Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33BE5C98E215B16CFF8635AC21AF55BF7C9FB73D.cer
File:                     33BE5C98E215B16CFF8635AC21AF55BF7C9FB73D.cer (raw, json)
Hash identifier:          hr3xj0YScmqfvVKrFsIhpJpWpWBcHC7M3KzEQkwy4mQ=
Subject key identifier:   33:BE:5C:98:E2:15:B1:6C:FF:86:35:AC:21:AF:55:BF:7C:9F:B7:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B96DC288F3B0C8260438487AAF0C122DAE4F85F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/33BE5C98E215B16CFF8635AC21AF55BF7C9FB73D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Aug 2022 19:59:24 +0000
Certificate not after:    Tue 08 Aug 2023 20:04:24 +0000
Subordinate resources:    AS: 270422
                          IP: 190.89.248.0/22
                          IP: 2804:6bbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:96:dc:28:8f:3b:0c:82:60:43:84:87:aa:f0:c1:22:da:e4:f8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  9 19:59:24 2022 GMT
            Not After : Aug  8 20:04:24 2023 GMT
        Subject: CN=33BE5C98E215B16CFF8635AC21AF55BF7C9FB73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:4e:f5:7c:a6:0f:21:84:c8:bd:e4:da:e4:
                    17:9d:53:f9:22:60:f8:9e:d0:b7:13:19:e0:38:47:
                    cf:72:55:33:79:0b:b2:6b:75:ee:81:8b:01:7f:b1:
                    d8:d4:dc:70:11:3c:3e:bc:1f:b5:16:f9:2e:5e:dd:
                    c0:25:5f:b4:44:46:80:c3:a6:b1:77:8f:9f:93:14:
                    72:0e:53:ac:81:d7:63:57:8b:5b:24:36:a4:d4:80:
                    f9:89:d4:d3:67:2e:df:8e:48:91:45:24:c8:5f:8b:
                    77:d6:2a:92:f4:75:df:b4:5e:be:dc:c5:3c:9d:8e:
                    39:6f:cf:a4:23:33:25:53:59:c6:cc:d2:41:04:bd:
                    fd:eb:14:bb:af:ec:82:26:e3:53:d1:f1:24:59:b7:
                    35:ed:eb:b7:bf:4f:98:25:56:4b:42:2f:c5:77:be:
                    03:45:fc:27:a2:90:53:68:3d:ee:37:1e:58:1e:11:
                    77:95:67:d3:6c:f2:ff:f3:af:c9:5f:cf:a4:8d:ec:
                    ca:83:0f:82:63:50:5c:ce:b5:b7:aa:ed:f6:77:4d:
                    f3:7a:c9:70:69:ce:28:bd:b0:d8:8a:de:5a:be:f8:
                    60:6d:dd:f6:d8:41:d5:50:f9:7f:be:8f:50:d0:37:
                    da:cd:61:e5:14:21:55:1a:97:fd:7e:78:ea:4e:57:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:BE:5C:98:E2:15:B1:6C:FF:86:35:AC:21:AF:55:BF:7C:9F:B7:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/33BE5C98E215B16CFF8635AC21AF55BF7C9FB73D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.248.0/22
                IPv6:
                  2804:6bbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270422

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:12:8b:9b:b6:b5:72:0d:df:0a:b3:eb:6b:41:ab:4b:13:
         fa:43:f8:8b:ac:2b:f3:06:8e:b0:e4:8a:ad:f7:5b:ac:c9:d3:
         b7:3e:24:e3:6b:65:e9:e5:80:a7:0f:fe:6c:22:c3:cc:d4:be:
         39:b1:8d:59:8d:71:87:c3:f5:e0:5a:90:7d:15:e1:36:6f:49:
         45:2a:12:fb:c1:6c:6b:89:ee:c3:fa:3e:82:6e:01:9a:08:4e:
         4d:8f:32:21:29:e2:f8:9b:53:6a:70:46:3d:1e:6a:78:54:cd:
         01:6e:ab:d6:e6:62:2b:f8:b7:de:db:4c:5a:a2:21:84:b3:41:
         e4:35:51:d3:61:09:c9:75:30:a0:4f:57:79:86:7c:42:50:cf:
         af:68:19:14:c0:5c:e8:03:bc:8a:ff:f1:40:c2:3c:9f:ec:07:
         8f:4b:a2:75:44:15:7d:d9:b8:79:55:d8:53:f4:3c:ce:17:96:
         df:99:db:7c:50:ff:f0:d2:88:51:d7:5c:cb:a3:7c:c6:05:96:
         c3:cc:23:68:75:f1:a2:10:90:af:1c:64:bb:9a:f1:3f:22:b7:
         a2:fa:b5:86:2b:c7:42:d8:e6:4e:c3:d6:eb:64:05:f0:04:4c:
         83:1a:ed:12:40:31:57:f6:90:7d:5b:62:0e:87:11:6b:52:03:
         ce:9d:75:ec
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUK5bcKI87DIJgQ4SHqvDBItrk+F8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MDkxOTU5MjRaFw0yMzA4MDgyMDA0MjRaMDMxMTAvBgNV
BAMTKDMzQkU1Qzk4RTIxNUIxNkNGRjg2MzVBQzIxQUY1NUJGN0M5RkI3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TU71fKYPIYTIveTa5BedU/ki
YPie0LcTGeA4R89yVTN5C7Jrde6BiwF/sdjU3HARPD68H7UW+S5e3cAlX7RERoDD
prF3j5+TFHIOU6yB12NXi1skNqTUgPmJ1NNnLt+OSJFFJMhfi3fWKpL0dd+0Xr7c
xTydjjlvz6QjMyVTWcbM0kEEvf3rFLuv7IIm41PR8SRZtzXt67e/T5glVktCL8V3
vgNF/CeikFNoPe43HlgeEXeVZ9Ns8v/zr8lfz6SN7MqDD4JjUFzOtbeq7fZ3TfN6
yXBpzii9sNiK3lq++GBt3fbYQdVQ+X++j1DQN9rNYeUUIVUal/1+eOpOVx45AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzvlyY4hWxbP+G
Nawhr1W/fJ+3PTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Gd3VISlJqZ1Z0SjlpcVhxcTZpNUZOaWZnc0VleGRBRG1i
eHFhOGhHSGdZci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Gd3VISlJqZ1Z0SjlpcVhxcTZpNUZOaWZnc0VleGRBRG1i
eHFhOGhHSGdZci8wLzMzQkU1Qzk4RTIxNUIxNkNGRjg2MzVBQzIxQUY1NUJGN0M5
RkI3M0QubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5Z+DANBAIAAjAHAwUA
KARrvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIFYwDQYJKoZIhvcNAQELBQAD
ggEBAIs3EoubtrVyDd8Ks+trQatLE/pD+IusK/MGjrDkiq33W6zJ07c+JONrZenl
gKcP/mwiw8zUvjmxjVmNcYfD9eBakH0V4TZvSUUqEvvBbGuJ7sP6PoJuAZoITk2P
MiEp4vibU2pwRj0eanhUzQFuq9bmYiv4t97bTFqiIYSzQeQ1UdNhCcl1MKBPV3mG
fEJQz69oGRTAXOgDvIr/8UDCPJ/sB49LonVEFX3ZuHlV2FP0PM4Xlt+Z23xQ//DS
iFHXXMujfMYFlsPMI2h18aIQkK8cZLua8T8it6L6tYYrx0LY5k7D1utkBfAETIMa
7RJAMVf2kH1bYg6HEWtSA86ddew=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org