Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1892966DCC3CA1B5945851ED85AD90D42CB6E0BD.cer
File:                     1892966DCC3CA1B5945851ED85AD90D42CB6E0BD.cer (raw, json)
Hash identifier:          xDefbskyYXssWZR7MlgRwxuOJwDYxNCiB+Vcz9WwEpA=
Subject key identifier:   18:92:96:6D:CC:3C:A1:B5:94:58:51:ED:85:AD:90:D4:2C:B6:E0:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E930C1B22A825B436DA8FB1AA7921795032D335
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/1892966DCC3CA1B5945851ED85AD90D42CB6E0BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 19:59:03 +0000
Certificate not after:    Fri 21 Feb 2025 20:04:03 +0000
Subordinate resources:    AS: 264897
                          IP: 168.227.224.0/22
                          IP: 2804:2f88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:93:0c:1b:22:a8:25:b4:36:da:8f:b1:aa:79:21:79:50:32:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 19:59:03 2024 GMT
            Not After : Feb 21 20:04:03 2025 GMT
        Subject: CN=1892966DCC3CA1B5945851ED85AD90D42CB6E0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:12:0d:32:67:8d:ed:1e:93:34:b7:d8:36:
                    d2:44:fe:f8:c0:f4:f1:bd:66:be:bd:74:04:d1:77:
                    a0:90:d9:60:07:56:00:b3:a8:64:57:c0:84:df:96:
                    8d:0e:07:fb:ec:fd:03:57:f4:62:2f:38:4e:85:1f:
                    bb:fe:8a:81:6a:5c:aa:73:ce:54:96:a4:97:d7:e6:
                    f3:67:e9:13:19:1c:87:2b:52:25:da:c8:81:0c:c1:
                    ee:47:21:6d:d6:fe:38:30:72:e9:23:a9:80:48:fd:
                    4f:d7:80:96:b5:86:7b:23:d5:27:5d:ab:69:aa:67:
                    f4:9c:b2:92:14:3d:5c:f9:a1:57:24:29:6e:08:5e:
                    4a:c1:4b:1c:49:71:0f:f1:0a:a3:1f:f3:4f:73:31:
                    89:53:41:66:f6:6b:cf:bd:99:5e:04:60:68:9a:bd:
                    b0:ae:9e:83:91:e1:d3:38:23:fb:3f:6f:98:dc:da:
                    f6:b7:20:10:1b:9c:fa:f9:35:b8:45:2e:a5:91:f9:
                    ea:be:75:62:ee:9e:bb:42:b5:f1:78:b5:71:67:c6:
                    2d:c7:57:9c:bd:9e:c2:06:ce:c3:da:f5:94:4c:84:
                    c8:60:9f:e1:51:db:5c:ea:28:55:e2:f3:8f:71:74:
                    22:36:f3:9d:a4:27:88:60:15:d9:d6:28:d1:99:29:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:92:96:6D:CC:3C:A1:B5:94:58:51:ED:85:AD:90:D4:2C:B6:E0:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/1892966DCC3CA1B5945851ED85AD90D42CB6E0BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.224.0/22
                IPv6:
                  2804:2f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264897

    Signature Algorithm: sha256WithRSAEncryption
         70:44:36:51:61:6d:0c:d1:8b:11:25:17:7f:a5:fa:27:47:33:
         b2:f1:ec:47:3d:2a:36:b3:df:01:92:f9:20:cb:4c:fc:7e:51:
         fa:49:47:fd:02:1e:4d:f8:1b:df:89:30:52:8f:9a:81:62:ab:
         47:d4:3c:75:17:09:ef:58:49:de:25:30:52:63:f7:a4:ff:79:
         2b:65:34:97:11:49:d2:6b:73:14:6e:1a:db:29:16:32:6a:c3:
         06:13:8d:3d:78:61:8b:2a:c2:8e:76:9c:aa:70:84:7d:c0:d6:
         a6:f8:7f:ed:ad:44:48:38:0d:d3:4a:78:c2:70:c0:4e:a7:bb:
         6f:61:2b:65:90:5c:60:ee:72:30:94:8a:a8:64:74:24:0f:3c:
         bb:cd:21:66:76:cf:0b:58:c1:cc:eb:f0:3f:8a:eb:47:80:0b:
         f3:9a:56:8b:9c:0c:32:52:5a:e0:73:6e:06:ea:11:c2:b5:4b:
         7d:47:f5:3c:8d:e3:e9:b2:2e:54:c9:bb:b9:e5:5a:aa:c0:89:
         9f:9d:c0:54:ab:27:fe:6c:0d:c4:33:f4:5d:69:c2:4f:3e:c9:
         7a:f1:f8:00:84:68:47:0b:47:49:27:4c:c2:20:a9:0c:90:f6:
         6e:fb:51:02:05:52:59:5c:aa:d6:c6:0b:8e:e0:81:6b:73:12:
         fa:17:af:5a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUHpMMGyKoJbQ22o+xqnkheVAy0zUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjMxOTU5MDNaFw0yNTAyMjEyMDA0MDNaMDMxMTAvBgNV
BAMTKDE4OTI5NjZEQ0MzQ0ExQjU5NDU4NTFFRDg1QUQ5MEQ0MkNCNkUwQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINRINMmeN7R6TNLfYNtJE/vjA
9PG9Zr69dATRd6CQ2WAHVgCzqGRXwITflo0OB/vs/QNX9GIvOE6FH7v+ioFqXKpz
zlSWpJfX5vNn6RMZHIcrUiXayIEMwe5HIW3W/jgwcukjqYBI/U/XgJa1hnsj1Sdd
q2mqZ/ScspIUPVz5oVckKW4IXkrBSxxJcQ/xCqMf809zMYlTQWb2a8+9mV4EYGia
vbCunoOR4dM4I/s/b5jc2va3IBAbnPr5NbhFLqWR+eq+dWLunrtCtfF4tXFnxi3H
V5y9nsIGzsPa9ZRMhMhgn+FR21zqKFXi849xdCI2852kJ4hgFdnWKNGZKWhfAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYkpZtzDyhtZRY
Ue2FrZDULLbgvTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84Um9oeUNieFRVTVRpVVc4Sjg5RHZnQ0ZxeFBIdjRaWDhZ
NmJIWTFOdldwZy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84Um9oeUNieFRVTVRpVVc4Sjg5RHZnQ0ZxeFBIdjRaWDhZ
NmJIWTFOdldwZy8wLzE4OTI5NjZEQ0MzQ0ExQjU5NDU4NTFFRDg1QUQ5MEQ0MkNC
NkUwQkQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjj4DANBAIAAjAHAwUA
KAQviDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECsEwDQYJKoZIhvcNAQELBQAD
ggEBAHBENlFhbQzRixElF3+l+idHM7Lx7Ec9Kjaz3wGS+SDLTPx+UfpJR/0CHk34
G9+JMFKPmoFiq0fUPHUXCe9YSd4lMFJj96T/eStlNJcRSdJrcxRuGtspFjJqwwYT
jT14YYsqwo52nKpwhH3A1qb4f+2tREg4DdNKeMJwwE6nu29hK2WQXGDucjCUiqhk
dCQPPLvNIWZ2zwtYwczr8D+K60eAC/OaVoucDDJSWuBzbgbqEcK1S31H9TyN4+my
LlTJu7nlWqrAiZ+dwFSrJ/5sDcQz9F1pwk8+yXrx+ACEaEcLR0knTMIgqQyQ9m77
UQIFUllcqtbGC47ggWtzEvoXr1o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org