Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7D91C254433170BCBEE3E88D95242D23B207E56.cer
File:                     D7D91C254433170BCBEE3E88D95242D23B207E56.cer (raw, json)
Hash identifier:          o1544ocrqACEUH7YfXyZAIBTEpy6SZwDvmiyq920m9s=
Subject key identifier:   D7:D9:1C:25:44:33:17:0B:CB:EE:3E:88:D9:52:42:D2:3B:20:7E:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4323B9785E240CF37423CF6E4E1B26BF0D8FCEAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/D7D91C254433170BCBEE3E88D95242D23B207E56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 14:19:42 +0000
Certificate not after:    Mon 27 Jan 2025 14:24:42 +0000
Subordinate resources:    AS: 265140
                          IP: 143.255.0.0/22
                          IP: 2804:2b34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:23:b9:78:5e:24:0c:f3:74:23:cf:6e:4e:1b:26:bf:0d:8f:ce:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 14:19:42 2024 GMT
            Not After : Jan 27 14:24:42 2025 GMT
        Subject: CN=D7D91C254433170BCBEE3E88D95242D23B207E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:98:1c:11:30:6a:56:06:f4:b6:17:14:2b:
                    34:8b:e8:7c:81:fb:a2:9d:06:17:9c:b6:15:c2:f8:
                    58:3a:6b:34:da:6e:01:03:bc:2d:44:6f:66:d0:20:
                    2e:59:ba:df:ce:da:84:c8:bd:81:71:df:c3:09:d1:
                    11:72:0d:1f:7f:9e:a0:f4:09:9b:b6:e5:5b:47:49:
                    44:59:3f:4a:2a:7b:78:ee:f1:93:a1:14:a1:80:59:
                    f2:7f:27:6d:1e:d5:29:fc:99:72:8f:10:ad:9e:ef:
                    07:60:58:65:e7:3f:b8:91:c2:29:6d:46:f1:df:ee:
                    c3:63:4b:59:69:f6:b8:f7:82:01:2e:2f:d4:4d:24:
                    71:25:5f:ba:ce:ef:90:61:64:53:ba:9e:9e:3c:2f:
                    1b:f5:c0:a1:4a:db:7d:41:34:9c:4b:5d:f2:d8:4c:
                    7c:25:c5:d1:ba:37:e6:29:76:76:f9:16:ad:ee:4e:
                    48:fb:ff:f2:d5:22:a7:2b:9a:86:7a:35:c4:7d:70:
                    6b:fb:b6:ac:f0:68:bf:f4:87:38:87:5b:5d:a6:63:
                    b9:4a:db:3d:36:7a:d1:1d:12:bb:04:8c:eb:a5:f4:
                    c8:bb:c3:9c:88:97:07:18:c3:cd:7c:6d:77:ed:30:
                    32:f8:65:28:43:eb:42:2a:3f:22:1f:72:33:aa:bc:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:D9:1C:25:44:33:17:0B:CB:EE:3E:88:D9:52:42:D2:3B:20:7E:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/D7D91C254433170BCBEE3E88D95242D23B207E56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/22
                IPv6:
                  2804:2b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265140

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:69:9d:cf:65:08:e8:12:b0:51:77:db:a2:5c:f5:e2:24:
         c6:92:02:f5:3c:83:81:bf:85:f0:b9:34:a6:48:0e:9d:ec:db:
         88:4d:69:6f:99:4b:d8:68:dc:ef:0d:86:d6:d8:2c:59:f7:3e:
         f1:c4:17:13:d7:0e:07:b5:fc:17:d6:3b:3f:a9:92:14:43:67:
         e4:5f:24:05:61:30:0c:37:a4:00:88:32:94:d3:dd:59:cf:f4:
         1c:fa:64:8e:91:e4:98:e8:ce:08:eb:6f:51:01:7e:42:c5:d7:
         ab:8a:35:09:3d:42:69:85:5b:f8:02:6c:99:a8:ee:64:d1:da:
         9d:33:e1:cc:47:a6:7d:c9:6f:38:cb:6b:e1:bd:cb:1e:90:1b:
         0a:f7:c0:64:f0:10:26:f1:7b:31:65:59:98:dd:30:d9:99:47:
         21:46:4a:59:0c:38:86:37:e2:49:44:6f:03:e7:09:aa:78:a6:
         5d:b1:b8:25:6c:9e:9d:cd:c9:fc:9f:af:ca:63:30:49:38:c3:
         02:e8:dd:12:aa:8a:25:cf:ee:91:93:05:14:a1:03:3d:98:d0:
         11:92:94:fc:ed:02:36:76:29:a1:a0:2a:92:bf:7c:19:c0:a5:
         47:96:ec:8e:fb:bc:fe:59:fb:5d:a3:da:df:73:80:a2:80:37:
         03:f9:fe:dd
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQyO5eF4kDPN0I89uThsmvw2PzqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjkxNDE5NDJaFw0yNTAxMjcxNDI0NDJaMDMxMTAvBgNV
BAMTKEQ3RDkxQzI1NDQzMzE3MEJDQkVFM0U4OEQ5NTI0MkQyM0IyMDdFNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/X5gcETBqVgb0thcUKzSL6HyB
+6KdBhecthXC+Fg6azTabgEDvC1Eb2bQIC5Zut/O2oTIvYFx38MJ0RFyDR9/nqD0
CZu25VtHSURZP0oqe3ju8ZOhFKGAWfJ/J20e1Sn8mXKPEK2e7wdgWGXnP7iRwilt
RvHf7sNjS1lp9rj3ggEuL9RNJHElX7rO75BhZFO6np48Lxv1wKFK231BNJxLXfLY
THwlxdG6N+Ypdnb5Fq3uTkj7//LVIqcrmoZ6NcR9cGv7tqzwaL/0hziHW12mY7lK
2z02etEdErsEjOul9Mi7w5yIlwcYw818bXftMDL4ZShD60IqPyIfcjOqvFQrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX2RwlRDMXC8vu
PojZUkLSOyB+VjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84bk01a05WRVB5OXZENWRUY1FjZE5CeXV4cGQybkh5NFMz
amtVcUhSS0Rnbi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRT
M2prVXFIUktEZ24vMC9EN0Q5MUMyNTQ0MzMxNzBCQ0JFRTNFODhEOTUyNDJEMjNC
MjA3RTU2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKP/wAwDQQCAAIwBwMF
ACgEKzQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAu0MA0GCSqGSIb3DQEBCwUA
A4IBAQCn32mdz2UI6BKwUXfbolz14iTGkgL1PIOBv4XwuTSmSA6d7NuITWlvmUvY
aNzvDYbW2CxZ9z7xxBcT1w4HtfwX1js/qZIUQ2fkXyQFYTAMN6QAiDKU091Zz/Qc
+mSOkeSY6M4I629RAX5CxderijUJPUJphVv4AmyZqO5k0dqdM+HMR6Z9yW84y2vh
vcsekBsK98Bk8BAm8XsxZVmY3TDZmUchRkpZDDiGN+JJRG8D5wmqeKZdsbglbJ6d
zcn8n6/KYzBJOMMC6N0Sqoolz+6RkwUUoQM9mNARkpT87QI2dimhoCqSv3wZwKVH
luyO+7z+Wftdo9rfc4CigDcD+f7d
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org