Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.cer
File:                     0BB53137B22624BD787BFE2F51B65CA46C8ECC52.cer (raw, json)
Hash identifier:          +UI5rextYdogObC8i38SjVku9l4V1n2T9GI6hpuL+Go=
Subject key identifier:   0B:B5:31:37:B2:26:24:BD:78:7B:FE:2F:51:B6:5C:A4:6C:8E:CC:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E2BFE28E93655E3A816BD8C55071D80C806C8A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:26 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:26 +0000
Subordinate resources:    AS: 263362
                          IP: 191.37.152.0/21
                          IP: 2804:14f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2b:fe:28:e9:36:55:e3:a8:16:bd:8c:55:07:1d:80:c8:06:c8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:26 2024 GMT
            Not After : Jan 15 18:54:26 2025 GMT
        Subject: CN=0BB53137B22624BD787BFE2F51B65CA46C8ECC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:2a:f9:fe:94:79:aa:9a:8f:8c:25:8d:de:
                    22:0d:f2:8d:4f:51:e2:15:4f:bf:19:44:ee:b1:25:
                    89:f6:54:2d:2f:6e:b1:e7:51:02:5d:6a:ac:72:cb:
                    3c:10:3a:c4:6a:3b:3c:c3:56:8c:c3:a4:48:e8:ae:
                    29:db:16:b6:f6:ee:88:e4:c9:96:d0:a8:14:8d:4c:
                    60:1d:50:79:13:ec:5d:cf:c2:d2:0f:d4:65:69:41:
                    ad:d5:54:ce:fa:12:b6:72:11:72:47:b0:c3:80:7b:
                    38:d7:93:51:1a:03:c8:ec:57:f8:8d:a5:a6:f2:c3:
                    4f:97:3d:e3:81:ca:6f:a8:b2:a6:21:06:fa:a6:fd:
                    fb:02:ef:26:39:35:e0:f5:93:9d:f9:bc:b1:9f:ea:
                    a5:5a:f6:73:dd:9e:92:68:d2:2f:7f:78:ec:b2:e2:
                    f1:c2:4a:2a:f5:c7:f1:06:2a:fe:f8:26:ce:13:29:
                    aa:e8:a7:83:17:4a:ae:de:5a:2d:87:49:7e:12:4b:
                    f3:7b:5f:dc:bb:79:4d:99:0e:6d:cc:d4:07:01:3f:
                    5e:12:60:33:e0:1f:86:89:83:6d:7c:e0:c8:f9:44:
                    25:a7:fc:aa:b3:b9:9f:fe:70:da:11:68:38:fe:a0:
                    ea:50:68:43:ae:58:0f:9a:4a:60:9b:2f:24:29:c7:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:B5:31:37:B2:26:24:BD:78:7B:FE:2F:51:B6:5C:A4:6C:8E:CC:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.152.0/21
                IPv6:
                  2804:14f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263362

    Signature Algorithm: sha256WithRSAEncryption
         8a:d6:6b:d4:38:61:7d:7d:21:7a:5a:e4:c6:d3:89:52:7d:63:
         80:f8:26:fa:9a:b4:2e:f8:bc:ab:51:db:38:e2:d2:c2:8c:13:
         55:71:a2:0f:11:51:ca:05:84:3c:e6:57:de:13:df:d5:c7:fc:
         5b:46:82:e1:d9:73:c0:48:ff:ef:89:14:c1:f1:eb:cd:3c:e0:
         45:b6:96:b0:9d:8d:c8:c8:a0:26:6b:ba:9f:75:c9:ef:54:a7:
         ad:64:41:c7:f4:98:f0:a4:d3:47:b3:8e:16:b2:c5:66:5a:d2:
         f1:67:9a:ca:4b:d8:7f:07:73:41:35:cf:62:93:89:b0:17:fc:
         f0:91:12:da:71:51:d0:46:f5:90:8d:56:ff:58:25:97:a1:a6:
         e1:0c:c7:50:a9:db:08:38:9e:fd:8b:90:3f:f4:d3:56:9f:ae:
         75:31:58:84:af:c9:41:b1:dc:66:31:6e:b1:ba:db:bf:aa:c1:
         45:e0:e2:60:44:9c:70:2f:b1:98:a4:28:2a:38:e8:fb:02:aa:
         cc:a7:cb:7e:b2:02:4e:7a:c2:88:88:b1:14:1d:f1:0d:59:60:
         23:ab:48:b5:99:4c:c6:ad:34:4d:ad:3a:69:1f:90:85:13:ad:
         42:7c:05:7f:f6:e7:17:a7:d8:b9:6d:a1:94:16:5b:dd:73:30:
         7f:94:aa:7c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUDiv+KOk2VeOoFr2MVQcdgMgGyKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTcxODQ5MjZaFw0yNTAxMTUxODU0MjZaMDMxMTAvBgNV
BAMTKDBCQjUzMTM3QjIyNjI0QkQ3ODdCRkUyRjUxQjY1Q0E0NkM4RUNDNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkCr5/pR5qpqPjCWN3iIN8o1P
UeIVT78ZRO6xJYn2VC0vbrHnUQJdaqxyyzwQOsRqOzzDVozDpEjorinbFrb27ojk
yZbQqBSNTGAdUHkT7F3PwtIP1GVpQa3VVM76ErZyEXJHsMOAezjXk1EaA8jsV/iN
pabyw0+XPeOBym+osqYhBvqm/fsC7yY5NeD1k535vLGf6qVa9nPdnpJo0i9/eOyy
4vHCSir1x/EGKv74Js4TKarop4MXSq7eWi2HSX4SS/N7X9y7eU2ZDm3M1AcBP14S
YDPgH4aJg2184Mj5RCWn/KqzuZ/+cNoRaDj+oOpQaEOuWA+aSmCbLyQpx31FAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLtTE3siYkvXh7
/i9RtlykbI7MUjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BSzdtN0ozbll1NEhvRnR5clJGc1E4UUc3R3NFcW85c3NR
cWMzTmR0UlFBNC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUs3bTdKM25ZdTRIb0Z0eXJSRnNROFFHN0dzRXFvOXNz
UXFjM05kdFJRQTQvMC8wQkI1MzEzN0IyMjYyNEJENzg3QkZFMkY1MUI2NUNBNDZD
OEVDQzUyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAO/JZgwDQQCAAIwBwMF
ACgEFPgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBATCMA0GCSqGSIb3DQEBCwUA
A4IBAQCK1mvUOGF9fSF6WuTG04lSfWOA+Cb6mrQu+LyrUds44tLCjBNVcaIPEVHK
BYQ85lfeE9/Vx/xbRoLh2XPASP/viRTB8evNPOBFtpawnY3IyKAma7qfdcnvVKet
ZEHH9JjwpNNHs44WssVmWtLxZ5rKS9h/B3NBNc9ik4mwF/zwkRLacVHQRvWQjVb/
WCWXoabhDMdQqdsIOJ79i5A/9NNWn651MViEr8lBsdxmMW6xutu/qsFF4OJgRJxw
L7GYpCgqOOj7AqrMp8t+sgJOesKIiLEUHfENWWAjq0i1mUzGrTRNrTppH5CFE61C
fAV/9ucXp9i5baGUFlvdczB/lKp8
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org