Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer
File:                     D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer (raw, json)
Hash identifier:          FmGAeARtl+vy5j20bl2krxv+5WDcZkvGGbAtecI5O8k=
Subject key identifier:   D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31367D3725A35F2DE3E7AAC9DBE6994401688DDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 12:41:23 +0000
Certificate not after:    Fri 01 Nov 2024 12:46:23 +0000
Subordinate resources:    AS: 266356
                          IP: 45.234.136.0/22
                          IP: 170.239.224.0/22
                          IP: 2804:3690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:36:7d:37:25:a3:5f:2d:e3:e7:aa:c9:db:e6:99:44:01:68:8d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 12:41:23 2023 GMT
            Not After : Nov  1 12:46:23 2024 GMT
        Subject: CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:55:ad:ef:37:11:06:b6:ee:44:79:a7:5c:
                    d6:ff:dd:3f:61:db:55:3d:5b:a1:8e:32:d0:c1:bc:
                    85:f8:39:a9:72:25:3d:cd:b7:c7:1e:0a:bd:46:04:
                    e2:a3:12:7a:8e:46:9c:ff:c9:65:fb:79:04:bc:c5:
                    e8:2e:a6:8f:5b:29:4b:ab:93:77:2d:e5:00:5d:96:
                    71:fe:c2:c7:75:cc:a1:e0:37:69:6b:ce:62:cc:90:
                    22:05:6f:44:40:ac:da:90:77:1c:cf:3a:c0:67:a0:
                    a0:c7:f2:94:0a:87:a6:42:92:21:43:fc:15:e4:b4:
                    a9:02:92:4c:4e:d6:d0:21:46:85:d3:42:6d:93:0a:
                    21:0d:33:0b:b3:98:ae:d9:06:7e:29:d8:1f:ce:76:
                    ca:a6:a2:8e:4d:23:be:af:40:01:14:86:50:c5:0d:
                    42:d6:82:33:e6:66:d2:8e:5e:3a:23:de:46:e6:48:
                    91:12:03:3a:70:1a:04:04:0a:70:44:37:46:44:87:
                    dd:c1:8b:c8:53:e8:94:69:c3:23:ae:24:99:86:4d:
                    10:63:4c:dd:41:98:fb:00:40:04:22:05:95:d1:9c:
                    0e:c3:ff:44:bc:1e:e6:d5:15:b3:61:cf:2d:e2:1f:
                    c4:0d:04:a3:9b:62:51:16:26:9b:f5:d4:5a:0e:38:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.136.0/22
                  170.239.224.0/22
                IPv6:
                  2804:3690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266356

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:22:fe:b0:3f:27:99:69:65:89:aa:06:99:ea:9d:13:70:
         b3:30:55:f3:0b:67:0c:6e:6e:56:0b:92:c1:9d:5f:9e:63:58:
         2d:e6:a2:95:09:f9:69:fd:f0:ea:38:d5:7e:09:29:13:9d:7c:
         07:70:5d:e9:cc:8a:68:bd:72:55:ad:08:84:af:ba:98:a4:cd:
         a6:4d:dd:5f:e0:0c:fa:79:cf:c7:f0:dc:0b:06:ea:fe:4c:3d:
         99:a9:5a:13:12:d6:19:7d:5b:00:15:47:c6:e3:d3:1f:c4:25:
         e1:0f:6c:b5:ef:1a:30:c5:11:8f:6c:60:d8:47:f7:b5:2c:14:
         f8:35:07:59:30:85:79:98:97:56:f0:be:3f:07:1f:b7:da:42:
         f3:0f:39:b8:7c:a8:e3:e2:ea:67:60:44:d8:30:a5:09:79:e3:
         fc:8d:5d:d7:4b:fb:31:0e:e3:fb:01:d6:63:0f:3f:26:70:e4:
         49:a4:7b:f4:21:b4:4b:d5:9d:a4:ec:f9:d8:f4:cb:b1:0f:b0:
         da:32:55:09:29:54:1a:41:0d:85:ea:4b:6f:9f:36:a4:56:2e:
         0b:53:a2:34:ce:73:2b:ea:31:85:02:e3:9b:ad:cb:ce:b0:76:
         c0:70:dc:84:7d:1b:45:8b:af:f8:6c:0f:98:97:59:b9:ad:eb:
         c1:57:ad:54
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUMTZ9NyWjXy3j56rJ2+aZRAFojd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDMxMjQxMjNaFw0yNDExMDExMjQ2MjNaMDMxMTAvBgNV
BAMTKEQ2NEI4OUNCOTFFNTJCQzkzNjVFQTQ4OUQzOTREQjVBRkNGNDI4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5A1Wt7zcRBrbuRHmnXNb/3T9h
21U9W6GOMtDBvIX4OalyJT3Nt8ceCr1GBOKjEnqORpz/yWX7eQS8xegupo9bKUur
k3ct5QBdlnH+wsd1zKHgN2lrzmLMkCIFb0RArNqQdxzPOsBnoKDH8pQKh6ZCkiFD
/BXktKkCkkxO1tAhRoXTQm2TCiENMwuzmK7ZBn4p2B/Odsqmoo5NI76vQAEUhlDF
DULWgjPmZtKOXjoj3kbmSJESAzpwGgQECnBEN0ZEh93Bi8hT6JRpwyOuJJmGTRBj
TN1BmPsAQAQiBZXRnA7D/0S8HubVFbNhzy3iH8QNBKObYlEWJpv11FoOOEE5AgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWS4nLkeUryTZe
pInTlNta/PQo2jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83RlVIOWZuSGZ5eDN4bXh5NEtBVTRvRTZGblNTOVZuQkZM
aXdteWJTYVlOOS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN0ZVSDlmbkhmeXgzeG14eTRLQVU0b0U2Rm5TUzlWbkJG
TGl3bXliU2FZTjkvMC9ENjRCODlDQjkxRTUyQkM5MzY1RUE0ODlEMzk0REI1QUZD
RjQyOERBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIt6ogDBAKq7+AwDQQC
AAIwBwMFACgENpAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBB0MA0GCSqGSIb3
DQEBCwUAA4IBAQBsFiL+sD8nmWlliaoGmeqdE3CzMFXzC2cMbm5WC5LBnV+eY1gt
5qKVCflp/fDqONV+CSkTnXwHcF3pzIpovXJVrQiEr7qYpM2mTd1f4Az6ec/H8NwL
Bur+TD2ZqVoTEtYZfVsAFUfG49MfxCXhD2y17xowxRGPbGDYR/e1LBT4NQdZMIV5
mJdW8L4/Bx+32kLzDzm4fKjj4upnYETYMKUJeeP8jV3XS/sxDuP7AdZjDz8mcORJ
pHv0IbRL1Z2k7PnY9MuxD7DaMlUJKVQaQQ2F6ktvnzakVi4LU6I0znMr6jGFAuOb
rcvOsHbAcNyEfRtFi6/4bA+Yl1m5revBV61U
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org