Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/188F02AA9C3F1525608A157C207BEC60DF2EEB36.cer
File:                     188F02AA9C3F1525608A157C207BEC60DF2EEB36.cer (raw, json)
Hash identifier:          LzWlg5gFi7jEKTXjK72q9urxDUfnCEznPEmosbqLK0g=
Subject key identifier:   18:8F:02:AA:9C:3F:15:25:60:8A:15:7C:20:7B:EC:60:DF:2E:EB:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17CEB95F6228EDD6403860BC44CBAAE0BFDC3281
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/188F02AA9C3F1525608A157C207BEC60DF2EEB36.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Oct 2021 09:35:58 +0000
Certificate not after:    Thu 20 Oct 2022 09:40:58 +0000
Subordinate resources:    AS: 266448
                          IP: 170.82.220.0/22
                          IP: 2804:37fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ce:b9:5f:62:28:ed:d6:40:38:60:bc:44:cb:aa:e0:bf:dc:32:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 21 09:35:58 2021 GMT
            Not After : Oct 20 09:40:58 2022 GMT
        Subject: CN=188F02AA9C3F1525608A157C207BEC60DF2EEB36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:28:28:e1:f5:79:aa:6d:de:0c:f4:f0:63:
                    b7:08:0d:99:a8:57:ab:51:2e:c8:e1:5b:86:25:6c:
                    64:09:0e:5e:f9:7f:34:41:51:cd:ad:aa:3a:ac:0e:
                    79:83:06:f0:ec:a3:35:83:fa:36:03:f6:b3:d0:6b:
                    52:55:d4:e8:76:dd:bf:75:9f:fe:49:9e:da:3a:02:
                    13:8c:42:ac:81:a4:76:7b:33:61:ac:58:1d:90:3b:
                    6f:c0:8a:59:c6:ba:80:a3:42:59:d1:37:70:b3:1a:
                    c2:e4:59:33:79:2c:7e:e6:ed:28:46:21:5f:2a:35:
                    98:81:a5:64:c0:98:e4:57:1c:02:8d:d2:93:6e:68:
                    0a:53:49:0c:94:69:68:91:10:48:ad:d5:8a:2f:64:
                    e6:af:39:b8:59:29:09:43:97:1a:e0:e3:21:24:7e:
                    2c:b2:bb:df:60:b3:0f:b3:48:03:02:cc:09:6f:e3:
                    c5:9d:c4:ab:2a:89:45:57:92:48:05:32:f5:06:78:
                    9c:04:51:3b:c7:32:b2:ae:b6:c8:3b:1f:86:e3:45:
                    4f:e6:c9:46:35:b5:b4:18:6b:b1:d1:61:39:80:30:
                    78:26:2e:c5:af:2b:3f:8d:c1:bd:9e:0d:88:49:24:
                    a2:75:a5:af:da:95:28:c8:01:9f:26:57:a7:78:4a:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:8F:02:AA:9C:3F:15:25:60:8A:15:7C:20:7B:EC:60:DF:2E:EB:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/188F02AA9C3F1525608A157C207BEC60DF2EEB36.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.220.0/22
                IPv6:
                  2804:37fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266448

    Signature Algorithm: sha256WithRSAEncryption
         35:02:91:05:db:99:0f:c4:ae:bd:4f:cf:5c:9b:e8:bf:3e:db:
         d1:e5:1e:a8:1e:aa:55:a3:7c:9a:3b:fb:a0:04:8b:5e:d6:a3:
         4b:4c:18:d2:45:f1:90:bf:22:4f:7d:c1:1a:8f:94:a5:a1:53:
         5e:a3:e6:44:77:02:11:3f:d9:6b:43:cf:69:b2:09:d8:75:24:
         2c:98:d7:04:1c:f8:52:00:df:2b:bd:2a:28:e7:76:86:92:df:
         87:06:20:98:ff:1f:cd:27:37:53:5c:39:37:81:57:77:c7:f1:
         76:f2:f1:0e:ca:8d:cd:fc:0c:10:fa:2c:11:db:f2:c8:2d:7b:
         5d:7c:c2:73:b9:97:c0:00:4e:56:7c:1c:9a:65:05:7a:c4:4b:
         1d:40:f8:50:7b:be:a6:6b:24:a6:7a:af:9d:06:2d:7f:62:0b:
         31:0d:10:5c:84:eb:da:0d:48:64:14:e6:ae:3a:dc:d1:f3:61:
         51:46:4b:0e:50:88:5e:1d:5b:ab:e8:60:f9:b9:1b:2e:44:7a:
         06:dc:e9:64:a7:1a:92:33:95:08:1a:9e:0f:69:85:b6:86:c1:
         74:08:9d:b6:7f:86:ae:65:33:bd:f0:0d:94:df:35:02:41:f2:
         2c:0a:ad:3e:3c:5e:43:ba:f4:1a:d2:72:b1:56:d3:8f:98:8d:
         dd:3f:0e:29
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUF865X2Io7dZAOGC8RMuq4L/cMoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEwMjEwOTM1NThaFw0yMjEwMjAwOTQwNThaMDMxMTAvBgNV
BAMTKDE4OEYwMkFBOUMzRjE1MjU2MDhBMTU3QzIwN0JFQzYwREYyRUVCMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTlygo4fV5qm3eDPTwY7cIDZmo
V6tRLsjhW4YlbGQJDl75fzRBUc2tqjqsDnmDBvDsozWD+jYD9rPQa1JV1Oh23b91
n/5Jnto6AhOMQqyBpHZ7M2GsWB2QO2/AilnGuoCjQlnRN3CzGsLkWTN5LH7m7ShG
IV8qNZiBpWTAmORXHAKN0pNuaApTSQyUaWiREEit1YovZOavObhZKQlDlxrg4yEk
fiyyu99gsw+zSAMCzAlv48WdxKsqiUVXkkgFMvUGeJwEUTvHMrKutsg7H4bjRU/m
yUY1tbQYa7HRYTmAMHgmLsWvKz+Nwb2eDYhJJKJ1pa/alSjIAZ8mV6d4SlHHAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYjwKqnD8VJWCK
FXwge+xg3y7rNjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GOVoxMVFUeGVteTlKbURBRFBBeFU1VEcxc3Q2UThmbWE4
dmc1aG5qSFBjYi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRjlaMTFRVHhlbXk5Sm1EQURQQXhVNVRHMXN0NlE4Zm1h
OHZnNWhuakhQY2IvMC8xODhGMDJBQTlDM0YxNTI1NjA4QTE1N0MyMDdCRUM2MERG
MkVFQjM2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqUtwwDQQCAAIwBwMF
ACgEN/wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBDQMA0GCSqGSIb3DQEBCwUA
A4IBAQA1ApEF25kPxK69T89cm+i/PtvR5R6oHqpVo3yaO/ugBIte1qNLTBjSRfGQ
vyJPfcEaj5SloVNeo+ZEdwIRP9lrQ89psgnYdSQsmNcEHPhSAN8rvSoo53aGkt+H
BiCY/x/NJzdTXDk3gVd3x/F28vEOyo3N/AwQ+iwR2/LILXtdfMJzuZfAAE5WfBya
ZQV6xEsdQPhQe76maySmeq+dBi1/YgsxDRBchOvaDUhkFOauOtzR82FRRksOUIhe
HVur6GD5uRsuRHoG3OlkpxqSM5UIGp4PaYW2hsF0CJ22f4auZTO98A2U3zUCQfIs
Cq0+PF5DuvQa0nKxVtOPmI3dPw4p
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org