Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.cer
File:                     103265AEADC9C654B97AC9BE28D364C7FE429A91.cer (raw, json)
Hash identifier:          lRXHJ+dpHMfBceU6CBuEYkjsLeP7wDiisNG7yMHwZ54=
Subject key identifier:   10:32:65:AE:AD:C9:C6:54:B9:7A:C9:BE:28:D3:64:C7:FE:42:9A:91
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53279206B022C9EA62D9DAD184250FC83F675DA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 12:16:58 +0000
Certificate not after:    Fri 13 Sep 2024 12:21:58 +0000
Subordinate resources:    AS: 264592
                          IP: 200.170.76.0/22
                          IP: 2804:221c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:27:92:06:b0:22:c9:ea:62:d9:da:d1:84:25:0f:c8:3f:67:5d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 12:16:58 2023 GMT
            Not After : Sep 13 12:21:58 2024 GMT
        Subject: CN=103265AEADC9C654B97AC9BE28D364C7FE429A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:64:a1:60:72:b4:11:6f:c1:f8:d2:4c:aa:
                    c2:26:06:2e:6f:37:20:ae:3e:c8:aa:0e:d5:6f:a6:
                    8a:be:62:1a:3b:08:f2:ba:d9:00:6a:6f:ff:0e:58:
                    73:4b:09:c7:b8:80:7b:3a:5a:2b:e3:08:fc:10:90:
                    b9:40:e9:43:65:7e:42:24:1b:f7:92:c2:1b:6f:4c:
                    c7:2d:1a:37:c4:5d:58:7b:2b:d3:5c:34:8d:f4:c9:
                    29:b4:b3:2a:4a:20:76:5c:5b:6c:3d:c5:b9:bf:5f:
                    63:5e:e0:0b:a7:39:5d:e9:4e:eb:29:5e:2c:a7:5f:
                    6b:f1:d7:2b:d0:09:7e:e8:79:d5:fb:92:fc:9f:15:
                    ac:34:ef:f9:c3:f0:de:00:54:93:ce:fe:9b:12:4f:
                    10:c3:a6:b5:04:89:42:57:7a:fb:42:90:96:8f:74:
                    3f:3a:b3:15:12:32:2e:cf:58:57:be:03:29:44:23:
                    31:19:ab:3c:88:7d:03:95:5e:fe:8f:df:86:d0:02:
                    85:ee:e0:d9:3e:0c:b1:59:23:5e:66:52:45:de:90:
                    91:fc:48:28:99:23:1e:7d:c5:35:c9:da:e6:37:a5:
                    01:16:8a:71:62:85:da:1b:2a:8b:6d:74:38:ee:42:
                    ad:51:99:c8:b4:23:eb:be:f8:92:40:44:25:93:19:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:32:65:AE:AD:C9:C6:54:B9:7A:C9:BE:28:D3:64:C7:FE:42:9A:91
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.76.0/22
                IPv6:
                  2804:221c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264592

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:ee:4e:2d:60:59:a6:b5:2d:72:a0:26:3d:c0:1c:b2:ff:
         6e:62:f3:a4:21:d5:5b:d6:bd:37:0c:b4:b2:2e:a4:be:fb:25:
         ff:99:f7:4e:51:bb:5f:f5:01:68:16:ba:3f:f1:5d:bc:a9:27:
         32:27:f4:2c:01:9f:b9:42:b5:e7:05:67:7c:2c:8f:f8:e0:7b:
         dc:48:42:06:37:8f:c6:7b:93:33:fb:c0:f2:9d:48:00:f7:59:
         68:94:b3:9b:f9:e7:09:ba:cf:bd:97:69:31:dd:ad:80:6c:31:
         2e:22:64:88:fa:59:70:b4:a0:ff:a3:1e:9d:1a:bb:dd:14:c3:
         5e:4b:30:fb:28:19:76:be:2a:ce:1c:c2:df:a3:c8:87:ba:90:
         5e:c0:c2:28:f1:61:bd:40:06:92:85:56:e6:97:e9:b4:90:9b:
         ac:27:ee:a4:d5:7b:34:45:2e:8d:fd:b6:74:e9:d3:2d:dd:ed:
         b8:b6:55:92:20:11:69:17:6d:cf:25:39:09:bc:c3:4f:62:d8:
         31:47:84:0c:28:a5:0c:6f:0e:ea:2f:80:9e:c0:7b:00:2e:8c:
         dd:ab:38:3f:8c:26:c1:aa:70:1f:36:46:72:41:0f:6f:ac:09:
         95:94:9a:63:7f:83:5b:05:b0:8e:90:1e:22:57:06:6b:da:d4:
         04:53:3d:72
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUUyeSBrAiyepi2drRhCUPyD9nXaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTUxMjE2NThaFw0yNDA5MTMxMjIxNThaMDMxMTAvBgNV
BAMTKDEwMzI2NUFFQURDOUM2NTRCOTdBQzlCRTI4RDM2NEM3RkU0MjlBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBw2ShYHK0EW/B+NJMqsImBi5v
NyCuPsiqDtVvpoq+Yho7CPK62QBqb/8OWHNLCce4gHs6WivjCPwQkLlA6UNlfkIk
G/eSwhtvTMctGjfEXVh7K9NcNI30ySm0sypKIHZcW2w9xbm/X2Ne4AunOV3pTusp
XiynX2vx1yvQCX7oedX7kvyfFaw07/nD8N4AVJPO/psSTxDDprUEiUJXevtCkJaP
dD86sxUSMi7PWFe+AylEIzEZqzyIfQOVXv6P34bQAoXu4Nk+DLFZI15mUkXekJH8
SCiZIx59xTXJ2uY3pQEWinFihdobKottdDjuQq1Rmci0I+u++JJARCWTGTgNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQMmWurcnGVLl6
yb4o02TH/kKakTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydldlOFBmRWV0SnIzVnYzRkRONXFoS1dhVm81cHltM1FD
ekcyQnNpRXBTUS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMnZXZThQZkVldEpyM1Z2M0ZETjVxaEtXYVZvNXB5bTNR
Q3pHMkJzaUVwU1EvMC8xMDMyNjVBRUFEQzlDNjU0Qjk3QUM5QkUyOEQzNjRDN0ZF
NDI5QTkxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIqkwwDQQCAAIwBwMF
ACgEIhwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAmQMA0GCSqGSIb3DQEBCwUA
A4IBAQB9Re5OLWBZprUtcqAmPcAcsv9uYvOkIdVb1r03DLSyLqS++yX/mfdOUbtf
9QFoFro/8V28qScyJ/QsAZ+5QrXnBWd8LI/44HvcSEIGN4/Ge5Mz+8DynUgA91lo
lLOb+ecJus+9l2kx3a2AbDEuImSI+llwtKD/ox6dGrvdFMNeSzD7KBl2virOHMLf
o8iHupBewMIo8WG9QAaShVbml+m0kJusJ+6k1Xs0RS6N/bZ06dMt3e24tlWSIBFp
F23PJTkJvMNPYtgxR4QMKKUMbw7qL4CewHsALozdqzg/jCbBqnAfNkZyQQ9vrAmV
lJpjf4NbBbCOkB4iVwZr2tQEUz1y
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org