Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer
File:                     80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer (raw, json)
Hash identifier:          kkd2igsn6ERxog3O9z3ze3nCx+PyQJ3zMYmkQ+Z60/w=
Subject key identifier:   80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22AC2ED7FC79A296CC0218A2A19FAE12E25909CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 16:25:10 +0000
Certificate not after:    Fri 11 Oct 2024 16:30:10 +0000
Subordinate resources:    AS: 266966
                          IP: 45.226.132.0/22
                          IP: 201.148.160.0/22
                          IP: 2804:4610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ac:2e:d7:fc:79:a2:96:cc:02:18:a2:a1:9f:ae:12:e2:59:09:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 16:25:10 2023 GMT
            Not After : Oct 11 16:30:10 2024 GMT
        Subject: CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:ea:7a:84:e0:b7:cb:0b:cc:c5:4b:05:28:
                    d1:4f:2a:de:2e:04:9e:5e:79:62:7d:1d:f9:da:d5:
                    6f:d2:00:ed:3b:c0:63:05:f3:bb:84:5f:b0:19:b0:
                    11:3e:b5:3f:00:fd:7e:d8:96:94:0b:2c:62:c7:47:
                    3a:93:36:35:2e:36:a8:03:bd:ea:c2:9e:07:bf:bc:
                    04:7b:d5:a1:86:44:bf:9a:cb:03:52:4c:f8:c6:95:
                    d8:9b:54:de:d4:41:d7:5e:50:2d:a5:fb:bd:69:c4:
                    52:9b:94:73:0c:ac:82:5c:60:47:0e:05:bd:dc:a7:
                    2a:25:e0:4a:ad:4b:11:3c:9c:33:dd:d5:f0:aa:d1:
                    79:99:92:0b:e8:40:8d:9e:96:51:8b:24:0b:08:b6:
                    a0:38:ed:08:8f:43:35:03:4a:87:77:ba:e1:4d:03:
                    b7:56:32:41:a0:66:b7:e1:7d:f9:9a:7d:2c:d8:e8:
                    e8:96:9b:97:3f:df:8f:36:f7:ef:68:9b:9c:57:5a:
                    b9:34:5e:28:98:12:b4:04:b9:7c:f9:cf:ef:07:4f:
                    d3:59:5d:d0:3f:42:9e:cf:da:17:9e:f6:f1:6d:37:
                    e9:2a:06:d2:53:fe:7f:37:95:f0:c8:c8:09:60:e9:
                    88:cd:fa:04:51:2a:53:0a:89:65:74:a7:5d:46:70:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.132.0/22
                  201.148.160.0/22
                IPv6:
                  2804:4610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266966

    Signature Algorithm: sha256WithRSAEncryption
         32:91:0a:36:35:07:81:12:f0:66:f6:2c:24:cf:62:49:f8:cb:
         da:3d:94:3c:45:5e:7b:50:d4:c5:eb:0a:41:92:4b:90:a6:4e:
         07:54:d5:f4:1b:77:25:cf:fd:6a:2d:68:da:30:83:0a:ca:d7:
         91:4d:4f:f2:98:2f:be:13:d2:96:4e:5b:d1:f7:3b:9e:26:e1:
         05:7b:c2:ab:d3:08:05:e6:27:3c:33:31:c4:b1:c5:b4:43:fd:
         08:da:4a:c8:73:6e:d7:fe:84:66:4e:ee:29:7e:cc:cc:83:ca:
         f2:83:3f:17:84:5d:10:95:32:e4:4b:ac:d4:f6:f0:19:5d:ad:
         57:6a:80:af:bc:bd:0e:1f:b1:a3:87:a3:52:a9:45:33:b7:94:
         e8:31:6d:40:46:0a:7e:9c:f8:f1:f6:9a:5e:8c:5f:8c:0c:ff:
         e0:8f:18:71:f3:68:d9:68:49:12:44:4b:c9:eb:b6:5a:e7:48:
         28:12:c1:33:2b:81:8b:92:39:d7:d5:a9:4f:3c:9c:ff:bf:18:
         71:5e:e1:e0:ab:8a:8a:db:02:d1:ec:73:a1:9b:88:a3:95:84:
         08:4d:3e:bd:6f:69:34:17:90:70:71:94:41:e8:82:2b:32:5e:
         0c:2c:e2:5a:4d:61:a2:38:c3:21:74:28:35:5a:fa:9a:35:15:
         a1:26:ee:28
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUIqwu1/x5opbMAhiioZ+uEuJZCcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTMxNjI1MTBaFw0yNDEwMTExNjMwMTBaMDMxMTAvBgNV
BAMTKDgwQzI0MEZENjVCMzQ3NEU3QTgxRkVFM0Q3MkYwRkZGQzJCMDkxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZOp6hOC3ywvMxUsFKNFPKt4u
BJ5eeWJ9Hfna1W/SAO07wGMF87uEX7AZsBE+tT8A/X7YlpQLLGLHRzqTNjUuNqgD
verCnge/vAR71aGGRL+aywNSTPjGldibVN7UQddeUC2l+71pxFKblHMMrIJcYEcO
Bb3cpyol4EqtSxE8nDPd1fCq0XmZkgvoQI2ellGLJAsItqA47QiPQzUDSod3uuFN
A7dWMkGgZrfhffmafSzY6OiWm5c/34829+9om5xXWrk0XiiYErQEuXz5z+8HT9NZ
XdA/Qp7P2hee9vFtN+kqBtJT/n83lfDIyAlg6YjN+gRRKlMKiWV0p11GcEOTAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAwkD9ZbNHTnqB
/uPXLw//wrCRcDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DVWJTZldHUXR0Q0dZeHJnWXEyOFI2bXF0OW5TZWs0cHVY
cWlBUWZ5SlNUci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DVWJTZldHUXR0Q0dZeHJnWXEyOFI2bXF0OW5TZWs0cHVY
cWlBUWZ5SlNUci8wLzgwQzI0MEZENjVCMzQ3NEU3QTgxRkVFM0Q3MkYwRkZGQzJC
MDkxNzAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi3ihAMEAsmUoDANBAIA
AjAHAwUAKARGEDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEtYwDQYJKoZIhvcN
AQELBQADggEBADKRCjY1B4ES8Gb2LCTPYkn4y9o9lDxFXntQ1MXrCkGSS5CmTgdU
1fQbdyXP/WotaNowgwrK15FNT/KYL74T0pZOW9H3O54m4QV7wqvTCAXmJzwzMcSx
xbRD/QjaSshzbtf+hGZO7il+zMyDyvKDPxeEXRCVMuRLrNT28BldrVdqgK+8vQ4f
saOHo1KpRTO3lOgxbUBGCn6c+PH2ml6MX4wM/+CPGHHzaNloSRJES8nrtlrnSCgS
wTMrgYuSOdfVqU88nP+/GHFe4eCriorbAtHsc6GbiKOVhAhNPr1vaTQXkHBxlEHo
gisyXgws4lpNYaI4wyF0KDVa+po1FaEm7ig=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org