Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/80A84A91D7829D181BA98D210D118AEA94C1B232.cer
File:                     80A84A91D7829D181BA98D210D118AEA94C1B232.cer (raw, json)
Hash identifier:          6Yq2ebGmVuehDgQJL3GobWu30eGGlT82h8YKZgoLx2k=
Subject key identifier:   80:A8:4A:91:D7:82:9D:18:1B:A9:8D:21:0D:11:8A:EA:94:C1:B2:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22B0BF8BBE9771752B0DE4A21C4F288001FE703E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/80A84A91D7829D181BA98D210D118AEA94C1B232.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 17:45:55 +0000
Certificate not after:    Tue 19 Nov 2024 17:50:55 +0000
Subordinate resources:    AS: 271335
                          IP: 207.248.20.0/22
                          IP: 2804:79e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b0:bf:8b:be:97:71:75:2b:0d:e4:a2:1c:4f:28:80:01:fe:70:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 17:45:55 2023 GMT
            Not After : Nov 19 17:50:55 2024 GMT
        Subject: CN=80A84A91D7829D181BA98D210D118AEA94C1B232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:88:9a:15:83:41:8d:f3:0b:53:8a:e2:42:
                    53:a1:c3:36:33:fb:d4:6b:b9:69:b9:f0:fb:bc:24:
                    be:53:04:50:74:f5:6c:aa:89:9d:c1:21:b7:b1:54:
                    fd:e1:a3:c7:2b:41:1a:e7:b8:ea:1d:91:cf:95:6b:
                    be:9a:3e:57:06:87:12:d8:3e:28:3a:82:c3:60:50:
                    21:53:00:27:ec:15:bd:ae:c2:08:61:d6:40:87:f3:
                    98:5b:c9:92:10:78:d6:fd:5a:6e:af:87:a0:6a:6c:
                    7f:e2:36:d1:7c:af:64:e2:57:cb:a2:bb:85:1a:62:
                    3d:95:c6:bf:40:2e:85:86:92:e4:49:f2:60:c9:e1:
                    88:3e:03:5f:3b:45:a7:d8:4d:c1:61:df:80:d0:d3:
                    79:83:f4:3b:8d:80:eb:62:72:31:bd:7b:f0:27:55:
                    0d:7b:06:8b:f6:57:84:5a:91:d0:4a:16:1d:91:29:
                    e3:66:31:4f:d6:b7:84:20:e6:ef:1e:3a:c8:92:56:
                    27:94:e2:4b:66:95:08:69:e7:0a:8a:4b:55:66:9a:
                    9c:c3:66:6f:48:46:52:f9:18:52:d7:03:15:0b:9c:
                    a4:d2:af:a4:dd:a7:ec:ee:3b:93:bd:d9:33:96:05:
                    a6:1e:54:38:c4:76:1b:0b:4f:49:72:97:10:1e:5e:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:A8:4A:91:D7:82:9D:18:1B:A9:8D:21:0D:11:8A:EA:94:C1:B2:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/80A84A91D7829D181BA98D210D118AEA94C1B232.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22
                IPv6:
                  2804:79e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271335

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:6f:06:2a:70:b3:b8:0c:62:0d:12:2c:1f:71:22:a5:2f:
         52:0e:09:d6:f1:65:32:27:d1:cb:40:d7:91:80:cb:9d:36:4b:
         3e:b1:f5:8c:02:41:bd:07:46:f1:d3:31:e5:77:1e:a2:85:05:
         ba:32:86:27:c0:bb:f4:cf:db:ad:a1:3f:ec:e8:b0:b8:e5:cb:
         ae:49:2b:60:62:2a:d1:9d:49:54:5e:53:e5:30:6d:4c:f7:58:
         7c:0e:58:e1:b0:8e:1b:ae:4a:ee:a1:12:f2:3b:a7:6a:70:68:
         37:66:5f:df:dc:12:7b:b7:9c:16:10:50:c4:de:2f:17:b2:15:
         b9:24:92:4f:dd:7b:12:9a:d9:e4:5f:a8:1a:0b:6f:7f:b4:ed:
         fa:73:fd:a9:1a:31:35:a0:13:0f:4e:c6:ec:69:40:1c:31:3f:
         20:a2:7f:86:a4:d1:c7:6c:46:26:1d:b5:cc:23:c4:8c:ad:70:
         c9:9f:3c:1b:b2:5a:c9:64:93:57:6d:3b:8e:02:09:45:e4:57:
         36:5b:a7:31:20:50:d2:6f:f9:58:16:21:7a:a6:99:a9:05:db:
         c4:3d:da:94:e9:91:24:7f:bc:c7:68:4e:d8:fa:74:5d:66:f4:
         d4:e7:ed:e0:89:05:41:03:77:d7:44:69:f5:9f:39:3a:cc:ec:
         77:e2:ab:aa
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUIrC/i76XcXUrDeSiHE8ogAH+cD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjExNzQ1NTVaFw0yNDExMTkxNzUwNTVaMDMxMTAvBgNV
BAMTKDgwQTg0QTkxRDc4MjlEMTgxQkE5OEQyMTBEMTE4QUVBOTRDMUIyMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aoiaFYNBjfMLU4riQlOhwzYz
+9RruWm58Pu8JL5TBFB09WyqiZ3BIbexVP3ho8crQRrnuOodkc+Va76aPlcGhxLY
Pig6gsNgUCFTACfsFb2uwghh1kCH85hbyZIQeNb9Wm6vh6BqbH/iNtF8r2TiV8ui
u4UaYj2Vxr9ALoWGkuRJ8mDJ4Yg+A187RafYTcFh34DQ03mD9DuNgOticjG9e/An
VQ17Bov2V4RakdBKFh2RKeNmMU/Wt4Qg5u8eOsiSVieU4ktmlQhp5wqKS1VmmpzD
Zm9IRlL5GFLXAxULnKTSr6Tdp+zuO5O92TOWBaYeVDjEdhsLT0lylxAeXk1JAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAqEqR14KdGBup
jSENEYrqlMGyMjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GR3BjWHBDVkNGenZNUTh1Sm5WamprWXpSaHZ5am5OMnNW
NTFXMUhYRW9Hcy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRkdwY1hwQ1ZDRnp2TVE4dUpuVmpqa1l6Umh2eWpuTjJz
VjUxVzFIWEVvR3MvMC84MEE4NEE5MUQ3ODI5RDE4MUJBOThEMjEwRDExOEFFQTk0
QzFCMjMyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALP+BQwDQQCAAIwBwMF
ACgEeegwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCPnMA0GCSqGSIb3DQEBCwUA
A4IBAQAq/m8GKnCzuAxiDRIsH3EipS9SDgnW8WUyJ9HLQNeRgMudNks+sfWMAkG9
B0bx0zHldx6ihQW6MoYnwLv0z9utoT/s6LC45cuuSStgYirRnUlUXlPlMG1M91h8
DljhsI4brkruoRLyO6dqcGg3Zl/f3BJ7t5wWEFDE3i8XshW5JJJP3XsSmtnkX6ga
C29/tO36c/2pGjE1oBMPTsbsaUAcMT8gon+GpNHHbEYmHbXMI8SMrXDJnzwbslrJ
ZJNXbTuOAglF5Fc2W6cxIFDSb/lYFiF6ppmpBdvEPdqU6ZEkf7zHaE7Y+nRdZvTU
5+3giQVBA3fXRGn1nzk6zOx34quq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org