Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7D0A00AF1E6B7D02A5B43F43269B5AAFE6503120.cer
File:                     7D0A00AF1E6B7D02A5B43F43269B5AAFE6503120.cer (raw, json)
Hash identifier:          QUPSwJUAC7m79VprAe15wMwsqMLeyXZBhQrRhFoEals=
Subject key identifier:   7D:0A:00:AF:1E:6B:7D:02:A5:B4:3F:43:26:9B:5A:AF:E6:50:31:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D0DAC0BB0FE363CB514B51CBC0EAB91D5B6907B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/7D0A00AF1E6B7D02A5B43F43269B5AAFE6503120.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Mar 2022 19:26:07 +0000
Certificate not after:    Wed 15 Mar 2023 19:31:07 +0000
Subordinate resources:    AS: 264508
                          IP: 132.255.152.0/22
                          IP: 167.249.64.0/22
                          IP: 168.196.4.0/22
                          IP: 2804:20b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0d:ac:0b:b0:fe:36:3c:b5:14:b5:1c:bc:0e:ab:91:d5:b6:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 19:26:07 2022 GMT
            Not After : Mar 15 19:31:07 2023 GMT
        Subject: CN=7D0A00AF1E6B7D02A5B43F43269B5AAFE6503120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:32:d3:d4:12:21:f3:c5:36:29:28:4a:82:
                    59:cb:dd:45:3a:01:76:14:71:fa:20:70:90:12:dc:
                    2f:1f:3c:de:8a:4e:11:49:eb:5d:ba:a3:0b:da:29:
                    99:2a:67:ae:11:ac:b2:a0:32:7b:73:f0:63:69:66:
                    58:a7:7f:8e:b1:e2:4d:5f:0b:be:c6:37:46:b2:28:
                    1f:96:b2:7d:16:8e:36:45:c4:cf:3d:3f:9d:b2:b1:
                    f6:3b:2b:e0:ae:5b:ae:59:b3:43:15:8e:01:ba:6d:
                    c7:47:79:10:37:ff:4c:03:79:9d:d9:98:d9:ae:20:
                    8d:3c:ce:85:fe:37:7e:b3:58:46:32:1f:6c:6b:d7:
                    67:6c:4f:31:43:1d:a4:e8:7c:fb:6d:4c:a7:4b:9d:
                    04:3f:5c:dc:18:80:2b:c5:59:bc:87:93:ec:9a:e1:
                    86:21:07:15:57:43:a1:86:41:fc:2d:be:24:67:9a:
                    c9:1a:1f:a9:c9:cd:12:26:99:2f:b6:a2:16:b8:72:
                    3d:3b:aa:09:26:10:a0:27:0e:2f:aa:df:65:b2:5b:
                    d7:fa:8d:47:5d:06:6d:ac:f0:81:80:d4:29:6f:60:
                    ef:6d:27:d3:82:58:d7:ed:95:bc:e6:cd:d0:ec:e3:
                    77:b0:58:53:83:ff:fd:57:a6:3d:fe:a0:8b:23:04:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:0A:00:AF:1E:6B:7D:02:A5:B4:3F:43:26:9B:5A:AF:E6:50:31:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/7D0A00AF1E6B7D02A5B43F43269B5AAFE6503120.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.152.0/22
                  167.249.64.0/22
                  168.196.4.0/22
                IPv6:
                  2804:20b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264508

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:36:d8:f1:56:56:d9:ad:4b:15:78:5a:df:8e:1f:56:37:
         da:8f:9a:7a:68:4d:1c:27:f9:77:18:ea:b1:a9:21:18:1f:b5:
         03:22:fd:f7:52:d8:82:d9:65:6c:38:78:bd:38:a6:15:40:8b:
         db:f5:ea:24:c3:ba:22:04:04:ef:a7:65:bc:8a:83:09:38:47:
         53:20:c1:0c:c0:04:2b:37:c2:62:ac:3a:6e:31:10:c9:3a:b1:
         88:b4:13:77:4f:ef:cd:03:cb:58:f8:fc:99:1f:be:64:b6:56:
         a0:5e:80:ff:f6:0f:4f:92:35:07:d4:cb:0b:00:4f:c9:1d:aa:
         5c:d3:db:eb:a9:05:d7:82:17:1f:18:5e:22:c9:9b:9b:c3:99:
         1f:01:5e:19:27:8a:64:b1:e9:8f:97:13:73:91:16:f8:2a:f8:
         61:ac:6e:71:c9:13:52:8b:a1:6e:38:7a:47:cc:3a:06:77:e9:
         17:2a:dd:e2:d7:0f:08:72:17:fa:a6:39:37:25:84:a8:39:61:
         74:ed:b2:4a:5e:7e:0c:91:b7:54:eb:27:3c:7c:7e:d6:30:c2:
         ec:a2:f9:b0:c3:e2:02:7f:ba:75:a4:05:7c:0a:84:05:cf:b3:
         18:bf:cf:18:17:4b:35:83:90:36:77:04:e9:5f:cc:de:74:ee:
         d5:b1:f8:67
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIUbQ2sC7D+Njy1FLUcvA6rkdW2kHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAzMTYxOTI2MDdaFw0yMzAzMTUxOTMxMDdaMDMxMTAvBgNV
BAMTKDdEMEEwMEFGMUU2QjdEMDJBNUI0M0Y0MzI2OUI1QUFGRTY1MDMxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FjLT1BIh88U2KShKglnL3UU6
AXYUcfogcJAS3C8fPN6KThFJ6126owvaKZkqZ64RrLKgMntz8GNpZlinf46x4k1f
C77GN0ayKB+Wsn0WjjZFxM89P52ysfY7K+CuW65Zs0MVjgG6bcdHeRA3/0wDeZ3Z
mNmuII08zoX+N36zWEYyH2xr12dsTzFDHaTofPttTKdLnQQ/XNwYgCvFWbyHk+ya
4YYhBxVXQ6GGQfwtviRnmskaH6nJzRImmS+2oha4cj07qgkmEKAnDi+q32WyW9f6
jUddBm2s8IGA1ClvYO9tJ9OCWNftlbzmzdDs43ewWFOD//1Xpj3+oIsjBJHHAgMB
AAGjggMlMIIDITAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9CgCvHmt9AqW0
P0Mmm1qv5lAxIDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9TZEdDejFBNEZqZ0p3MWdRNzU5MkdBMjViS29XU1AyY1Z0
S0VCalhzZHR3LzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9TZEdDejFBNEZqZ0p3MWdRNzU5MkdBMjViS29XU1AyY1Z0
S0VCalhzZHR3LzAvN0QwQTAwQUYxRTZCN0QwMkE1QjQzRjQzMjY5QjVBQUZFNjUw
MzEyMC5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQChP+YAwQCp/lAAwQCqMQE
MA0EAgACMAcDBQAoBCCwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJPDANBgkq
hkiG9w0BAQsFAAOCAQEAU+k22PFWVtmtSxV4Wt+OH1Y32o+aemhNHCf5dxjqsakh
GB+1AyL991LYgtllbDh4vTimFUCL2/XqJMO6IgQE76dlvIqDCThHUyDBDMAEKzfC
Yqw6bjEQyTqxiLQTd0/vzQPLWPj8mR++ZLZWoF6A//YPT5I1B9TLCwBPyR2qXNPb
66kF14IXHxheIsmbm8OZHwFeGSeKZLHpj5cTc5EW+Cr4YaxucckTUouhbjh6R8w6
BnfpFyrd4tcPCHIX+qY5NyWEqDlhdO2ySl5+DJG3VOsnPHx+1jDC7KL5sMPiAn+6
daQFfAqEBc+zGL/PGBdLNYOQNncE6V/M3nTu1bH4Zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org