Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.cer
File:                     5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.cer (raw, json)
Hash identifier:          NG5DBiF/dtepWg44C01ehnmj7Ds0dIrdVsX25KNBGUc=
Subject key identifier:   5F:7B:2D:F3:85:0B:02:FE:E6:29:76:5F:D2:92:F8:96:9D:8C:D3:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68EF3D94A08F847D278D71B4D864F00912208C2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 20:34:40 +0000
Certificate not after:    Tue 04 Mar 2025 20:39:40 +0000
Subordinate resources:    AS: 273431
                          IP: 186.227.76.0/22
                          IP: 2804:8e84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ef:3d:94:a0:8f:84:7d:27:8d:71:b4:d8:64:f0:09:12:20:8c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 20:34:40 2024 GMT
            Not After : Mar  4 20:39:40 2025 GMT
        Subject: CN=5F7B2DF3850B02FEE629765FD292F8969D8CD3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:91:e6:8f:6e:15:5e:30:34:33:d8:9c:65:
                    33:db:70:8d:ca:1d:88:7b:0b:66:d1:14:de:0e:4b:
                    91:44:9b:83:7b:37:81:06:46:0c:be:d3:64:bd:a2:
                    26:b3:16:93:b9:53:9f:fd:e3:0e:08:25:d1:5e:1d:
                    e7:ba:8a:70:7e:7e:34:8f:eb:a4:4f:ba:a8:e2:ed:
                    40:2a:a7:6b:ab:49:70:0f:1a:6f:59:a4:9c:98:f1:
                    16:e0:78:bc:07:a5:c7:d4:4a:24:5f:02:af:57:22:
                    e8:08:7f:56:2f:5b:04:f4:49:f0:0b:bb:0b:8b:52:
                    87:c9:9f:1d:12:df:9d:02:9f:36:e2:b0:6a:b0:0d:
                    b1:4f:64:59:c5:93:76:a7:e4:e5:93:33:be:d1:6f:
                    46:bc:cf:be:6a:08:61:dd:85:e5:98:37:0b:00:a4:
                    f8:67:a2:df:9e:97:90:1c:00:ef:ec:04:ad:05:5e:
                    b3:ea:b8:3b:9a:b9:36:5e:d8:c8:61:44:89:0a:78:
                    bd:ed:9d:2e:c2:62:1b:37:1d:55:60:ec:1e:f1:f4:
                    02:8e:03:f6:93:c1:ca:e6:f2:3b:6f:e0:8f:88:a4:
                    9b:fd:a9:b8:67:75:11:b0:b6:03:63:6b:fe:cd:e2:
                    72:21:ef:fa:48:af:4e:35:3b:45:dc:05:91:15:0c:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:7B:2D:F3:85:0B:02:FE:E6:29:76:5F:D2:92:F8:96:9D:8C:D3:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.76.0/22
                IPv6:
                  2804:8e84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273431

    Signature Algorithm: sha256WithRSAEncryption
         9a:d4:13:fb:09:2d:d1:af:53:80:76:5a:2f:a9:d9:a2:3a:6a:
         d2:2e:2f:84:ac:a8:ba:c8:4a:7d:12:27:32:d4:9d:c0:53:49:
         55:f3:05:29:f5:30:01:b7:0d:00:34:8d:df:4d:ae:90:7d:56:
         75:b6:a7:98:53:f8:05:54:f3:43:a1:22:31:84:7f:3d:d5:53:
         01:2b:2e:b5:7b:24:07:6c:2c:6d:03:c4:63:8f:b1:04:63:d4:
         09:ba:61:4b:be:30:81:4e:85:d3:d9:43:88:37:1d:54:f0:f8:
         16:17:c6:e9:8b:34:4a:c5:ef:30:10:05:06:c0:dd:78:84:0c:
         7f:3b:8f:6e:36:f5:87:2b:1e:d6:e1:3a:03:6d:4f:ab:a4:6a:
         7f:3f:04:29:fd:98:27:4b:e5:5d:55:42:cc:b4:65:7a:1a:d1:
         5a:3a:21:49:f3:a2:6b:5c:0c:b2:9a:61:d8:62:b0:6e:b7:a1:
         06:7f:d3:72:86:68:b0:47:f2:4a:ca:aa:d4:d2:05:65:d9:d6:
         8c:74:ad:22:9f:51:d1:95:19:f6:c1:b6:e6:af:7a:9b:08:48:
         c8:c0:71:54:73:06:88:bf:23:d6:c2:30:80:7c:35:fe:59:77:
         ef:c2:22:e9:eb:e8:90:4c:76:10:e2:cc:0d:9d:43:b4:3c:58:
         b8:ec:7c:54
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaO89lKCPhH0njXG02GTwCRIgjC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDUyMDM0NDBaFw0yNTAzMDQyMDM5NDBaMDMxMTAvBgNV
BAMTKDVGN0IyREYzODUwQjAyRkVFNjI5NzY1RkQyOTJGODk2OUQ4Q0QzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0JHmj24VXjA0M9icZTPbcI3K
HYh7C2bRFN4OS5FEm4N7N4EGRgy+02S9oiazFpO5U5/94w4IJdFeHee6inB+fjSP
66RPuqji7UAqp2urSXAPGm9ZpJyY8RbgeLwHpcfUSiRfAq9XIugIf1YvWwT0SfAL
uwuLUofJnx0S350CnzbisGqwDbFPZFnFk3an5OWTM77Rb0a8z75qCGHdheWYNwsA
pPhnot+el5AcAO/sBK0FXrPquDuauTZe2MhhRIkKeL3tnS7CYhs3HVVg7B7x9AKO
A/aTwcrm8jtv4I+IpJv9qbhndRGwtgNja/7N4nIh7/pIr041O0XcBZEVDCqVAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfey3zhQsC/uYp
dl/SkviWnYzTxTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80aXBrNGVRZDl6VXVjeUV4TGtzQ1l4eUs0U3FFZHZHUXNK
TExrOU1zcG1GWC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1Fz
SkxMazlNc3BtRlgvMC81RjdCMkRGMzg1MEIwMkZFRTYyOTc2NUZEMjkyRjg5NjlE
OENEM0M1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK640wwDQQCAAIwBwMF
ACgEjoQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCwXMA0GCSqGSIb3DQEBCwUA
A4IBAQCa1BP7CS3Rr1OAdlovqdmiOmrSLi+ErKi6yEp9Eicy1J3AU0lV8wUp9TAB
tw0ANI3fTa6QfVZ1tqeYU/gFVPNDoSIxhH891VMBKy61eyQHbCxtA8Rjj7EEY9QJ
umFLvjCBToXT2UOINx1U8PgWF8bpizRKxe8wEAUGwN14hAx/O49uNvWHKx7W4ToD
bU+rpGp/PwQp/ZgnS+VdVULMtGV6GtFaOiFJ86JrXAyymmHYYrBut6EGf9Nyhmiw
R/JKyqrU0gVl2daMdK0in1HRlRn2wbbmr3qbCEjIwHFUcwaIvyPWwjCAfDX+WXfv
wiLp6+iQTHYQ4swNnUO0PFi47HxU
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org