Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.cer
File:                     0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.cer (raw, json)
Hash identifier:          6QIBBSBuqtWeJ3ySc4zqRXAenZAJ6Q4/cnzaePadymU=
Subject key identifier:   08:56:D9:09:87:E1:94:45:A0:4E:6C:D6:9F:A1:B6:7E:5A:7E:AA:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       492C101D880E67AD021F7BC0363BE90F6E4665B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 18:20:02 +0000
Certificate not after:    Fri 24 May 2024 18:25:02 +0000
Subordinate resources:    AS: 263666
                          IP: 191.241.48.0/22
                          IP: 2804:1140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2c:10:1d:88:0e:67:ad:02:1f:7b:c0:36:3b:e9:0f:6e:46:65:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 18:20:02 2023 GMT
            Not After : May 24 18:25:02 2024 GMT
        Subject: CN=0856D90987E19445A04E6CD69FA1B67E5A7EAAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:ed:85:4a:ec:c5:9d:4d:a6:83:13:08:cc:
                    f9:4c:01:45:1b:f2:4b:26:61:8c:7b:9c:f3:29:56:
                    10:d5:45:ef:bb:86:cf:40:a9:8f:e9:90:96:96:2b:
                    53:15:34:ae:77:d7:1b:7d:33:5d:7e:87:bd:22:18:
                    a4:2e:ea:f5:15:0a:88:d4:75:f4:6d:63:ab:0d:c6:
                    56:a5:32:5e:b3:54:8d:ab:4a:49:57:e8:4c:97:11:
                    24:f8:e6:d5:19:fc:12:05:0d:21:00:54:88:a9:71:
                    2b:ac:77:4a:4e:7e:08:e1:bf:44:39:1e:2a:1a:74:
                    19:99:08:f5:14:06:e0:95:68:0c:df:5d:cf:1d:af:
                    8f:bd:99:b0:60:be:23:bd:9e:9e:48:d6:d4:c0:70:
                    86:84:ef:76:b8:9d:d6:ad:06:4d:e7:93:cb:99:e6:
                    22:b2:f3:4a:72:49:54:e8:76:8d:98:fa:6e:62:1d:
                    27:71:27:59:d6:7b:7e:e7:45:ec:b9:e3:6e:3c:e4:
                    bb:fe:55:ce:d1:75:c5:c1:2d:2a:53:cd:b8:d0:f4:
                    74:0f:55:46:66:a4:39:94:92:00:74:27:ec:4b:a4:
                    a7:26:8a:f3:9c:9c:c2:c8:8a:a8:74:2e:b3:9f:9f:
                    11:e3:58:4a:53:bc:c9:d4:c2:16:54:c3:aa:07:b2:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:56:D9:09:87:E1:94:45:A0:4E:6C:D6:9F:A1:B6:7E:5A:7E:AA:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.48.0/22
                IPv6:
                  2804:1140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263666

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:b8:c2:6b:46:8d:3e:57:36:85:49:db:fb:47:bf:fb:8b:
         3a:ac:be:59:5a:9d:05:2a:89:03:46:e3:cd:0d:0a:a2:76:17:
         f7:c6:6f:66:00:9e:f5:f5:ff:f9:7e:8c:1a:9f:f6:06:f1:7c:
         10:51:ef:d3:48:a1:0f:e1:48:6f:44:6d:0b:78:24:20:2f:4c:
         36:ed:db:65:ab:74:6d:92:33:71:f7:f8:84:46:72:63:f9:cd:
         ee:ca:4f:b4:60:d0:09:29:32:c3:e2:94:4c:19:fb:8b:bf:2e:
         45:fb:59:c9:3a:22:59:ee:a0:d5:00:01:0a:ae:72:63:75:27:
         dd:00:18:a7:01:03:a7:e6:8a:ed:6f:cc:2c:99:94:cd:90:06:
         74:fb:1d:ee:fb:85:1f:85:2a:6d:3b:48:eb:ff:64:23:a3:1b:
         20:c7:4e:f4:77:18:52:bb:31:8f:a0:4e:3b:b7:b2:d5:fa:4f:
         7e:e8:25:d1:61:54:18:9d:fe:d0:fe:b8:a5:c7:41:ab:69:eb:
         fc:2a:cd:5e:25:71:fb:c4:23:43:12:5d:da:8c:08:6a:89:3a:
         d0:a7:5a:e6:f9:0e:75:47:b6:ad:30:f4:69:65:b4:e2:4d:b1:
         96:46:b1:37:75:a2:77:f4:53:eb:6f:95:64:b4:63:2b:08:12:
         3c:e9:9b:0c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUSSwQHYgOZ60CH3vANjvpD25GZbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjYxODIwMDJaFw0yNDA1MjQxODI1MDJaMDMxMTAvBgNV
BAMTKDA4NTZEOTA5ODdFMTk0NDVBMDRFNkNENjlGQTFCNjdFNUE3RUFBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAre2FSuzFnU2mgxMIzPlMAUUb
8ksmYYx7nPMpVhDVRe+7hs9AqY/pkJaWK1MVNK531xt9M11+h70iGKQu6vUVCojU
dfRtY6sNxlalMl6zVI2rSklX6EyXEST45tUZ/BIFDSEAVIipcSusd0pOfgjhv0Q5
HioadBmZCPUUBuCVaAzfXc8dr4+9mbBgviO9np5I1tTAcIaE73a4ndatBk3nk8uZ
5iKy80pySVTodo2Y+m5iHSdxJ1nWe37nRey542485Lv+Vc7RdcXBLSpTzbjQ9HQP
VUZmpDmUkgB0J+xLpKcmivOcnMLIiqh0LrOfnxHjWEpTvMnUwhZUw6oHsh9zAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIVtkJh+GURaBO
bNafobZ+Wn6q+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CeHkzdnI3UDh6a3FZN0RWcmt0bmpYSE1RbndtYjRxcHZx
a0ZxOUpkbWZzQi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQnh5M3ZyN1A4emtxWTdEVnJrdG5qWEhNUW53bWI0cXB2
cWtGcTlKZG1mc0IvMC8wODU2RDkwOTg3RTE5NDQ1QTA0RTZDRDY5RkExQjY3RTVB
N0VBQUY5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK/8TAwDQQCAAIwBwMF
ACgEEUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAXyMA0GCSqGSIb3DQEBCwUA
A4IBAQAjWrjCa0aNPlc2hUnb+0e/+4s6rL5ZWp0FKokDRuPNDQqidhf3xm9mAJ71
9f/5fowan/YG8XwQUe/TSKEP4UhvRG0LeCQgL0w27dtlq3RtkjNx9/iERnJj+c3u
yk+0YNAJKTLD4pRMGfuLvy5F+1nJOiJZ7qDVAAEKrnJjdSfdABinAQOn5ortb8ws
mZTNkAZ0+x3u+4UfhSptO0jr/2Qjoxsgx070dxhSuzGPoE47t7LV+k9+6CXRYVQY
nf7Q/rilx0Graev8Ks1eJXH7xCNDEl3ajAhqiTrQp1rm+Q51R7atMPRpZbTiTbGW
RrE3daJ39FPrb5VktGMrCBI86ZsM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org