Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CAE80B4D6A23FC56E99EA778795B5F88C02B603.cer
File:                     0CAE80B4D6A23FC56E99EA778795B5F88C02B603.cer (raw, json)
Hash identifier:          p1uv8FJl9URGIwwTVOiJMb7JxVt+2PRw9IQNJoBC+Oo=
Subject key identifier:   0C:AE:80:B4:D6:A2:3F:C5:6E:99:EA:77:87:95:B5:F8:8C:02:B6:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       337C385433A73CF3D22F58AAE5744D6F15240388
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/0CAE80B4D6A23FC56E99EA778795B5F88C02B603.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 00:24:10 +0000
Certificate not after:    Mon 27 May 2024 00:29:10 +0000
Subordinate resources:    AS: 271325
                          IP: 179.0.116.0/22
                          IP: 2804:79c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7c:38:54:33:a7:3c:f3:d2:2f:58:aa:e5:74:4d:6f:15:24:03:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 00:24:10 2023 GMT
            Not After : May 27 00:29:10 2024 GMT
        Subject: CN=0CAE80B4D6A23FC56E99EA778795B5F88C02B603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:ad:71:a8:a2:03:26:79:02:0e:cb:df:01:
                    c3:7a:cc:9f:4f:eb:fc:d8:d5:c3:0f:59:3e:a9:2b:
                    70:7d:3b:37:23:a6:fa:22:bd:48:75:cb:df:b9:bc:
                    8e:06:f4:56:c8:95:18:26:33:d8:fa:9c:9c:fb:d0:
                    e2:8d:bd:58:2f:89:c2:94:c0:4b:ed:bc:c1:59:3e:
                    ef:8d:89:56:39:9a:54:ec:49:88:9a:3b:13:89:24:
                    e5:d1:d5:46:ef:86:65:c9:51:52:e0:7f:5b:b0:77:
                    92:c9:e1:7b:d2:9f:01:1f:85:cb:71:0a:eb:b4:5c:
                    08:ee:39:77:bf:79:f6:cb:40:ba:99:42:4c:06:8b:
                    ce:6d:7f:b3:72:0b:59:83:e6:b8:0d:37:70:1e:60:
                    9f:54:ec:c7:99:08:50:a8:f0:4b:5b:a7:59:9d:70:
                    de:26:07:19:52:0e:81:80:22:31:3c:99:33:13:36:
                    b3:f3:40:8b:d8:69:33:d5:4f:5c:27:3c:39:81:52:
                    5b:ba:b0:83:6c:3e:85:00:d0:3a:ba:fe:de:82:db:
                    09:14:c1:0c:73:23:a9:20:7f:c0:61:77:3c:7d:45:
                    3b:dd:7a:22:3e:9b:e1:e0:bf:a5:bc:5a:cd:41:33:
                    0b:d0:b6:6d:03:5b:7d:ae:c6:db:dd:46:f8:09:28:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:AE:80:B4:D6:A2:3F:C5:6E:99:EA:77:87:95:B5:F8:8C:02:B6:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/0CAE80B4D6A23FC56E99EA778795B5F88C02B603.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.116.0/22
                IPv6:
                  2804:79c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271325

    Signature Algorithm: sha256WithRSAEncryption
         6c:97:0e:d6:45:6b:3c:a5:1a:ba:18:35:18:fb:35:de:c4:51:
         c0:4e:8f:76:06:90:77:90:11:b1:5f:cc:eb:05:ec:27:e0:5c:
         f5:17:6e:f6:b0:e7:52:76:33:6b:b0:d1:91:28:d6:61:38:ce:
         f2:1e:90:e7:1b:4b:6b:54:f7:22:6b:dd:d5:0b:be:d4:27:f0:
         94:ea:1f:0a:6b:c2:87:36:c6:64:a9:50:03:27:c7:8c:31:6e:
         0e:33:e8:9a:ce:df:11:3d:b0:14:02:69:ff:63:8d:77:46:03:
         26:b9:72:50:f9:8b:26:5f:ba:2a:02:70:7b:25:59:e7:01:03:
         ed:4d:fa:3d:d1:1c:3e:65:e5:69:ff:18:b3:94:ec:61:f0:07:
         d8:5d:7d:53:71:d1:67:2a:01:7d:05:c8:d0:f0:c5:75:b9:6b:
         f1:7b:ac:d8:07:00:20:34:55:b5:49:ef:d0:2e:38:06:8f:8b:
         93:1b:65:bd:73:e2:30:d0:61:f6:2e:1f:e4:73:7a:34:8d:47:
         d1:34:b3:d1:a2:b5:34:51:ef:ec:8f:8f:c4:11:77:84:f9:4b:
         87:81:85:47:b9:24:84:89:9f:31:55:3e:d1:41:48:42:87:8f:
         3e:7c:8a:69:54:ac:80:3b:f8:c7:3e:2d:37:7d:16:cd:56:4f:
         57:11:68:2b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUM3w4VDOnPPPSL1iq5XRNbxUkA4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjkwMDI0MTBaFw0yNDA1MjcwMDI5MTBaMDMxMTAvBgNV
BAMTKDBDQUU4MEI0RDZBMjNGQzU2RTk5RUE3Nzg3OTVCNUY4OEMwMkI2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2a1xqKIDJnkCDsvfAcN6zJ9P
6/zY1cMPWT6pK3B9OzcjpvoivUh1y9+5vI4G9FbIlRgmM9j6nJz70OKNvVgvicKU
wEvtvMFZPu+NiVY5mlTsSYiaOxOJJOXR1UbvhmXJUVLgf1uwd5LJ4XvSnwEfhctx
Cuu0XAjuOXe/efbLQLqZQkwGi85tf7NyC1mD5rgNN3AeYJ9U7MeZCFCo8Etbp1md
cN4mBxlSDoGAIjE8mTMTNrPzQIvYaTPVT1wnPDmBUlu6sINsPoUA0Dq6/t6C2wkU
wQxzI6kgf8Bhdzx9RTvdeiI+m+Hgv6W8Ws1BMwvQtm0DW32uxtvdRvgJKDG5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMroC01qI/xW6Z
6neHlbX4jAK2AzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GUkVkSkY0eWk0aHNBdVF6S2FNcjlkekFjQVRFeG5za2Zo
M1pxNGExYUFTUi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRlJFZEpGNHlpNGhzQXVRekthTXI5ZHpBY0FURXhuc2tm
aDNacTRhMWFBU1IvMC8wQ0FFODBCNEQ2QTIzRkM1NkU5OUVBNzc4Nzk1QjVGODhD
MDJCNjAzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzAHQwDQQCAAIwBwMF
ACgEecAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCPdMA0GCSqGSIb3DQEBCwUA
A4IBAQBslw7WRWs8pRq6GDUY+zXexFHATo92BpB3kBGxX8zrBewn4Fz1F272sOdS
djNrsNGRKNZhOM7yHpDnG0trVPcia93VC77UJ/CU6h8Ka8KHNsZkqVADJ8eMMW4O
M+iazt8RPbAUAmn/Y413RgMmuXJQ+YsmX7oqAnB7JVnnAQPtTfo90Rw+ZeVp/xiz
lOxh8AfYXX1TcdFnKgF9BcjQ8MV1uWvxe6zYBwAgNFW1Se/QLjgGj4uTG2W9c+Iw
0GH2Lh/kc3o0jUfRNLPRorU0Ue/sj4/EEXeE+UuHgYVHuSSEiZ8xVT7RQUhCh48+
fIppVKyAO/jHPi03fRbNVk9XEWgr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org