Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer
File:                     0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer (raw, json)
Hash identifier:          nN5Q2TXE6/GNptO1X+5DQpDMzWKL0YGCS2RgphxyQXc=
Subject key identifier:   0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B6A0230E93BA93A69B56F560D6DF05ADA124BE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Jun 2023 13:53:05 +0000
Certificate not after:    Sat 08 Jun 2024 13:58:05 +0000
Subordinate resources:    AS: 271492
                          IP: 181.224.76.0/22
                          IP: 2804:7c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6a:02:30:e9:3b:a9:3a:69:b5:6f:56:0d:6d:f0:5a:da:12:4b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 10 13:53:05 2023 GMT
            Not After : Jun  8 13:58:05 2024 GMT
        Subject: CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:3c:61:2d:17:4e:59:8a:7e:1a:96:c8:d5:
                    41:4c:3e:84:6e:54:d9:e0:f0:d8:ae:29:70:ab:3d:
                    65:13:3c:ee:cc:19:85:d4:a1:a7:c9:e4:5e:bd:b3:
                    d9:35:2a:91:20:77:73:94:e8:77:cf:09:e2:4e:11:
                    c3:e2:d0:09:78:bf:66:e7:da:ec:c7:b1:b0:34:77:
                    3a:ed:32:f8:9d:f6:d2:a0:cd:67:bf:ee:03:d8:89:
                    71:11:70:38:4e:5b:8f:69:68:31:a7:41:f4:46:d9:
                    e0:9b:1e:06:42:74:8c:1a:d4:f7:25:21:ed:ea:d9:
                    76:0f:b1:00:b5:d8:12:94:db:89:79:f2:fe:8d:09:
                    1c:0f:95:16:23:c8:d9:70:03:79:6b:53:3e:09:ff:
                    ef:b1:5e:65:3b:61:7d:3b:2d:49:96:72:43:d7:b6:
                    6a:8f:08:d8:6c:06:97:ec:aa:70:cd:7b:17:8e:cd:
                    8c:4e:43:d9:ad:de:19:97:28:3e:8e:d3:16:ad:2f:
                    0d:c5:02:4b:d3:2d:6c:bf:b9:68:40:61:87:5a:31:
                    95:49:93:1d:8d:63:18:52:62:9c:4f:42:5f:e5:23:
                    47:a3:d8:99:0f:ff:4b:19:1e:a2:66:29:81:11:cc:
                    c1:db:3c:a3:7e:4d:c7:77:05:84:88:25:fe:d8:c3:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/22
                IPv6:
                  2804:7c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271492

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:e0:8e:94:ef:31:8e:9b:a5:c6:2d:81:48:bb:8e:aa:61:
         0d:e7:85:8d:b1:83:e6:bc:76:ed:1f:11:81:9d:6a:6a:02:fc:
         6e:80:ea:a2:2e:4f:b7:26:92:3f:f1:63:1c:5e:15:d2:e0:27:
         1a:ae:e2:c3:5b:e9:3e:16:58:47:83:34:f0:23:91:99:1c:d4:
         14:2b:22:6b:e2:fe:c8:b6:08:ac:61:2e:5c:61:46:47:f9:3d:
         60:a3:1b:22:36:41:66:52:ae:0a:fa:b4:c7:4f:6f:e8:6d:89:
         d8:69:3f:34:2a:8b:3e:d7:cb:1c:d0:c3:f7:9d:3a:a0:03:52:
         2f:3f:65:a8:4b:a1:e0:2b:91:4d:6e:6a:1f:f4:b1:35:6d:21:
         9f:0a:cd:0e:c7:9a:fb:15:4f:e9:20:4b:dc:e6:88:9b:d7:7d:
         8e:44:05:8a:cb:cf:05:96:27:dc:0b:1b:b1:44:29:81:c9:3f:
         94:aa:41:40:79:f8:ab:33:7e:cb:2d:0d:68:d4:19:b4:e3:1f:
         77:72:88:87:23:2d:60:6a:55:e5:e6:65:b7:9a:44:fa:23:9f:
         fd:5b:90:a5:83:13:1f:b1:52:e0:59:16:27:a1:e0:b0:b4:ec:
         7f:eb:db:7f:93:13:3e:5b:0d:b6:b8:0f:9c:2b:89:81:3e:2b:
         72:f9:75:45
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUK2oCMOk7qTpptW9WDW3wWtoSS+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MTAxMzUzMDVaFw0yNDA2MDgxMzU4MDVaMDMxMTAvBgNV
BAMTKDBGRjAzNEI5QkU4NkVEMDRGNDdDOEU5OUIxN0ZEMjJGRDlCNThCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rTxhLRdOWYp+GpbI1UFMPoRu
VNng8NiuKXCrPWUTPO7MGYXUoafJ5F69s9k1KpEgd3OU6HfPCeJOEcPi0Al4v2bn
2uzHsbA0dzrtMvid9tKgzWe/7gPYiXERcDhOW49paDGnQfRG2eCbHgZCdIwa1Pcl
Ie3q2XYPsQC12BKU24l58v6NCRwPlRYjyNlwA3lrUz4J/++xXmU7YX07LUmWckPX
tmqPCNhsBpfsqnDNexeOzYxOQ9mt3hmXKD6O0xatLw3FAkvTLWy/uWhAYYdaMZVJ
kx2NYxhSYpxPQl/lI0ej2JkP/0sZHqJmKYERzMHbPKN+Tcd3BYSIJf7Yw8T7AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQP8DS5vobtBPR8
jpmxf9Iv2bWLqzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CSGl6SkVaeDlVRHpqQ1FHSnBGdGNhdVJpQjdhSGIxTGJu
WmFrbW1VYjg0Ny8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CSGl6SkVaeDlVRHpqQ1FHSnBGdGNhdVJpQjdhSGIxTGJu
WmFrbW1VYjg0Ny8xLzBGRjAzNEI5QkU4NkVEMDRGNDdDOEU5OUIxN0ZEMjJGRDlC
NThCQUIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXgTDANBAIAAjAHAwUA
KAR8YDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJIQwDQYJKoZIhvcNAQELBQAD
ggEBAIh64I6U7zGOm6XGLYFIu46qYQ3nhY2xg+a8du0fEYGdamoC/G6A6qIuT7cm
kj/xYxxeFdLgJxqu4sNb6T4WWEeDNPAjkZkc1BQrImvi/si2CKxhLlxhRkf5PWCj
GyI2QWZSrgr6tMdPb+htidhpPzQqiz7XyxzQw/edOqADUi8/ZahLoeArkU1uah/0
sTVtIZ8KzQ7HmvsVT+kgS9zmiJvXfY5EBYrLzwWWJ9wLG7FEKYHJP5SqQUB5+Ksz
fsstDWjUGbTjH3dyiIcjLWBqVeXmZbeaRPojn/1bkKWDEx+xUuBZFieh4LC07H/r
23+TEz5bDba4D5wriYE+K3L5dUU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org