMzq
4QRtaDMlnGMiLWjB6BXbECXvIbM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org