Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.cer
File:                     672698D7118D3ECE15E8852DCA0F5F04245E94C7.cer (raw, json)
Hash identifier:          Ez1QbwUObywLXOVKxz68PqZ+p535lNg++5A/sHBY6Us=
Subject key identifier:   67:26:98:D7:11:8D:3E:CE:15:E8:85:2D:CA:0F:5F:04:24:5E:94:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49CA0DCBBAA312A3B4C0D7CCE905D7D381198158
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Apr 2023 00:48:38 +0000
Certificate not after:    Fri 05 Apr 2024 00:53:38 +0000
Subordinate resources:    AS: 266553
                          IP: 160.238.148.0/22
                          IP: 2804:3dc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ca:0d:cb:ba:a3:12:a3:b4:c0:d7:cc:e9:05:d7:d3:81:19:81:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 00:48:38 2023 GMT
            Not After : Apr  5 00:53:38 2024 GMT
        Subject: CN=672698D7118D3ECE15E8852DCA0F5F04245E94C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:1e:ca:d5:b3:b1:80:f2:e6:25:1d:5b:f6:
                    88:75:6c:33:0f:fe:05:95:ad:c3:1d:00:ec:b4:e8:
                    30:cb:b8:c2:81:32:33:0d:03:49:a4:bd:fe:df:38:
                    e9:a1:0c:46:59:51:c8:83:d5:60:99:42:d6:a0:09:
                    16:03:f9:0d:0c:c3:b6:c8:27:3e:b1:5c:de:14:4f:
                    0f:ce:ed:ae:b7:3a:58:53:8a:4e:19:32:ff:00:f9:
                    4b:16:5e:19:21:ab:19:1c:6c:ab:b5:84:97:4c:56:
                    90:4f:b3:77:6a:6c:01:99:02:07:99:1e:72:30:22:
                    a8:1d:ea:fe:42:96:8b:13:96:bd:8b:78:6f:93:8d:
                    61:14:bf:dd:d9:2d:c0:77:23:08:82:fc:42:9d:c8:
                    21:21:49:2d:1a:f9:8c:23:03:28:7d:a0:df:31:fd:
                    0c:bc:b3:42:45:c0:7f:3b:16:00:b8:0d:dd:b0:f5:
                    54:4a:27:20:66:65:30:bf:8f:bf:ea:92:c9:ad:db:
                    e7:38:00:eb:a5:85:ef:67:55:d9:1b:83:71:2c:d5:
                    80:cc:37:7f:fc:ac:39:21:bd:71:ea:1b:a8:99:1d:
                    99:25:6d:a0:bc:c5:8d:9f:39:28:e0:c6:c0:83:1a:
                    5c:b9:a4:7c:e1:f0:93:0a:44:5a:31:99:7b:d7:68:
                    e1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:26:98:D7:11:8D:3E:CE:15:E8:85:2D:CA:0F:5F:04:24:5E:94:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.148.0/22
                IPv6:
                  2804:3dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266553

    Signature Algorithm: sha256WithRSAEncryption
         a7:f8:e7:a5:ec:0c:66:17:03:10:da:94:8f:81:9c:b1:46:57:
         6d:48:14:b7:73:ed:2d:2a:60:66:ae:b8:f2:b7:0b:04:7c:8c:
         47:24:6e:cc:3e:28:97:37:12:cd:1c:d2:5f:8e:dc:79:cc:91:
         0f:ed:c0:4d:a8:d0:24:5b:92:e2:c7:0b:e7:df:25:68:e7:01:
         ad:6d:17:31:bc:2a:cf:61:b4:59:4b:ad:01:6b:5e:b8:11:c2:
         a1:1c:72:fb:bd:b5:7f:cd:b6:66:31:ee:30:53:4c:97:5a:89:
         1e:5c:43:1e:2e:ab:1a:eb:59:a4:e5:fd:4a:b1:76:0b:c6:0b:
         17:34:b8:36:6a:9f:10:9a:a5:88:21:fe:34:94:fa:0b:27:8f:
         c6:cc:89:7d:6d:a6:6d:6a:27:0c:c4:15:96:9f:9c:a5:b0:82:
         33:d4:08:60:0d:dd:27:0c:41:f4:ca:eb:f0:9c:a3:34:b5:9e:
         67:64:35:c7:6e:5b:bb:6b:56:de:74:6c:07:5f:12:91:b4:14:
         2a:3f:1b:e6:e7:27:cb:bb:fe:6a:88:d7:52:22:05:ee:fd:03:
         c7:f1:bf:4c:ea:0d:85:75:d5:db:c9:f6:e0:4c:ae:98:cd:29:
         4e:3f:83:e7:81:d1:c4:ef:ae:b7:ec:a7:a9:24:a7:db:e9:e9:
         35:70:49:c7
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUScoNy7qjEqO0wNfM6QXX04EZgVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MDcwMDQ4MzhaFw0yNDA0MDUwMDUzMzhaMDMxMTAvBgNV
BAMTKDY3MjY5OEQ3MTE4RDNFQ0UxNUU4ODUyRENBMEY1RjA0MjQ1RTk0QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnUx7K1bOxgPLmJR1b9oh1bDMP
/gWVrcMdAOy06DDLuMKBMjMNA0mkvf7fOOmhDEZZUciD1WCZQtagCRYD+Q0Mw7bI
Jz6xXN4UTw/O7a63OlhTik4ZMv8A+UsWXhkhqxkcbKu1hJdMVpBPs3dqbAGZAgeZ
HnIwIqgd6v5ClosTlr2LeG+TjWEUv93ZLcB3IwiC/EKdyCEhSS0a+YwjAyh9oN8x
/Qy8s0JFwH87FgC4Dd2w9VRKJyBmZTC/j7/qksmt2+c4AOulhe9nVdkbg3Es1YDM
N3/8rDkhvXHqG6iZHZklbaC8xY2fOSjgxsCDGly5pHzh8JMKRFoxmXvXaOEXAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnJpjXEY0+zhXo
hS3KD18EJF6UxzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BMXhUQ2lTeFhLWGZuY3g1eFJvOGJNc2ZXUkdXVHY1Rjdh
Q1M0U0dpVVFRTS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BMXhUQ2lTeFhLWGZuY3g1eFJvOGJNc2ZXUkdXVHY1Rjdh
Q1M0U0dpVVFRTS8wLzY3MjY5OEQ3MTE4RDNFQ0UxNUU4ODUyRENBMEY1RjA0MjQ1
RTk0QzcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqDulDANBAIAAjAHAwUA
KAQ9yDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEETkwDQYJKoZIhvcNAQELBQAD
ggEBAKf456XsDGYXAxDalI+BnLFGV21IFLdz7S0qYGauuPK3CwR8jEckbsw+KJc3
Es0c0l+O3HnMkQ/twE2o0CRbkuLHC+ffJWjnAa1tFzG8Ks9htFlLrQFrXrgRwqEc
cvu9tX/NtmYx7jBTTJdaiR5cQx4uqxrrWaTl/UqxdgvGCxc0uDZqnxCapYgh/jSU
+gsnj8bMiX1tpm1qJwzEFZafnKWwgjPUCGAN3ScMQfTK6/CcozS1nmdkNcduW7tr
Vt50bAdfEpG0FCo/G+bnJ8u7/mqI11IiBe79A8fxv0zqDYV11dvJ9uBMrpjNKU4/
g+eB0cTvrrfsp6kkp9vp6TVwScc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org