Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7D8A4804D9A0DD89D386EE4D8A843DBF0DAA4BA1.cer
File:                     7D8A4804D9A0DD89D386EE4D8A843DBF0DAA4BA1.cer (raw, json)
Hash identifier:          kLyeQxZJwN0fQi3opDJRFXkMAAkCk9aqc/eVG51RyQA=
Subject key identifier:   7D:8A:48:04:D9:A0:DD:89:D3:86:EE:4D:8A:84:3D:BF:0D:AA:4B:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       104497E0237699393ED2E65201B8C73338CFF8BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/7D8A4804D9A0DD89D386EE4D8A843DBF0DAA4BA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 11:54:57 +0000
Certificate not after:    Thu 18 Apr 2024 11:59:57 +0000
Subordinate resources:    AS: 266563
                          IP: 45.6.196.0/22
                          IP: 2804:3dec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:44:97:e0:23:76:99:39:3e:d2:e6:52:01:b8:c7:33:38:cf:f8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 11:54:57 2023 GMT
            Not After : Apr 18 11:59:57 2024 GMT
        Subject: CN=7D8A4804D9A0DD89D386EE4D8A843DBF0DAA4BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a3:3f:6b:20:0f:ab:79:3f:55:cf:ca:9e:bc:
                    45:c0:3d:0f:17:7c:7e:4a:21:5d:b1:5d:94:6a:65:
                    50:93:6e:63:f2:3b:06:1a:c4:bc:e7:56:a0:b6:3d:
                    32:b9:03:32:02:28:0c:f9:e7:20:2d:d0:d8:45:1a:
                    06:a3:95:de:b8:19:bd:58:b1:4d:ea:49:d6:89:c9:
                    21:2e:81:99:b1:8b:d6:1d:31:63:e6:85:72:d7:31:
                    82:e3:5f:73:5a:3f:8b:45:3d:b4:8d:87:e7:90:6f:
                    33:31:90:64:1c:b4:5b:2a:36:8d:e0:10:38:06:ec:
                    03:3c:b7:0b:91:99:bf:50:8a:84:a4:8e:da:50:bb:
                    12:79:62:f9:ab:a8:94:62:79:f6:b2:6a:6c:99:d8:
                    23:60:2f:60:ff:ff:ab:a1:41:ad:ac:15:1a:19:ab:
                    20:cb:80:7e:8a:7a:45:df:a8:09:18:43:b6:57:9c:
                    7c:da:fa:aa:7b:a8:df:6f:c9:a5:b5:1b:94:65:f7:
                    64:de:a6:5e:19:dd:14:fd:b8:bb:7c:f2:5c:7d:21:
                    b6:5c:17:bb:62:11:27:16:af:a1:84:6d:95:65:11:
                    32:be:b2:d9:d9:7e:f2:b4:92:aa:68:b7:ce:e0:54:
                    b8:a0:68:97:cf:71:b2:54:2a:81:2d:bb:f5:ad:e7:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:8A:48:04:D9:A0:DD:89:D3:86:EE:4D:8A:84:3D:BF:0D:AA:4B:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/7D8A4804D9A0DD89D386EE4D8A843DBF0DAA4BA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.196.0/22
                IPv6:
                  2804:3dec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266563

    Signature Algorithm: sha256WithRSAEncryption
         40:78:45:6b:4c:92:12:64:8c:33:64:b1:61:51:b5:14:1a:ad:
         de:b7:c7:83:9a:b5:cb:a5:81:82:f0:f8:70:ba:33:95:17:c5:
         d3:2c:55:51:7d:52:73:b3:84:22:2f:5b:60:7f:32:db:43:03:
         08:83:13:ff:0e:95:84:dc:e3:49:71:48:64:03:83:c0:88:90:
         d6:00:3e:20:19:c8:19:e2:12:af:1d:a1:c2:cd:4b:d1:71:13:
         0d:6a:be:ad:67:3d:76:43:0c:ee:34:8c:0b:b1:e4:0b:75:87:
         30:f2:67:02:86:39:cf:c1:55:df:28:cb:44:d6:d5:09:cf:e5:
         d2:25:eb:3d:65:18:f5:e8:6b:a0:29:32:0d:9f:c0:6a:47:7b:
         8d:cc:55:18:60:98:cd:42:38:ba:85:6f:ba:86:8e:79:70:80:
         c4:da:ca:b6:21:67:8a:88:9a:36:a9:b4:0f:b3:26:60:65:2c:
         aa:1f:c5:d5:17:4e:cb:19:84:24:d6:1e:29:76:bc:95:6d:e3:
         e1:f7:b8:60:f9:ad:e5:ac:fd:c0:fa:bc:43:c8:ee:0c:2f:a3:
         61:e3:4d:71:30:b5:f8:59:03:44:b9:e9:77:72:26:ca:71:e6:
         09:c5:3a:7b:cb:13:40:f8:1b:67:8b:74:09:ed:17:10:cf:76:
         a9:e8:29:83
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUEESX4CN2mTk+0uZSAbjHMzjP+LowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MjAxMTU0NTdaFw0yNDA0MTgxMTU5NTdaMDMxMTAvBgNV
BAMTKDdEOEE0ODA0RDlBMEREODlEMzg2RUU0RDhBODQzREJGMERBQTRCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnoz9rIA+reT9Vz8qevEXAPQ8X
fH5KIV2xXZRqZVCTbmPyOwYaxLznVqC2PTK5AzICKAz55yAt0NhFGgajld64Gb1Y
sU3qSdaJySEugZmxi9YdMWPmhXLXMYLjX3NaP4tFPbSNh+eQbzMxkGQctFsqNo3g
EDgG7AM8twuRmb9QioSkjtpQuxJ5YvmrqJRiefayamyZ2CNgL2D//6uhQa2sFRoZ
qyDLgH6KekXfqAkYQ7ZXnHza+qp7qN9vyaW1G5Rl92Tepl4Z3RT9uLt88lx9IbZc
F7tiEScWr6GEbZVlETK+stnZfvK0kqpot87gVLigaJfPcbJUKoEtu/Wt5wapAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9ikgE2aDdidOG
7k2KhD2/DapLoTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81cWJpVDZSTXA5dGhDbjFHb2ZVYVBxaEw3U3dWWnhVNlhW
NUdZdU45czhCby8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81cWJpVDZSTXA5dGhDbjFHb2ZVYVBxaEw3U3dWWnhVNlhW
NUdZdU45czhCby8wLzdEOEE0ODA0RDlBMEREODlEMzg2RUU0RDhBODQzREJGMERB
QTRCQTEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0GxDANBAIAAjAHAwUA
KAQ97DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEUMwDQYJKoZIhvcNAQELBQAD
ggEBAEB4RWtMkhJkjDNksWFRtRQard63x4OatculgYLw+HC6M5UXxdMsVVF9UnOz
hCIvW2B/MttDAwiDE/8OlYTc40lxSGQDg8CIkNYAPiAZyBniEq8docLNS9FxEw1q
vq1nPXZDDO40jAux5At1hzDyZwKGOc/BVd8oy0TW1QnP5dIl6z1lGPXoa6ApMg2f
wGpHe43MVRhgmM1COLqFb7qGjnlwgMTayrYhZ4qImjaptA+zJmBlLKofxdUXTssZ
hCTWHil2vJVt4+H3uGD5reWs/cD6vEPI7gwvo2HjTXEwtfhZA0S56XdyJspx5gnF
OnvLE0D4G2eLdAntFxDPdqnoKYM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org