Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/02F8BE367EF9F64A6B157F9DB73C14CC14D4750B.cer
File:                     02F8BE367EF9F64A6B157F9DB73C14CC14D4750B.cer (raw, json)
Hash identifier:          3YdJMTBStgmFtaZvdRRS4kfwAhENuBuuxXoYPfviMwo=
Subject key identifier:   02:F8:BE:36:7E:F9:F6:4A:6B:15:7F:9D:B7:3C:14:CC:14:D4:75:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F7D827A9CC16D9A2958B2BF8C2A9D830ABED31B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/02F8BE367EF9F64A6B157F9DB73C14CC14D4750B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 20:13:33 +0000
Certificate not after:    Mon 23 Sep 2024 20:18:33 +0000
Subordinate resources:    AS: 265116
                          IP: 170.254.208.0/22
                          IP: 2804:3318::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7d:82:7a:9c:c1:6d:9a:29:58:b2:bf:8c:2a:9d:83:0a:be:d3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 20:13:33 2023 GMT
            Not After : Sep 23 20:18:33 2024 GMT
        Subject: CN=02F8BE367EF9F64A6B157F9DB73C14CC14D4750B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:fa:4d:d4:82:86:aa:ab:a3:87:78:1d:a7:
                    c2:76:e2:55:82:dc:85:70:f7:81:b0:58:c5:5e:49:
                    8e:28:07:1b:18:4c:c0:0e:78:59:ed:8a:63:39:7d:
                    fb:51:2d:7e:e6:2c:0e:6a:b4:aa:93:3f:6f:d9:fb:
                    bc:85:01:6e:9d:0d:a3:ae:7f:6e:6c:71:3d:7e:a7:
                    71:50:3e:9b:13:e3:f7:da:0b:25:6c:94:dd:68:30:
                    35:38:d6:b0:d5:bd:8e:2f:86:4f:81:3c:0f:ab:69:
                    8d:6c:d8:7c:8b:ff:ec:c5:0d:46:58:9a:98:b4:72:
                    22:e9:d5:54:06:d2:a3:61:7d:84:51:70:59:99:a7:
                    64:27:0a:71:84:a6:8f:2a:9c:b5:9e:2b:da:46:49:
                    6d:80:54:0e:09:a0:79:c5:4f:d2:ce:29:a5:ef:d2:
                    ea:33:10:0b:6a:0e:4a:51:23:b2:dd:26:4a:b2:2d:
                    4a:9a:a7:17:e7:5a:af:cb:76:26:e9:d7:f2:6b:d1:
                    dd:f3:b8:93:ee:ca:cd:c4:e9:d2:18:72:19:53:90:
                    01:05:f7:4e:e3:4c:1d:3a:57:fa:37:44:9e:71:af:
                    a5:95:8f:95:86:ae:b3:ee:d1:a6:01:95:12:dd:31:
                    bc:cc:35:0d:22:be:a3:ac:86:0f:4e:c7:40:eb:f7:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:F8:BE:36:7E:F9:F6:4A:6B:15:7F:9D:B7:3C:14:CC:14:D4:75:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/02F8BE367EF9F64A6B157F9DB73C14CC14D4750B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.208.0/22
                IPv6:
                  2804:3318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265116

    Signature Algorithm: sha256WithRSAEncryption
         24:3d:ef:88:d5:2e:43:58:d0:c9:2b:b5:9d:b3:ea:ff:6d:90:
         4f:f8:d2:37:cb:5b:bb:7f:3f:73:19:14:45:4f:3c:0e:76:a7:
         1b:03:fa:9c:60:e8:b5:7a:5a:12:16:2a:e5:82:d4:7d:e6:24:
         b1:1a:c6:64:45:bd:04:3b:26:24:4d:43:73:8e:2c:79:cb:69:
         61:fb:2d:33:49:9b:ca:d9:0e:bc:90:3c:ea:75:dc:2f:4a:b6:
         4a:46:71:ed:41:40:46:f9:b9:13:bf:7a:c7:98:9e:e2:6f:00:
         eb:8a:bf:23:77:bb:78:2a:ea:15:2a:9c:33:af:94:d9:dd:f2:
         9d:08:ca:a4:8b:dc:bf:69:60:68:ab:17:6b:db:d5:32:8f:08:
         d8:27:0d:c0:f5:99:12:a7:b1:2c:b6:19:6b:f0:88:7f:ff:ba:
         55:51:5e:6b:63:01:c1:46:28:16:46:c6:12:f4:ed:d1:89:e2:
         e6:a0:e4:2b:e0:0a:f1:e9:b6:23:59:3c:a6:f1:99:07:89:57:
         90:bd:b5:49:78:c4:55:a4:27:d8:32:70:bb:13:62:92:b0:31:
         4e:70:eb:39:9b:d6:61:ab:65:64:4b:89:c4:50:e9:2f:1f:f0:
         0f:a6:a6:c5:18:8d:d1:48:0a:c0:a5:56:0a:59:25:77:19:2f:
         f2:77:ce:b8
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUD32CepzBbZopWLK/jCqdgwq+0xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjUyMDEzMzNaFw0yNDA5MjMyMDE4MzNaMDMxMTAvBgNV
BAMTKDAyRjhCRTM2N0VGOUY2NEE2QjE1N0Y5REI3M0MxNENDMTRENDc1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1PpN1IKGqqujh3gdp8J24lWC
3IVw94GwWMVeSY4oBxsYTMAOeFntimM5fftRLX7mLA5qtKqTP2/Z+7yFAW6dDaOu
f25scT1+p3FQPpsT4/faCyVslN1oMDU41rDVvY4vhk+BPA+raY1s2HyL/+zFDUZY
mpi0ciLp1VQG0qNhfYRRcFmZp2QnCnGEpo8qnLWeK9pGSW2AVA4JoHnFT9LOKaXv
0uozEAtqDkpRI7LdJkqyLUqapxfnWq/Ldibp1/Jr0d3zuJPuys3E6dIYchlTkAEF
907jTB06V/o3RJ5xr6WVj5WGrrPu0aYBlRLdMbzMNQ0ivqOshg9Ox0Dr9+p9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQC+L42fvn2SmsV
f523PBTMFNR1CzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83b0E0bkt4ZVFTRTc4TnJVMldvcnRIVkV4UkFGeWlRYWNo
OGMzc2VQRjlCVi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN29BNG5LeGVRU0U3OE5yVTJXb3J0SFZFeFJBRnlpUWFj
aDhjM3NlUEY5QlYvMC8wMkY4QkUzNjdFRjlGNjRBNkIxNTdGOURCNzNDMTRDQzE0
RDQ3NTBCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKq/tAwDQQCAAIwBwMF
ACgEMxgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAucMA0GCSqGSIb3DQEBCwUA
A4IBAQAkPe+I1S5DWNDJK7Wds+r/bZBP+NI3y1u7fz9zGRRFTzwOdqcbA/qcYOi1
eloSFirlgtR95iSxGsZkRb0EOyYkTUNzjix5y2lh+y0zSZvK2Q68kDzqddwvSrZK
RnHtQUBG+bkTv3rHmJ7ibwDrir8jd7t4KuoVKpwzr5TZ3fKdCMqki9y/aWBoqxdr
29UyjwjYJw3A9ZkSp7Esthlr8Ih//7pVUV5rYwHBRigWRsYS9O3RieLmoOQr4Arx
6bYjWTym8ZkHiVeQvbVJeMRVpCfYMnC7E2KSsDFOcOs5m9Zhq2VkS4nEUOkvH/AP
pqbFGI3RSArApVYKWSV3GS/yd864
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org