Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.cer
File:                     25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.cer (raw, json)
Hash identifier:          sDT68y/kJC8sp3MRasW4Nn56ReYj987cG66LTvMAxp8=
Subject key identifier:   25:E3:23:BC:DC:D1:A8:A4:CD:A4:CE:36:A1:B8:83:B9:1F:CB:67:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       580BBAF469DAD6E14722986171C9577944ACE324
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Nov 2022 16:15:22 +0000
Certificate not after:    Wed 01 Nov 2023 16:20:22 +0000
Subordinate resources:    AS: 266512
                          IP: 170.245.33.0/24
                          IP: 2801:80:1bd0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0b:ba:f4:69:da:d6:e1:47:22:98:61:71:c9:57:79:44:ac:e3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  2 16:15:22 2022 GMT
            Not After : Nov  1 16:20:22 2023 GMT
        Subject: CN=25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:23:af:ad:d1:5b:a0:c5:b5:6a:38:d9:ba:
                    62:c4:eb:9a:9d:c0:ff:f0:44:b7:be:9d:ba:53:c5:
                    b5:e0:05:91:ad:7b:22:ac:dc:e1:3c:bc:3a:4a:c6:
                    e6:f4:99:93:a5:1a:1a:01:04:82:1c:50:4f:44:c4:
                    4f:87:5b:e9:6f:7a:a0:b6:f8:c6:7b:f9:6f:b2:81:
                    33:78:b6:21:6f:12:a6:c3:f5:31:8c:ec:04:e2:38:
                    b6:df:8d:bf:37:31:1e:ac:94:80:4e:a7:b5:00:c5:
                    37:cb:06:5a:e7:07:17:91:41:b0:7c:dd:e7:ce:06:
                    fb:2a:db:7d:16:a2:28:98:51:6a:dc:a8:3f:9b:31:
                    6a:f7:a2:61:23:3f:8e:4d:d1:ac:c5:c4:72:be:58:
                    59:ca:ef:9a:97:68:5c:f5:67:a2:f3:61:bc:02:fa:
                    ab:32:9a:7d:ed:7e:da:48:05:89:81:61:33:8f:00:
                    f5:e9:8b:94:fb:82:63:eb:6a:27:f0:5f:70:8b:84:
                    8b:1a:f3:7b:56:de:3c:2f:e5:55:be:3d:03:2c:bc:
                    49:20:1d:51:ba:0f:e5:e4:e0:19:f4:c9:a6:f8:c6:
                    23:a9:41:0f:a0:9b:2f:f6:07:6b:89:7c:07:a9:65:
                    a8:e0:c3:ea:cf:ad:ff:ec:4f:37:00:d4:ba:28:3d:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:E3:23:BC:DC:D1:A8:A4:CD:A4:CE:36:A1:B8:83:B9:1F:CB:67:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.33.0/24
                IPv6:
                  2801:80:1bd0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266512

    Signature Algorithm: sha256WithRSAEncryption
         45:df:57:81:f2:4a:3a:3a:41:6e:0c:4e:df:a8:47:fe:c0:b5:
         92:c1:27:ce:ce:db:db:a1:a6:91:a1:d7:1a:07:57:60:c2:e8:
         c0:93:46:0d:1b:38:a7:9a:b2:df:35:21:42:f8:b5:31:40:c4:
         8b:5c:85:74:06:f4:36:83:cd:43:63:c2:51:ab:38:70:83:84:
         e5:59:f3:a5:45:29:ce:52:a7:80:57:54:83:ad:98:c7:95:c5:
         b6:b7:ec:c9:2f:58:24:14:03:bd:d6:4c:0d:11:23:dc:18:a6:
         10:83:5a:89:8d:85:40:0b:9c:d3:9c:86:c9:f6:32:84:10:f2:
         42:6b:04:57:14:0d:a6:bf:77:9d:7a:cc:c1:58:1a:bc:8c:6f:
         0b:04:76:74:37:bc:d9:87:ae:2e:31:ac:e6:be:06:4b:a4:db:
         3c:48:09:de:c6:18:3b:74:74:c2:79:2c:48:a6:52:df:91:df:
         4c:46:c7:3a:7a:92:4c:46:a6:3c:04:c3:21:ec:25:14:be:d9:
         7c:de:ce:b3:64:85:c2:63:a6:3c:9d:eb:3d:52:b3:8f:ae:ed:
         61:58:84:eb:b5:1b:c1:6f:04:f3:d0:d6:31:a0:8c:cc:6d:03:
         95:d6:de:87:cc:51:06:11:d5:12:82:e5:e8:b4:b9:58:be:ca:
         9b:34:de:19
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgIUWAu69Gna1uFHIphhcclXeUSs4yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMDIxNjE1MjJaFw0yMzExMDExNjIwMjJaMDMxMTAvBgNV
BAMTKDI1RTMyM0JDRENEMUE4QTRDREE0Q0UzNkExQjg4M0I5MUZDQjY3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4iOvrdFboMW1ajjZumLE65qd
wP/wRLe+nbpTxbXgBZGteyKs3OE8vDpKxub0mZOlGhoBBIIcUE9ExE+HW+lveqC2
+MZ7+W+ygTN4tiFvEqbD9TGM7ATiOLbfjb83MR6slIBOp7UAxTfLBlrnBxeRQbB8
3efOBvsq230WoiiYUWrcqD+bMWr3omEjP45N0azFxHK+WFnK75qXaFz1Z6LzYbwC
+qsymn3tftpIBYmBYTOPAPXpi5T7gmPraifwX3CLhIsa83tW3jwv5VW+PQMsvEkg
HVG6D+Xk4Bn0yab4xiOpQQ+gmy/2B2uJfAepZajgw+rPrf/sTzcA1LooPWKfAgMB
AAGjggMcMIIDGDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQl4yO83NGopM2k
zjahuIO5H8tnNjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83VE5iSEhkQktuaHluVTRmOWcxTTRnTHdoZXBEVkpjVmlw
MkRtdmV1VVdjWC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83VE5iSEhkQktuaHluVTRmOWcxTTRnTHdoZXBEVkpjVmlw
MkRtdmV1VVdjWC8wLzI1RTMyM0JDRENEMUE4QTRDREE0Q0UzNkExQjg4M0I5MUZD
QjY3MzYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAKr1ITAPBAIAAjAJAwcA
KAEAgBvQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQREDANBgkqhkiG9w0BAQsF
AAOCAQEARd9XgfJKOjpBbgxO36hH/sC1ksEnzs7b26GmkaHXGgdXYMLowJNGDRs4
p5qy3zUhQvi1MUDEi1yFdAb0NoPNQ2PCUas4cIOE5VnzpUUpzlKngFdUg62Yx5XF
trfsyS9YJBQDvdZMDREj3BimEINaiY2FQAuc05yGyfYyhBDyQmsEVxQNpr93nXrM
wVgavIxvCwR2dDe82YeuLjGs5r4GS6TbPEgJ3sYYO3R0wnksSKZS35HfTEbHOnqS
TEamPATDIewlFL7ZfN7Os2SFwmOmPJ3rPVKzj67tYViE67UbwW8E89DWMaCMzG0D
ldbeh8xRBhHVEoLl6LS5WL7KmzTeGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org