Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C80C02362560C5A5AA885E96436A708704E7CB8.cer
File:                     0C80C02362560C5A5AA885E96436A708704E7CB8.cer (raw, json)
Hash identifier:          T1zocxT+/m5p2DIlBCBHZEIV30GCKj3b9t09JEtNWu4=
Subject key identifier:   0C:80:C0:23:62:56:0C:5A:5A:A8:85:E9:64:36:A7:08:70:4E:7C:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33CF95588D97CBFF62E78F2153D8A5A338417389
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/0C80C02362560C5A5AA885E96436A708704E7CB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 13:04:53 +0000
Certificate not after:    Tue 11 Mar 2025 13:09:53 +0000
Subordinate resources:    AS: 265135
                          IP: 143.255.20.0/22
                          IP: 2804:2b1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:95:58:8d:97:cb:ff:62:e7:8f:21:53:d8:a5:a3:38:41:73:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 13:04:53 2024 GMT
            Not After : Mar 11 13:09:53 2025 GMT
        Subject: CN=0C80C02362560C5A5AA885E96436A708704E7CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:77:75:d6:b3:85:e0:9f:30:bd:92:d3:25:
                    63:ed:66:6a:86:38:5c:21:e6:fe:58:a9:aa:46:7d:
                    4e:7e:27:75:88:a3:8f:cc:a3:2e:e1:4b:82:6f:32:
                    03:82:a5:7a:4a:78:db:c5:18:4a:a2:4d:12:b5:3e:
                    b2:41:b0:f3:29:08:82:20:48:4f:0c:c7:78:f4:86:
                    f1:7e:5c:a2:03:5c:c8:10:4d:71:b5:78:38:2c:8a:
                    60:f4:4a:50:e0:8f:cb:45:df:ae:97:3f:17:a6:4e:
                    dd:fc:97:d0:c2:af:e3:9e:b8:e7:61:b7:56:95:7f:
                    4f:05:b6:3e:83:77:22:f2:16:f3:32:a8:f0:38:4d:
                    7e:f3:2c:0e:18:2c:6c:47:76:6a:d9:4b:bb:35:ff:
                    1a:18:cd:41:98:9a:8c:76:1b:9d:47:e5:7e:77:a6:
                    99:94:44:f9:ec:51:92:38:85:0a:d4:42:24:e1:bc:
                    9a:8a:af:01:56:a1:bc:b9:6f:47:85:15:53:a3:08:
                    83:5c:cf:2b:c6:d9:ed:a8:4e:60:ff:49:3d:92:94:
                    5a:d4:7b:40:38:dd:1e:f7:30:ad:f9:58:f3:cb:bc:
                    9a:4f:48:6d:dd:60:c7:50:90:77:51:56:23:b8:89:
                    f9:10:a0:8b:19:99:e0:a4:3b:c4:25:24:e6:db:7a:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:80:C0:23:62:56:0C:5A:5A:A8:85:E9:64:36:A7:08:70:4E:7C:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/0C80C02362560C5A5AA885E96436A708704E7CB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.20.0/22
                IPv6:
                  2804:2b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265135

    Signature Algorithm: sha256WithRSAEncryption
         79:67:0e:f7:ef:85:d2:9c:b4:2c:d8:d4:78:8e:4c:4f:4c:02:
         3e:56:2c:dd:09:46:8b:b7:75:59:85:ae:46:14:f8:10:e6:29:
         d6:ad:6c:52:48:73:19:b0:a3:6e:f5:3d:1a:32:e7:3a:65:3b:
         24:ca:12:d8:3b:0b:14:d0:28:2a:bc:00:7c:6c:e9:b0:ac:cf:
         f4:79:dd:0f:08:ce:09:93:b5:7d:cc:b4:e7:5e:5f:49:dd:63:
         9b:fc:da:da:92:ce:ad:13:bc:53:31:5b:41:2c:14:af:a5:cb:
         f3:f7:df:6e:df:3f:17:f0:6e:82:43:26:e2:35:95:5b:44:fe:
         ed:6a:a7:26:41:dd:f5:4c:c5:c0:99:e7:32:b7:99:64:0a:cb:
         af:34:6c:f9:a3:1c:66:1b:76:01:0d:10:06:ff:bb:ae:6e:b1:
         0a:ff:19:6d:07:ab:86:30:38:e7:df:0d:10:ba:a4:5d:31:d3:
         7f:6e:4c:b4:d0:31:64:f3:ee:65:33:a0:b0:37:13:86:b0:32:
         58:f6:aa:d1:bc:e3:39:4e:2f:da:d4:24:c4:e5:9c:b5:00:94:
         6c:2c:ef:78:21:4c:58:31:63:0e:b1:a5:de:50:33:ed:8e:ed:
         01:bd:09:10:21:7d:18:fb:e5:43:49:27:65:71:a9:d9:49:73:
         7f:67:ce:62
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUM8+VWI2Xy/9i548hU9ilozhBc4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIxMzA0NTNaFw0yNTAzMTExMzA5NTNaMDMxMTAvBgNV
BAMTKDBDODBDMDIzNjI1NjBDNUE1QUE4ODVFOTY0MzZBNzA4NzA0RTdDQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwXd11rOF4J8wvZLTJWPtZmqG
OFwh5v5YqapGfU5+J3WIo4/Moy7hS4JvMgOCpXpKeNvFGEqiTRK1PrJBsPMpCIIg
SE8Mx3j0hvF+XKIDXMgQTXG1eDgsimD0SlDgj8tF366XPxemTt38l9DCr+OeuOdh
t1aVf08Ftj6DdyLyFvMyqPA4TX7zLA4YLGxHdmrZS7s1/xoYzUGYmox2G51H5X53
ppmURPnsUZI4hQrUQiThvJqKrwFWoby5b0eFFVOjCINczyvG2e2oTmD/ST2SlFrU
e0A43R73MK35WPPLvJpPSG3dYMdQkHdRViO4ifkQoIsZmeCkO8QlJObbekPxAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMgMAjYlYMWlqo
helkNqcIcE58uDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83Q2RqajlTa21ZVVZkdXVMU2RmOVFuU1dwTmRhbTN0Qlc2
ZXBiM0xpMnpoZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN0Nkamo5U2ttWVVWZHV1TFNkZjlRblNXcE5kYW0zdEJX
NmVwYjNMaTJ6aGYvMC8wQzgwQzAyMzYyNTYwQzVBNUFBODg1RTk2NDM2QTcwODcw
NEU3Q0I4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKP/xQwDQQCAAIwBwMF
ACgEKxwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAuvMA0GCSqGSIb3DQEBCwUA
A4IBAQB5Zw7374XSnLQs2NR4jkxPTAI+VizdCUaLt3VZha5GFPgQ5inWrWxSSHMZ
sKNu9T0aMuc6ZTskyhLYOwsU0CgqvAB8bOmwrM/0ed0PCM4Jk7V9zLTnXl9J3WOb
/Nraks6tE7xTMVtBLBSvpcvz999u3z8X8G6CQybiNZVbRP7taqcmQd31TMXAmecy
t5lkCsuvNGz5oxxmG3YBDRAG/7uubrEK/xltB6uGMDjn3w0QuqRdMdN/bky00DFk
8+5lM6CwNxOGsDJY9qrRvOM5Ti/a1CTE5Zy1AJRsLO94IUxYMWMOsaXeUDPtju0B
vQkQIX0Y++VDSSdlcanZSXN/Z85i
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org