Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B0A7B58C3E7063B990206ECC7F96CC38D0DDDB25.cer
File:                     B0A7B58C3E7063B990206ECC7F96CC38D0DDDB25.cer (raw, json)
Hash identifier:          lDLeYbsBVjrPY4qA1mgJFm5R/3B3Kx63YjFDRzJqeJQ=
Subject key identifier:   B0:A7:B5:8C:3E:70:63:B9:90:20:6E:CC:7F:96:CC:38:D0:DD:DB:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       355FD909ACAE9CD65B1205A5FB0D6D9087D99117
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/B0A7B58C3E7063B990206ECC7F96CC38D0DDDB25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Nov 2021 13:15:53 +0000
Certificate not after:    Tue 29 Nov 2022 13:20:53 +0000
Subordinate resources:    AS: 272535
                          IP: 201.94.152.0/22
                          IP: 2804:82b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5f:d9:09:ac:ae:9c:d6:5b:12:05:a5:fb:0d:6d:90:87:d9:91:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 13:15:53 2021 GMT
            Not After : Nov 29 13:20:53 2022 GMT
        Subject: CN=B0A7B58C3E7063B990206ECC7F96CC38D0DDDB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:2f:23:77:00:2a:f8:46:73:e6:9c:15:bf:
                    90:b5:86:b3:14:63:70:38:d0:3d:e8:1d:83:67:37:
                    3b:21:46:80:38:0b:3d:56:63:8d:21:63:88:9e:b5:
                    7f:d8:4f:a3:61:69:52:56:42:2b:32:96:3c:25:e9:
                    9f:c3:ae:db:0f:d0:c8:ea:d3:82:7e:8d:8b:5a:59:
                    f2:9f:fd:5c:eb:5c:af:0e:65:b4:1d:45:e8:ca:eb:
                    a2:32:1f:8e:c4:a8:b9:d2:83:0a:ad:f3:b9:21:ee:
                    70:68:ec:23:ef:85:92:4c:ab:c5:45:1b:ae:3d:ba:
                    72:a8:c4:a4:f3:52:3f:50:0b:3e:05:f3:50:20:23:
                    d8:5b:ae:e9:e8:e3:ba:c9:02:35:30:b4:cb:0e:fb:
                    b1:b4:7f:aa:db:02:9f:0b:df:96:7f:6e:7d:d6:66:
                    93:d6:92:04:77:99:72:85:d0:f3:6f:d7:84:3c:9c:
                    90:a0:a1:5a:4d:38:2d:a3:a5:82:d9:5c:67:7c:be:
                    48:00:2d:ab:e3:f0:4e:6d:22:86:46:87:78:67:d4:
                    c7:97:01:1b:8e:31:6e:ff:72:02:d2:2b:57:68:f7:
                    d6:a6:bb:fc:62:1b:08:35:1c:26:54:18:ca:fd:25:
                    9a:c0:74:16:79:0a:53:0e:5b:1c:14:36:59:21:60:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:A7:B5:8C:3E:70:63:B9:90:20:6E:CC:7F:96:CC:38:D0:DD:DB:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/B0A7B58C3E7063B990206ECC7F96CC38D0DDDB25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.152.0/22
                IPv6:
                  2804:82b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272535

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:29:95:f2:7d:4b:38:13:7e:bc:f3:f5:cc:fd:8f:38:6a:
         29:7b:c1:af:2c:b9:77:48:bc:47:b0:66:e9:ce:9f:5a:4b:b8:
         77:96:07:6e:4b:4d:ed:4e:44:ab:44:15:1a:47:75:92:e0:5b:
         06:c5:5a:45:b6:cc:91:24:f3:18:d2:b5:e1:eb:dd:9c:a5:1d:
         ae:02:fd:54:2b:82:79:ee:9f:1d:e2:b4:0a:cb:53:61:a6:23:
         a3:e9:b3:f0:03:cd:ea:74:be:f5:e2:d5:8e:23:54:83:7f:ad:
         98:ca:f0:ad:b6:38:3d:a5:14:29:13:ad:48:d8:88:05:14:da:
         78:b5:c3:b5:88:d6:a2:4c:8d:35:27:85:ae:75:a0:07:99:20:
         57:f6:a6:a1:39:c6:b2:c6:fc:1b:e7:52:0e:6f:bc:1c:9f:28:
         ee:92:23:d2:22:dc:c1:5a:cb:ee:94:29:5c:75:2e:61:7e:c7:
         bc:e2:3b:c1:cb:79:20:4b:57:c7:71:27:a5:dc:69:e0:29:2f:
         4d:94:cd:0b:6c:7e:22:08:8a:23:26:de:02:27:7a:27:50:c3:
         6f:cc:2b:8e:e8:fb:8f:cf:37:1c:c9:fc:0c:55:e0:c2:9a:a8:
         e8:9d:dd:12:14:54:68:4d:7f:3a:99:f3:d7:f0:4b:3d:2e:bd:
         4a:31:88:a1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNV/ZCayunNZbEgWl+w1tkIfZkRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTExMzAxMzE1NTNaFw0yMjExMjkxMzIwNTNaMDMxMTAvBgNV
BAMTKEIwQTdCNThDM0U3MDYzQjk5MDIwNkVDQzdGOTZDQzM4RDBERERCMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOi8jdwAq+EZz5pwVv5C1hrMU
Y3A40D3oHYNnNzshRoA4Cz1WY40hY4ietX/YT6NhaVJWQisyljwl6Z/DrtsP0Mjq
04J+jYtaWfKf/VzrXK8OZbQdRejK66IyH47EqLnSgwqt87kh7nBo7CPvhZJMq8VF
G649unKoxKTzUj9QCz4F81AgI9hbruno47rJAjUwtMsO+7G0f6rbAp8L35Z/bn3W
ZpPWkgR3mXKF0PNv14Q8nJCgoVpNOC2jpYLZXGd8vkgALavj8E5tIoZGh3hn1MeX
ARuOMW7/cgLSK1do99amu/xiGwg1HCZUGMr9JZrAdBZ5ClMOWxwUNlkhYF0XAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwp7WMPnBjuZAg
bsx/lsw40N3bJTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Gb0hmMXFZODNBN3d4WlMxQWZYTTNCUzd4SzNUWmJKVWJq
bnZCVTVpTEpVWS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlVi
am52QlU1aUxKVVkvMC9CMEE3QjU4QzNFNzA2M0I5OTAyMDZFQ0M3Rjk2Q0MzOEQw
REREQjI1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALJXpgwDQQCAAIwBwMF
ACgEgrQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCiXMA0GCSqGSIb3DQEBCwUA
A4IBAQBS4CmV8n1LOBN+vPP1zP2POGope8GvLLl3SLxHsGbpzp9aS7h3lgduS03t
TkSrRBUaR3WS4FsGxVpFtsyRJPMY0rXh692cpR2uAv1UK4J57p8d4rQKy1NhpiOj
6bPwA83qdL714tWOI1SDf62YyvCttjg9pRQpE61I2IgFFNp4tcO1iNaiTI01J4Wu
daAHmSBX9qahOcayxvwb51IOb7wcnyjukiPSItzBWsvulClcdS5hfse84jvBy3kg
S1fHcSel3GngKS9NlM0LbH4iCIojJt4CJ3onUMNvzCuO6PuPzzccyfwMVeDCmqjo
nd0SFFRoTX86mfPX8Es9Lr1KMYih
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org