Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/507EEAD6850C1548AE353EF0330E529BE1DC2728.cer
File:                     507EEAD6850C1548AE353EF0330E529BE1DC2728.cer (raw, json)
Hash identifier:          E3I2ZChjqZjBaav/jzMiXV/tcSZIsf88UuExbjlJ7pA=
Subject key identifier:   50:7E:EA:D6:85:0C:15:48:AE:35:3E:F0:33:0E:52:9B:E1:DC:27:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19D732550DAB420F02E6C06C941C0CCC300678BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/507EEAD6850C1548AE353EF0330E529BE1DC2728.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 18:23:57 +0000
Certificate not after:    Tue 16 Jul 2024 18:28:57 +0000
Subordinate resources:    AS: 28584
                          IP: 131.72.80.0/22
                          IP: 177.39.160.0/21
                          IP: 177.129.232.0/21
                          IP: 200.159.160.0/19
                          IP: 2804:918::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d7:32:55:0d:ab:42:0f:02:e6:c0:6c:94:1c:0c:cc:30:06:78:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 18 18:23:57 2023 GMT
            Not After : Jul 16 18:28:57 2024 GMT
        Subject: CN=507EEAD6850C1548AE353EF0330E529BE1DC2728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:57:f7:f0:27:0d:ee:c4:54:87:20:be:d1:
                    3c:9e:b2:c6:6f:68:d3:4d:ea:21:ce:18:e3:14:71:
                    6b:a4:35:dc:05:7e:ba:3a:46:04:c6:74:ca:7c:a8:
                    36:ff:ff:d3:f1:48:22:90:b4:ef:13:1a:3f:04:8a:
                    99:66:e6:30:c4:59:46:45:46:a8:04:94:da:5b:1b:
                    07:a8:bf:80:af:2c:a8:8d:26:38:7a:83:f5:ad:2f:
                    2f:a4:2c:a7:94:07:c1:64:60:33:77:54:55:c3:2d:
                    a8:61:98:7c:67:23:4e:29:00:5f:ba:3e:70:d2:ce:
                    1d:72:4f:49:f8:1b:90:1a:de:7b:c3:24:71:75:63:
                    38:36:6b:75:c2:fd:31:18:c0:be:a3:52:6b:a3:27:
                    8c:8d:cc:ec:1e:14:64:61:60:91:fc:5d:5a:2a:d8:
                    41:a1:d0:c7:4c:d9:e0:d2:09:1f:da:78:ef:93:d8:
                    94:51:e8:3c:0a:3f:56:80:a7:29:12:c7:50:db:65:
                    ee:bf:8a:99:69:38:04:64:10:7a:7b:47:4b:c7:d9:
                    a0:4f:c8:73:2a:9e:93:26:79:49:4c:ef:7c:b8:3a:
                    ee:6d:fa:88:73:91:ec:ee:10:27:fa:e5:82:8d:1d:
                    bb:80:fe:f4:f2:6a:1c:77:91:b1:fa:f0:d5:24:fc:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:7E:EA:D6:85:0C:15:48:AE:35:3E:F0:33:0E:52:9B:E1:DC:27:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/507EEAD6850C1548AE353EF0330E529BE1DC2728.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.80.0/22
                  177.39.160.0/21
                  177.129.232.0/21
                  200.159.160.0/19
                IPv6:
                  2804:918::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28584

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:64:ad:16:10:f5:48:6e:5d:3c:49:d0:6f:13:66:66:a8:
         54:21:79:d6:14:14:b7:84:24:08:1e:ac:cd:ab:c1:14:27:b5:
         fa:b9:1b:ee:86:03:64:83:a5:8d:e3:96:62:d5:51:c7:82:9e:
         6a:c9:2f:03:d0:03:e9:d7:d6:94:5f:fb:c0:7e:00:94:ac:a9:
         8a:c1:80:26:ef:d5:95:f9:bc:c9:4f:68:29:56:45:b4:5b:f5:
         c1:60:9d:68:7a:3f:cd:21:8b:99:71:c3:21:e9:44:95:39:e7:
         76:be:41:b7:b9:ea:25:74:04:74:41:64:31:19:20:e6:2e:21:
         f6:f1:3b:7d:5f:03:94:df:af:73:d1:9e:be:78:aa:30:a3:e1:
         19:1f:83:5e:8f:ec:4d:7d:5c:76:dd:75:10:0e:ec:aa:e6:18:
         4b:4c:07:94:9a:ba:d5:1b:62:5c:47:31:a3:7f:62:7b:f5:d1:
         2c:1e:3e:c5:dc:26:47:60:a4:e8:11:4b:44:bd:f0:8f:40:a8:
         00:86:1c:7c:7c:99:07:a5:d2:45:e1:9d:e6:e1:66:6a:8b:aa:
         f4:8f:19:9a:2f:65:a1:ac:b2:ea:fc:13:3e:eb:82:97:8f:e0:
         bb:81:60:18:9f:cd:fe:02:0c:0d:86:1e:bb:0a:3f:83:c3:c7:
         79:c6:b6:e1
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUGdcyVQ2rQg8C5sBslBwMzDAGeL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTgxODIzNTdaFw0yNDA3MTYxODI4NTdaMDMxMTAvBgNV
BAMTKDUwN0VFQUQ2ODUwQzE1NDhBRTM1M0VGMDMzMEU1MjlCRTFEQzI3MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEVf38CcN7sRUhyC+0TyessZv
aNNN6iHOGOMUcWukNdwFfro6RgTGdMp8qDb//9PxSCKQtO8TGj8Eiplm5jDEWUZF
RqgElNpbGweov4CvLKiNJjh6g/WtLy+kLKeUB8FkYDN3VFXDLahhmHxnI04pAF+6
PnDSzh1yT0n4G5Aa3nvDJHF1Yzg2a3XC/TEYwL6jUmujJ4yNzOweFGRhYJH8XVoq
2EGh0MdM2eDSCR/aeO+T2JRR6DwKP1aApykSx1DbZe6/iplpOARkEHp7R0vH2aBP
yHMqnpMmeUlM73y4Ou5t+ohzkezuECf65YKNHbuA/vTyahx3kbH68NUk/JRHAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQfurWhQwVSK41
PvAzDlKb4dwnKDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yQW1VYzJydDhFVVNuRFFvUnJZZ2dRUk00TFZtbmQzZ2ZO
dFVzZ3AxWFFrUC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dm
TnRVc2dwMVhRa1AvMC81MDdFRUFENjg1MEMxNTQ4QUUzNTNFRjAzMzBFNTI5QkUx
REMyNzI4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKDSFADBAOxJ6ADBAOx
gegDBAXIn6AwDQQCAAIwBwMFACgECRgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
b6gwDQYJKoZIhvcNAQELBQADggEBAF2YZK0WEPVIbl08SdBvE2ZmqFQhedYUFLeE
JAgerM2rwRQntfq5G+6GA2SDpY3jlmLVUceCnmrJLwPQA+nX1pRf+8B+AJSsqYrB
gCbv1ZX5vMlPaClWRbRb9cFgnWh6P80hi5lxwyHpRJU553a+Qbe56iV0BHRBZDEZ
IOYuIfbxO31fA5Tfr3PRnr54qjCj4Rkfg16P7E19XHbddRAO7KrmGEtMB5SautUb
YlxHMaN/Ynv10SwePsXcJkdgpOgRS0S98I9AqACGHHx8mQel0kXhnebhZmqLqvSP
GZovZaGssur8Ez7rgpeP4LuBYBifzf4CDA2GHrsKP4PDx3nGtuE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org