Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.cer
File:                     838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.cer (raw, json)
Hash identifier:          6VjH63LYed1lJsVZEupvADkZ5eeOUTgNrkX0prs6KV4=
Subject key identifier:   83:8E:8C:7D:F3:3C:0F:10:70:BE:1B:C0:C0:E9:62:93:4C:64:FA:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BB0DCBD77658102C17AD63AD310C03CF6D4C8E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:25 +0000
Certificate not after:    Tue 21 May 2024 09:25:25 +0000
Subordinate resources:    AS: 271548
                          IP: 181.174.212.0/22
                          IP: 2804:7d3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b0:dc:bd:77:65:81:02:c1:7a:d6:3a:d3:10:c0:3c:f6:d4:c8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:25 2023 GMT
            Not After : May 21 09:25:25 2024 GMT
        Subject: CN=838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:f2:5c:21:6a:17:e7:43:0a:b6:98:63:dd:
                    19:d4:11:b5:f3:27:3e:0f:7f:fd:9e:2c:4e:b6:97:
                    0e:fa:be:4f:fc:82:64:07:63:eb:2e:4d:a0:d7:ab:
                    1b:13:5d:db:0e:ee:8b:64:36:a7:c8:c8:75:eb:f0:
                    94:65:96:98:58:3d:ae:f6:24:6b:3e:0d:f4:84:d5:
                    ba:af:6d:b6:2f:11:cb:23:44:f0:5b:1b:0c:97:1f:
                    16:20:d2:89:71:10:6f:a4:17:c5:77:85:9b:c6:df:
                    e9:9f:a5:80:21:14:02:8b:49:50:77:0e:21:76:5c:
                    8b:3e:26:db:7f:05:90:7d:95:6c:42:1c:fc:b5:0b:
                    32:15:2a:d1:37:ae:f1:0f:83:d2:ec:1b:52:f0:4b:
                    a9:9b:0b:97:16:b2:21:87:e9:a9:fc:3b:ff:af:a6:
                    28:db:f4:b9:0d:4d:37:0b:fb:c2:61:75:a8:ec:d7:
                    0c:56:2b:a9:3c:10:cd:6e:ca:dc:d0:fb:e1:f4:d6:
                    e2:9e:9b:61:5b:db:c0:31:31:b2:d1:1e:56:41:1e:
                    cd:27:0d:2f:0e:65:92:d7:76:bf:2d:2e:c3:a8:5a:
                    19:08:30:a4:00:15:55:f4:b9:be:89:9e:01:1c:a1:
                    b6:82:9f:ed:f9:3a:83:8f:11:0b:c3:5f:13:9d:a6:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:8E:8C:7D:F3:3C:0F:10:70:BE:1B:C0:C0:E9:62:93:4C:64:FA:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.212.0/22
                IPv6:
                  2804:7d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271548

    Signature Algorithm: sha256WithRSAEncryption
         54:47:5f:49:e3:53:5e:5f:67:58:19:8f:f5:9e:05:0f:9b:6a:
         05:d2:1b:3a:0b:65:17:3d:85:5b:21:f1:72:79:f5:28:a7:f3:
         d1:73:eb:90:88:c8:1f:57:0a:75:82:2c:1e:d8:6a:b5:2e:9a:
         36:c4:48:b6:df:2d:f6:da:23:6f:2f:46:ef:eb:75:03:bc:53:
         4c:89:cc:33:b3:8d:8d:e5:ab:0d:6d:8f:9d:9a:1d:3d:fe:e4:
         3f:cf:8f:4b:dd:8b:8f:1e:3e:70:29:36:db:60:fd:4d:1d:ec:
         a1:ed:37:e0:2e:6e:f2:af:b2:56:ab:64:86:91:60:f9:c1:0f:
         1e:56:ef:3b:57:a7:fb:09:90:a2:91:70:cf:0b:c8:73:06:db:
         13:92:c3:18:ef:cf:50:a5:e9:36:80:11:ee:20:7c:c6:e8:66:
         38:d8:60:c7:49:ef:d9:c7:18:c4:64:06:06:09:02:40:fd:5e:
         6a:e5:1c:6f:4c:b6:7d:1f:4d:46:ee:b7:37:c7:39:eb:bf:6e:
         fb:1c:c8:03:43:74:2c:2d:4a:0d:02:05:55:1b:59:fa:b3:ee:
         dd:b6:f5:63:da:b5:2e:8f:4f:9a:2a:a6:ac:cd:80:15:07:a3:
         67:f4:75:e2:5f:23:ad:a9:26:85:43:cc:d4:ea:38:19:b2:2c:
         55:43:29:6f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUW7DcvXdlgQLBetY60xDAPPbUyOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjMwOTIwMjVaFw0yNDA1MjEwOTI1MjVaMDMxMTAvBgNV
BAMTKDgzOEU4QzdERjMzQzBGMTA3MEJFMUJDMEMwRTk2MjkzNEM2NEZBRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZaPJcIWoX50MKtphj3RnUEbXz
Jz4Pf/2eLE62lw76vk/8gmQHY+suTaDXqxsTXdsO7otkNqfIyHXr8JRllphYPa72
JGs+DfSE1bqvbbYvEcsjRPBbGwyXHxYg0olxEG+kF8V3hZvG3+mfpYAhFAKLSVB3
DiF2XIs+Jtt/BZB9lWxCHPy1CzIVKtE3rvEPg9LsG1LwS6mbC5cWsiGH6an8O/+v
pijb9LkNTTcL+8Jhdajs1wxWK6k8EM1uytzQ++H01uKem2Fb28AxMbLRHlZBHs0n
DS8OZZLXdr8tLsOoWhkIMKQAFVX0ub6JngEcobaCn+35OoOPEQvDXxOdpv19AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDjox98zwPEHC+
G8DA6WKTTGT6+DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DMVE1d3lpYmlnWXI5OTNGWFFMcVo2TENHS1Z1QzlEVzJS
VW5RWEp0SGRpSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQzFRNXd5aWJpZ1lyOTkzRlhRTHFaNkxDR0tWdUM5RFcy
UlVuUVhKdEhkaUovMC84MzhFOEM3REYzM0MwRjEwNzBCRTFCQzBDMEU5NjI5MzRD
NjRGQUY4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK1rtQwDQQCAAIwBwMF
ACgEfTwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCS8MA0GCSqGSIb3DQEBCwUA
A4IBAQBUR19J41NeX2dYGY/1ngUPm2oF0hs6C2UXPYVbIfFyefUop/PRc+uQiMgf
Vwp1giwe2Gq1Lpo2xEi23y322iNvL0bv63UDvFNMicwzs42N5asNbY+dmh09/uQ/
z49L3YuPHj5wKTbbYP1NHeyh7TfgLm7yr7JWq2SGkWD5wQ8eVu87V6f7CZCikXDP
C8hzBtsTksMY789Qpek2gBHuIHzG6GY42GDHSe/ZxxjEZAYGCQJA/V5q5RxvTLZ9
H01G7rc3xznrv277HMgDQ3QsLUoNAgVVG1n6s+7dtvVj2rUuj0+aKqaszYAVB6Nn
9HXiXyOtqSaFQ8zU6jgZsixVQylv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org