Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
File:                     391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer (raw, json)
Hash identifier:          mECfQ3OqCht/KBicQ/zBRbxSiNonuBwWgMcktX8g9GI=
Subject key identifier:   39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D33B93FE974B2084A06901089707E86FDD39996
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 16:44:26 +0000
Certificate not after:    Fri 11 Oct 2024 16:49:26 +0000
Subordinate resources:    AS: 262962
                          AS: 263936
                          IP: 131.255.244.0/22
                          IP: 138.219.192.0/22
                          IP: 187.85.56.0/22
                          IP: 2804:e98::/32
                          IP: 2804:2808::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:33:b9:3f:e9:74:b2:08:4a:06:90:10:89:70:7e:86:fd:d3:99:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 16:44:26 2023 GMT
            Not After : Oct 11 16:49:26 2024 GMT
        Subject: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:c2:c2:2d:3c:1d:8d:ce:6f:80:89:c6:63:
                    eb:a7:28:43:f3:52:38:1a:b9:13:c7:2d:30:f7:2d:
                    d6:38:85:2d:18:d3:8e:08:90:6a:45:7e:1b:bf:16:
                    10:c1:07:35:c3:e6:bc:66:66:1b:84:c4:78:8b:37:
                    a7:61:85:94:c0:b0:cd:d8:91:09:e3:94:0e:e0:9d:
                    96:f1:6a:e8:fb:48:c0:5a:a3:1d:8c:d6:9f:2f:0a:
                    e0:50:d1:3a:e7:0b:61:cc:04:d6:94:bd:f5:37:1a:
                    23:f9:91:33:3c:8d:38:e4:23:c9:f1:86:4d:46:ca:
                    12:f3:b8:d8:22:57:0a:9a:2a:9f:31:12:fb:9e:62:
                    d0:86:69:91:20:65:1e:e3:c2:b8:81:f8:e9:e1:9b:
                    a0:fd:ba:ce:41:61:9c:a9:b4:7a:ea:73:a8:28:7e:
                    30:4a:18:01:12:b0:61:a0:8a:c3:eb:84:8b:bc:d2:
                    32:ca:c0:0b:b9:d4:63:ea:b1:e2:d6:2a:f0:a7:62:
                    77:3a:7e:f5:a9:0a:65:f7:f4:44:2e:62:ed:08:06:
                    46:d9:8c:bb:26:a0:29:f8:d5:cd:1c:2f:db:21:cd:
                    fe:2f:5e:d9:4e:14:74:35:6b:92:73:e7:9b:1b:49:
                    9c:b6:11:23:9d:a4:1e:a8:c7:7d:28:ed:48:21:86:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.244.0/22
                  138.219.192.0/22
                  187.85.56.0/22
                IPv6:
                  2804:e98::/32
                  2804:2808::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262962
                  263936

    Signature Algorithm: sha256WithRSAEncryption
         71:9b:a6:a7:57:cb:7b:b7:96:d4:d2:d9:0e:96:57:ce:f5:fb:
         78:e3:fd:7f:d9:03:7d:44:5c:df:2a:db:5f:d7:3f:57:5e:b7:
         4c:68:81:56:a4:6e:1a:76:63:9f:5a:87:85:4b:64:6b:1a:36:
         7e:6a:a5:11:26:a4:81:69:f7:73:39:17:61:5f:21:b5:f7:fc:
         19:64:c2:99:af:cd:3d:69:bb:93:79:2f:1a:8c:27:b7:2d:cb:
         be:b5:0e:13:da:20:32:16:da:1b:4f:e6:66:c1:69:c7:9d:6b:
         5a:3d:40:10:b6:88:02:10:fb:44:6d:a3:08:2c:a4:85:c1:98:
         45:06:93:37:ee:b2:ed:3d:bc:3a:1d:bb:d5:c4:26:46:f6:cd:
         6c:09:7d:ce:ca:59:cd:98:55:d0:ab:9a:58:fb:07:c3:99:42:
         df:8b:b0:8e:e2:b3:96:08:66:60:08:04:ee:4d:4d:1f:d3:6d:
         c9:e6:cc:01:21:0a:1b:95:43:45:71:33:1a:ad:bc:d8:00:95:
         cb:73:28:1b:3f:9a:df:c8:32:6f:14:ba:ef:77:17:be:a0:43:
         6f:b6:ed:b1:02:bc:49:fb:a7:b5:aa:6b:fd:85:b4:59:a1:e4:
         b6:f1:f2:20:cf:f8:c9:76:a9:30:e0:bd:0f:78:bd:6b:d0:ba:
         b8:a5:d5:77
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIUbTO5P+l0sghKBpAQiXB+hv3TmZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTMxNjQ0MjZaFw0yNDEwMTExNjQ5MjZaMDMxMTAvBgNV
BAMTKDM5MUNFQTU0MkE3MEQxMUFBQUY0RDlBQ0M1QzE0QTIyMzdCOEMwNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFssLCLTwdjc5vgInGY+unKEPz
UjgauRPHLTD3LdY4hS0Y044IkGpFfhu/FhDBBzXD5rxmZhuExHiLN6dhhZTAsM3Y
kQnjlA7gnZbxauj7SMBaox2M1p8vCuBQ0TrnC2HMBNaUvfU3GiP5kTM8jTjkI8nx
hk1GyhLzuNgiVwqaKp8xEvueYtCGaZEgZR7jwriB+Onhm6D9us5BYZyptHrqc6go
fjBKGAESsGGgisPrhIu80jLKwAu51GPqseLWKvCnYnc6fvWpCmX39EQuYu0IBkbZ
jLsmoCn41c0cL9shzf4vXtlOFHQ1a5Jz55sbSZy2ESOdpB6ox30o7UghhuNFAgMB
AAGjggMzMIIDLzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5HOpUKnDRGqr0
2azFwUoiN7jAQDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GMXlKTEpXZTUyYlp1c0xSOUd1am5xeFRCY29SVUxxREo4
eXZiODVDZnVjWC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRjF5SkxKV2U1MmJadXNMUjlHdWpucXhUQmNvUlVMcURK
OHl2Yjg1Q2Z1Y1gvMC8zOTFDRUE1NDJBNzBEMTFBQUFGNEQ5QUNDNUMxNEEyMjM3
QjhDMDQwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMBgEAgABMBIDBAKD//QDBAKK28ADBAK7
VTgwFAQCAAIwDgMFACgEDpgDBQAoBCgIMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC
AwQDMgIDBAcAMA0GCSqGSIb3DQEBCwUAA4IBAQBxm6anV8t7t5bU0tkOllfO9ft4
4/1/2QN9RFzfKttf1z9XXrdMaIFWpG4admOfWoeFS2RrGjZ+aqURJqSBafdzORdh
XyG19/wZZMKZr809abuTeS8ajCe3Lcu+tQ4T2iAyFtobT+ZmwWnHnWtaPUAQtogC
EPtEbaMILKSFwZhFBpM37rLtPbw6HbvVxCZG9s1sCX3OylnNmFXQq5pY+wfDmULf
i7CO4rOWCGZgCATuTU0f023J5swBIQoblUNFcTMarbzYAJXLcygbP5rfyDJvFLrv
dxe+oENvtu2xArxJ+6e1qmv9hbRZoeS28fIgz/jJdqkw4L0PeL1r0Lq4pdV3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org