Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.cer
File:                     11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.cer (raw, json)
Hash identifier:          XMCGM7vdf9ofJ+mxcCwFp2uqhHBhFIu7yAELoquMI4E=
Subject key identifier:   11:EC:3F:AF:C4:B2:34:C0:5A:44:39:51:C7:BD:C1:F0:E9:89:BF:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F9A02438BBA293FC56DABEB010BACD82CA33B16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Jun 2023 18:35:11 +0000
Certificate not after:    Fri 31 May 2024 18:40:11 +0000
Subordinate resources:    AS: 268235
                          IP: 45.236.116.0/22
                          IP: 2804:4e08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9a:02:43:8b:ba:29:3f:c5:6d:ab:eb:01:0b:ac:d8:2c:a3:3b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  2 18:35:11 2023 GMT
            Not After : May 31 18:40:11 2024 GMT
        Subject: CN=11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:a5:06:e2:c4:35:09:d4:26:f6:2e:ff:0d:
                    5c:3a:92:1a:95:4a:f0:fa:a1:53:48:44:f3:6f:73:
                    21:0c:5d:cc:3f:6b:7d:01:13:c0:11:96:39:e8:68:
                    b4:b9:69:5c:3f:3f:85:eb:c3:56:aa:fe:fb:d3:2b:
                    cb:6d:c7:82:3a:4e:0a:5a:98:35:62:38:18:6a:7f:
                    00:50:4f:6a:90:92:8a:a8:b9:07:8f:a6:24:43:18:
                    db:e5:b9:27:0c:02:88:30:36:bf:b7:fc:08:b2:c3:
                    37:4e:29:87:97:21:46:28:15:ca:d4:02:1a:10:d4:
                    8c:67:b8:1e:b3:d0:bf:86:b9:49:83:e1:b0:ce:c3:
                    ab:30:9e:8e:0e:72:63:8a:66:05:cb:bc:e7:bb:80:
                    cd:f6:0c:f0:79:55:c0:c8:91:70:25:07:31:1d:55:
                    25:c4:43:64:4b:c4:82:45:18:1b:eb:f8:b6:47:ce:
                    0a:04:ea:4c:96:e0:97:fd:c5:c5:81:de:bf:c3:a4:
                    32:a8:8a:29:e2:20:bc:19:bc:01:3c:82:1d:43:5a:
                    86:9f:55:cf:59:bb:b8:e0:17:e6:46:42:13:3a:48:
                    01:31:6b:ab:93:c0:eb:2c:00:80:20:22:b7:55:cd:
                    60:a2:8b:4b:74:0a:66:98:b6:3d:3c:6e:9c:b4:00:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:EC:3F:AF:C4:B2:34:C0:5A:44:39:51:C7:BD:C1:F0:E9:89:BF:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.116.0/22
                IPv6:
                  2804:4e08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268235

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:4c:72:43:07:40:35:e1:de:01:a9:bb:56:bc:71:08:61:
         57:24:d6:0e:bb:d3:1c:a9:23:c3:0f:c2:52:89:e1:bc:17:87:
         91:9f:3f:4f:e0:7e:64:46:ed:47:3c:58:61:cb:fa:c1:8c:e0:
         ef:23:9b:57:9a:46:79:fc:5b:68:cb:60:58:d9:40:ea:3e:2b:
         f8:66:01:67:d6:ef:6d:8d:c1:19:e1:8d:e5:be:15:99:da:93:
         cb:62:fb:4a:0c:1d:e6:fc:4d:b9:6d:82:a6:ae:51:c5:a7:c5:
         ab:7b:b4:de:37:b3:43:7e:37:30:8e:87:21:93:8f:31:81:c0:
         3d:67:a3:0b:5b:80:46:db:07:da:b0:83:6a:2d:16:60:ab:3d:
         8f:52:74:61:8e:4c:2f:f1:ed:b2:09:da:35:59:8f:aa:d2:b4:
         65:f7:43:51:4e:76:b4:dd:0b:6d:e2:2a:0a:8c:27:0b:e9:15:
         2a:7a:cf:e4:f5:c1:13:5a:02:fc:56:5c:6a:0a:ec:2c:dc:12:
         2e:79:22:9f:ab:eb:02:a2:38:38:27:85:bf:40:bb:ff:d6:a9:
         fd:a5:ed:0d:9f:2f:ab:15:35:d9:12:1f:7d:88:83:a5:5b:a6:
         b0:26:49:de:e0:67:4b:84:3a:50:fa:fd:50:02:9f:c2:5b:04:
         61:33:86:02
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUT5oCQ4u6KT/FbavrAQus2CyjOxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MDIxODM1MTFaFw0yNDA1MzExODQwMTFaMDMxMTAvBgNV
BAMTKDExRUMzRkFGQzRCMjM0QzA1QTQ0Mzk1MUM3QkRDMUYwRTk4OUJGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDajaUG4sQ1CdQm9i7/DVw6khqV
SvD6oVNIRPNvcyEMXcw/a30BE8ARljnoaLS5aVw/P4Xrw1aq/vvTK8ttx4I6Tgpa
mDViOBhqfwBQT2qQkoqouQePpiRDGNvluScMAogwNr+3/AiywzdOKYeXIUYoFcrU
AhoQ1IxnuB6z0L+GuUmD4bDOw6swno4OcmOKZgXLvOe7gM32DPB5VcDIkXAlBzEd
VSXEQ2RLxIJFGBvr+LZHzgoE6kyW4Jf9xcWB3r/DpDKoiiniILwZvAE8gh1DWoaf
Vc9Zu7jgF+ZGQhM6SAExa6uTwOssAIAgIrdVzWCii0t0CmaYtj08bpy0AIqBAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQR7D+vxLI0wFpE
OVHHvcHw6Ym/SzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HM25rSkxnNnNDb2txWXFGVks2M2ExOXhzRWlockcxTE1v
Tlg4RzVLTTZLci8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRzNua0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxN
b05YOEc1S002S3IvMC8xMUVDM0ZBRkM0QjIzNEMwNUE0NDM5NTFDN0JEQzFGMEU5
ODlCRjRCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7HQwDQQCAAIwBwMF
ACgETggwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBfLMA0GCSqGSIb3DQEBCwUA
A4IBAQBp1ExyQwdANeHeAam7VrxxCGFXJNYOu9McqSPDD8JSieG8F4eRnz9P4H5k
Ru1HPFhhy/rBjODvI5tXmkZ5/Ftoy2BY2UDqPiv4ZgFn1u9tjcEZ4Y3lvhWZ2pPL
YvtKDB3m/E25bYKmrlHFp8Wre7TeN7NDfjcwjochk48xgcA9Z6MLW4BG2wfasINq
LRZgqz2PUnRhjkwv8e2yCdo1WY+q0rRl90NRTna03Qtt4ioKjCcL6RUqes/k9cET
WgL8VlxqCuws3BIueSKfq+sCojg4J4W/QLv/1qn9pe0Nny+rFTXZEh99iIOlW6aw
Jkne4GdLhDpQ+v1QAp/CWwRhM4YC
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org