Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/14B8A893D2DF8796E715190F9C5D58E111E17482.cer
File:                     14B8A893D2DF8796E715190F9C5D58E111E17482.cer (raw, json)
Hash identifier:          GPj6Z7F0ZmlahwYbruOoOtB8h8FjddWvpkT2CaK3aco=
Subject key identifier:   14:B8:A8:93:D2:DF:87:96:E7:15:19:0F:9C:5D:58:E1:11:E1:74:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7367BBCD5F2D5117F0857813876733EA39B14ACC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/14B8A893D2DF8796E715190F9C5D58E111E17482.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 12:14:54 +0000
Certificate not after:    Mon 10 Mar 2025 12:19:54 +0000
Subordinate resources:    AS: 52910
                          IP: 186.251.38.0/24
                          IP: 2804:1f3c::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:67:bb:cd:5f:2d:51:17:f0:85:78:13:87:67:33:ea:39:b1:4a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 12:14:54 2024 GMT
            Not After : Mar 10 12:19:54 2025 GMT
        Subject: CN=14B8A893D2DF8796E715190F9C5D58E111E17482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:bd:a2:4c:26:fc:89:2a:f6:ef:c0:85:3e:
                    8b:4d:21:ee:65:c0:17:bc:34:2a:42:90:10:c5:8d:
                    70:f0:1f:49:75:ce:a7:57:b2:a8:ca:ec:04:9b:76:
                    13:00:c4:b7:ca:2b:d4:00:13:f7:3b:95:36:28:b9:
                    fc:42:50:49:ae:0c:6c:14:d5:24:06:fe:99:19:0f:
                    fe:28:d5:76:36:40:27:b2:95:0e:30:0c:ac:2f:c5:
                    d2:03:bd:eb:08:5e:30:21:bf:ef:4b:48:ae:38:26:
                    47:e3:0a:ab:bb:a6:9d:80:5b:d4:70:88:f1:40:e3:
                    1f:9e:92:00:d6:10:4c:6a:59:72:2d:eb:bf:89:e2:
                    c7:1f:28:d7:13:1f:39:20:08:2f:56:4d:b1:9f:69:
                    55:ac:cb:84:de:41:30:f1:f2:5b:1d:8e:36:05:cc:
                    ba:f8:37:d1:b2:e0:e1:55:fe:69:dc:91:a6:dd:d4:
                    d2:c5:a8:fd:dd:08:16:24:fb:40:53:62:11:c6:7f:
                    05:84:ec:fe:f2:29:3a:b6:9f:8b:0a:22:e4:8c:f1:
                    bd:43:70:00:05:83:43:65:a9:ec:1f:42:50:ee:63:
                    7b:e2:5a:a2:a5:ac:35:20:f4:80:a3:9f:4a:32:da:
                    59:c2:be:1a:9c:5a:ad:15:4b:39:d6:5f:c2:ea:62:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:B8:A8:93:D2:DF:87:96:E7:15:19:0F:9C:5D:58:E1:11:E1:74:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/14B8A893D2DF8796E715190F9C5D58E111E17482.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.38.0/24
                IPv6:
                  2804:1f3c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52910

    Signature Algorithm: sha256WithRSAEncryption
         1a:fd:ff:e4:53:26:3b:55:3d:85:a0:e9:73:18:14:a8:fe:fc:
         53:af:80:71:9c:56:cf:2f:82:ab:01:d6:74:f7:8f:e4:57:0d:
         c2:20:43:1d:21:e1:7a:6d:d2:66:53:c2:10:41:23:ed:10:f8:
         4a:d2:cf:00:5b:3d:20:b0:4c:c3:5f:64:98:e4:42:55:63:42:
         b9:a7:55:21:5c:15:85:9d:c0:7f:fa:38:60:ec:51:50:0c:03:
         6b:34:57:70:bb:54:f0:28:6a:be:25:be:9b:c2:6f:f7:2f:f9:
         d2:d3:c1:f3:a8:79:3b:44:b2:c8:b6:50:48:83:8d:5d:54:43:
         df:c4:74:3b:09:c1:8e:ca:76:f9:02:4b:3b:04:b7:a3:d3:8f:
         14:1b:b3:2a:86:8d:ca:7a:45:1f:04:a6:75:c6:69:fe:13:76:
         ea:b2:c9:a1:6f:d2:05:6d:d9:fd:5a:a2:9a:23:11:aa:9a:ec:
         b7:aa:c0:d5:63:50:95:d4:eb:3f:3a:fb:b5:da:d9:3e:79:b3:
         32:d7:8a:e3:b9:9f:33:1a:4b:c5:7c:16:8a:97:01:30:56:5e:
         4d:09:57:db:20:d5:43:70:e5:3c:b4:c4:fd:cb:99:ac:e4:a0:
         81:f5:bb:00:28:d8:9b:23:cf:23:e6:25:71:17:48:06:1f:4e:
         a3:ea:21:48
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgIUc2e7zV8tURfwhXgTh2cz6jmxSswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTExMjE0NTRaFw0yNTAzMTAxMjE5NTRaMDMxMTAvBgNV
BAMTKDE0QjhBODkzRDJERjg3OTZFNzE1MTkwRjlDNUQ1OEUxMTFFMTc0ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yr2iTCb8iSr278CFPotNIe5l
wBe8NCpCkBDFjXDwH0l1zqdXsqjK7ASbdhMAxLfKK9QAE/c7lTYoufxCUEmuDGwU
1SQG/pkZD/4o1XY2QCeylQ4wDKwvxdIDvesIXjAhv+9LSK44JkfjCqu7pp2AW9Rw
iPFA4x+ekgDWEExqWXIt67+J4scfKNcTHzkgCC9WTbGfaVWsy4TeQTDx8lsdjjYF
zLr4N9Gy4OFV/mnckabd1NLFqP3dCBYk+0BTYhHGfwWE7P7yKTq2n4sKIuSM8b1D
cAAFg0NlqewfQlDuY3viWqKlrDUg9ICjn0oy2lnCvhqcWq0VSznWX8LqYlMTAgMB
AAGjggMcMIIDGDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUuKiT0t+HlucV
GQ+cXVjhEeF0gjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EQm5GbXNFblZwaGZKbWlhQ2JiSjZmS1JUSzdMUEJGa0Jw
QVJMTnU5WEtNUC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vREJuRm1zRW5WcGhmSm1pYUNiYko2ZktSVEs3TFBCRmtC
cEFSTE51OVhLTVAvMC8xNEI4QTg5M0QyREY4Nzk2RTcxNTE5MEY5QzVENThFMTEx
RTE3NDgyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBAC6+yYwDgQCAAIwCAMG
BCgEHzwAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDOrjANBgkqhkiG9w0BAQsF
AAOCAQEAGv3/5FMmO1U9haDpcxgUqP78U6+AcZxWzy+CqwHWdPeP5FcNwiBDHSHh
em3SZlPCEEEj7RD4StLPAFs9ILBMw19kmORCVWNCuadVIVwVhZ3Af/o4YOxRUAwD
azRXcLtU8ChqviW+m8Jv9y/50tPB86h5O0SyyLZQSIONXVRD38R0OwnBjsp2+QJL
OwS3o9OPFBuzKoaNynpFHwSmdcZp/hN26rLJoW/SBW3Z/VqimiMRqprst6rA1WNQ
ldTrPzr7tdrZPnmzMteK47mfMxpLxXwWipcBMFZeTQlX2yDVQ3DlPLTE/cuZrOSg
gfW7ACjYmyPPI+YlcRdIBh9Oo+ohSA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org