Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
File:                     206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer (raw, json)
Hash identifier:          HEFPOfek/4CkAugzAtdshw2ByRvLfgzHBdoQX4Xszqw=
Subject key identifier:   20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AA77542C89D29B8130593A52761E48CE353E8CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 11:04:07 +0000
Certificate not after:    Thu 01 Aug 2024 11:09:07 +0000
Subordinate resources:    AS: 265241
                          IP: 170.78.28.0/22
                          IP: 2804:2cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a7:75:42:c8:9d:29:b8:13:05:93:a5:27:61:e4:8c:e3:53:e8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 11:04:07 2023 GMT
            Not After : Aug  1 11:09:07 2024 GMT
        Subject: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:cd:be:50:93:71:bc:f9:c8:04:30:9b:b6:
                    54:9d:d2:60:65:cf:68:2d:55:ec:ed:cb:e4:a5:52:
                    65:73:5d:97:dd:64:97:de:64:f1:17:4a:8c:54:51:
                    48:08:bb:2d:b6:e8:20:be:46:09:43:33:7c:ca:31:
                    a8:38:05:c8:e3:de:97:bf:09:76:2d:67:30:59:29:
                    55:68:c0:e3:86:99:4f:85:9b:e5:4d:24:5b:5c:15:
                    fe:6b:bc:1b:5b:ee:f8:a4:8e:26:f9:fa:bd:03:03:
                    1a:25:6c:4d:26:92:26:a1:dd:fb:89:98:a4:82:3e:
                    e1:16:5a:fe:b6:01:06:fb:a1:b0:15:72:cd:05:3b:
                    f3:c9:4b:a0:c9:48:48:1a:90:07:8c:a6:e7:95:be:
                    e2:10:95:60:b2:af:11:3f:7c:f7:95:e7:9c:54:66:
                    ea:5c:7c:40:6a:2d:60:4e:79:e0:c6:7d:bc:a0:ac:
                    2a:be:e1:bd:30:12:54:d2:cd:eb:2c:f3:dd:c3:90:
                    2e:59:36:34:00:ca:ce:95:ee:2f:80:cd:21:ed:b4:
                    21:6d:9a:e6:79:28:f5:b4:47:75:69:ac:11:25:84:
                    7f:d7:39:3a:c4:8f:f7:7e:3f:d6:4a:0d:ed:41:95:
                    b6:eb:74:a6:05:c7:9a:79:f2:ac:06:33:cd:da:57:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.28.0/22
                IPv6:
                  2804:2cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265241

    Signature Algorithm: sha256WithRSAEncryption
         50:ef:5d:18:c4:59:4a:68:12:86:bf:ab:95:31:be:f3:2c:58:
         ee:06:35:df:6b:6b:f1:db:35:1d:30:fe:11:3a:15:58:04:30:
         e5:65:49:1b:b5:62:14:e1:af:2c:2a:f0:6e:89:44:81:06:cb:
         ba:f1:25:dc:2e:76:f5:cf:21:3e:50:aa:45:27:03:78:86:01:
         a9:3e:dd:9c:bd:b2:05:df:8e:45:44:6d:f8:96:fb:48:39:21:
         f2:87:2b:7c:ce:ab:ff:c3:71:0e:41:bc:c9:1c:09:88:5b:f5:
         4d:32:84:e6:17:73:69:eb:37:7e:e3:31:67:57:1e:b1:4f:a9:
         91:7a:51:9b:56:54:80:32:3d:a8:0b:e7:19:08:4f:7e:59:9c:
         bb:66:89:18:84:f8:94:5d:48:d0:5c:fd:e0:69:c9:5b:c0:65:
         71:71:ef:da:7e:f1:fc:0f:78:e7:04:6f:72:38:51:45:4e:94:
         ee:9c:d4:f8:b8:cc:05:56:be:fb:ff:a0:64:1b:7f:1a:75:c6:
         df:bd:79:ea:9d:15:95:66:be:13:bd:c2:2e:f9:bf:3c:8a:60:
         92:08:9d:07:2e:ae:08:a6:00:92:4a:ae:f7:6e:54:d6:b5:4c:
         18:8d:20:6d:7e:86:2b:a3:cc:18:e8:ae:0a:74:a4:f1:5b:5a:
         0a:0f:cd:3a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUSqd1QsidKbgTBZOlJ2HkjONT6MswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MDMxMTA0MDdaFw0yNDA4MDExMTA5MDdaMDMxMTAvBgNV
BAMTKDIwNkFBNzRGOEM5RTY1NjA1RkE5QTNDNjk3MERBRTE1Q0ZDNDgwMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsc2+UJNxvPnIBDCbtlSd0mBl
z2gtVezty+SlUmVzXZfdZJfeZPEXSoxUUUgIuy226CC+RglDM3zKMag4Bcjj3pe/
CXYtZzBZKVVowOOGmU+Fm+VNJFtcFf5rvBtb7vikjib5+r0DAxolbE0mkiah3fuJ
mKSCPuEWWv62AQb7obAVcs0FO/PJS6DJSEgakAeMpueVvuIQlWCyrxE/fPeV55xU
ZupcfEBqLWBOeeDGfbygrCq+4b0wElTSzess893DkC5ZNjQAys6V7i+AzSHttCFt
muZ5KPW0R3VprBElhH/XOTrEj/d+P9ZKDe1BlbbrdKYFx5p58qwGM83aV4svAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgaqdPjJ5lYF+p
o8aXDa4Vz8SAFjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yTnNDMW9RV1R2MjllUzhiR3BacUVBalFCN3lldnBkMW9j
UnVocWFlU1BKbS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFv
Y1J1aHFhZVNQSm0vMC8yMDZBQTc0RjhDOUU2NTYwNUZBOUEzQzY5NzBEQUUxNUNG
QzQ4MDE2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqThwwDQQCAAIwBwMF
ACgELMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAwZMA0GCSqGSIb3DQEBCwUA
A4IBAQBQ710YxFlKaBKGv6uVMb7zLFjuBjXfa2vx2zUdMP4ROhVYBDDlZUkbtWIU
4a8sKvBuiUSBBsu68SXcLnb1zyE+UKpFJwN4hgGpPt2cvbIF345FRG34lvtIOSHy
hyt8zqv/w3EOQbzJHAmIW/VNMoTmF3Np6zd+4zFnVx6xT6mRelGbVlSAMj2oC+cZ
CE9+WZy7ZokYhPiUXUjQXP3gaclbwGVxce/afvH8D3jnBG9yOFFFTpTunNT4uMwF
Vr77/6BkG38adcbfvXnqnRWVZr4TvcIu+b88imCSCJ0HLq4IpgCSSq73blTWtUwY
jSBtfoYro8wY6K4KdKTxW1oKD806
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org