Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4.cer
File:                     712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4.cer (raw, json)
Hash identifier:          y/9tbrlRjkHqM078pDqccEIh0mCTDKEvwhYbsSIe9ZA=
Subject key identifier:   71:2D:2B:A5:D8:A0:18:4D:0A:A8:9F:61:41:DF:2D:55:FB:1B:AF:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AC4DB49F530BAF17891F2C3ED78F2E42D7EA227
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 10:48:28 +0000
Certificate not after:    Thu 30 May 2024 10:53:28 +0000
Subordinate resources:    AS: 265087
                          IP: 170.233.56.0/22
                          IP: 2804:3298::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:db:49:f5:30:ba:f1:78:91:f2:c3:ed:78:f2:e4:2d:7e:a2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 10:48:28 2023 GMT
            Not After : May 30 10:53:28 2024 GMT
        Subject: CN=712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:82:5a:d7:9a:2a:02:85:1f:9f:75:e9:4d:
                    12:e6:c9:f7:5f:db:ee:79:74:36:17:6e:07:39:1e:
                    16:fa:f5:85:46:e4:54:54:92:12:a4:9e:f2:9e:4d:
                    95:41:cb:d2:43:54:60:d5:b9:3e:94:44:12:de:96:
                    f5:e1:bb:8d:2f:4d:fc:93:ce:b9:1d:18:76:a3:bb:
                    64:3f:af:30:7c:86:2f:3a:44:4c:95:45:a4:1c:06:
                    3a:91:a1:d1:1e:af:f4:80:b6:3b:3d:2c:92:9c:9b:
                    9e:d4:95:4d:73:d8:e2:a6:33:ec:6a:ac:7d:ab:e3:
                    9d:8b:1b:07:f8:f1:0e:ef:e8:e4:c4:11:80:7c:77:
                    51:7a:46:fa:d7:4c:fc:95:c1:0a:84:71:53:aa:81:
                    07:55:b2:b0:34:10:ed:d2:35:7e:0c:37:1b:4b:c5:
                    36:b5:dd:9f:80:50:5a:2b:d1:af:8b:40:1c:7d:7c:
                    8e:3a:39:88:36:04:e9:26:1d:b6:27:9a:1d:f8:f9:
                    ab:04:6b:00:e4:9b:4c:84:08:0c:4e:07:f6:73:1a:
                    97:ed:5d:64:20:34:28:6e:2a:5a:16:f0:f4:ad:c3:
                    7f:8d:f8:c3:8c:fb:08:52:2a:8a:24:1d:cf:04:15:
                    e7:69:2a:6b:7b:5b:2f:d6:69:71:80:68:c4:2a:b3:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:2D:2B:A5:D8:A0:18:4D:0A:A8:9F:61:41:DF:2D:55:FB:1B:AF:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.56.0/22
                IPv6:
                  2804:3298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265087

    Signature Algorithm: sha256WithRSAEncryption
         01:b5:c2:93:3a:79:c4:6e:58:57:52:81:33:f9:e2:4f:d7:b5:
         62:a5:52:8d:dd:ae:a0:24:e9:61:3f:b9:e3:a7:8c:76:25:81:
         d0:30:5d:98:fc:7c:5b:7e:be:6d:8a:ac:ce:60:51:a2:9f:73:
         8d:fa:3a:aa:03:28:19:ad:af:4a:94:af:3c:ab:00:d2:ca:cf:
         30:ec:22:2f:fc:14:62:39:59:38:5d:34:bd:87:4b:29:e9:31:
         11:27:93:21:24:7d:48:28:81:a1:eb:02:d0:1b:75:b1:db:41:
         b9:58:9b:24:87:21:8f:bf:2e:5f:6a:a1:be:54:77:8c:d6:ee:
         d1:50:b7:40:3b:65:f2:c7:de:1a:ec:39:31:71:4d:47:03:a1:
         ce:56:dc:df:90:79:dd:38:35:b7:f8:45:90:db:20:ea:a0:fe:
         c9:dc:84:d1:34:ff:c7:92:7a:91:47:b7:35:3a:0c:7d:ae:d5:
         55:89:fc:c0:b7:17:1a:f2:12:63:6c:e6:f5:8e:22:f7:36:ba:
         b4:53:81:e5:49:0b:9d:f7:8c:6b:ba:e7:57:72:0f:e2:7f:96:
         8f:c4:1e:1b:ec:3b:a6:59:18:2e:25:7f:4c:f4:b8:62:ea:d6:
         bd:a9:09:3f:73:5f:72:f3:f4:b6:a7:57:eb:cd:41:ed:a4:ff:
         e1:57:14:60
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUKsTbSfUwuvF4kfLD7Xjy5C1+oicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MDExMDQ4MjhaFw0yNDA1MzAxMDUzMjhaMDMxMTAvBgNV
BAMTKDcxMkQyQkE1RDhBMDE4NEQwQUE4OUY2MTQxREYyRDU1RkIxQkFGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/YJa15oqAoUfn3XpTRLmyfdf
2+55dDYXbgc5Hhb69YVG5FRUkhKknvKeTZVBy9JDVGDVuT6URBLelvXhu40vTfyT
zrkdGHaju2Q/rzB8hi86REyVRaQcBjqRodEer/SAtjs9LJKcm57UlU1z2OKmM+xq
rH2r452LGwf48Q7v6OTEEYB8d1F6RvrXTPyVwQqEcVOqgQdVsrA0EO3SNX4MNxtL
xTa13Z+AUFor0a+LQBx9fI46OYg2BOkmHbYnmh34+asEawDkm0yECAxOB/ZzGpft
XWQgNChuKloW8PStw3+N+MOM+whSKookHc8EFedpKmt7Wy/WaXGAaMQqs4mJAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxLSul2KAYTQqo
n2FB3y1V+xuvpDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zckdpYW1hY0ZXRXlXOVpQUzdTU3F4SEZBWUh0dlZpeEYx
WGVQTW9kMXF0aS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zckdpYW1hY0ZXRXlXOVpQUzdTU3F4SEZBWUh0dlZpeEYx
WGVQTW9kMXF0aS8wLzcxMkQyQkE1RDhBMDE4NEQwQUE4OUY2MTQxREYyRDU1RkIx
QkFGQTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrpODANBAIAAjAHAwUA
KAQymDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC38wDQYJKoZIhvcNAQELBQAD
ggEBAAG1wpM6ecRuWFdSgTP54k/XtWKlUo3drqAk6WE/ueOnjHYlgdAwXZj8fFt+
vm2KrM5gUaKfc436OqoDKBmtr0qUrzyrANLKzzDsIi/8FGI5WThdNL2HSynpMREn
kyEkfUgogaHrAtAbdbHbQblYmySHIY+/Ll9qob5Ud4zW7tFQt0A7ZfLH3hrsOTFx
TUcDoc5W3N+Qed04Nbf4RZDbIOqg/snchNE0/8eSepFHtzU6DH2u1VWJ/MC3Fxry
EmNs5vWOIvc2urRTgeVJC533jGu651dyD+J/lo/EHhvsO6ZZGC4lf0z0uGLq1r2p
CT9zX3Lz9LanV+vNQe2k/+FXFGA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org