Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/15981F6142713AEB73FA97FD01412141D7DE5DFF.cer
File:                     15981F6142713AEB73FA97FD01412141D7DE5DFF.cer (raw, json)
Hash identifier:          Q2drqGfVbBB4/8AgriJ70ETXoH4o5Ze3srG8jylUaTM=
Subject key identifier:   15:98:1F:61:42:71:3A:EB:73:FA:97:FD:01:41:21:41:D7:DE:5D:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DB95D8739D46484F36FFE5F25B6C0BCE9730ACC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/15981F6142713AEB73FA97FD01412141D7DE5DFF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 00:11:16 +0000
Certificate not after:    Tue 30 Apr 2024 00:16:16 +0000
Subordinate resources:    AS: 266551
                          IP: 160.238.224.0/22
                          IP: 2804:3dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b9:5d:87:39:d4:64:84:f3:6f:fe:5f:25:b6:c0:bc:e9:73:0a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  2 00:11:16 2023 GMT
            Not After : Apr 30 00:16:16 2024 GMT
        Subject: CN=15981F6142713AEB73FA97FD01412141D7DE5DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b2:1a:c4:b3:6d:5f:c1:a8:43:98:62:66:1c:
                    a3:fd:db:02:f8:7c:8c:fc:9d:fd:ce:0a:96:14:4f:
                    5f:89:28:2f:e0:fe:26:7e:1d:fc:72:8a:47:bd:79:
                    e4:b3:26:e7:f3:f4:62:34:be:2a:c2:1a:cf:af:26:
                    71:02:2c:71:44:bf:60:56:b8:24:2c:94:9d:a4:d8:
                    ef:d6:5e:67:0b:38:1f:51:dd:6a:d2:31:87:fd:a1:
                    58:0d:2b:be:81:47:ce:74:c5:36:f5:76:67:2b:74:
                    3c:d7:be:e7:7e:82:d9:36:5b:f5:74:69:62:ee:2a:
                    cf:58:1f:36:12:0e:b6:84:7f:5a:8a:29:c2:19:f4:
                    b8:d2:15:40:df:34:18:ed:e1:23:21:99:fe:fd:e1:
                    31:a0:41:57:13:6e:77:bf:19:8d:89:c8:53:e1:ad:
                    62:7e:0f:2b:dc:3c:b6:92:f8:50:f6:a2:59:8a:dc:
                    95:2c:ea:76:f2:03:dd:b8:93:6d:2a:8f:88:45:66:
                    4a:51:20:58:ee:63:46:63:33:66:e7:b6:e8:69:05:
                    fb:cb:bb:92:f7:f0:54:1d:cf:e7:1c:85:f4:53:fc:
                    07:21:44:be:fa:df:e8:ea:0d:ce:41:74:33:34:0c:
                    05:4e:77:42:55:dd:d2:21:e6:8e:f8:c7:5e:3c:25:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:98:1F:61:42:71:3A:EB:73:FA:97:FD:01:41:21:41:D7:DE:5D:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/15981F6142713AEB73FA97FD01412141D7DE5DFF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.224.0/22
                IPv6:
                  2804:3dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266551

    Signature Algorithm: sha256WithRSAEncryption
         68:17:c9:75:43:68:cc:c4:3e:03:86:33:0f:af:e9:51:39:f8:
         e2:34:69:c5:f7:0c:4d:dd:68:16:45:6f:d0:38:5b:3e:20:06:
         9f:ff:4e:5c:70:67:dc:14:c8:40:d3:32:c8:1c:4c:70:30:aa:
         a4:bc:ba:a8:2a:d7:da:1f:6f:dd:fa:c7:0a:e4:cc:62:57:93:
         cd:a7:df:59:c7:fc:be:e6:b2:57:8b:f9:da:81:1e:ae:35:b3:
         0e:67:89:54:cd:f7:b5:b2:1a:3b:7a:76:59:67:49:dc:50:5a:
         f5:0b:77:28:4e:cc:e8:5f:8a:08:6c:62:b7:da:2c:75:f5:69:
         e9:95:92:a3:1f:a7:bf:a6:48:bc:1f:d0:9e:00:e4:99:a2:19:
         c1:e2:ad:2a:ef:8d:f6:e9:aa:15:19:77:9a:72:07:aa:a5:e0:
         cc:71:96:6d:43:53:8a:2b:86:56:a9:17:90:bc:0e:91:08:76:
         ac:d2:f8:86:3e:4a:b0:d5:20:c5:97:7c:1d:87:49:44:e4:11:
         f7:0b:5a:b6:4d:68:ee:47:d3:28:b8:09:ec:e1:8e:94:d4:15:
         d7:62:79:81:4e:fd:f1:e6:59:3e:76:45:a3:55:f0:ca:26:c0:
         b2:13:ea:ec:1d:bf:0e:36:d3:14:c4:8d:34:1f:f4:26:5e:9e:
         1c:ee:43:ca
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIULbldhznUZITzb/5fJbbAvOlzCswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MDIwMDExMTZaFw0yNDA0MzAwMDE2MTZaMDMxMTAvBgNV
BAMTKDE1OTgxRjYxNDI3MTNBRUI3M0ZBOTdGRDAxNDEyMTQxRDdERTVERkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbshrEs21fwahDmGJmHKP92wL4
fIz8nf3OCpYUT1+JKC/g/iZ+Hfxyike9eeSzJufz9GI0virCGs+vJnECLHFEv2BW
uCQslJ2k2O/WXmcLOB9R3WrSMYf9oVgNK76BR850xTb1dmcrdDzXvud+gtk2W/V0
aWLuKs9YHzYSDraEf1qKKcIZ9LjSFUDfNBjt4SMhmf794TGgQVcTbne/GY2JyFPh
rWJ+DyvcPLaS+FD2olmK3JUs6nbyA924k20qj4hFZkpRIFjuY0ZjM2bntuhpBfvL
u5L38FQdz+cchfRT/AchRL763+jqDc5BdDM0DAVOd0JV3dIh5o74x148JRy3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVmB9hQnE663P6
l/0BQSFB195d/zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83V2FzSFo5TW1NR3c0ZFljcUhHaE5XRkhhbThVV1FlNUJ1
Zm5HNExKRHAyai8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83V2FzSFo5TW1NR3c0ZFljcUhHaE5XRkhhbThVV1FlNUJ1
Zm5HNExKRHAyai8wLzE1OTgxRjYxNDI3MTNBRUI3M0ZBOTdGRDAxNDEyMTQxRDdE
RTVERkYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqDu4DANBAIAAjAHAwUA
KAQ9wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEETcwDQYJKoZIhvcNAQELBQAD
ggEBAGgXyXVDaMzEPgOGMw+v6VE5+OI0acX3DE3daBZFb9A4Wz4gBp//TlxwZ9wU
yEDTMsgcTHAwqqS8uqgq19ofb936xwrkzGJXk82n31nH/L7msleL+dqBHq41sw5n
iVTN97WyGjt6dllnSdxQWvULdyhOzOhfighsYrfaLHX1aemVkqMfp7+mSLwf0J4A
5JmiGcHirSrvjfbpqhUZd5pyB6ql4Mxxlm1DU4orhlapF5C8DpEIdqzS+IY+SrDV
IMWXfB2HSUTkEfcLWrZNaO5H0yi4CezhjpTUFddieYFO/fHmWT52RaNV8MomwLIT
6uwdvw420xTEjTQf9CZenhzuQ8o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org