Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/81698DD1397818EFC3381DF24DE22A66396A68A9.cer
File:                     81698DD1397818EFC3381DF24DE22A66396A68A9.cer (raw, json)
Hash identifier:          eZHtssNLNIhNjIbSKoZBzpCz7hRLbljrh/MEr3cfMCk=
Subject key identifier:   81:69:8D:D1:39:78:18:EF:C3:38:1D:F2:4D:E2:2A:66:39:6A:68:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C878E7D11AD4539AD3C0ABCAFBDB3D0CAC339D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/81698DD1397818EFC3381DF24DE22A66396A68A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 12:00:33 +0000
Certificate not after:    Fri 24 Jan 2025 12:05:33 +0000
Subordinate resources:    AS: 262979
                          IP: 131.255.208.0/22
                          IP: 138.186.232.0/22
                          IP: 168.197.64.0/22
                          IP: 186.226.48.0/21
                          IP: 2804:9a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:87:8e:7d:11:ad:45:39:ad:3c:0a:bc:af:bd:b3:d0:ca:c3:39:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 12:00:33 2024 GMT
            Not After : Jan 24 12:05:33 2025 GMT
        Subject: CN=81698DD1397818EFC3381DF24DE22A66396A68A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:05:5d:2f:19:c0:67:f9:1f:49:13:7d:37:
                    a0:32:2b:69:ff:66:3d:e1:f7:30:24:1e:9d:7f:d0:
                    90:57:db:e5:ad:f2:57:a8:58:a8:6f:37:bd:3b:e0:
                    f7:81:06:54:d2:1b:0b:33:3d:00:0b:16:98:98:44:
                    ac:6f:d1:85:05:b5:24:7a:93:ca:86:81:17:93:6e:
                    04:7b:87:93:02:c9:fc:ac:b3:94:c5:f9:42:d9:91:
                    8e:07:5d:87:9e:52:d9:3f:38:8f:a6:ae:96:f1:47:
                    91:e8:a8:15:37:d7:08:19:3f:21:b0:8f:ca:42:66:
                    2c:39:6f:49:ec:77:93:2a:d3:74:35:d3:72:57:31:
                    a1:91:63:80:bf:2b:b8:dd:fc:94:8a:14:36:ff:78:
                    11:0d:c2:39:b0:dd:52:7f:fe:72:c7:20:ee:0b:ff:
                    16:11:87:c6:ab:ad:00:b7:4f:86:e8:f9:ca:82:23:
                    a1:08:c3:e3:ee:85:82:02:a6:8b:ab:5d:8f:03:1d:
                    f5:76:a9:b8:a8:53:f3:82:2c:59:d0:84:39:39:67:
                    6d:3d:49:72:63:aa:3c:3f:7a:eb:25:07:1c:3d:a7:
                    e9:80:b0:55:74:68:8c:0b:3f:32:d2:1e:40:d2:38:
                    84:7d:74:75:28:28:d7:fa:d9:9d:e4:2b:67:0c:2f:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:69:8D:D1:39:78:18:EF:C3:38:1D:F2:4D:E2:2A:66:39:6A:68:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/81698DD1397818EFC3381DF24DE22A66396A68A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.208.0/22
                  138.186.232.0/22
                  168.197.64.0/22
                  186.226.48.0/21
                IPv6:
                  2804:9a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262979

    Signature Algorithm: sha256WithRSAEncryption
         3a:bd:7a:c8:75:e3:2b:0f:3f:bc:4b:a6:5d:e4:d2:a5:35:82:
         f5:88:5e:af:94:25:74:ed:ba:b0:7b:98:41:43:6c:e5:f2:83:
         1e:eb:9a:25:a8:c6:cd:3d:4f:e0:41:67:7e:33:91:6d:88:18:
         c5:19:f1:7d:e6:96:09:bb:25:a8:3e:a1:30:37:0c:d0:57:89:
         f9:68:dd:78:34:45:25:82:5a:ef:34:83:89:62:8e:c8:b0:7f:
         6b:81:04:d0:05:f0:ca:ec:1a:77:67:32:5d:15:29:5f:ea:6c:
         83:ae:26:0a:5c:60:e0:82:57:89:ac:cb:4e:f4:63:3a:5e:da:
         f0:b1:97:74:d1:63:5c:55:c5:ef:cd:21:74:67:19:5c:2f:9b:
         7a:97:b5:a2:21:50:1c:bd:f4:c0:b9:8b:bf:90:68:42:fc:e7:
         36:49:3a:40:c1:9b:0e:40:45:8a:4a:cc:d1:9a:a7:1c:67:0e:
         cb:7d:73:9b:61:09:e1:0d:25:0a:65:95:2e:50:e4:54:35:ca:
         a5:e6:41:e6:77:11:00:c0:97:f4:dd:c6:d7:6a:93:42:fb:c2:
         1f:0f:2a:47:6a:d0:41:26:4e:bd:41:d4:03:c8:ab:46:0b:dd:
         86:c8:f9:1d:4e:1a:be:fb:48:63:30:26:37:65:43:b0:2d:cc:
         f9:28:6d:ec
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUPIeOfRGtRTmtPAq8r72z0MrDOdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjYxMjAwMzNaFw0yNTAxMjQxMjA1MzNaMDMxMTAvBgNV
BAMTKDgxNjk4REQxMzk3ODE4RUZDMzM4MURGMjRERTIyQTY2Mzk2QTY4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRIAVdLxnAZ/kfSRN9N6AyK2n/
Zj3h9zAkHp1/0JBX2+Wt8leoWKhvN7074PeBBlTSGwszPQALFpiYRKxv0YUFtSR6
k8qGgReTbgR7h5MCyfyss5TF+ULZkY4HXYeeUtk/OI+mrpbxR5HoqBU31wgZPyGw
j8pCZiw5b0nsd5Mq03Q103JXMaGRY4C/K7jd/JSKFDb/eBENwjmw3VJ//nLHIO4L
/xYRh8arrQC3T4bo+cqCI6EIw+PuhYICpourXY8DHfV2qbioU/OCLFnQhDk5Z209
SXJjqjw/euslBxw9p+mAsFV0aIwLPzLSHkDSOIR9dHUoKNf62Z3kK2cML5YfAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBaY3ROXgY78M4
HfJN4ipmOWpoqTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CVmVzTUc4OVNySHpLOHl5c2s2TUVqVGhzZWVHYUZFUXVU
VEROQ0ZqbThIOC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQlZlc01HODlTckh6Szh5eXNrNk1FalRoc2VlR2FGRVF1
VFRETkNGam04SDgvMC84MTY5OEREMTM5NzgxOEVGQzMzODFERjI0REUyMkE2NjM5
NkE2OEE5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKD/9ADBAKKuugDBAKo
xUADBAO64jAwDQQCAAIwBwMFACgECagwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BANDMA0GCSqGSIb3DQEBCwUAA4IBAQA6vXrIdeMrDz+8S6Zd5NKlNYL1iF6vlCV0
7bqwe5hBQ2zl8oMe65olqMbNPU/gQWd+M5FtiBjFGfF95pYJuyWoPqEwNwzQV4n5
aN14NEUlglrvNIOJYo7IsH9rgQTQBfDK7Bp3ZzJdFSlf6myDriYKXGDggleJrMtO
9GM6XtrwsZd00WNcVcXvzSF0ZxlcL5t6l7WiIVAcvfTAuYu/kGhC/Oc2STpAwZsO
QEWKSszRmqccZw7LfXObYQnhDSUKZZUuUORUNcql5kHmdxEAwJf03cbXapNC+8If
DypHatBBJk69QdQDyKtGC92GyPkdThq++0hjMCY3ZUOwLcz5KG3s
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org