Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer
File:                     0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer (raw, json)
Hash identifier:          4roY4OGyJnUIyoz0seIGgJPSnjZAF+ofdvYKgxUqDXE=
Subject key identifier:   0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A70FF8B0DBA2D3FCD72475E265662E3350FFCA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 14:32:59 +0000
Certificate not after:    Mon 15 Apr 2024 14:37:59 +0000
Subordinate resources:    AS: 267507
                          IP: 201.182.96.0/22
                          IP: 2804:428c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:70:ff:8b:0d:ba:2d:3f:cd:72:47:5e:26:56:62:e3:35:0f:fc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 17 14:32:59 2023 GMT
            Not After : Apr 15 14:37:59 2024 GMT
        Subject: CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:2f:be:27:8c:27:9b:4c:0f:51:b2:48:4d:
                    32:b8:20:ac:49:d9:67:73:aa:ef:99:93:cb:4e:58:
                    09:fd:ae:98:0d:ef:6a:05:5b:21:0b:90:1e:69:82:
                    a0:12:53:38:83:47:93:18:c0:e7:bb:48:2b:26:71:
                    82:23:14:3b:3b:13:94:55:2f:65:13:e6:25:db:ac:
                    45:30:5b:9c:3b:97:ec:a4:ce:90:dc:d6:9e:e9:a6:
                    7d:58:43:26:e8:c1:72:7b:48:b2:7f:89:72:c7:50:
                    40:25:6f:f9:2a:a8:ce:e7:ce:17:8c:09:03:77:54:
                    fb:88:c4:3a:60:09:4f:2e:b8:04:10:ad:f2:88:54:
                    ac:49:b3:a9:94:da:9f:37:5d:58:8e:4b:b3:ca:3a:
                    40:49:57:3b:60:cc:0f:9e:09:1a:27:63:02:5a:d8:
                    d5:ca:5b:94:34:e3:57:33:80:7c:b5:c2:86:8e:15:
                    99:1f:64:50:cd:14:11:b7:cc:b0:ac:16:35:8c:d5:
                    14:b8:72:cc:f7:e5:21:87:c3:bb:54:41:30:d9:52:
                    b0:25:30:d3:23:1d:f0:58:4f:c2:cf:ef:5b:1b:6e:
                    9b:50:67:41:82:f7:2c:98:51:e4:fa:ec:8f:9e:f5:
                    b8:25:95:57:d5:52:3f:41:1a:4b:09:63:64:6a:a1:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.96.0/22
                IPv6:
                  2804:428c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267507

    Signature Algorithm: sha256WithRSAEncryption
         46:e7:4f:84:37:cc:f5:94:b8:73:9a:03:c4:76:29:c9:7a:12:
         98:14:19:38:ec:ad:e7:85:0d:f4:6a:d1:e1:51:7a:13:3d:00:
         35:da:eb:69:bb:36:b7:ae:09:3b:50:68:fe:24:fe:d8:70:2b:
         a4:bb:9b:7a:80:f9:2c:2b:c9:30:fa:01:f5:b0:94:eb:82:1e:
         0f:b7:b4:3c:55:98:c0:fe:81:a6:99:2a:44:4b:a9:83:e9:2d:
         cf:11:d5:17:12:9e:db:43:17:ad:e2:20:af:ca:4a:63:d7:d9:
         d4:e0:86:70:56:00:01:cb:85:13:8a:46:24:8e:78:03:15:ad:
         f4:53:e9:34:49:16:95:d7:ef:83:5c:82:12:0d:2a:51:65:5a:
         74:0e:6d:48:96:d0:9a:47:4e:a7:ae:0d:da:3a:a1:3e:18:0d:
         07:60:96:4e:5e:b1:1a:0a:05:67:98:36:35:95:f9:d4:88:ee:
         b1:4a:47:02:a4:e4:de:72:b8:24:7d:02:54:da:27:a9:36:65:
         33:92:3d:b7:97:60:74:b1:98:04:ab:1a:cb:5d:97:39:fe:fb:
         1b:bf:75:cf:9c:a0:2d:e7:c6:ba:0d:92:8f:9d:57:c1:9e:35:
         95:ad:34:3d:80:4b:29:e1:5b:0a:4f:3d:7a:47:02:a5:7c:b9:
         bb:9c:5f:a9
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUenD/iw26LT/NckdeJlZi4zUP/KQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTcxNDMyNTlaFw0yNDA0MTUxNDM3NTlaMDMxMTAvBgNV
BAMTKDBDRDZEMzJEOTI5QkU5Nzk2REU1NUFFMEU0OUQ3QTg5REZEQTlGRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYC++J4wnm0wPUbJITTK4IKxJ
2Wdzqu+Zk8tOWAn9rpgN72oFWyELkB5pgqASUziDR5MYwOe7SCsmcYIjFDs7E5RV
L2UT5iXbrEUwW5w7l+ykzpDc1p7ppn1YQybowXJ7SLJ/iXLHUEAlb/kqqM7nzheM
CQN3VPuIxDpgCU8uuAQQrfKIVKxJs6mU2p83XViOS7PKOkBJVztgzA+eCRonYwJa
2NXKW5Q041czgHy1woaOFZkfZFDNFBG3zLCsFjWM1RS4csz35SGHw7tUQTDZUrAl
MNMjHfBYT8LP71sbbptQZ0GC9yyYUeT67I+e9bgllVfVUj9BGksJY2RqobF7AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQM1tMtkpvpeW3l
WuDknXqJ39qf7zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84OEhMTFhYRHJhZEN3b2k2UjR1U1llbm9LRXYxclhCeG1K
dThIUW5Hblo3Qy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84OEhMTFhYRHJhZEN3b2k2UjR1U1llbm9LRXYxclhCeG1K
dThIUW5Hblo3Qy8wLzBDRDZEMzJEOTI5QkU5Nzk2REU1NUFFMEU0OUQ3QTg5REZE
QTlGRUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsm2YDANBAIAAjAHAwUA
KARCjDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFPMwDQYJKoZIhvcNAQELBQAD
ggEBAEbnT4Q3zPWUuHOaA8R2Kcl6EpgUGTjsreeFDfRq0eFRehM9ADXa62m7Nreu
CTtQaP4k/thwK6S7m3qA+SwryTD6AfWwlOuCHg+3tDxVmMD+gaaZKkRLqYPpLc8R
1RcSnttDF63iIK/KSmPX2dTghnBWAAHLhROKRiSOeAMVrfRT6TRJFpXX74NcghIN
KlFlWnQObUiW0JpHTqeuDdo6oT4YDQdglk5esRoKBWeYNjWV+dSI7rFKRwKk5N5y
uCR9AlTaJ6k2ZTOSPbeXYHSxmASrGstdlzn++xu/dc+coC3nxroNko+dV8GeNZWt
ND2ASynhWwpPPXpHAqV8ubucX6k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org