Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/395D31F7781B96429D8D87B4B73FA7CFDF8760F9.cer
File:                     395D31F7781B96429D8D87B4B73FA7CFDF8760F9.cer (raw, json)
Hash identifier:          +7vCB25wsy/bRGy4JWq2kJPHYjpxXm1SjlgIMzzWVuU=
Subject key identifier:   39:5D:31:F7:78:1B:96:42:9D:8D:87:B4:B7:3F:A7:CF:DF:87:60:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       445551B464026ADB75423FB0B4CDABC1D0B743F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/395D31F7781B96429D8D87B4B73FA7CFDF8760F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 11:20:08 +0000
Certificate not after:    Wed 10 Jul 2024 11:25:08 +0000
Subordinate resources:    AS: 262532
                          IP: 128.201.120.0/22
                          IP: 177.55.240.0/20
                          IP: 186.249.176.0/20
                          IP: 2804:ec8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:55:51:b4:64:02:6a:db:75:42:3f:b0:b4:cd:ab:c1:d0:b7:43:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 11:20:08 2023 GMT
            Not After : Jul 10 11:25:08 2024 GMT
        Subject: CN=395D31F7781B96429D8D87B4B73FA7CFDF8760F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4d:e6:56:ce:4e:87:fa:1e:0a:a0:5b:b1:e1:
                    53:86:f0:90:b2:e8:0c:72:13:15:04:2a:c7:45:15:
                    fb:8b:c5:64:78:61:88:74:f6:d5:eb:fe:07:f4:dc:
                    23:8a:39:a4:ba:bc:86:96:ff:60:38:65:c2:3e:28:
                    e2:d4:7f:02:b1:c8:30:df:62:02:e6:88:85:99:55:
                    d6:1b:7b:b8:30:a7:c6:89:d3:11:00:97:80:bc:ea:
                    1b:94:c1:50:6e:6b:88:9e:8b:e8:76:b7:6a:e7:82:
                    0c:8f:c5:8a:3f:07:97:c6:9a:d4:2f:16:63:65:a2:
                    ce:00:72:f5:e4:b4:8a:45:37:e7:45:db:7e:27:6d:
                    a2:02:87:e6:bd:a1:9c:9a:0c:93:03:71:4c:17:7b:
                    3c:a0:bf:d0:df:24:39:f5:62:c9:4e:92:89:ec:40:
                    33:1a:02:26:22:d3:1e:c9:a2:70:9f:81:28:17:e6:
                    77:89:d0:84:f5:93:27:d5:de:53:0d:30:50:a0:2b:
                    3a:5f:a5:76:92:35:aa:1b:02:32:1b:24:2e:d4:23:
                    85:05:b8:2e:5b:dd:db:09:53:56:95:7a:cf:b2:3e:
                    28:b6:aa:41:04:a1:df:74:5b:bf:ee:12:24:cc:c6:
                    99:31:6a:1e:90:20:79:45:50:c5:29:c0:b2:3c:3a:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:5D:31:F7:78:1B:96:42:9D:8D:87:B4:B7:3F:A7:CF:DF:87:60:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/395D31F7781B96429D8D87B4B73FA7CFDF8760F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.120.0/22
                  177.55.240.0/20
                  186.249.176.0/20
                IPv6:
                  2804:ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262532

    Signature Algorithm: sha256WithRSAEncryption
         6a:8e:74:9b:5d:b7:8c:9f:4f:3f:58:56:7f:c5:ee:35:97:2d:
         ba:9b:0f:09:0e:c4:33:a0:89:41:5d:f5:ed:02:bd:5b:53:09:
         b6:32:94:46:0b:8e:91:30:22:79:1d:ec:25:2e:ed:58:81:95:
         f4:fd:84:27:cf:9a:cd:21:e3:ce:92:9d:ae:b0:bb:b2:8d:32:
         bb:69:ab:23:54:6c:e2:60:86:30:cb:f9:98:18:d0:62:5a:29:
         f3:df:7d:88:27:8d:f4:24:f8:95:be:d2:21:72:79:3f:10:f6:
         42:f9:45:75:6b:d4:8c:0e:55:c0:de:7a:fb:61:9c:59:61:c6:
         c3:60:cf:15:15:fd:a0:3a:55:d0:df:9a:14:72:75:98:ae:cf:
         6f:75:95:50:95:67:53:ef:a2:21:6a:14:69:c0:98:d5:d3:4f:
         85:e5:2b:c4:c0:6b:4b:52:25:b0:e3:6f:91:aa:f0:74:a8:07:
         02:90:31:38:f8:5d:8e:0c:06:9f:34:03:0d:2f:1b:8e:32:f8:
         bb:25:28:da:d8:7e:7b:99:90:65:47:69:53:19:eb:c1:62:4b:
         18:36:dc:df:e7:4d:92:ea:a5:7f:2f:6f:eb:4e:83:cb:4b:96:
         a0:7b:54:73:56:4b:03:59:90:6b:d5:f5:7a:32:bd:b9:a6:7c:
         37:a8:50:bd
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIURFVRtGQCatt1Qj+wtM2rwdC3Q/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTIxMTIwMDhaFw0yNDA3MTAxMTI1MDhaMDMxMTAvBgNV
BAMTKDM5NUQzMUY3NzgxQjk2NDI5RDhEODdCNEI3M0ZBN0NGREY4NzYwRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTeZWzk6H+h4KoFux4VOG8JCy
6AxyExUEKsdFFfuLxWR4YYh09tXr/gf03COKOaS6vIaW/2A4ZcI+KOLUfwKxyDDf
YgLmiIWZVdYbe7gwp8aJ0xEAl4C86huUwVBua4iei+h2t2rnggyPxYo/B5fGmtQv
FmNlos4AcvXktIpFN+dF234nbaICh+a9oZyaDJMDcUwXezygv9DfJDn1YslOkons
QDMaAiYi0x7JonCfgSgX5neJ0IT1kyfV3lMNMFCgKzpfpXaSNaobAjIbJC7UI4UF
uC5b3dsJU1aVes+yPii2qkEEod90W7/uEiTMxpkxah6QIHlFUMUpwLI8OvKNAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5XTH3eBuWQp2N
h7S3P6fP34dg+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ia3FVWFlxSlZFazl0bXltNDFRcHRmZVJ0amdrM2lLejR4
ZVE1dkhpUDV0Vi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ia3FVWFlxSlZFazl0bXltNDFRcHRmZVJ0amdrM2lLejR4
ZVE1dkhpUDV0Vi8wLzM5NUQzMUY3NzgxQjk2NDI5RDhEODdCNEI3M0ZBN0NGREY4
NzYwRjkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAoDJeAMEBLE38AMEBLr5
sDANBAIAAjAHAwUAKAQOyDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAYQwDQYJ
KoZIhvcNAQELBQADggEBAGqOdJtdt4yfTz9YVn/F7jWXLbqbDwkOxDOgiUFd9e0C
vVtTCbYylEYLjpEwInkd7CUu7ViBlfT9hCfPms0h486Sna6wu7KNMrtpqyNUbOJg
hjDL+ZgY0GJaKfPffYgnjfQk+JW+0iFyeT8Q9kL5RXVr1IwOVcDeevthnFlhxsNg
zxUV/aA6VdDfmhRydZiuz291lVCVZ1PvoiFqFGnAmNXTT4XlK8TAa0tSJbDjb5Gq
8HSoBwKQMTj4XY4MBp80Aw0vG44y+LslKNrYfnuZkGVHaVMZ68FiSxg23N/nTZLq
pX8vb+tOg8tLlqB7VHNWSwNZkGvV9XoyvbmmfDeoUL0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org