Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.cer
File:                     08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.cer (raw, json)
Hash identifier:          qCwTVpO4ETv5Gfn2jH8Eq6DV8SSdjahvG46QStGRPR4=
Subject key identifier:   08:CD:9A:19:7A:81:5F:3B:B0:C0:2E:C0:CF:6C:BB:9F:8E:03:04:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       709A385E0AAA5F56EF61E5C814E4EAE9AA974B6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 13:53:02 +0000
Certificate not after:    Fri 22 Nov 2024 13:58:02 +0000
Subordinate resources:    AS: 268556
                          IP: 45.163.172.0/22
                          IP: 2804:5300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:38:5e:0a:aa:5f:56:ef:61:e5:c8:14:e4:ea:e9:aa:97:4b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 13:53:02 2023 GMT
            Not After : Nov 22 13:58:02 2024 GMT
        Subject: CN=08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:78:e8:bd:03:50:cb:46:47:c0:b0:f0:0d:85:
                    65:07:29:51:01:d0:4e:c9:d6:a0:8a:3e:fd:25:cd:
                    a6:b2:9a:cd:f5:62:a9:a1:6f:72:6a:4a:39:85:9d:
                    13:5e:ca:4b:30:9a:e0:27:03:6a:85:26:64:1b:f1:
                    36:28:a0:76:2e:24:e4:a7:f3:61:d5:c4:06:60:45:
                    04:ac:fe:9f:64:33:33:77:40:ec:63:cf:48:bc:3d:
                    fa:27:58:2a:89:bd:f6:56:ed:7e:e5:e8:5f:b7:cd:
                    82:71:88:2e:04:e8:02:67:4c:e2:9f:4b:46:0c:ba:
                    ae:5f:ce:2f:c2:4a:9b:c5:47:ea:00:1b:d1:af:56:
                    fc:e7:05:b7:4b:f0:b9:c8:d8:fd:80:b8:8b:ab:ed:
                    a4:5f:11:bf:21:a4:40:33:d0:74:65:df:55:e2:7f:
                    9d:66:68:63:de:06:31:23:c6:3a:5c:dc:5b:dd:2d:
                    a6:6e:4a:c9:f3:cb:d0:f1:0c:0c:11:31:49:48:38:
                    94:aa:c5:65:f7:d7:a2:43:7c:0f:b6:6f:28:da:a5:
                    52:5a:48:42:cd:89:e5:ac:2e:9a:91:66:72:cc:14:
                    a8:c6:1f:80:24:00:8d:5f:a2:50:3c:18:87:b3:3c:
                    70:da:cb:52:99:5b:01:df:54:c9:42:1e:36:a8:0b:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:CD:9A:19:7A:81:5F:3B:B0:C0:2E:C0:CF:6C:BB:9F:8E:03:04:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/22
                IPv6:
                  2804:5300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268556

    Signature Algorithm: sha256WithRSAEncryption
         42:9c:97:9f:7a:da:6e:18:8a:b8:2d:59:68:59:fc:15:50:a3:
         41:0a:08:f5:90:7a:35:ef:ae:7e:af:bb:54:36:3c:6c:5a:9b:
         7b:bf:f0:d4:45:7e:62:b2:10:3a:ee:46:52:80:1e:a0:c3:f6:
         fe:91:75:f9:b2:f9:c8:7b:87:3f:8e:79:49:d0:23:dd:26:ca:
         17:84:df:05:a8:4a:ea:d2:b1:a3:dd:c8:e9:93:89:15:4d:0a:
         54:fe:b7:c8:fd:c0:06:51:a5:1e:fb:b1:66:d6:1d:7b:4a:bf:
         73:24:14:0f:11:d9:6f:a5:d9:f9:11:7a:30:0b:3d:dc:63:16:
         3b:93:05:14:c7:af:2f:6d:4c:06:87:4b:55:70:d3:7b:3f:79:
         0a:e7:04:13:7e:ac:16:01:94:66:fd:21:08:45:db:b7:12:c0:
         f5:4f:28:51:e3:80:21:fb:49:ea:bc:09:db:b3:60:87:23:4c:
         bb:4a:80:40:cb:43:5c:14:b0:ab:c4:6b:d0:2a:23:b8:d6:a1:
         b0:d3:56:da:77:86:8e:54:79:cf:03:1b:60:67:74:e4:f7:ed:
         f9:76:71:21:cf:c7:46:6b:67:78:2d:2f:c0:7d:bd:98:65:87:
         eb:67:df:c0:e1:2f:60:0d:68:b4:92:4c:b2:32:5d:1b:86:dc:
         1d:cd:17:3e
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUcJo4XgqqX1bvYeXIFOTq6aqXS2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjQxMzUzMDJaFw0yNDExMjIxMzU4MDJaMDMxMTAvBgNV
BAMTKDA4Q0Q5QTE5N0E4MTVGM0JCMEMwMkVDMENGNkNCQjlGOEUwMzA0NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqeOi9A1DLRkfAsPANhWUHKVEB
0E7J1qCKPv0lzaayms31Yqmhb3JqSjmFnRNeykswmuAnA2qFJmQb8TYooHYuJOSn
82HVxAZgRQSs/p9kMzN3QOxjz0i8PfonWCqJvfZW7X7l6F+3zYJxiC4E6AJnTOKf
S0YMuq5fzi/CSpvFR+oAG9GvVvznBbdL8LnI2P2AuIur7aRfEb8hpEAz0HRl31Xi
f51maGPeBjEjxjpc3FvdLaZuSsnzy9DxDAwRMUlIOJSqxWX316JDfA+2byjapVJa
SELNieWsLpqRZnLMFKjGH4AkAI1folA8GIezPHDay1KZWwHfVMlCHjaoC+8hAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIzZoZeoFfO7DA
LsDPbLufjgMEXDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5
bXdDM0N5TTNoLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5
bXdDM0N5TTNoLzAvMDhDRDlBMTk3QTgxNUYzQkIwQzAyRUMwQ0Y2Q0JCOUY4RTAz
MDQ1Qy5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaOsMA0EAgACMAcDBQAo
BFMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQZDDANBgkqhkiG9w0BAQsFAAOC
AQEAQpyXn3rabhiKuC1ZaFn8FVCjQQoI9ZB6Ne+ufq+7VDY8bFqbe7/w1EV+YrIQ
Ou5GUoAeoMP2/pF1+bL5yHuHP455SdAj3SbKF4TfBahK6tKxo93I6ZOJFU0KVP63
yP3ABlGlHvuxZtYde0q/cyQUDxHZb6XZ+RF6MAs93GMWO5MFFMevL21MBodLVXDT
ez95CucEE36sFgGUZv0hCEXbtxLA9U8oUeOAIftJ6rwJ27NghyNMu0qAQMtDXBSw
q8Rr0CojuNahsNNW2neGjlR5zwMbYGd05Pft+XZxIc/HRmtneC0vwH29mGWH62ff
wOEvYA1otJJMsjJdG4bcHc0XPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org