Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/220832367997CA8C886E5063B38C119108F402D3.cer
File:                     220832367997CA8C886E5063B38C119108F402D3.cer (raw, json)
Hash identifier:          l7ufqQPCq3B/GVwRadncgg+/vegM80oi1ZEBtJYbRL8=
Subject key identifier:   22:08:32:36:79:97:CA:8C:88:6E:50:63:B3:8C:11:91:08:F4:02:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       708E26EB9ED1F048E2E5A985F9D864F8550F2349
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/220832367997CA8C886E5063B38C119108F402D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 12:48:45 +0000
Certificate not after:    Thu 12 Sep 2024 12:53:45 +0000
Subordinate resources:    AS: 269499
                          IP: 45.186.156.0/22
                          IP: 2804:658c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8e:26:eb:9e:d1:f0:48:e2:e5:a9:85:f9:d8:64:f8:55:0f:23:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 12:48:45 2023 GMT
            Not After : Sep 12 12:53:45 2024 GMT
        Subject: CN=220832367997CA8C886E5063B38C119108F402D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:53:f4:22:d2:a0:14:d3:eb:01:7a:8c:61:
                    4c:64:f4:67:08:91:0f:a9:af:fb:5e:64:d7:31:07:
                    d3:fd:12:d5:ca:54:68:1a:8b:2f:22:6a:12:a0:f8:
                    15:be:bf:2d:65:f3:2a:7f:3d:0c:56:12:9e:04:ce:
                    9f:3a:a1:ae:c7:26:b5:1d:d2:c9:16:ce:2b:88:4b:
                    d7:51:64:43:2f:11:ca:8d:94:9f:a5:75:94:df:cf:
                    04:d1:1a:b3:b0:45:c3:95:6b:e7:1d:ed:07:b9:bc:
                    10:50:e5:4e:8a:5b:23:ca:fb:bb:54:8a:16:7a:fd:
                    a2:16:e3:29:15:67:43:ef:32:79:18:11:1d:2a:6a:
                    bd:09:e5:cb:d3:45:5b:da:65:e9:95:c3:09:9c:8f:
                    74:82:f8:46:5e:6a:b7:e2:18:6f:86:c4:83:4f:9e:
                    42:c9:ca:f7:76:eb:2b:ce:81:9d:55:b8:7c:9f:1d:
                    b3:b5:e7:69:8a:03:9f:b7:30:86:bd:84:d7:5a:9a:
                    7b:a1:9f:15:13:9a:da:1c:15:a3:37:b2:b6:94:c0:
                    79:f8:35:fd:39:be:e2:36:61:ad:ee:80:d7:32:e0:
                    4d:1c:35:b6:c3:ff:c6:c0:7b:51:44:c7:23:55:c3:
                    81:53:1e:49:07:84:b0:86:ad:82:19:40:6c:18:73:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:08:32:36:79:97:CA:8C:88:6E:50:63:B3:8C:11:91:08:F4:02:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/220832367997CA8C886E5063B38C119108F402D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.156.0/22
                IPv6:
                  2804:658c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269499

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:7e:58:19:4e:db:77:2d:97:06:84:d1:e2:73:02:77:89:
         02:8f:78:8e:1d:ff:5d:53:61:6f:de:4b:09:b0:db:24:60:a6:
         f4:99:a7:fb:9c:e7:b9:2f:e9:7d:73:a2:e4:52:df:d2:64:26:
         5d:d2:c0:21:5f:6d:65:fa:11:eb:79:f9:ee:a0:4f:e5:a8:ae:
         ed:7e:6b:c2:28:e6:2b:fe:96:0c:20:ca:9c:a6:4f:2c:81:fe:
         cb:76:49:e9:44:d2:8c:d2:95:cb:b4:a4:2f:a3:21:4c:20:f8:
         b1:65:ad:cd:cb:6a:64:5c:18:c7:45:f4:79:48:07:76:c1:af:
         57:7a:d6:4b:9d:a1:f4:1f:d5:69:cd:7f:44:b6:42:88:02:b7:
         b2:51:9e:30:e5:a4:27:25:31:c9:50:6e:47:20:8a:8b:69:66:
         61:dc:6f:12:c0:67:9f:30:53:8e:6b:d6:ff:1c:11:fd:a8:50:
         e5:18:64:8e:c7:20:6f:7f:35:c8:7c:40:9d:eb:93:2d:1e:cb:
         14:6e:79:60:1e:d6:9b:1d:50:0d:98:57:b4:80:90:3c:c7:b9:
         25:25:9e:89:d3:f6:cb:16:3a:de:da:90:ee:95:2e:1b:62:06:
         24:57:28:b3:ae:12:ca:48:63:ef:ea:f5:9f:86:e6:73:17:f5:
         38:72:b0:83
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUcI4m657R8Eji5amF+dhk+FUPI0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTQxMjQ4NDVaFw0yNDA5MTIxMjUzNDVaMDMxMTAvBgNV
BAMTKDIyMDgzMjM2Nzk5N0NBOEM4ODZFNTA2M0IzOEMxMTkxMDhGNDAyRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwFP0ItKgFNPrAXqMYUxk9GcI
kQ+pr/teZNcxB9P9EtXKVGgaiy8iahKg+BW+vy1l8yp/PQxWEp4Ezp86oa7HJrUd
0skWziuIS9dRZEMvEcqNlJ+ldZTfzwTRGrOwRcOVa+cd7Qe5vBBQ5U6KWyPK+7tU
ihZ6/aIW4ykVZ0PvMnkYER0qar0J5cvTRVvaZemVwwmcj3SC+EZearfiGG+GxINP
nkLJyvd26yvOgZ1VuHyfHbO152mKA5+3MIa9hNdamnuhnxUTmtocFaM3sraUwHn4
Nf05vuI2Ya3ugNcy4E0cNbbD/8bAe1FExyNVw4FTHkkHhLCGrYIZQGwYc6MFAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiCDI2eZfKjIhu
UGOzjBGRCPQC0zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CU2R5bzlNbUJwcWhpYmQ1ODVCZ3pMeTFzNGZDV0wyN1Ez
UGRqQkxnbUF1MS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQlNkeW85TW1CcHFoaWJkNTg1Qmd6THkxczRmQ1dMMjdR
M1BkakJMZ21BdTEvMC8yMjA4MzIzNjc5OTdDQThDODg2RTUwNjNCMzhDMTE5MTA4
RjQwMkQzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItupwwDQQCAAIwBwMF
ACgEZYwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBy7MA0GCSqGSIb3DQEBCwUA
A4IBAQAS8H5YGU7bdy2XBoTR4nMCd4kCj3iOHf9dU2Fv3ksJsNskYKb0maf7nOe5
L+l9c6LkUt/SZCZd0sAhX21l+hHrefnuoE/lqK7tfmvCKOYr/pYMIMqcpk8sgf7L
dknpRNKM0pXLtKQvoyFMIPixZa3Ny2pkXBjHRfR5SAd2wa9XetZLnaH0H9VpzX9E
tkKIAreyUZ4w5aQnJTHJUG5HIIqLaWZh3G8SwGefMFOOa9b/HBH9qFDlGGSOxyBv
fzXIfECd65MtHssUbnlgHtabHVANmFe0gJA8x7klJZ6J0/bLFjre2pDulS4bYgYk
VyizrhLKSGPv6vWfhuZzF/U4crCD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org