Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.cer
File:                     65BACEDBEA80E642364A002C1A1E5158217E7B5D.cer (raw, json)
Hash identifier:          BaUE7RqKpm4v4iAs9rvJWHkqwDJ75PqPo9GM7EulSMc=
Subject key identifier:   65:BA:CE:DB:EA:80:E6:42:36:4A:00:2C:1A:1E:51:58:21:7E:7B:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A5687B1DCC29B87D03B588590CA1CA2A147B45C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 13:02:54 +0000
Certificate not after:    Mon 25 Mar 2024 13:07:54 +0000
Subordinate resources:    AS: 53097
                          IP: 187.63.208.0/20
                          IP: 2804:3190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:56:87:b1:dc:c2:9b:87:d0:3b:58:85:90:ca:1c:a2:a1:47:b4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 13:02:54 2023 GMT
            Not After : Mar 25 13:07:54 2024 GMT
        Subject: CN=65BACEDBEA80E642364A002C1A1E5158217E7B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:8c:9b:09:8d:f2:f6:60:3d:72:9e:36:15:
                    1f:18:3d:f6:92:8a:6c:fe:06:05:26:ce:0a:fc:33:
                    6b:01:66:f8:c8:69:07:a8:50:38:b4:f2:63:dc:89:
                    d3:65:d1:4a:c3:e4:9c:12:91:fd:49:71:d2:31:37:
                    51:9d:cd:a0:f9:02:c8:88:8c:aa:57:ca:96:42:ce:
                    3b:01:98:88:e2:b1:e4:0e:cc:09:ee:cb:e8:da:d2:
                    bc:0c:22:31:74:ad:6e:09:ff:48:cc:82:f7:15:e6:
                    8a:77:3f:5a:9a:35:ee:6b:da:d8:d7:8a:b3:d7:d7:
                    97:cf:8a:f4:c8:03:8a:a9:a2:8b:5e:89:47:8a:0e:
                    d8:f2:71:1b:d6:b2:7d:1d:20:46:38:0d:56:78:64:
                    2a:35:af:72:93:30:19:ea:6d:e5:c8:79:16:7a:1e:
                    a9:cf:0a:4f:c0:93:f4:4d:4e:75:13:d3:b6:8e:92:
                    1e:55:37:07:9f:f3:76:75:f2:7d:b1:ca:4e:0f:a6:
                    5d:06:73:84:d1:65:8e:d3:14:57:c9:91:94:20:be:
                    e1:cf:87:f2:bb:fa:1c:70:13:d7:75:89:7a:94:c7:
                    d6:e0:6a:a4:2e:7a:b5:50:af:8a:13:60:b6:52:0a:
                    59:6c:5a:71:01:45:ad:97:1c:76:8a:ac:b1:98:c9:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:BA:CE:DB:EA:80:E6:42:36:4A:00:2C:1A:1E:51:58:21:7E:7B:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.208.0/20
                IPv6:
                  2804:3190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53097

    Signature Algorithm: sha256WithRSAEncryption
         68:30:cd:ca:a7:46:01:35:d9:a2:54:90:3a:d6:62:7a:f7:20:
         13:fc:68:99:e9:3c:f0:f5:e5:a4:17:61:dc:f7:d7:6c:62:2c:
         a7:a7:1c:e4:37:64:6c:77:e3:9f:96:5c:86:c5:1d:0b:14:0e:
         f6:45:84:01:dd:29:ae:df:d7:19:a0:69:8c:81:12:5b:15:93:
         df:0e:a9:8f:e5:29:ae:f4:fb:f5:0d:26:41:d5:a0:57:3b:53:
         3e:a1:af:49:2c:af:6a:09:9c:76:86:91:4d:17:6a:7d:c7:bd:
         55:bf:93:72:30:74:0a:33:5f:ef:72:55:81:b9:b2:f6:76:ae:
         32:2d:a7:7d:44:eb:3a:6f:eb:42:1d:43:39:99:b9:3e:3b:33:
         e6:73:ec:1d:77:fb:88:64:5f:81:1c:81:56:61:e4:10:c1:ff:
         eb:ff:77:0e:08:e7:11:a0:d6:14:1b:a3:94:b6:1e:02:86:3f:
         4d:87:18:88:9b:98:d4:21:a5:da:c2:e1:d8:8b:fe:91:96:28:
         29:86:dd:d5:29:3a:d4:c1:76:04:ee:6c:93:c9:f2:2b:91:17:
         f1:eb:cd:69:3c:23:39:c0:fc:a4:80:f6:0d:5c:e1:55:bd:d5:
         dc:53:42:f8:48:f9:48:94:69:d5:9e:03:24:d8:63:9d:49:b3:
         7c:8a:cd:0a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSlaHsdzCm4fQO1iFkMocoqFHtFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjcxMzAyNTRaFw0yNDAzMjUxMzA3NTRaMDMxMTAvBgNV
BAMTKDY1QkFDRURCRUE4MEU2NDIzNjRBMDAyQzFBMUU1MTU4MjE3RTdCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvv4ybCY3y9mA9cp42FR8YPfaS
imz+BgUmzgr8M2sBZvjIaQeoUDi08mPcidNl0UrD5JwSkf1JcdIxN1GdzaD5AsiI
jKpXypZCzjsBmIjiseQOzAnuy+ja0rwMIjF0rW4J/0jMgvcV5op3P1qaNe5r2tjX
irPX15fPivTIA4qpooteiUeKDtjycRvWsn0dIEY4DVZ4ZCo1r3KTMBnqbeXIeRZ6
HqnPCk/Ak/RNTnUT07aOkh5VNwef83Z18n2xyk4Ppl0Gc4TRZY7TFFfJkZQgvuHP
h/K7+hxwE9d1iXqUx9bgaqQuerVQr4oTYLZSCllsWnEBRa2XHHaKrLGYye2BAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlus7b6oDmQjZK
ACwaHlFYIX57XTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CRFJjVVdOYXlHUTl0N01uUkJUVkFZVFJrM2M0Vm1kTFNh
NEg3S2dYYWhQci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CRFJjVVdOYXlHUTl0N01uUkJUVkFZVFJrM2M0Vm1kTFNh
NEg3S2dYYWhQci8wLzY1QkFDRURCRUE4MEU2NDIzNjRBMDAyQzFBMUU1MTU4MjE3
RTdCNUQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLs/0DANBAIAAjAHAwUA
KAQxkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAz2kwDQYJKoZIhvcNAQELBQAD
ggEBAGgwzcqnRgE12aJUkDrWYnr3IBP8aJnpPPD15aQXYdz312xiLKenHOQ3ZGx3
45+WXIbFHQsUDvZFhAHdKa7f1xmgaYyBElsVk98OqY/lKa70+/UNJkHVoFc7Uz6h
r0ksr2oJnHaGkU0Xan3HvVW/k3IwdAozX+9yVYG5svZ2rjItp31E6zpv60IdQzmZ
uT47M+Zz7B13+4hkX4EcgVZh5BDB/+v/dw4I5xGg1hQbo5S2HgKGP02HGIibmNQh
pdrC4diL/pGWKCmG3dUpOtTBdgTubJPJ8iuRF/HrzWk8IznA/KSA9g1c4VW91dxT
QvhI+UiUadWeAyTYY51Js3yKzQo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org