Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1D2F0D365E3A132BD216834E11F4B31FF6318432.cer
File:                     1D2F0D365E3A132BD216834E11F4B31FF6318432.cer (raw, json)
Hash identifier:          hey7WLjJC8RsghX9RsM8JkNfg5z0jpYbdyH30T0+MfY=
Subject key identifier:   1D:2F:0D:36:5E:3A:13:2B:D2:16:83:4E:11:F4:B3:1F:F6:31:84:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EFD46BD9EC74B117CA394B498FC40716220051B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5bhGK1ipTpegxuYhcJEy61RdwE4pMts8879MvsBFQ2Pi/0/1D2F0D365E3A132BD216834E11F4B31FF6318432.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5bhGK1ipTpegxuYhcJEy61RdwE4pMts8879MvsBFQ2Pi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 14:10:11 +0000
Certificate not after:    Thu 24 Oct 2024 14:15:11 +0000
Subordinate resources:    AS: 262527
                          IP: 177.67.208.0/21
                          IP: 2804:59c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fd:46:bd:9e:c7:4b:11:7c:a3:94:b4:98:fc:40:71:62:20:05:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 14:10:11 2023 GMT
            Not After : Oct 24 14:15:11 2024 GMT
        Subject: CN=1D2F0D365E3A132BD216834E11F4B31FF6318432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:24:d5:c8:0c:82:90:6a:d2:36:d8:3c:66:
                    b8:0c:9c:2a:6c:9f:e1:98:e0:8a:4c:3b:7d:f6:2d:
                    f8:0c:0e:fe:0f:22:d0:bd:ba:66:be:a1:a5:4e:c8:
                    92:3b:9d:56:2e:9e:4f:21:0c:ae:28:3b:7e:21:b9:
                    34:c2:f0:fd:67:d8:2c:03:f3:2e:30:23:56:3f:46:
                    6d:2e:7c:e5:04:67:db:8f:37:a9:23:c6:69:ed:48:
                    ee:56:e4:12:e9:ee:80:2f:fc:fa:9e:9a:07:92:8d:
                    16:92:b8:24:2a:5b:e3:84:35:59:4e:a6:5f:2e:ec:
                    d2:75:8f:58:4a:82:62:3b:06:f7:9f:c1:c6:e6:99:
                    8c:b0:fc:35:57:e0:28:ec:9f:75:b2:d5:b5:cc:5c:
                    2b:88:e9:cc:d0:5b:e7:4c:31:52:38:c3:99:98:e2:
                    cc:3d:39:4e:cd:ac:ad:a8:8b:93:81:31:22:f3:24:
                    79:8e:c4:4c:f2:4e:51:b7:15:a4:01:8b:d8:4f:6c:
                    c6:71:38:57:03:6b:70:9d:cc:eb:dc:12:45:e6:c3:
                    81:54:23:34:6d:2a:a1:11:bd:75:98:bf:a8:db:fe:
                    de:72:2c:ee:05:08:f3:84:6d:08:74:73:37:bf:56:
                    bd:52:62:a7:77:48:cc:ad:64:7f:c5:6f:df:09:b6:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:2F:0D:36:5E:3A:13:2B:D2:16:83:4E:11:F4:B3:1F:F6:31:84:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5bhGK1ipTpegxuYhcJEy61RdwE4pMts8879MvsBFQ2Pi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5bhGK1ipTpegxuYhcJEy61RdwE4pMts8879MvsBFQ2Pi/0/1D2F0D365E3A132BD216834E11F4B31FF6318432.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.208.0/21
                IPv6:
                  2804:59c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262527

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:cf:ce:cf:a0:9b:6b:f6:5d:78:f0:23:7a:50:2f:3b:21:
         7a:0d:dc:c2:df:96:40:81:a5:d1:3e:55:c1:df:96:d9:23:a0:
         e8:b1:fd:61:6f:cf:1b:a8:f4:31:88:c2:ba:37:03:2c:05:54:
         84:85:58:b7:f0:ae:9e:df:26:34:9a:b2:ff:71:10:f4:84:20:
         e4:83:74:ab:60:1a:f0:57:45:22:a3:30:12:06:f8:d8:32:c6:
         b6:dc:89:25:3f:65:ea:80:9f:e0:0e:9e:f8:6c:72:a1:32:f8:
         d2:7b:c7:c4:8c:44:19:f7:7c:f2:ac:2d:36:d1:d2:e3:7e:58:
         75:d3:b0:ff:ee:d2:a3:a6:0e:be:8c:13:3d:32:41:04:11:0e:
         42:e4:81:5e:8c:e8:eb:4c:85:61:a2:7f:b9:dd:2a:e8:f5:4d:
         c5:c6:b4:60:ba:2b:4a:34:27:ff:cf:54:44:e3:97:eb:f4:fe:
         d0:d3:e7:a5:b7:e0:69:68:09:27:4d:bc:0f:49:79:d2:75:06:
         93:05:c9:a8:85:19:01:b2:be:75:1a:82:19:fd:6c:99:78:25:
         3e:4e:52:b9:c4:67:8f:25:98:1a:51:7c:2b:26:75:3d:a6:c1:
         17:87:d3:b9:56:b7:7c:08:b6:82:91:ec:7e:25:cf:a6:6f:1c:
         1e:02:59:50
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUbv1GvZ7HSxF8o5S0mPxAcWIgBRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjYxNDEwMTFaFw0yNDEwMjQxNDE1MTFaMDMxMTAvBgNV
BAMTKDFEMkYwRDM2NUUzQTEzMkJEMjE2ODM0RTExRjRCMzFGRjYzMTg0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PiTVyAyCkGrSNtg8ZrgMnCps
n+GY4IpMO332LfgMDv4PItC9uma+oaVOyJI7nVYunk8hDK4oO34huTTC8P1n2CwD
8y4wI1Y/Rm0ufOUEZ9uPN6kjxmntSO5W5BLp7oAv/PqemgeSjRaSuCQqW+OENVlO
pl8u7NJ1j1hKgmI7BvefwcbmmYyw/DVX4Cjsn3Wy1bXMXCuI6czQW+dMMVI4w5mY
4sw9OU7NrK2oi5OBMSLzJHmOxEzyTlG3FaQBi9hPbMZxOFcDa3CdzOvcEkXmw4FU
IzRtKqERvXWYv6jb/t5yLO4FCPOEbQh0cze/Vr1SYqd3SMytZH/Fb98Jtk89AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdLw02XjoTK9IW
g04R9LMf9jGEMjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81YmhHSzFpcFRwZWd4dVloY0pFeTYxUmR3RTRwTXRzODg3
OU12c0JGUTJQaS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNWJoR0sxaXBUcGVneHVZaGNKRXk2MVJkd0U0cE10czg4
NzlNdnNCRlEyUGkvMC8xRDJGMEQzNjVFM0ExMzJCRDIxNjgzNEUxMUY0QjMxRkY2
MzE4NDMyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxQ9AwDQQCAAIwBwMF
ACgEBZwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAF/MA0GCSqGSIb3DQEBCwUA
A4IBAQAK5c/Oz6Cba/ZdePAjelAvOyF6DdzC35ZAgaXRPlXB35bZI6Dosf1hb88b
qPQxiMK6NwMsBVSEhVi38K6e3yY0mrL/cRD0hCDkg3SrYBrwV0UiozASBvjYMsa2
3IklP2XqgJ/gDp74bHKhMvjSe8fEjEQZ93zyrC020dLjflh107D/7tKjpg6+jBM9
MkEEEQ5C5IFejOjrTIVhon+53Sro9U3FxrRguitKNCf/z1RE45fr9P7Q0+elt+Bp
aAknTbwPSXnSdQaTBcmohRkBsr51GoIZ/WyZeCU+TlK5xGePJZgaUXwrJnU9psEX
h9O5Vrd8CLaCkex+Jc+mbxweAllQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org