Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87.cer
File:                     D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87.cer (raw, json)
Hash identifier:          3wK1p46vSPZ3wVi6/hhQ5n24orJ4D50ZGbvUyrR6avw=
Subject key identifier:   D7:D7:C1:CD:49:AB:EB:B3:94:E4:AB:FE:9C:F8:F8:15:14:AC:2A:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       650B8A5E115F5AD3C47083790C2489E6F2ABE2C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/0/D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 12:41:16 +0000
Certificate not after:    Thu 15 Aug 2024 12:46:16 +0000
Subordinate resources:    AS: 268232
                          IP: 45.236.56.0/22
                          IP: 2804:4dfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0b:8a:5e:11:5f:5a:d3:c4:70:83:79:0c:24:89:e6:f2:ab:e2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 12:41:16 2023 GMT
            Not After : Aug 15 12:46:16 2024 GMT
        Subject: CN=D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:dd:74:87:42:9e:29:f0:f1:92:7f:0a:57:
                    b0:73:6c:3a:ad:b3:4c:18:c7:04:0b:fe:ff:ef:03:
                    96:19:ec:75:b0:9b:4c:15:67:bd:48:bc:70:34:f6:
                    6a:0d:1e:be:00:c8:64:5d:7b:a6:e7:e4:5b:9f:bb:
                    bb:61:3e:21:c9:23:10:1f:1e:d0:aa:c2:fc:5b:08:
                    7d:f7:a0:27:27:5d:58:e6:e7:3a:af:6e:8f:96:e2:
                    49:83:2c:d3:b4:32:9e:8a:61:d9:81:9e:58:c0:41:
                    6a:48:d0:76:32:b1:4d:74:e7:1e:4b:3a:56:fc:59:
                    ff:14:f0:46:64:11:de:87:61:5c:43:9b:94:cc:88:
                    f6:83:af:bd:d9:85:35:b0:52:4b:85:2a:17:29:04:
                    a5:6f:2d:77:45:b2:52:aa:15:cd:23:4a:ed:19:5e:
                    e2:c2:32:3c:bf:c9:90:08:83:69:ef:95:44:9e:a8:
                    19:1b:10:87:83:b7:fb:29:69:6f:58:f1:fc:1a:7c:
                    61:15:8f:ca:06:69:ba:df:ed:75:1f:63:06:54:75:
                    03:43:31:f0:4b:d6:50:27:b1:4f:91:47:9c:cc:22:
                    ae:e9:2b:12:9b:34:c9:30:e4:4e:0b:b6:8a:32:30:
                    b9:3e:11:85:11:2b:8f:00:11:15:bd:15:bb:ec:60:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:D7:C1:CD:49:AB:EB:B3:94:E4:AB:FE:9C:F8:F8:15:14:AC:2A:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/0/D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.56.0/22
                IPv6:
                  2804:4dfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268232

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:ae:fc:dc:af:08:89:88:d9:7b:c1:04:56:57:c9:c1:a6:
         05:31:32:d2:eb:08:07:dd:29:1b:51:04:46:d4:13:b2:82:87:
         d6:4b:e8:08:9a:34:11:78:69:23:2b:f4:bc:d6:1b:8c:c4:6f:
         8e:db:3d:b0:4c:78:1a:f5:79:b7:6a:0c:2f:f0:fa:5c:0d:4f:
         b8:bc:e0:75:37:2f:d8:91:49:5c:eb:2f:76:79:ac:fe:d0:18:
         86:66:60:9f:d6:7d:68:7f:44:55:77:2a:a4:5b:b7:7c:e4:a4:
         82:53:91:ce:b8:7a:44:cd:48:ac:1e:7b:79:40:5c:ba:7f:ee:
         7e:84:54:c9:e7:89:ee:ce:cf:de:40:57:fc:62:b2:4a:43:d1:
         17:6b:ed:e8:49:e3:2d:0d:29:b4:95:77:84:74:10:9d:cf:69:
         7c:5b:e2:40:76:2d:00:d0:88:a1:67:bf:00:f6:fd:3e:eb:fc:
         c8:a8:21:80:7f:fd:b4:88:eb:34:2c:2e:c6:84:e1:42:ad:2e:
         a0:93:39:90:3d:f7:2f:42:34:72:95:e3:8e:bc:1b:d1:88:f1:
         6d:ec:45:d5:5e:82:45:7e:d7:d9:f7:65:74:57:18:d7:3c:85:
         1b:2a:2d:5e:2e:52:38:39:25:55:ff:44:67:8d:28:29:e6:d2:
         e7:92:a5:d8
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUZQuKXhFfWtPEcIN5DCSJ5vKr4skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTcxMjQxMTZaFw0yNDA4MTUxMjQ2MTZaMDMxMTAvBgNV
BAMTKEQ3RDdDMUNENDlBQkVCQjM5NEU0QUJGRTlDRjhGODE1MTRBQzJBODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1It10h0KeKfDxkn8KV7BzbDqt
s0wYxwQL/v/vA5YZ7HWwm0wVZ71IvHA09moNHr4AyGRde6bn5Fufu7thPiHJIxAf
HtCqwvxbCH33oCcnXVjm5zqvbo+W4kmDLNO0Mp6KYdmBnljAQWpI0HYysU105x5L
Olb8Wf8U8EZkEd6HYVxDm5TMiPaDr73ZhTWwUkuFKhcpBKVvLXdFslKqFc0jSu0Z
XuLCMjy/yZAIg2nvlUSeqBkbEIeDt/spaW9Y8fwafGEVj8oGabrf7XUfYwZUdQND
MfBL1lAnsU+RR5zMIq7pKxKbNMkw5E4LtooyMLk+EYURK48AERW9FbvsYCWPAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX18HNSavrs5Tk
q/6c+PgVFKwqhzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82cDF2YVAxU2lXSEVBYXBXaGRKZjFkZmRtVHRZOW1kYlZq
VVN2OEN2bnN6Yi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNnAxdmFQMVNpV0hFQWFwV2hkSmYxZGZkbVR0WTltZGJW
alVTdjhDdm5zemIvMC9EN0Q3QzFDRDQ5QUJFQkIzOTRFNEFCRkU5Q0Y4RjgxNTE0
QUMyQTg3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7DgwDQQCAAIwBwMF
ACgETfwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBfIMA0GCSqGSIb3DQEBCwUA
A4IBAQBN9q783K8IiYjZe8EEVlfJwaYFMTLS6wgH3SkbUQRG1BOygofWS+gImjQR
eGkjK/S81huMxG+O2z2wTHga9Xm3agwv8PpcDU+4vOB1Ny/YkUlc6y92eaz+0BiG
ZmCf1n1of0RVdyqkW7d85KSCU5HOuHpEzUisHnt5QFy6f+5+hFTJ54nuzs/eQFf8
YrJKQ9EXa+3oSeMtDSm0lXeEdBCdz2l8W+JAdi0A0IihZ78A9v0+6/zIqCGAf/20
iOs0LC7GhOFCrS6gkzmQPfcvQjRyleOOvBvRiPFt7EXVXoJFftfZ92V0VxjXPIUb
Ki1eLlI4OSVV/0RnjSgp5tLnkqXY
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org