Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/705150BB2E366255D739F51F83CB63875B3D31BA.cer
File:                     705150BB2E366255D739F51F83CB63875B3D31BA.cer (raw, json)
Hash identifier:          DbO8PXkakmhCqxYsgqiBovBPhb2NVEbyUbXYtoJrvD8=
Subject key identifier:   70:51:50:BB:2E:36:62:55:D7:39:F5:1F:83:CB:63:87:5B:3D:31:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       653EEDCDCDA1A34673D1A4E87F7B555101C722F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/705150BB2E366255D739F51F83CB63875B3D31BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 17:05:41 +0000
Certificate not after:    Mon 24 Feb 2025 17:10:41 +0000
Subordinate resources:    AS: 28142
                          AS: 262430
                          IP: 177.39.136.0/22
                          IP: 186.224.64.0/20
                          IP: 187.49.80.0/20
                          IP: 2804:fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3e:ed:cd:cd:a1:a3:46:73:d1:a4:e8:7f:7b:55:51:01:c7:22:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 17:05:41 2024 GMT
            Not After : Feb 24 17:10:41 2025 GMT
        Subject: CN=705150BB2E366255D739F51F83CB63875B3D31BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:78:81:4a:12:ad:59:25:ef:b5:e9:b2:f8:
                    9c:13:cb:dc:1a:2b:3a:73:a9:a0:59:4c:7b:21:7a:
                    f1:45:ef:cc:d5:fa:fb:30:e4:77:62:e9:18:44:3d:
                    84:8a:eb:7a:de:0d:80:ce:8d:78:f9:0b:42:8b:54:
                    37:f2:95:27:05:68:9d:cf:8b:67:5b:95:f4:8e:64:
                    db:46:21:af:7d:5c:17:c9:c7:22:0c:7e:8d:77:e6:
                    f5:c7:65:ff:ff:0a:b6:c8:2b:69:aa:4d:1e:31:47:
                    83:c8:c6:38:e4:98:8b:37:64:06:44:08:47:68:27:
                    6e:34:7d:13:99:27:a1:36:32:e6:13:61:00:fe:22:
                    c1:9f:1d:ae:cb:a8:65:24:1b:a9:ba:fa:47:ae:b7:
                    9b:c7:5e:b1:e6:77:2f:19:c6:1f:e5:f8:1f:af:de:
                    32:6d:52:91:58:e8:19:f1:e2:53:6b:a7:ef:1e:7c:
                    98:3f:11:36:23:5d:16:30:f1:e1:ee:1e:b7:b2:4c:
                    4d:7f:a6:74:b9:39:72:85:57:e1:10:95:9e:19:b5:
                    d2:a7:94:7e:25:32:ce:7c:70:8e:41:0c:16:ee:9d:
                    05:47:d5:5d:1f:e9:b9:bc:23:e5:5b:fb:7a:12:7c:
                    b8:00:da:51:53:5d:a7:27:91:92:0d:41:01:0d:84:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:51:50:BB:2E:36:62:55:D7:39:F5:1F:83:CB:63:87:5B:3D:31:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/705150BB2E366255D739F51F83CB63875B3D31BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.136.0/22
                  186.224.64.0/20
                  187.49.80.0/20
                IPv6:
                  2804:fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28142
                  262430

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:04:e6:19:7c:2d:a2:7c:39:e5:29:23:18:6f:1f:6b:9b:
         b1:7d:17:59:9f:b8:55:2b:84:2b:05:f4:03:7c:37:7e:de:5e:
         c7:45:61:cd:75:1d:30:87:bd:0f:c5:c4:1d:ab:2d:0f:90:0e:
         49:53:3a:d5:86:d5:8b:9e:6c:cf:cd:97:57:bd:39:6c:e4:2b:
         a3:72:4d:3b:27:e3:6c:d8:fd:59:b0:81:f2:6b:21:ec:ad:75:
         61:55:10:fa:aa:0c:7e:ae:1e:bb:87:3f:d5:b1:8c:db:52:fd:
         7d:e9:02:87:c0:2a:56:3f:1c:b1:0b:3c:82:9b:16:89:5d:8e:
         61:a6:fd:f3:55:ef:44:fb:1f:69:62:55:6e:15:94:3d:e4:0c:
         d3:76:48:24:cf:af:19:ed:7c:93:f8:fb:94:1c:36:92:6b:f6:
         89:18:75:d0:3f:25:b4:6a:a3:b7:c5:0b:b1:6a:1c:44:c8:f7:
         9b:dc:0d:f3:58:32:19:bd:38:64:e9:de:c3:4e:ed:9d:eb:b7:
         a5:7d:b5:7a:03:ec:f0:b7:a5:f0:88:08:10:a3:7f:f3:35:da:
         17:1e:1c:0a:a7:6a:e2:78:83:7e:49:1e:0a:7f:ad:35:47:2a:
         d6:47:4c:8a:68:fd:90:99:13:f7:2f:9a:c8:4f:f7:a8:52:74:
         79:93:75:1b
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUZT7tzc2ho0Zz0aTof3tVUQHHIvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjYxNzA1NDFaFw0yNTAyMjQxNzEwNDFaMDMxMTAvBgNV
BAMTKDcwNTE1MEJCMkUzNjYyNTVENzM5RjUxRjgzQ0I2Mzg3NUIzRDMxQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZqHiBShKtWSXvtemy+JwTy9wa
KzpzqaBZTHshevFF78zV+vsw5Hdi6RhEPYSK63reDYDOjXj5C0KLVDfylScFaJ3P
i2dblfSOZNtGIa99XBfJxyIMfo135vXHZf//CrbIK2mqTR4xR4PIxjjkmIs3ZAZE
CEdoJ240fROZJ6E2MuYTYQD+IsGfHa7LqGUkG6m6+keut5vHXrHmdy8Zxh/l+B+v
3jJtUpFY6Bnx4lNrp+8efJg/ETYjXRYw8eHuHreyTE1/pnS5OXKFV+EQlZ4ZtdKn
lH4lMs58cI5BDBbunQVH1V0f6bm8I+Vb+3oSfLgA2lFTXacnkZINQQENhAazAgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwUVC7LjZiVdc5
9R+Dy2OHWz0xujAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdlhoaTJnYkY4MjZ3amFSYlBnYUc2RGJZbk1Oa1Q2Z1h6
dFlLMzZqVlZzai8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdlhoaTJnYkY4MjZ3amFSYlBnYUc2RGJZbk1Oa1Q2Z1h6
dFlLMzZqVlZzai8wLzcwNTE1MEJCMkUzNjYyNTVENzM5RjUxRjgzQ0I2Mzg3NUIz
RDMxQkEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEArEniAMEBLrgQAMEBLsx
UDANBAIAAjAHAwUAKAQA/DAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJt7gIDBAEe
MA0GCSqGSIb3DQEBCwUAA4IBAQCNvgTmGXwtonw55SkjGG8fa5uxfRdZn7hVK4Qr
BfQDfDd+3l7HRWHNdR0wh70PxcQdqy0PkA5JUzrVhtWLnmzPzZdXvTls5Cujck07
J+Ns2P1ZsIHyayHsrXVhVRD6qgx+rh67hz/VsYzbUv196QKHwCpWPxyxCzyCmxaJ
XY5hpv3zVe9E+x9pYlVuFZQ95AzTdkgkz68Z7XyT+PuUHDaSa/aJGHXQPyW0aqO3
xQuxahxEyPeb3A3zWDIZvThk6d7DTu2d67elfbV6A+zwt6XwiAgQo3/zNdoXHhwK
p2rieIN+SR4Kf601RyrWR0yKaP2QmRP3L5rIT/eoUnR5k3Ub
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org