Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/07833EE00DABA87DB5F29925F1042F428FD9200E.cer
File:                     07833EE00DABA87DB5F29925F1042F428FD9200E.cer (raw, json)
Hash identifier:          yWsRzGHKjCdXmjmfkneOtNey3G/Nm5UE2tq8Xkq/IEo=
Subject key identifier:   07:83:3E:E0:0D:AB:A8:7D:B5:F2:99:25:F1:04:2F:42:8F:D9:20:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       472181E5133FB8B0DA9DF859DC9366DE39E294B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/07833EE00DABA87DB5F29925F1042F428FD9200E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Mar 2023 15:21:22 +0000
Certificate not after:    Mon 11 Mar 2024 15:26:22 +0000
Subordinate resources:    AS: 264585
                          IP: 138.36.192.0/22
                          IP: 2804:2200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:21:81:e5:13:3f:b8:b0:da:9d:f8:59:dc:93:66:de:39:e2:94:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 15:21:22 2023 GMT
            Not After : Mar 11 15:26:22 2024 GMT
        Subject: CN=07833EE00DABA87DB5F29925F1042F428FD9200E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:9c:34:36:c0:93:68:28:47:7a:88:0f:95:
                    a1:d0:16:1a:49:f2:10:28:ad:cc:4f:fa:aa:f4:3a:
                    fb:1e:68:90:2a:57:72:20:0d:31:1f:a8:4d:3a:c3:
                    f6:63:e0:68:5b:13:c3:34:e4:43:de:51:47:c8:ff:
                    7b:e3:55:63:67:7c:57:ca:67:6a:89:08:fa:2d:55:
                    c4:b0:fd:af:59:3b:36:c4:e0:1f:7b:d5:54:94:58:
                    77:62:63:a4:4b:b0:d4:21:01:03:fb:a2:90:26:7b:
                    38:b8:2f:7c:9d:05:1e:94:3c:b0:1a:50:58:b6:8e:
                    80:b5:34:66:4c:2a:2a:64:7e:1c:45:31:77:6d:7a:
                    47:78:4c:e5:89:e8:ed:3f:d0:59:59:c4:82:83:07:
                    1b:fa:3a:63:73:9b:57:c3:60:e0:c8:0f:a9:92:51:
                    37:d9:a2:b0:aa:e7:63:e7:d2:4d:50:9a:bd:c0:03:
                    20:39:76:a4:58:fa:28:92:fd:7c:2a:bf:e1:d0:c5:
                    a5:f3:47:67:94:69:12:72:be:1f:5a:25:b8:f2:2d:
                    a9:4e:83:8f:ec:d5:59:b1:ba:d9:35:a8:eb:af:f9:
                    36:1a:a5:09:76:cf:08:9e:58:d2:fb:ef:11:e1:e5:
                    a0:23:0d:92:0a:49:a1:59:90:d5:a4:59:e6:8e:3b:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:83:3E:E0:0D:AB:A8:7D:B5:F2:99:25:F1:04:2F:42:8F:D9:20:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/07833EE00DABA87DB5F29925F1042F428FD9200E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/22
                IPv6:
                  2804:2200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264585

    Signature Algorithm: sha256WithRSAEncryption
         b1:c0:0a:f3:a1:53:fe:1e:26:09:0c:3c:2d:be:a0:64:3e:4b:
         75:6f:6e:9d:cc:8d:f2:e7:c5:7f:d9:ed:dd:b6:32:0c:de:11:
         35:0b:28:43:7a:c1:a3:d9:16:2c:75:66:a0:d7:b2:5e:b6:f6:
         61:91:54:dc:ad:57:d7:42:22:90:bf:27:74:9f:ff:fe:14:43:
         23:6c:60:16:df:cb:15:f2:02:c3:b1:05:5c:57:e2:d5:b5:b8:
         55:1e:43:8f:f4:68:e7:73:4e:9e:8c:86:cb:b4:98:23:08:c3:
         05:78:4e:52:25:56:d0:8f:f0:8b:5b:29:2f:9a:ce:97:7e:ce:
         a3:0e:79:d4:a3:73:6e:c5:43:d4:c5:36:27:7e:c8:7d:fa:ed:
         1d:1e:8c:92:08:bb:c3:39:f5:3b:f5:e0:49:3e:17:41:63:ac:
         52:b8:56:61:8b:b5:bf:10:e1:c0:6a:8d:4a:2a:7f:8d:13:ed:
         fa:ac:0e:6a:ab:ea:32:e5:d5:6c:cf:f2:9b:5d:81:9d:e9:a5:
         d9:43:0f:90:31:e9:d9:52:3f:ae:44:85:74:2c:fa:1f:7f:e0:
         4e:5e:cc:60:05:d2:82:f0:e0:fc:69:cd:98:57:77:ad:56:e9:
         98:5b:e1:02:e9:8b:43:3d:84:4c:a1:3d:0c:10:ae:3d:c4:1b:
         45:2a:4f:a8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIURyGB5RM/uLDanfhZ3JNm3jnilLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMTMxNTIxMjJaFw0yNDAzMTExNTI2MjJaMDMxMTAvBgNV
BAMTKDA3ODMzRUUwMERBQkE4N0RCNUYyOTkyNUYxMDQyRjQyOEZEOTIwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOAZw0NsCTaChHeogPlaHQFhpJ
8hAorcxP+qr0OvseaJAqV3IgDTEfqE06w/Zj4GhbE8M05EPeUUfI/3vjVWNnfFfK
Z2qJCPotVcSw/a9ZOzbE4B971VSUWHdiY6RLsNQhAQP7opAmezi4L3ydBR6UPLAa
UFi2joC1NGZMKipkfhxFMXdtekd4TOWJ6O0/0FlZxIKDBxv6OmNzm1fDYODID6mS
UTfZorCq52Pn0k1Qmr3AAyA5dqRY+iiS/Xwqv+HQxaXzR2eUaRJyvh9aJbjyLalO
g4/s1Vmxutk1qOuv+TYapQl2zwieWNL77xHh5aAjDZIKSaFZkNWkWeaOO0TrAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHgz7gDauofbXy
mSXxBC9Cj9kgDjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BSjh4SmRoTlhIWXBYUW56YWh3THp4Z0hSVzc3Z3k4eDNh
enp5ZFFDYnc0My8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BSjh4SmRoTlhIWXBYUW56YWh3THp4Z0hSVzc3Z3k4eDNh
enp5ZFFDYnc0My8wLzA3ODMzRUUwMERBQkE4N0RCNUYyOTkyNUYxMDQyRjQyOEZE
OTIwMEUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAookwDANBAIAAjAHAwUA
KAQiADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECYkwDQYJKoZIhvcNAQELBQAD
ggEBALHACvOhU/4eJgkMPC2+oGQ+S3Vvbp3MjfLnxX/Z7d22MgzeETULKEN6waPZ
Fix1ZqDXsl629mGRVNytV9dCIpC/J3Sf//4UQyNsYBbfyxXyAsOxBVxX4tW1uFUe
Q4/0aOdzTp6Mhsu0mCMIwwV4TlIlVtCP8ItbKS+azpd+zqMOedSjc27FQ9TFNid+
yH367R0ejJIIu8M59Tv14Ek+F0FjrFK4VmGLtb8Q4cBqjUoqf40T7fqsDmqr6jLl
1WzP8ptdgZ3ppdlDD5Ax6dlSP65EhXQs+h9/4E5ezGAF0oLw4PxpzZhXd61W6Zhb
4QLpi0M9hEyhPQwQrj3EG0UqT6g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org