Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/087605E58995955EF04864DADFD60EE0868FF00D.cer
File:                     087605E58995955EF04864DADFD60EE0868FF00D.cer (raw, json)
Hash identifier:          4mSl3I8Xq8R1Cr/E7h81J6J2xTDRMOMmfItIbdlka4Q=
Subject key identifier:   08:76:05:E5:89:95:95:5E:F0:48:64:DA:DF:D6:0E:E0:86:8F:F0:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       286FBCBC8D3599B5A6461FE9F60ED8550FFE2B2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/087605E58995955EF04864DADFD60EE0868FF00D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 21:48:15 +0000
Certificate not after:    Thu 20 Jun 2024 21:53:15 +0000
Subordinate resources:    AS: 264939
                          IP: 168.228.152.0/22
                          IP: 2804:3040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6f:bc:bc:8d:35:99:b5:a6:46:1f:e9:f6:0e:d8:55:0f:fe:2b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 22 21:48:15 2023 GMT
            Not After : Jun 20 21:53:15 2024 GMT
        Subject: CN=087605E58995955EF04864DADFD60EE0868FF00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:44:0e:72:24:5d:de:87:24:9e:b3:93:53:
                    3e:c5:54:b0:21:dc:c3:39:a4:d4:69:fe:2b:96:4f:
                    59:74:18:60:09:e6:a4:23:db:21:40:97:ce:b7:61:
                    3f:b0:40:4e:e3:c7:bd:2f:93:0c:48:fe:81:2e:3f:
                    c0:70:0a:4a:3b:95:37:1f:a0:94:fc:23:b8:6a:52:
                    fc:a5:1f:4b:82:3b:61:a6:65:8b:45:22:18:62:be:
                    40:8a:18:0c:d9:4f:af:ff:40:1b:04:be:05:a6:92:
                    53:d7:ae:12:2b:ec:6e:8b:c1:f0:4f:6c:5e:9e:c5:
                    e0:4a:c3:05:dd:c5:f3:86:cc:78:e0:c7:3e:5c:72:
                    4e:db:ea:46:ad:d4:90:82:34:6e:2e:00:64:0d:08:
                    b6:33:2f:1d:79:b4:f8:16:5b:a4:f7:bb:fb:71:4c:
                    65:cf:05:8f:7d:e9:78:aa:d0:f5:a1:33:ac:74:28:
                    08:ca:de:7f:b2:20:29:17:cc:15:20:97:b1:ed:78:
                    71:b1:47:a2:24:68:63:28:98:ab:01:9f:ee:bb:f4:
                    21:f0:ba:7d:11:18:03:cb:d9:af:f8:c0:f8:fe:42:
                    a3:86:9d:46:92:42:ad:aa:37:42:97:10:6c:b3:66:
                    94:74:ec:a5:55:de:b8:a1:17:d5:e2:6b:aa:44:84:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:76:05:E5:89:95:95:5E:F0:48:64:DA:DF:D6:0E:E0:86:8F:F0:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/087605E58995955EF04864DADFD60EE0868FF00D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.152.0/22
                IPv6:
                  2804:3040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264939

    Signature Algorithm: sha256WithRSAEncryption
         9a:21:8e:3c:65:1a:d4:e9:07:6e:8f:c4:0c:5c:35:44:ca:db:
         5f:6d:9a:f6:0c:bd:81:b1:7e:e4:a6:8b:42:3b:38:0a:39:61:
         c3:08:76:0a:00:eb:a1:e6:c7:d1:98:fe:ec:71:43:0c:37:72:
         d8:b5:d1:23:c6:23:9f:c6:cd:cc:45:cb:79:91:33:4b:c2:5b:
         81:77:f2:d6:25:8d:59:71:f0:af:89:86:5f:38:11:13:b3:a6:
         07:72:4e:af:6e:38:cb:70:ba:3e:d7:e7:c5:ec:1c:53:c8:4d:
         1f:2a:91:2a:85:93:d9:36:14:da:c0:96:20:aa:82:06:13:5b:
         f6:7c:ed:79:a2:95:ee:7a:bb:13:ff:f1:ca:0a:2e:07:16:16:
         c5:e6:7c:8c:fc:2a:a7:f6:a7:39:7c:54:e6:de:a5:26:c4:e5:
         0c:ee:71:89:1f:61:14:ea:72:85:c8:15:22:21:ff:e8:d8:3b:
         d2:30:ea:36:f0:2d:c8:1d:7f:c3:58:44:92:27:98:8d:57:93:
         f8:d7:82:4a:66:a7:5b:c4:8f:4e:bf:a3:c5:ca:3e:57:32:a6:
         ad:59:c0:a0:5d:05:4c:0a:4a:38:21:98:86:a3:7b:40:47:85:
         5a:0e:cf:14:5d:32:f2:45:8e:6e:6a:00:5a:10:76:80:86:f9:
         c8:ea:72:55
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUKG+8vI01mbWmRh/p9g7YVQ/+KyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjIyMTQ4MTVaFw0yNDA2MjAyMTUzMTVaMDMxMTAvBgNV
BAMTKDA4NzYwNUU1ODk5NTk1NUVGMDQ4NjREQURGRDYwRUUwODY4RkYwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqUQOciRd3ocknrOTUz7FVLAh
3MM5pNRp/iuWT1l0GGAJ5qQj2yFAl863YT+wQE7jx70vkwxI/oEuP8BwCko7lTcf
oJT8I7hqUvylH0uCO2GmZYtFIhhivkCKGAzZT6//QBsEvgWmklPXrhIr7G6LwfBP
bF6exeBKwwXdxfOGzHjgxz5cck7b6kat1JCCNG4uAGQNCLYzLx15tPgWW6T3u/tx
TGXPBY996Xiq0PWhM6x0KAjK3n+yICkXzBUgl7HteHGxR6IkaGMomKsBn+679CHw
un0RGAPL2a/4wPj+QqOGnUaSQq2qN0KXEGyzZpR07KVV3rihF9Xia6pEhKWrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIdgXliZWVXvBI
ZNrf1g7gho/wDTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zTnpaa2JLcEdVQXhvUFliNlVWV0FwZjJoUWtLeFJSdXJT
QmFLMUo4RXZ5Vy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM056WmtiS3BHVUF4b1BZYjZVVldBcGYyaFFrS3hSUnVy
U0JhSzFKOEV2eVcvMC8wODc2MDVFNTg5OTU5NTVFRjA0ODY0REFERkQ2MEVFMDg2
OEZGMDBELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKo5JgwDQQCAAIwBwMF
ACgEMEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBArrMA0GCSqGSIb3DQEBCwUA
A4IBAQCaIY48ZRrU6Qduj8QMXDVEyttfbZr2DL2BsX7kpotCOzgKOWHDCHYKAOuh
5sfRmP7scUMMN3LYtdEjxiOfxs3MRct5kTNLwluBd/LWJY1ZcfCviYZfOBETs6YH
ck6vbjjLcLo+1+fF7BxTyE0fKpEqhZPZNhTawJYgqoIGE1v2fO15opXuersT//HK
Ci4HFhbF5nyM/Cqn9qc5fFTm3qUmxOUM7nGJH2EU6nKFyBUiIf/o2DvSMOo28C3I
HX/DWESSJ5iNV5P414JKZqdbxI9Ov6PFyj5XMqatWcCgXQVMCko4IZiGo3tAR4Va
Ds8UXTLyRY5uagBaEHaAhvnI6nJV
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org