Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.cer
File:                     255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.cer (raw, json)
Hash identifier:          VybFqileV7Y5DT+53yumSrxQEIQxzKFUp7jYOkaFqRQ=
Subject key identifier:   25:55:14:29:2E:08:C6:C3:9E:1D:BD:7F:DA:B9:4F:6A:E9:DF:99:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B29C20D726AFDF9279EBA3ED968C4D79B9F63F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 13:53:09 +0000
Certificate not after:    Wed 15 Jan 2025 13:58:09 +0000
Subordinate resources:    AS: 264492
                          IP: 131.255.184.0/22
                          IP: 2804:2078::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:29:c2:0d:72:6a:fd:f9:27:9e:ba:3e:d9:68:c4:d7:9b:9f:63:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 13:53:09 2024 GMT
            Not After : Jan 15 13:58:09 2025 GMT
        Subject: CN=255514292E08C6C39E1DBD7FDAB94F6AE9DF990E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:ca:c7:58:11:a9:c4:38:c5:59:7e:18:62:
                    c7:70:6f:31:90:7a:6e:75:52:da:09:cf:e3:7e:12:
                    0b:29:ac:1a:04:49:7e:6e:d3:ca:3e:23:99:51:b0:
                    76:c9:3c:db:3a:9e:70:af:ef:59:1e:be:ee:c5:12:
                    8d:c5:04:52:d7:d9:ee:cc:fa:da:89:47:13:a2:7f:
                    78:a0:54:8e:5c:07:56:f3:30:31:af:3b:72:35:50:
                    62:06:3c:7d:58:fb:b4:22:72:aa:ae:27:79:74:30:
                    74:05:94:21:4a:89:14:20:4d:75:e1:87:0b:73:b7:
                    75:a2:72:53:e9:92:d0:fa:c6:d1:ac:9a:89:63:aa:
                    77:ef:db:fc:18:22:02:97:a1:ed:57:98:89:91:aa:
                    41:6c:56:5c:41:64:13:9b:10:5d:11:77:bc:b5:9b:
                    45:72:29:e3:73:7a:d4:5f:0b:40:5a:4c:79:53:e5:
                    18:c8:37:a9:69:1e:18:9f:95:a1:9d:43:1f:ac:10:
                    4b:9a:1f:04:c9:e5:82:cb:8a:ca:a6:18:82:f0:1a:
                    d9:48:c1:b3:e6:84:7c:68:72:b6:49:d0:e5:cd:23:
                    7f:77:79:d0:b4:b6:be:50:79:e0:7e:36:79:de:81:
                    f0:e5:1f:4c:aa:59:d1:55:31:a2:9e:b9:fd:47:a6:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:55:14:29:2E:08:C6:C3:9E:1D:BD:7F:DA:B9:4F:6A:E9:DF:99:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.184.0/22
                IPv6:
                  2804:2078::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264492

    Signature Algorithm: sha256WithRSAEncryption
         12:00:c0:18:aa:03:b1:06:c6:57:e8:b3:25:b0:56:cb:e4:e9:
         1c:26:87:c6:0b:4b:eb:b2:41:7e:67:de:6f:53:60:7f:27:80:
         77:1b:4f:eb:bf:a5:aa:bf:32:4c:9f:f6:3a:5a:2a:9b:a6:56:
         04:32:2e:24:6e:c5:30:94:7e:9f:b1:6c:67:46:02:d0:16:9f:
         1e:1b:36:cf:7e:31:63:a9:53:cc:43:71:3c:6e:d1:d6:cb:ba:
         9e:0e:0d:69:84:e6:0e:e9:85:8e:12:c8:27:00:a4:0f:9d:da:
         a0:4c:68:2b:0d:51:21:3f:0a:98:0a:cb:78:90:1d:a9:6b:a4:
         7c:50:3d:77:db:05:91:f4:2e:67:d6:9b:2a:d7:ca:14:d6:77:
         d3:37:41:30:67:8f:0d:91:e6:7b:8e:a5:f0:84:d5:7b:a2:47:
         a1:04:3d:16:d4:78:08:5e:f7:f7:7d:86:e8:da:9b:bb:67:f8:
         3d:91:71:7a:0d:bc:7e:c4:31:ed:c4:b2:1c:53:b5:9d:6b:8d:
         67:a7:91:4d:2f:ab:25:0d:ac:ef:47:35:90:e5:0f:32:07:15:
         65:b0:5a:36:43:96:8f:c5:9a:05:fd:af:ba:ee:45:6f:55:c6:
         da:c6:23:d7:8a:89:33:a2:c4:de:90:83:4f:97:f4:a3:13:33:
         5f:af:f6:62
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUKynCDXJq/fknnro+2WjE15ufY/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTcxMzUzMDlaFw0yNTAxMTUxMzU4MDlaMDMxMTAvBgNV
BAMTKDI1NTUxNDI5MkUwOEM2QzM5RTFEQkQ3RkRBQjk0RjZBRTlERjk5MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTh8rHWBGpxDjFWX4YYsdwbzGQ
em51UtoJz+N+EgsprBoESX5u08o+I5lRsHbJPNs6nnCv71kevu7FEo3FBFLX2e7M
+tqJRxOif3igVI5cB1bzMDGvO3I1UGIGPH1Y+7QicqquJ3l0MHQFlCFKiRQgTXXh
hwtzt3WiclPpktD6xtGsmoljqnfv2/wYIgKXoe1XmImRqkFsVlxBZBObEF0Rd7y1
m0VyKeNzetRfC0BaTHlT5RjIN6lpHhiflaGdQx+sEEuaHwTJ5YLLisqmGILwGtlI
wbPmhHxocrZJ0OXNI393edC0tr5QeeB+NnnegfDlH0yqWdFVMaKeuf1HpiKRAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlVRQpLgjGw54d
vX/auU9q6d+ZDjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CcTY5OUpKZHJvVVFFRWR5ZDh0OGRKNHlqVDZVam5rZG54
N2J6clphRnZwYy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CcTY5OUpKZHJvVVFFRWR5ZDh0OGRKNHlqVDZVam5rZG54
N2J6clphRnZwYy8wLzI1NTUxNDI5MkUwOEM2QzM5RTFEQkQ3RkRBQjk0RjZBRTlE
Rjk5MEUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoP/uDANBAIAAjAHAwUA
KAQgeDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECSwwDQYJKoZIhvcNAQELBQAD
ggEBABIAwBiqA7EGxlfosyWwVsvk6Rwmh8YLS+uyQX5n3m9TYH8ngHcbT+u/paq/
Mkyf9jpaKpumVgQyLiRuxTCUfp+xbGdGAtAWnx4bNs9+MWOpU8xDcTxu0dbLup4O
DWmE5g7phY4SyCcApA+d2qBMaCsNUSE/CpgKy3iQHalrpHxQPXfbBZH0LmfWmyrX
yhTWd9M3QTBnjw2R5nuOpfCE1XuiR6EEPRbUeAhe9/d9hujam7tn+D2RcXoNvH7E
Me3EshxTtZ1rjWenkU0vqyUNrO9HNZDlDzIHFWWwWjZDlo/FmgX9r7ruRW9VxtrG
I9eKiTOixN6Qg0+X9KMTM1+v9mI=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org