Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.cer
File:                     115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.cer (raw, json)
Hash identifier:          xM3fQtUMoBJieRRLX2f2nWThM8O5/V00E/S2A7VRYtE=
Subject key identifier:   11:5B:D5:FA:AC:7A:C0:2C:56:D3:72:A4:7E:AF:DA:2B:67:C3:19:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1574E56B8207772A2A21278FA39FBC75EBF578B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 17:28:37 +0000
Certificate not after:    Tue 14 May 2024 17:33:37 +0000
Subordinate resources:    AS: 264091
                          IP: 143.208.128.0/22
                          IP: 2804:2abc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:74:e5:6b:82:07:77:2a:2a:21:27:8f:a3:9f:bc:75:eb:f5:78:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 17:28:37 2023 GMT
            Not After : May 14 17:33:37 2024 GMT
        Subject: CN=115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:51:8e:85:98:af:0a:5c:90:c4:13:29:29:b3:
                    21:4e:34:df:0f:4e:fe:0e:7f:8c:78:b0:25:16:e2:
                    70:48:65:27:c3:7d:ab:a7:84:32:aa:b0:64:7e:90:
                    a8:97:5c:ea:f4:07:73:fa:95:81:e8:21:40:12:1d:
                    45:04:d8:98:f4:50:62:31:61:2a:54:1c:7d:e9:a3:
                    5a:10:0d:64:81:3f:f2:8c:ea:fc:15:d0:60:51:1b:
                    f9:d8:55:e6:9b:a7:ae:12:fa:f4:2f:b2:77:f2:3f:
                    4d:ce:07:68:c4:fa:34:c6:1c:a4:9a:3b:70:4d:48:
                    6e:64:f5:fe:45:25:d0:3a:8a:99:fe:e0:95:5b:da:
                    d9:72:0e:25:95:5e:06:59:8d:83:c1:82:7a:7e:dc:
                    23:bf:42:a2:36:db:3f:e2:aa:cf:8a:1a:fe:fa:ae:
                    31:44:a5:db:80:dd:fa:91:6a:ec:44:51:80:20:df:
                    9f:fe:fa:74:ef:5d:0b:58:98:e8:05:02:25:1f:49:
                    3c:3a:5b:2e:7f:72:ea:fa:ce:fe:d2:72:0f:d5:cd:
                    34:b2:94:92:a4:e3:97:f9:4d:0f:07:ee:17:b1:a4:
                    91:12:a3:0e:6b:0f:13:dd:52:c3:0f:53:02:1a:58:
                    e6:94:65:6d:e6:4c:71:ed:81:db:32:c5:76:98:2f:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:5B:D5:FA:AC:7A:C0:2C:56:D3:72:A4:7E:AF:DA:2B:67:C3:19:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.128.0/22
                IPv6:
                  2804:2abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264091

    Signature Algorithm: sha256WithRSAEncryption
         af:20:bd:3e:f1:a5:bf:3c:49:36:fb:64:43:03:c7:c5:0d:88:
         9c:ca:33:bb:5e:57:40:85:f6:87:38:b7:b4:e8:14:f5:47:57:
         75:69:14:e7:a9:20:01:59:49:35:62:9d:b7:a9:41:b1:04:0c:
         e8:e7:94:56:55:c4:52:ef:44:28:53:a1:2c:30:3d:61:83:b4:
         d0:32:6d:84:a0:07:a2:c8:48:09:3e:75:e0:fb:3e:17:cd:cd:
         a5:18:20:7e:f8:34:1e:ac:3b:82:80:bd:88:fa:8c:f4:91:bd:
         5e:23:09:26:35:ab:42:f1:6d:a7:26:02:71:21:47:f0:cc:ed:
         99:f7:49:9e:1b:69:16:66:f4:51:d8:4c:60:b5:73:10:2e:3f:
         d0:38:9e:c6:7b:e5:34:7f:e4:bf:4b:62:cf:d7:ce:af:6e:39:
         c4:2e:94:97:b3:e4:df:07:4b:8a:81:29:8d:8e:d4:45:be:86:
         b4:20:08:64:a3:b5:4c:66:39:d4:0a:a8:5c:9c:e8:3b:b3:41:
         7c:37:d9:7d:f8:c3:b9:8b:a3:bf:60:c6:9f:fe:d9:e0:85:fe:
         b0:94:9e:ea:89:68:d1:4b:80:8c:f0:9e:2e:26:45:f3:ee:94:
         b5:4e:1e:b8:40:9e:ec:1e:04:c4:3e:f7:74:cc:bc:af:28:db:
         8c:e7:3b:a8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFXTla4IHdyoqISePo5+8dev1eLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTYxNzI4MzdaFw0yNDA1MTQxNzMzMzdaMDMxMTAvBgNV
BAMTKDExNUJENUZBQUM3QUMwMkM1NkQzNzJBNDdFQUZEQTJCNjdDMzE5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUY6FmK8KXJDEEykpsyFONN8P
Tv4Of4x4sCUW4nBIZSfDfaunhDKqsGR+kKiXXOr0B3P6lYHoIUASHUUE2Jj0UGIx
YSpUHH3po1oQDWSBP/KM6vwV0GBRG/nYVeabp64S+vQvsnfyP03OB2jE+jTGHKSa
O3BNSG5k9f5FJdA6ipn+4JVb2tlyDiWVXgZZjYPBgnp+3CO/QqI22z/iqs+KGv76
rjFEpduA3fqRauxEUYAg35/++nTvXQtYmOgFAiUfSTw6Wy5/cur6zv7Scg/VzTSy
lJKk45f5TQ8H7hexpJESow5rDxPdUsMPUwIaWOaUZW3mTHHtgdsyxXaYLw9lAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQRW9X6rHrALFbT
cqR+r9orZ8MZijAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CS0hGcTMzRWp0VXBFckdOUFhZeFpXVFhBanlCYWU2TVVU
bnNpN1VuN3BhNS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CS0hGcTMzRWp0VXBFckdOUFhZeFpXVFhBanlCYWU2TVVU
bnNpN1VuN3BhNS8wLzExNUJENUZBQUM3QUMwMkM1NkQzNzJBNDdFQUZEQTJCNjdD
MzE5OEEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo/QgDANBAIAAjAHAwUA
KAQqvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEB5swDQYJKoZIhvcNAQELBQAD
ggEBAK8gvT7xpb88STb7ZEMDx8UNiJzKM7teV0CF9oc4t7ToFPVHV3VpFOepIAFZ
STVinbepQbEEDOjnlFZVxFLvRChToSwwPWGDtNAybYSgB6LISAk+deD7PhfNzaUY
IH74NB6sO4KAvYj6jPSRvV4jCSY1q0LxbacmAnEhR/DM7Zn3SZ4baRZm9FHYTGC1
cxAuP9A4nsZ75TR/5L9LYs/Xzq9uOcQulJez5N8HS4qBKY2O1EW+hrQgCGSjtUxm
OdQKqFyc6DuzQXw32X34w7mLo79gxp/+2eCF/rCUnuqJaNFLgIzwni4mRfPulLVO
HrhAnuweBMQ+93TMvK8o24znO6g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org