Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.cer
File:                     133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.cer (raw, json)
Hash identifier:          ZTDJW1ttggfZHj+/jw0KxJJ42llK7jFl6yWrbs0S6oU=
Subject key identifier:   13:3D:8E:9C:C1:08:F2:C1:30:C9:6B:B9:EC:79:C8:E9:6B:BD:3E:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3739ACEF97C8547BD106EA8C6F5B4B135B81B2B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 19:48:31 +0000
Certificate not after:    Mon 21 Oct 2024 19:53:31 +0000
Subordinate resources:    AS: 263855
                          IP: 138.186.84.0/22
                          IP: 2804:26c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:39:ac:ef:97:c8:54:7b:d1:06:ea:8c:6f:5b:4b:13:5b:81:b2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 19:48:31 2023 GMT
            Not After : Oct 21 19:53:31 2024 GMT
        Subject: CN=133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:5e:e9:1b:fa:67:a7:cc:c6:5b:a6:f9:5b:
                    ee:ce:28:c9:4a:21:ae:e3:05:0c:1c:64:ad:19:71:
                    ee:4f:74:a5:3e:01:9d:12:3e:bb:a5:c4:d2:f1:05:
                    64:15:15:b1:0d:2c:93:27:a0:ac:e8:eb:77:db:22:
                    1b:fa:b6:c3:57:fe:a2:aa:47:9e:a8:1d:b6:1d:5f:
                    1d:2c:02:0f:91:ef:68:37:26:54:54:9b:e0:f3:6d:
                    2e:8f:5a:15:7f:39:68:9a:8c:78:3c:27:d1:4d:65:
                    60:ee:5f:9d:5c:1e:da:e4:48:99:19:75:ba:66:64:
                    85:e0:31:23:98:9c:39:09:90:51:aa:c2:7b:05:29:
                    e4:29:cf:78:ff:05:ed:b6:89:97:8b:42:b4:68:a4:
                    eb:56:32:72:fd:7a:bb:de:64:eb:1d:dc:0d:92:01:
                    fe:72:9b:09:52:73:3e:2e:07:9f:3b:45:70:e2:6c:
                    aa:71:22:46:86:7f:ee:a3:4c:b9:53:61:4a:18:ce:
                    d0:17:7b:bb:e3:9c:f0:6b:89:7e:74:c8:63:e8:0d:
                    e7:30:ff:b6:ca:49:94:05:f6:70:db:65:6a:00:41:
                    5f:c5:05:df:48:64:34:07:27:87:ce:8f:d0:7f:99:
                    d6:ed:d1:90:70:bc:2f:50:6a:6e:69:83:c7:d1:6f:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:3D:8E:9C:C1:08:F2:C1:30:C9:6B:B9:EC:79:C8:E9:6B:BD:3E:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/22
                IPv6:
                  2804:26c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263855

    Signature Algorithm: sha256WithRSAEncryption
         82:e8:98:7c:e5:11:71:f9:88:46:2b:2b:e5:b0:6d:ee:bf:1d:
         83:dd:48:d6:be:5e:9d:e5:66:91:9c:f0:b5:29:c9:0a:af:20:
         96:3a:d2:4a:2c:7f:9d:1d:39:b8:9d:d3:5f:f7:ff:fc:34:c3:
         ed:ee:bf:cb:f4:f1:50:82:c8:de:d5:c8:7b:3c:dc:0f:8c:e3:
         ae:0c:c7:ca:b8:b5:05:b1:df:36:4b:54:40:0d:76:7e:90:9a:
         b4:36:6a:45:71:64:15:87:69:89:f8:2b:e2:58:ad:76:90:03:
         a6:6c:2f:a0:05:9b:f0:32:5d:8f:b0:c0:91:56:40:a8:be:c1:
         59:06:56:15:4e:eb:e5:2c:70:f3:ae:f3:08:c7:99:e0:82:e3:
         bc:21:98:b3:5c:7d:b7:bf:52:0f:18:16:89:95:99:59:50:6e:
         6c:3e:ea:7c:0f:c8:0b:e5:fc:ad:c2:3e:b7:c9:70:40:e0:7b:
         8c:4c:41:e8:82:0a:89:72:24:ff:9f:62:c1:fe:f3:da:e6:1a:
         e5:db:78:0d:fe:7c:c4:89:35:f5:aa:37:cc:bc:b3:b0:6a:09:
         e0:cd:e6:4c:06:30:fc:74:46:1c:ad:a3:85:19:c5:6b:58:c4:
         b1:3a:c8:37:fe:73:ed:60:c4:ae:eb:3a:d8:16:fc:4c:37:01:
         d6:40:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org