Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/19FBDE1F0E2A911DE05B174AD5E8BEA555FF27A4.cer
File:                     19FBDE1F0E2A911DE05B174AD5E8BEA555FF27A4.cer (raw, json)
Hash identifier:          BEbShgNqk3eAWcqqkLILsFU0FRs/w3RvzjFCh9T1w+E=
Subject key identifier:   19:FB:DE:1F:0E:2A:91:1D:E0:5B:17:4A:D5:E8:BE:A5:55:FF:27:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5DBA1224F901DD9DEE904B41A5D6EBE86E0B0C4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/19FBDE1F0E2A911DE05B174AD5E8BEA555FF27A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Feb 2022 16:07:50 +0000
Certificate not after:    Tue 31 Jan 2023 16:12:50 +0000
Subordinate resources:    AS: 269041
                          IP: 45.178.168.0/22
                          IP: 2804:5e90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:12:24:f9:01:dd:9d:ee:90:4b:41:a5:d6:eb:e8:6e:0b:0c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 16:07:50 2022 GMT
            Not After : Jan 31 16:12:50 2023 GMT
        Subject: CN=19FBDE1F0E2A911DE05B174AD5E8BEA555FF27A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ed:af:63:a8:42:19:e5:60:35:15:6c:b7:fa:
                    45:82:a4:e0:7a:1d:7e:c1:ee:db:bb:54:a0:26:ec:
                    dd:44:2e:37:ac:18:6c:ff:4b:0c:0f:a0:78:e2:a5:
                    b2:21:5b:fd:b6:ea:01:17:95:7c:8f:27:35:8e:d8:
                    7f:a8:d1:8a:99:cb:67:57:4f:e7:43:e7:17:66:9c:
                    04:eb:80:28:10:2c:28:06:87:99:51:e3:04:d3:df:
                    f0:62:39:57:a6:08:b0:be:0c:90:9c:cd:8a:1e:11:
                    28:29:02:1e:93:36:d7:3d:89:db:08:97:3d:f2:b0:
                    ac:ab:59:b9:8d:f3:c5:63:9f:d7:b2:08:82:d2:35:
                    b3:7e:88:83:28:53:72:24:d3:0b:4d:de:ec:94:1a:
                    d9:a6:3f:64:57:f2:e4:6b:8a:ee:97:b4:0c:e1:85:
                    f4:9e:c0:b9:38:c0:c0:82:7f:3f:61:2b:0c:94:93:
                    d7:63:86:3b:8e:5b:82:f0:d5:48:c2:7a:4a:57:73:
                    00:3e:82:c5:80:71:b2:30:1d:6c:b7:af:7c:e9:92:
                    a5:f6:b4:25:57:a2:b9:40:91:76:c6:fe:ed:be:b6:
                    f7:b9:be:11:dd:ab:02:f1:dd:f5:8d:73:02:59:d5:
                    eb:df:00:92:61:04:10:43:5b:37:dc:86:19:be:a1:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:FB:DE:1F:0E:2A:91:1D:E0:5B:17:4A:D5:E8:BE:A5:55:FF:27:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/19FBDE1F0E2A911DE05B174AD5E8BEA555FF27A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.168.0/22
                IPv6:
                  2804:5e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269041

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:b1:aa:8c:13:ed:13:78:ce:98:7b:01:58:86:7d:14:f7:
         14:ce:bc:84:c8:46:3c:d8:73:c2:7c:67:5f:4b:f8:5a:75:da:
         f2:33:76:23:11:ba:14:11:fb:37:21:5b:af:f8:df:df:37:68:
         cd:2c:f1:65:c5:38:14:7e:f8:5f:87:a0:90:83:6b:51:76:eb:
         27:0c:b6:da:06:a8:d0:6b:08:4f:af:ef:a4:67:a3:31:0e:08:
         39:a5:ea:09:6f:ce:60:a5:38:0c:78:66:73:2e:7d:4c:a6:26:
         33:96:0d:2e:7c:d0:92:37:b7:70:e0:32:15:ad:f8:f9:d9:97:
         9a:c0:01:f9:db:3e:79:3d:b2:b6:b4:80:8c:3e:15:86:db:45:
         04:38:96:22:95:51:a1:fe:21:ac:44:07:d7:ec:f7:b8:4a:f1:
         43:56:ee:93:14:a1:ec:f5:c4:08:5d:d0:d0:ce:2b:21:fd:1a:
         f3:17:de:3d:e0:6c:f5:41:51:d4:fb:80:58:dd:f2:c4:09:d4:
         c0:bf:04:7e:a6:c2:b1:49:bf:3e:fb:68:5f:b6:aa:7f:5f:1e:
         4d:9a:fe:93:56:75:4b:aa:1d:56:54:11:71:e2:1a:50:30:36:
         50:03:52:11:19:37:87:b8:17:f3:25:24:4e:bd:8e:4a:ad:d8:
         88:63:7d:1c
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUXboSJPkB3Z3ukEtBpdbr6G4LDEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAyMDExNjA3NTBaFw0yMzAxMzExNjEyNTBaMDMxMTAvBgNV
BAMTKDE5RkJERTFGMEUyQTkxMURFMDVCMTc0QUQ1RThCRUE1NTVGRjI3QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY7a9jqEIZ5WA1FWy3+kWCpOB6
HX7B7tu7VKAm7N1ELjesGGz/SwwPoHjipbIhW/226gEXlXyPJzWO2H+o0YqZy2dX
T+dD5xdmnATrgCgQLCgGh5lR4wTT3/BiOVemCLC+DJCczYoeESgpAh6TNtc9idsI
lz3ysKyrWbmN88Vjn9eyCILSNbN+iIMoU3Ik0wtN3uyUGtmmP2RX8uRriu6XtAzh
hfSewLk4wMCCfz9hKwyUk9djhjuOW4Lw1UjCekpXcwA+gsWAcbIwHWy3r3zpkqX2
tCVXorlAkXbG/u2+tve5vhHdqwLx3fWNcwJZ1evfAJJhBBBDWzfchhm+odnpAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZ+94fDiqRHeBb
F0rV6L6lVf8npDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GWDZqMVNDQ1cxdHFTQWNNRG5NY3lrU1FvcHFMTWZMUUxo
M01zbkVOS0g0aC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GWDZqMVNDQ1cxdHFTQWNNRG5NY3lrU1FvcHFMTWZMUUxo
M01zbkVOS0g0aC8wLzE5RkJERTFGMEUyQTkxMURFMDVCMTc0QUQ1RThCRUE1NTVG
RjI3QTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2yqDANBAIAAjAHAwUA
KARekDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGvEwDQYJKoZIhvcNAQELBQAD
ggEBABVesaqME+0TeM6YewFYhn0U9xTOvITIRjzYc8J8Z19L+Fp12vIzdiMRuhQR
+zchW6/43983aM0s8WXFOBR++F+HoJCDa1F26ycMttoGqNBrCE+v76RnozEOCDml
6glvzmClOAx4ZnMufUymJjOWDS580JI3t3DgMhWt+PnZl5rAAfnbPnk9sra0gIw+
FYbbRQQ4liKVUaH+IaxEB9fs97hK8UNW7pMUoez1xAhd0NDOKyH9GvMX3j3gbPVB
UdT7gFjd8sQJ1MC/BH6mwrFJvz77aF+2qn9fHk2a/pNWdUuqHVZUEXHiGlAwNlAD
UhEZN4e4F/MlJE69jkqt2IhjfRw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org