Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D84123E5011C2ABB886ADBF5F298959AA58330AA.cer
File:                     D84123E5011C2ABB886ADBF5F298959AA58330AA.cer (raw, json)
Hash identifier:          ZiWkprL4K9qJGuwr4zPbz6xKpiWYAfHUo0gVcg9/4hs=
Subject key identifier:   D8:41:23:E5:01:1C:2A:BB:88:6A:DB:F5:F2:98:95:9A:A5:83:30:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45F9D58C75C6057BE5E74A2908F4C8AF86A9C764
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/D84123E5011C2ABB886ADBF5F298959AA58330AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 29 May 2021 20:39:20 +0000
Certificate not after:    Sat 28 May 2022 20:44:20 +0000
Subordinate resources:    AS: 268219
                          IP: 45.236.12.0/22
                          IP: 2804:4dc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f9:d5:8c:75:c6:05:7b:e5:e7:4a:29:08:f4:c8:af:86:a9:c7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 20:39:20 2021 GMT
            Not After : May 28 20:44:20 2022 GMT
        Subject: CN=D84123E5011C2ABB886ADBF5F298959AA58330AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:f0:2e:33:55:ad:87:8b:09:bd:3a:15:a7:
                    f3:c6:e1:1f:b3:9b:a1:04:2b:fd:e9:fd:4e:92:2f:
                    19:92:bc:c8:ff:33:92:41:c1:20:72:ce:d7:49:6f:
                    c9:51:b2:da:11:91:d5:dd:bc:93:52:4f:ad:ec:68:
                    c5:14:7e:52:03:55:c2:da:db:02:f6:0e:60:5d:45:
                    64:b8:98:2d:84:6d:d7:e0:71:04:24:2a:fa:31:5c:
                    c4:7e:a7:b6:e8:c8:1d:39:17:10:08:67:96:c6:2a:
                    d4:59:47:91:cd:a1:c1:cd:7e:d0:47:c0:8a:d5:5c:
                    6b:58:62:ad:0f:45:66:c2:e0:cc:ff:02:04:0c:d9:
                    bb:f1:3f:16:59:b1:01:7e:15:04:e8:e1:31:72:f6:
                    0a:40:39:9c:84:d2:2a:3c:28:de:95:a9:18:6c:5a:
                    73:91:53:19:af:f1:d6:f6:0e:f2:94:b2:0f:a8:1e:
                    db:b8:db:b6:61:82:62:f3:c8:49:35:0a:40:4b:84:
                    8d:e0:e2:83:70:9d:e9:00:83:37:23:25:0b:0f:e3:
                    9d:77:fb:9b:a1:3d:62:30:bd:6f:a6:d6:d2:08:19:
                    fe:cc:65:a9:11:96:fa:6b:11:47:b2:47:6c:c7:e3:
                    cd:50:db:38:93:0a:33:2c:68:0d:63:8a:f8:96:3f:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:41:23:E5:01:1C:2A:BB:88:6A:DB:F5:F2:98:95:9A:A5:83:30:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/D84123E5011C2ABB886ADBF5F298959AA58330AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.12.0/22
                IPv6:
                  2804:4dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268219

    Signature Algorithm: sha256WithRSAEncryption
         48:e4:76:0b:6a:6c:ce:72:c0:1c:cd:55:45:53:c7:bc:04:db:
         65:81:1c:3f:61:96:72:36:4b:47:bf:1e:34:cd:b4:2b:a4:4e:
         1b:2a:4a:9d:0c:a9:4c:2e:2f:08:22:83:d4:6c:92:b4:0e:1f:
         f9:ed:42:a3:de:60:64:7b:d8:3c:03:41:90:a0:96:8b:aa:89:
         a7:ad:71:d5:d4:24:f4:29:24:fa:17:7b:75:38:8c:17:3a:a5:
         77:43:d2:27:ed:47:f1:2f:bc:99:62:27:9e:6a:cf:9b:cc:25:
         58:6b:92:73:0c:17:fa:22:1e:18:75:8b:c2:51:4a:16:98:a6:
         01:75:44:bd:17:c0:d8:23:72:62:d7:ff:fa:7c:bf:5b:de:b4:
         4f:5b:b9:40:ca:d3:78:8c:9a:42:58:e4:26:a9:4d:3c:85:4f:
         5b:01:a9:19:59:73:09:6a:58:b9:d5:1d:88:4e:12:14:3b:7d:
         ba:ee:bd:7c:71:ed:4f:7e:dd:2e:c5:33:2f:a4:89:8e:b4:3d:
         9c:ca:1f:26:1d:7b:7c:b8:24:07:9c:4d:00:9e:5c:85:36:01:
         11:f8:cc:76:5b:2a:bd:5f:7b:f3:66:88:e3:a7:8b:39:51:c9:
         fb:dc:ea:56:f8:b9:b6:6d:76:7f:4a:b5:57:15:07:fa:52:4e:
         99:6f:ac:e6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIURfnVjHXGBXvl50opCPTIr4apx2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTA1MjkyMDM5MjBaFw0yMjA1MjgyMDQ0MjBaMDMxMTAvBgNV
BAMTKEQ4NDEyM0U1MDExQzJBQkI4ODZBREJGNUYyOTg5NTlBQTU4MzMwQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxPAuM1Wth4sJvToVp/PG4R+z
m6EEK/3p/U6SLxmSvMj/M5JBwSByztdJb8lRstoRkdXdvJNST63saMUUflIDVcLa
2wL2DmBdRWS4mC2EbdfgcQQkKvoxXMR+p7boyB05FxAIZ5bGKtRZR5HNocHNftBH
wIrVXGtYYq0PRWbC4Mz/AgQM2bvxPxZZsQF+FQTo4TFy9gpAOZyE0io8KN6VqRhs
WnORUxmv8db2DvKUsg+oHtu427ZhgmLzyEk1CkBLhI3g4oNwnekAgzcjJQsP4513
+5uhPWIwvW+m1tIIGf7MZakRlvprEUeyR2zH481Q2ziTCjMsaA1jiviWP4T1AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYQSPlARwqu4hq
2/XymJWapYMwqjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GcVlyY1dKdjFXNm9iM1VZM0p0b1lVelNMSGk5a05tQjRy
U0t2N1dncVpWRy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRnFZcmNXSnYxVzZvYjNVWTNKdG9ZVXpTTEhpOWtObUI0
clNLdjdXZ3FaVkcvMC9EODQxMjNFNTAxMUMyQUJCODg2QURCRjVGMjk4OTU5QUE1
ODMzMEFBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7AwwDQQCAAIwBwMF
ACgETcgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBe7MA0GCSqGSIb3DQEBCwUA
A4IBAQBI5HYLamzOcsAczVVFU8e8BNtlgRw/YZZyNktHvx40zbQrpE4bKkqdDKlM
Li8IIoPUbJK0Dh/57UKj3mBke9g8A0GQoJaLqomnrXHV1CT0KST6F3t1OIwXOqV3
Q9In7UfxL7yZYieeas+bzCVYa5JzDBf6Ih4YdYvCUUoWmKYBdUS9F8DYI3Ji1//6
fL9b3rRPW7lAytN4jJpCWOQmqU08hU9bAakZWXMJali51R2IThIUO3267r18ce1P
ft0uxTMvpImOtD2cyh8mHXt8uCQHnE0AnlyFNgER+Mx2Wyq9X3vzZojjp4s5Ucn7
3OpW+Lm2bXZ/SrVXFQf6Uk6Zb6zm
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org