Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/125D254081F13F3A9106BC0521C287212613AFAF.cer
File:                     125D254081F13F3A9106BC0521C287212613AFAF.cer (raw, json)
Hash identifier:          FGRu8FKZixStPPekecHzx3jDGtRDYz4OE1edOoS21cs=
Subject key identifier:   12:5D:25:40:81:F1:3F:3A:91:06:BC:05:21:C2:87:21:26:13:AF:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1351687C1D3354400C9345B115BCDAFD39B51BCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/125D254081F13F3A9106BC0521C287212613AFAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 20:46:01 +0000
Certificate not after:    Mon 24 Jun 2024 20:51:01 +0000
Subordinate resources:    AS: 264197
                          IP: 138.97.148.0/22
                          IP: 2804:2404::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:51:68:7c:1d:33:54:40:0c:93:45:b1:15:bc:da:fd:39:b5:1b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 20:46:01 2023 GMT
            Not After : Jun 24 20:51:01 2024 GMT
        Subject: CN=125D254081F13F3A9106BC0521C287212613AFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:86:6b:b7:7f:22:f3:42:c4:05:43:f8:90:
                    91:1d:7a:09:89:76:06:f6:e9:90:03:93:c0:d9:c0:
                    23:fe:50:01:a7:59:67:7b:f6:02:42:4a:02:3c:e0:
                    1f:76:1c:05:eb:5c:1a:7f:14:1b:37:3d:8b:3a:36:
                    08:28:9e:bf:49:06:8a:29:c5:ff:80:ac:c8:fa:98:
                    e0:55:df:49:78:06:ff:dc:73:06:5c:36:7f:84:41:
                    62:c9:a8:81:41:5d:e2:27:c1:55:b5:2b:b5:47:4a:
                    d1:a3:53:27:69:09:37:c1:d0:17:a3:fa:e2:87:b2:
                    28:dc:40:ea:9d:a9:93:39:c3:7c:ca:e3:22:46:6d:
                    a7:06:07:8b:f8:47:4f:f4:ad:5c:87:ab:e6:6f:66:
                    8c:b4:96:1c:fa:ef:e4:ea:2c:e2:4c:02:c7:7f:57:
                    da:e0:6d:c7:e6:be:68:ca:20:45:be:7e:10:47:d2:
                    5e:8f:cb:c5:3b:67:69:97:01:75:0a:40:ec:b5:7c:
                    83:6b:71:dd:a3:4b:be:7c:6a:95:44:29:e5:4e:94:
                    67:e7:a5:0d:0f:1e:b8:6e:1a:f1:72:4b:a4:1b:a5:
                    16:3d:ed:02:be:74:2e:b0:da:ff:68:63:c4:c3:6f:
                    36:a6:f4:2b:9a:93:e8:e3:43:a5:51:aa:5f:1e:89:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:5D:25:40:81:F1:3F:3A:91:06:BC:05:21:C2:87:21:26:13:AF:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/125D254081F13F3A9106BC0521C287212613AFAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/22
                IPv6:
                  2804:2404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264197

    Signature Algorithm: sha256WithRSAEncryption
         85:b1:14:a3:e3:ce:1d:4d:0e:c2:d2:db:7f:d6:fa:2f:d2:67:
         f3:be:cb:a5:d7:af:d0:b1:1b:79:64:52:eb:b4:a7:56:f6:e0:
         17:e5:ff:9f:2b:20:08:83:17:31:94:60:d1:60:75:39:d5:a3:
         10:0d:47:54:7c:05:19:37:cc:3c:04:f4:2c:a1:28:7d:77:2a:
         f5:cb:14:83:0b:4c:cd:80:1a:5d:7b:4c:e0:84:cc:db:0f:de:
         10:62:91:11:69:f3:2d:0b:d3:29:36:c5:c8:0b:c6:3a:00:4c:
         e1:74:7e:5e:29:56:ba:eb:f8:d7:f7:fe:95:cf:ba:ad:89:e2:
         a1:68:2e:97:12:cf:8a:5f:21:12:ba:a1:28:9b:0a:8f:c4:23:
         aa:b5:fb:39:0b:0c:2c:3f:87:a9:53:3b:99:34:1a:d1:5b:49:
         1c:48:90:8c:d5:70:4f:53:d5:f5:aa:2d:50:e0:a7:65:b6:4a:
         2d:48:52:f4:dd:ef:27:70:8a:af:43:c4:f8:16:17:28:4e:b4:
         f5:d8:0d:d4:be:ee:fa:8c:40:1c:3e:d7:1d:fb:c5:3e:a7:f8:
         c7:ab:39:f8:b1:45:ec:63:39:fa:8a:4f:1e:94:d4:0e:7a:5c:
         b2:b9:a5:d2:a5:f2:39:bb:79:02:db:c2:c6:06:86:2a:f2:fb:
         d1:cd:8a:ee
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUE1FofB0zVEAMk0WxFbza/Tm1G8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjYyMDQ2MDFaFw0yNDA2MjQyMDUxMDFaMDMxMTAvBgNV
BAMTKDEyNUQyNTQwODFGMTNGM0E5MTA2QkMwNTIxQzI4NzIxMjYxM0FGQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLy4Zrt38i80LEBUP4kJEdegmJ
dgb26ZADk8DZwCP+UAGnWWd79gJCSgI84B92HAXrXBp/FBs3PYs6Nggonr9JBoop
xf+ArMj6mOBV30l4Bv/ccwZcNn+EQWLJqIFBXeInwVW1K7VHStGjUydpCTfB0Bej
+uKHsijcQOqdqZM5w3zK4yJGbacGB4v4R0/0rVyHq+ZvZoy0lhz67+TqLOJMAsd/
V9rgbcfmvmjKIEW+fhBH0l6Py8U7Z2mXAXUKQOy1fINrcd2jS758apVEKeVOlGfn
pQ0PHrhuGvFyS6QbpRY97QK+dC6w2v9oY8TDbzam9Cuak+jjQ6VRql8eicXLAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSXSVAgfE/OpEG
vAUhwochJhOvrzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EYjVNYWpVOWY3cEx5clNpZFZkWldiczNFN0R5bnBOVGYz
b1FlZkZyOVM1VC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRm
M29RZWZGcjlTNVQvMC8xMjVEMjU0MDgxRjEzRjNBOTEwNkJDMDUyMUMyODcyMTI2
MTNBRkFGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKYZQwDQQCAAIwBwMF
ACgEJAQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAgFMA0GCSqGSIb3DQEBCwUA
A4IBAQCFsRSj484dTQ7C0tt/1vov0mfzvsul16/QsRt5ZFLrtKdW9uAX5f+fKyAI
gxcxlGDRYHU51aMQDUdUfAUZN8w8BPQsoSh9dyr1yxSDC0zNgBpde0zghMzbD94Q
YpERafMtC9MpNsXIC8Y6AEzhdH5eKVa66/jX9/6Vz7qtieKhaC6XEs+KXyESuqEo
mwqPxCOqtfs5CwwsP4epUzuZNBrRW0kcSJCM1XBPU9X1qi1Q4KdltkotSFL03e8n
cIqvQ8T4FhcoTrT12A3Uvu76jEAcPtcd+8U+p/jHqzn4sUXsYzn6ik8elNQOelyy
uaXSpfI5u3kC28LGBoYq8vvRzYru
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org