Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D960B3DFF2B327FC20FF8A47A4C2AD6670494510.cer
File:                     D960B3DFF2B327FC20FF8A47A4C2AD6670494510.cer (raw, json)
Hash identifier:          QshuEep36ZhgpL+gv0WOCAgYO6NvouuzVP96yJnGybI=
Subject key identifier:   D9:60:B3:DF:F2:B3:27:FC:20:FF:8A:47:A4:C2:AD:66:70:49:45:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0DB34B194038AB649768B70C02A154E226618856
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/D960B3DFF2B327FC20FF8A47A4C2AD6670494510.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Jun 2022 15:53:03 +0000
Certificate not after:    Mon 26 Jun 2023 15:58:03 +0000
Subordinate resources:    AS: 267214
                          IP: 45.230.160.0/22
                          IP: 2804:4a08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b3:4b:19:40:38:ab:64:97:68:b7:0c:02:a1:54:e2:26:61:88:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 27 15:53:03 2022 GMT
            Not After : Jun 26 15:58:03 2023 GMT
        Subject: CN=D960B3DFF2B327FC20FF8A47A4C2AD6670494510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:07:23:a3:5a:73:d0:b1:89:4c:67:0f:28:
                    13:73:49:f5:c5:f9:dd:e5:bc:e3:b7:54:96:28:81:
                    24:15:d0:9d:72:e2:c0:44:30:bc:e5:c8:0a:89:5c:
                    5c:08:7a:f7:d8:73:ba:e2:71:cb:61:0d:a4:0a:b6:
                    80:35:f6:50:d1:bc:ad:de:da:f1:9a:e4:06:ee:21:
                    a7:2e:e7:8a:05:e4:7e:14:63:35:d5:38:35:fd:38:
                    92:d4:39:50:60:cf:93:18:7b:e4:ff:bf:24:5f:2f:
                    31:e0:35:1c:5a:c0:9f:b1:9d:b1:d8:56:bb:5a:d2:
                    3e:c7:11:97:05:5c:68:9b:22:87:5a:62:74:1a:bf:
                    be:ce:bc:12:4f:32:4f:e7:00:29:89:fb:15:cb:da:
                    df:a7:be:47:32:16:c7:d8:d8:e1:ef:97:c3:0d:c4:
                    00:0a:96:1c:be:e8:42:3b:0d:c5:6b:51:9c:fc:f9:
                    3e:f5:c3:a5:a2:dd:1c:75:ea:e8:74:8b:3b:a4:4e:
                    f1:e5:88:2a:69:6c:9f:07:d1:1d:d6:d5:ac:cb:d5:
                    ff:de:0b:b9:a2:ec:4e:a6:bc:8d:de:8c:fb:50:0b:
                    04:3b:18:a1:ae:7b:7f:d1:29:1d:23:57:e1:58:e4:
                    8d:33:2a:13:54:19:2d:da:45:55:4d:7b:3b:95:22:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:60:B3:DF:F2:B3:27:FC:20:FF:8A:47:A4:C2:AD:66:70:49:45:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/D960B3DFF2B327FC20FF8A47A4C2AD6670494510.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.160.0/22
                IPv6:
                  2804:4a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267214

    Signature Algorithm: sha256WithRSAEncryption
         8f:d8:8a:cb:f2:27:a7:08:40:24:10:8a:d2:b0:66:46:8e:cc:
         9a:b6:73:de:32:d1:48:26:90:ad:33:46:f1:94:ae:e6:9c:c8:
         8b:16:9f:88:db:cf:ca:50:6c:6a:9a:0e:59:91:39:48:be:15:
         76:09:d6:84:4f:a2:e1:5c:7b:15:59:54:29:19:b5:25:0a:ba:
         ae:72:a2:92:21:5d:f3:9e:fe:c7:cf:50:2c:5b:df:8f:53:14:
         9a:19:b9:84:db:60:0a:02:1e:a5:e8:46:ac:8d:c1:85:b9:62:
         f9:ac:50:11:f7:eb:2f:65:20:6a:05:6d:2b:43:d9:32:24:a2:
         ca:06:bf:fc:e1:ab:a2:f1:ca:c9:d2:df:b0:3f:93:61:8d:2a:
         d8:57:9b:36:1c:b2:5f:54:7d:bf:62:c6:48:6b:81:13:e8:68:
         42:3c:2f:af:1f:47:49:2f:fd:67:23:17:d9:f2:53:dc:16:68:
         ba:74:2a:2a:ab:05:50:72:e7:0f:43:43:e6:34:6f:d1:48:7f:
         5e:9a:70:22:5e:77:31:9d:61:c4:19:93:55:8d:fb:37:a8:3a:
         c1:c5:69:4d:48:1c:d3:f5:fc:ad:0d:40:0c:9e:3f:9f:dd:b5:
         b3:44:d6:c9:fb:b4:9e:f7:75:f8:af:2b:d0:b1:0d:be:ee:28:
         a9:45:d5:72
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUDbNLGUA4q2SXaLcMAqFU4iZhiFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA2MjcxNTUzMDNaFw0yMzA2MjYxNTU4MDNaMDMxMTAvBgNV
BAMTKEQ5NjBCM0RGRjJCMzI3RkMyMEZGOEE0N0E0QzJBRDY2NzA0OTQ1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnIQcjo1pz0LGJTGcPKBNzSfXF
+d3lvOO3VJYogSQV0J1y4sBEMLzlyAqJXFwIevfYc7riccthDaQKtoA19lDRvK3e
2vGa5AbuIacu54oF5H4UYzXVODX9OJLUOVBgz5MYe+T/vyRfLzHgNRxawJ+xnbHY
Vrta0j7HEZcFXGibIodaYnQav77OvBJPMk/nACmJ+xXL2t+nvkcyFsfY2OHvl8MN
xAAKlhy+6EI7DcVrUZz8+T71w6Wi3Rx16uh0izukTvHliCppbJ8H0R3W1azL1f/e
C7mi7E6mvI3ejPtQCwQ7GKGue3/RKR0jV+FY5I0zKhNUGS3aRVVNezuVIsy9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZYLPf8rMn/CD/
ikekwq1mcElFEDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81VTlkRWlNRno2SFk5TGthVnQ0VDZGMWc5SkJLMkhIdk5t
SjZaUDh3dGUxNS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81VTlkRWlNRno2SFk5TGthVnQ0VDZGMWc5SkJLMkhIdk5t
SjZaUDh3dGUxNS8wL0Q5NjBCM0RGRjJCMzI3RkMyMEZGOEE0N0E0QzJBRDY2NzA0
OTQ1MTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3moDANBAIAAjAHAwUA
KARKCDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEE84wDQYJKoZIhvcNAQELBQAD
ggEBAI/YisvyJ6cIQCQQitKwZkaOzJq2c94y0UgmkK0zRvGUruacyIsWn4jbz8pQ
bGqaDlmROUi+FXYJ1oRPouFcexVZVCkZtSUKuq5yopIhXfOe/sfPUCxb349TFJoZ
uYTbYAoCHqXoRqyNwYW5YvmsUBH36y9lIGoFbStD2TIkosoGv/zhq6LxysnS37A/
k2GNKthXmzYcsl9Ufb9ixkhrgRPoaEI8L68fR0kv/WcjF9nyU9wWaLp0KiqrBVBy
5w9DQ+Y0b9FIf16acCJedzGdYcQZk1WN+zeoOsHFaU1IHNP1/K0NQAyeP5/dtbNE
1sn7tJ73dfivK9CxDb7uKKlF1XI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org