Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.cer
File:                     19639BFB08A786F190FBE0E94689B63D40D8B8FD.cer (raw, json)
Hash identifier:          rBx1hxd+tGDnE+ijCVif+/NVCECCsP932/rHRZzoUvk=
Subject key identifier:   19:63:9B:FB:08:A7:86:F1:90:FB:E0:E9:46:89:B6:3D:40:D8:B8:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E778BA845BFA962828A2893C5883B21EEEB08FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 02:56:13 +0000
Certificate not after:    Fri 06 Dec 2024 03:01:13 +0000
Subordinate resources:    AS: 268657
                          IP: 45.165.48.0/22
                          IP: 2804:548c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:77:8b:a8:45:bf:a9:62:82:8a:28:93:c5:88:3b:21:ee:eb:08:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 02:56:13 2023 GMT
            Not After : Dec  6 03:01:13 2024 GMT
        Subject: CN=19639BFB08A786F190FBE0E94689B63D40D8B8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:77:40:4a:34:ea:bd:8f:d6:67:ce:3c:24:e7:
                    01:5a:5f:22:b1:66:cc:53:16:f5:df:0f:b8:78:96:
                    2d:b2:3d:c1:d8:f4:38:ba:80:38:d6:73:e5:86:98:
                    fe:24:b0:70:1b:54:b3:f7:4c:30:2a:fc:50:0a:b3:
                    60:4e:bb:f8:9d:3d:0c:9c:37:f9:ee:51:c6:d6:98:
                    f9:2c:e7:94:9d:fa:66:a4:c2:27:2f:26:db:7b:c8:
                    a8:1b:4d:ed:34:eb:94:16:29:99:57:58:f6:6e:d5:
                    9f:df:43:65:46:f9:cf:85:8b:b2:18:66:98:9c:64:
                    a4:e1:6d:8a:42:ed:e9:c0:53:e9:cf:8f:57:84:dc:
                    5a:28:eb:68:10:5a:ba:53:78:e6:f4:30:f6:7c:3a:
                    b9:80:dd:b4:1b:62:ef:2b:45:20:0a:00:25:a0:92:
                    a9:65:fb:7a:d5:f8:ce:fc:22:2b:2f:34:5b:b7:42:
                    5e:74:ca:e5:0a:54:e4:07:3a:b1:f8:dd:04:b6:03:
                    f7:96:53:5d:cb:65:98:f4:fc:52:76:26:49:2b:29:
                    c4:15:30:09:9e:73:9a:18:fe:00:9f:c5:2b:13:25:
                    d2:2d:cc:d4:39:3a:03:e4:8a:5c:62:ed:05:5b:a5:
                    9e:3b:81:1f:18:44:35:3d:92:ef:5d:62:1f:e3:72:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:63:9B:FB:08:A7:86:F1:90:FB:E0:E9:46:89:B6:3D:40:D8:B8:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.48.0/22
                IPv6:
                  2804:548c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268657

    Signature Algorithm: sha256WithRSAEncryption
         33:87:a7:72:40:04:a6:04:25:4a:30:e9:00:6b:4d:24:7a:3e:
         b0:de:7a:e5:1f:1e:27:9e:60:4a:4b:43:30:ad:1a:77:0a:7c:
         93:8c:b3:17:2a:fc:d5:b7:09:67:ee:b9:e5:ca:79:fe:50:aa:
         45:dc:92:b2:4c:a8:de:38:67:89:d1:d5:54:5f:43:0a:a4:97:
         06:bf:27:a9:a6:18:87:be:52:f6:b4:90:1d:74:d8:ea:e1:cf:
         15:9a:5a:6c:16:11:ef:86:c3:e3:55:d3:79:cb:32:7a:2c:4a:
         6f:95:ae:d9:c5:e6:3a:9e:00:90:a0:cd:b6:c2:62:35:a4:d9:
         1d:a6:80:b1:ca:e8:05:eb:3d:3b:75:cf:b5:c6:9a:4a:9a:58:
         24:b3:a7:7d:a9:7b:79:dc:df:6c:b6:af:3b:cd:2b:f8:a1:7f:
         b6:b4:c2:26:50:f6:38:a0:1c:68:b9:f4:a2:25:e8:76:25:a7:
         f8:a9:46:c4:9b:2a:50:7a:b3:94:99:9e:d2:31:49:75:30:36:
         d8:1d:95:19:cd:66:02:53:c8:77:53:e4:d2:ce:13:04:38:ce:
         aa:d9:c6:5e:7e:13:fb:1b:76:62:7f:10:d2:ac:00:f2:1b:49:
         b3:9e:7a:09:95:0f:76:5a:3c:eb:6f:1e:25:8a:d5:14:45:b4:
         38:f1:c8:ea
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUTneLqEW/qWKCiiiTxYg7Ie7rCPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDgwMjU2MTNaFw0yNDEyMDYwMzAxMTNaMDMxMTAvBgNV
BAMTKDE5NjM5QkZCMDhBNzg2RjE5MEZCRTBFOTQ2ODlCNjNENDBEOEI4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcd0BKNOq9j9Znzjwk5wFaXyKx
ZsxTFvXfD7h4li2yPcHY9Di6gDjWc+WGmP4ksHAbVLP3TDAq/FAKs2BOu/idPQyc
N/nuUcbWmPks55Sd+makwicvJtt7yKgbTe0065QWKZlXWPZu1Z/fQ2VG+c+Fi7IY
ZpicZKThbYpC7enAU+nPj1eE3Foo62gQWrpTeOb0MPZ8OrmA3bQbYu8rRSAKACWg
kqll+3rV+M78IisvNFu3Ql50yuUKVOQHOrH43QS2A/eWU13LZZj0/FJ2JkkrKcQV
MAmec5oY/gCfxSsTJdItzNQ5OgPkilxi7QVbpZ47gR8YRDU9ku9dYh/jcjv9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZY5v7CKeG8ZD7
4OlGibY9QNi4/TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DVDZjOHNhcFVXS2M3V3hEcFpkVEJNTUxrTnlBOUgzdmFG
ZGdkOHRkOXJZUC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DVDZjOHNhcFVXS2M3V3hEcFpkVEJNTUxrTnlBOUgzdmFG
ZGdkOHRkOXJZUC8wLzE5NjM5QkZCMDhBNzg2RjE5MEZCRTBFOTQ2ODlCNjNENDBE
OEI4RkQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2lMDANBAIAAjAHAwUA
KARUjDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGXEwDQYJKoZIhvcNAQELBQAD
ggEBADOHp3JABKYEJUow6QBrTSR6PrDeeuUfHieeYEpLQzCtGncKfJOMsxcq/NW3
CWfuueXKef5QqkXckrJMqN44Z4nR1VRfQwqklwa/J6mmGIe+Uva0kB102OrhzxWa
WmwWEe+Gw+NV03nLMnosSm+VrtnF5jqeAJCgzbbCYjWk2R2mgLHK6AXrPTt1z7XG
mkqaWCSzp32pe3nc32y2rzvNK/ihf7a0wiZQ9jigHGi59KIl6HYlp/ipRsSbKlB6
s5SZntIxSXUwNtgdlRnNZgJTyHdT5NLOEwQ4zqrZxl5+E/sbdmJ/ENKsAPIbSbOe
egmVD3ZaPOtvHiWK1RRFtDjxyOo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org