Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F80B1AB9D16BD7F18CB6813F14A1D584F222942.cer
File:                     1F80B1AB9D16BD7F18CB6813F14A1D584F222942.cer (raw, json)
Hash identifier:          iPnpHfEhPZ2zBR/Prk+6wDUEqny2Zeb69YhSOGYs32g=
Subject key identifier:   1F:80:B1:AB:9D:16:BD:7F:18:CB:68:13:F1:4A:1D:58:4F:22:29:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1173F94CDD8ABD07A17AE828E1F3B6C073418D6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/1F80B1AB9D16BD7F18CB6813F14A1D584F222942.mft
caRepository:             rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jun 2023 19:16:52 +0000
Certificate not after:    Thu 13 Jun 2024 19:21:52 +0000
Subordinate resources:    AS: 266214
                          IP: 190.123.204.0/22
                          IP: 2804:3c78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:73:f9:4c:dd:8a:bd:07:a1:7a:e8:28:e1:f3:b6:c0:73:41:8d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 15 19:16:52 2023 GMT
            Not After : Jun 13 19:21:52 2024 GMT
        Subject: CN=1F80B1AB9D16BD7F18CB6813F14A1D584F222942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:09:74:d6:e8:15:dd:6e:9c:dd:0f:61:62:
                    20:1d:f0:e9:4b:2c:47:f9:22:1e:e3:8f:49:bf:7f:
                    ff:04:bd:3b:c9:f0:f1:d7:55:54:ea:a6:81:ec:a3:
                    90:17:fe:71:31:af:fa:56:e0:b4:41:e6:25:63:64:
                    d1:54:9b:f3:f8:16:eb:a2:09:3d:a7:21:b5:5a:5d:
                    91:93:b1:67:53:1e:c9:05:2e:e6:fd:9f:e1:ad:a9:
                    7d:b9:20:b0:6c:18:20:71:19:1f:ad:96:a1:f8:28:
                    dd:31:b5:30:5b:ec:18:0e:98:9f:b5:7d:37:ce:4d:
                    85:23:43:fd:03:92:61:20:e6:42:83:d0:f4:98:d2:
                    c3:a0:f1:9b:33:c4:62:a8:45:85:94:2c:5e:54:00:
                    0b:ea:5f:b7:98:6c:8a:3c:03:28:c0:b8:dd:df:bd:
                    ed:b1:af:87:66:a2:b3:58:7c:c5:33:95:64:6f:40:
                    7f:d5:fc:d5:ac:50:c2:6b:3f:10:01:e3:90:69:9c:
                    39:42:c2:61:ec:14:13:52:9a:69:5e:e7:96:61:95:
                    77:97:1c:c3:ce:81:68:2b:99:b7:69:62:4c:1e:51:
                    0d:0f:aa:18:5e:8f:2d:29:33:7f:8c:23:c2:2e:57:
                    3f:98:a6:70:4e:fe:63:99:2d:01:1f:dd:97:c1:2e:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:80:B1:AB:9D:16:BD:7F:18:CB:68:13:F1:4A:1D:58:4F:22:29:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/1F80B1AB9D16BD7F18CB6813F14A1D584F222942.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.204.0/22
                IPv6:
                  2804:3c78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266214

    Signature Algorithm: sha256WithRSAEncryption
         0f:11:0a:22:9d:1a:06:58:47:84:82:c9:2a:69:66:c0:ea:6f:
         e5:2e:6d:5a:75:11:0e:ec:e3:91:e9:c3:55:48:91:92:5f:2d:
         5f:9a:ca:b4:b5:c0:e9:40:94:d7:6b:d1:ab:f2:e7:89:ff:6a:
         3a:9e:9c:cc:ad:26:4a:ba:aa:8e:ca:44:54:03:c4:15:6f:f7:
         bf:12:cb:1f:21:53:33:8c:d6:d0:e3:6e:c0:9a:f7:31:e5:6e:
         be:4e:ec:f6:c0:19:79:e2:fe:a8:24:0d:c3:58:37:26:a0:0f:
         d9:79:20:0c:db:58:2d:00:45:bd:f0:c8:c8:fb:b0:3b:10:b9:
         7f:36:eb:27:04:ee:43:88:e8:e7:43:ca:da:48:25:de:28:f6:
         e3:bf:83:3a:3b:43:f0:18:8f:28:f4:cd:cc:97:2a:54:f4:9e:
         42:c7:b4:91:30:8a:5f:a8:59:1e:aa:ab:1f:39:69:8f:eb:c1:
         8b:e1:0a:6e:76:f1:1f:72:4c:8c:a5:ad:22:ae:61:08:dd:62:
         50:cd:78:45:65:0c:f9:fd:f9:f0:4e:a4:6b:7d:1d:a7:66:e2:
         86:05:2e:2d:f7:d2:b3:da:ce:45:09:02:88:ad:27:1f:e4:3c:
         4e:a6:69:81:ea:30:9a:44:42:91:2b:77:10:9f:83:1e:50:04:
         07:96:6a:d6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUEXP5TN2KvQeheugo4fO2wHNBjWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MTUxOTE2NTJaFw0yNDA2MTMxOTIxNTJaMDMxMTAvBgNV
BAMTKDFGODBCMUFCOUQxNkJEN0YxOENCNjgxM0YxNEExRDU4NEYyMjI5NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGAl01ugV3W6c3Q9hYiAd8OlL
LEf5Ih7jj0m/f/8EvTvJ8PHXVVTqpoHso5AX/nExr/pW4LRB5iVjZNFUm/P4Fuui
CT2nIbVaXZGTsWdTHskFLub9n+GtqX25ILBsGCBxGR+tlqH4KN0xtTBb7BgOmJ+1
fTfOTYUjQ/0DkmEg5kKD0PSY0sOg8ZszxGKoRYWULF5UAAvqX7eYbIo8AyjAuN3f
ve2xr4dmorNYfMUzlWRvQH/V/NWsUMJrPxAB45BpnDlCwmHsFBNSmmle55ZhlXeX
HMPOgWgrmbdpYkweUQ0Pqhhejy0pM3+MI8IuVz+YpnBO/mOZLQEf3ZfBLt3lAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfgLGrnRa9fxjL
aBPxSh1YTyIpQjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84OVJhR3paVUdpbTdMWFFwU0J0RE5yUEYzcGtvVjJ0TFZo
ZFRSSGZVaHVETi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vODlSYUd6WlVHaW03TFhRcFNCdEROclBGM3Brb1YydExW
aGRUUkhmVWh1RE4vMC8xRjgwQjFBQjlEMTZCRDdGMThDQjY4MTNGMTRBMUQ1ODRG
MjIyOTQyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+e8wwDQQCAAIwBwMF
ACgEPHgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA/mMA0GCSqGSIb3DQEBCwUA
A4IBAQAPEQoinRoGWEeEgskqaWbA6m/lLm1adREO7OOR6cNVSJGSXy1fmsq0tcDp
QJTXa9Gr8ueJ/2o6npzMrSZKuqqOykRUA8QVb/e/EssfIVMzjNbQ427Amvcx5W6+
Tuz2wBl54v6oJA3DWDcmoA/ZeSAM21gtAEW98MjI+7A7ELl/NusnBO5DiOjnQ8ra
SCXeKPbjv4M6O0PwGI8o9M3MlypU9J5Cx7SRMIpfqFkeqqsfOWmP68GL4QpudvEf
ckyMpa0irmEI3WJQzXhFZQz5/fnwTqRrfR2nZuKGBS4t99Kz2s5FCQKIrScf5DxO
pmmB6jCaREKRK3cQn4MeUAQHlmrW
-----END CERTIFICATE-----