Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7086E8E1F159D3C80DA6D4EE1E063D40C07E9B68.cer
File:                     7086E8E1F159D3C80DA6D4EE1E063D40C07E9B68.cer (raw, json)
Hash identifier:          0vYO2DWi4rs2QETuelcP4BtAckKgWskY9SSuLpadYOY=
Subject key identifier:   70:86:E8:E1:F1:59:D3:C8:0D:A6:D4:EE:1E:06:3D:40:C0:7E:9B:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BEDEF3744C0758E69825B717079E9A7034E7A5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/7086E8E1F159D3C80DA6D4EE1E063D40C07E9B68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Apr 2023 11:47:22 +0000
Certificate not after:    Fri 26 Apr 2024 11:52:22 +0000
Subordinate resources:    AS: 264117
                          IP: 138.97.28.0/22
                          IP: 143.255.4.0/22
                          IP: 177.66.76.0/22
                          IP: 2804:22b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ed:ef:37:44:c0:75:8e:69:82:5b:71:70:79:e9:a7:03:4e:7a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 28 11:47:22 2023 GMT
            Not After : Apr 26 11:52:22 2024 GMT
        Subject: CN=7086E8E1F159D3C80DA6D4EE1E063D40C07E9B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:94:73:11:66:04:84:15:ec:81:d0:e8:fc:
                    7f:56:92:b6:27:67:94:7f:dc:21:69:68:a9:11:3a:
                    e8:28:73:ec:68:17:bd:f4:75:fd:26:7d:b6:c6:65:
                    51:d1:07:c3:57:88:57:68:f0:0d:3f:00:11:ab:89:
                    a1:0a:9e:cb:64:50:8f:48:e6:31:b2:09:15:bf:12:
                    48:13:a5:9a:55:77:26:44:62:73:e8:48:7f:36:ac:
                    cf:d5:a5:aa:4d:f2:e7:60:a2:e2:cf:88:ae:42:51:
                    38:43:d1:90:dc:52:b6:e4:fb:ef:81:1c:4a:5e:16:
                    5f:ad:2c:71:be:98:41:96:c6:1d:83:ef:76:85:37:
                    4c:0b:32:d4:95:f1:25:98:6b:ad:8a:83:a0:13:30:
                    c7:67:6b:e4:58:c5:4a:05:bc:cc:27:a5:2a:75:9e:
                    9c:55:83:bd:0a:e1:9a:13:f7:2f:f6:a0:07:64:6b:
                    58:a2:d9:e4:cc:42:2c:0b:48:2e:e4:c9:c5:39:10:
                    96:72:b4:66:da:84:1c:c7:d3:53:66:c3:c7:a8:54:
                    b3:a5:19:e2:2f:ee:6f:6c:0a:be:53:84:a7:2a:04:
                    ee:90:e8:fe:83:74:fd:d5:79:8b:e3:21:12:c5:a7:
                    e9:c2:5e:55:13:46:8d:72:fa:36:9c:7a:e7:27:2a:
                    1c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:86:E8:E1:F1:59:D3:C8:0D:A6:D4:EE:1E:06:3D:40:C0:7E:9B:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/7086E8E1F159D3C80DA6D4EE1E063D40C07E9B68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.28.0/22
                  143.255.4.0/22
                  177.66.76.0/22
                IPv6:
                  2804:22b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264117

    Signature Algorithm: sha256WithRSAEncryption
         7e:78:9b:6c:97:d5:50:4f:02:e9:fd:d2:4e:3a:40:8a:74:3d:
         c8:5c:ae:36:9a:0a:b3:5c:c8:19:02:f9:27:3e:13:b9:a7:1a:
         6b:03:8b:82:90:a0:52:13:b2:4e:22:e5:20:d4:3f:97:ea:15:
         db:5d:cd:39:24:53:72:98:f4:c3:77:a1:b8:49:25:66:5b:63:
         ee:b2:c8:8e:36:5a:6c:91:98:59:9c:bf:a0:c8:c6:97:af:53:
         ca:09:6d:19:a4:28:68:e2:20:ef:49:42:3a:34:79:a1:bd:7f:
         d9:d5:78:f4:a8:ca:7a:0f:4c:79:13:e2:b7:4d:08:91:a7:80:
         79:fa:fb:2a:3d:a8:d3:33:d0:62:67:be:4e:d5:f1:a7:ed:01:
         e3:9e:e5:3c:e4:ab:d7:08:48:67:7f:98:e7:95:70:d8:38:62:
         88:28:90:1f:e1:02:b4:7a:5f:77:10:0e:91:75:ac:09:33:e6:
         14:3c:3c:70:cc:38:60:ff:39:8e:90:ad:a7:b4:ce:1d:a9:fa:
         f5:e9:b9:d3:22:7f:53:d9:b7:70:27:21:ae:86:a2:c5:99:85:
         13:fe:d0:d7:db:72:1f:e4:b4:58:0c:12:99:5e:ae:cf:3c:ee:
         3e:5e:e3:94:d7:91:51:28:64:91:ff:70:e1:5d:86:48:2b:33:
         53:8e:68:52
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUa+3vN0TAdY5pgltxcHnppwNOel4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MjgxMTQ3MjJaFw0yNDA0MjYxMTUyMjJaMDMxMTAvBgNV
BAMTKDcwODZFOEUxRjE1OUQzQzgwREE2RDRFRTFFMDYzRDQwQzA3RTlCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8JRzEWYEhBXsgdDo/H9WkrYn
Z5R/3CFpaKkROugoc+xoF730df0mfbbGZVHRB8NXiFdo8A0/ABGriaEKnstkUI9I
5jGyCRW/EkgTpZpVdyZEYnPoSH82rM/VpapN8udgouLPiK5CUThD0ZDcUrbk+++B
HEpeFl+tLHG+mEGWxh2D73aFN0wLMtSV8SWYa62Kg6ATMMdna+RYxUoFvMwnpSp1
npxVg70K4ZoT9y/2oAdka1ii2eTMQiwLSC7kycU5EJZytGbahBzH01Nmw8eoVLOl
GeIv7m9sCr5ThKcqBO6Q6P6DdP3VeYvjIRLFp+nCXlUTRo1y+jaceucnKhy1AgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwhujh8VnTyA2m
1O4eBj1AwH6baDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80QmJIVUhVdUtCTjZaZnhHRVJKdENHdG9vR2tmTEtGQlMx
aFFzMjlaVVdvSC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80QmJIVUhVdUtCTjZaZnhHRVJKdENHdG9vR2tmTEtGQlMx
aFFzMjlaVVdvSC8wLzcwODZFOEUxRjE1OUQzQzgwREE2RDRFRTFFMDYzRDQwQzA3
RTlCNjgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAophHAMEAo//BAMEArFC
TDANBAIAAjAHAwUAKAQitDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEB7UwDQYJ
KoZIhvcNAQELBQADggEBAH54m2yX1VBPAun90k46QIp0PchcrjaaCrNcyBkC+Sc+
E7mnGmsDi4KQoFITsk4i5SDUP5fqFdtdzTkkU3KY9MN3obhJJWZbY+6yyI42WmyR
mFmcv6DIxpevU8oJbRmkKGjiIO9JQjo0eaG9f9nVePSoynoPTHkT4rdNCJGngHn6
+yo9qNMz0GJnvk7V8aftAeOe5Tzkq9cISGd/mOeVcNg4YogokB/hArR6X3cQDpF1
rAkz5hQ8PHDMOGD/OY6Qrae0zh2p+vXpudMif1PZt3AnIa6GosWZhRP+0Nfbch/k
tFgMEplers887j5e45TXkVEoZJH/cOFdhkgrM1OOaFI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org