Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.cer
File:                     8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.cer (raw, json)
Hash identifier:          RRPD8pCZI9pYTncbpLgcgYH7SnaDjVgvHL1wWNIYGXU=
Subject key identifier:   85:68:BD:50:CD:17:BE:A4:DC:DF:07:B7:C0:77:C2:C6:F9:54:C8:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16BC0947B7D6944045932AF6E7C5A6ACB76C0A4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Dec 2021 18:28:05 +0000
Certificate not after:    Tue 06 Dec 2022 18:33:05 +0000
Subordinate resources:    AS: 52948
                          IP: 177.11.112.0/21
                          IP: 2804:2a74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bc:09:47:b7:d6:94:40:45:93:2a:f6:e7:c5:a6:ac:b7:6c:0a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 18:28:05 2021 GMT
            Not After : Dec  6 18:33:05 2022 GMT
        Subject: CN=8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:fa:34:a8:f6:71:25:70:09:46:5b:d4:04:
                    b2:a6:e3:b1:8f:c2:c6:59:7f:92:b4:2b:69:f5:f9:
                    42:66:68:ec:fd:ed:57:cf:49:dd:8e:d5:87:a7:d2:
                    f7:44:2c:42:a3:d1:45:db:e0:26:bc:40:fa:3d:fb:
                    33:68:80:f5:d6:01:5b:5c:f9:61:12:b5:96:3f:12:
                    25:45:96:c0:b9:b2:fe:6b:07:14:9d:1b:da:97:3a:
                    ea:e8:fc:63:29:13:a5:5e:75:e4:bc:aa:89:f3:7f:
                    57:3a:45:32:5c:22:72:d8:a1:7f:fc:a7:78:4e:f5:
                    94:b2:99:7b:06:0f:aa:22:5f:7e:d4:cf:0f:67:08:
                    14:ac:ae:7c:db:9b:44:a9:c8:2d:17:99:2f:00:9a:
                    3e:cd:b9:c4:93:0f:a5:d9:8f:cd:6b:d9:d4:53:f1:
                    78:bf:db:23:bd:57:4c:56:4a:95:9f:ca:01:c9:9f:
                    1d:cd:d6:1f:27:ca:74:aa:a0:1d:8a:1b:4c:72:7f:
                    0b:83:a8:45:da:73:bb:41:60:4c:f3:dd:a0:f0:2b:
                    84:a7:7f:e0:db:33:de:cf:02:9d:9d:90:95:f6:97:
                    c1:8c:c3:83:4c:ee:bd:92:22:1a:d0:b8:ec:70:0a:
                    89:a1:23:b3:8c:be:66:5a:af:3f:ba:1a:28:72:0a:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:68:BD:50:CD:17:BE:A4:DC:DF:07:B7:C0:77:C2:C6:F9:54:C8:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.112.0/21
                IPv6:
                  2804:2a74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52948

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:d6:d9:26:91:14:16:55:a8:bd:78:b4:a3:59:9c:7a:a7:
         1b:2a:f2:41:d8:b3:98:68:88:26:c7:22:e0:85:82:31:dd:75:
         5c:bc:d1:89:a9:27:69:b8:df:d4:8e:28:23:85:57:09:1a:1b:
         a1:b1:6f:2e:2e:3f:a5:c2:15:88:c4:bf:a4:22:7a:0c:21:4e:
         87:cf:9b:c9:3d:37:cf:e9:78:45:d2:96:3d:cf:a1:be:dc:5a:
         52:4f:7c:52:67:6a:ee:fc:b1:30:7e:a3:77:fc:df:3d:41:c9:
         7e:dc:b4:7e:1d:3a:d8:a9:3d:cd:bb:17:cc:eb:7c:2a:b1:b2:
         c4:d1:ac:a7:ad:66:73:90:00:a7:b0:d4:b5:e6:ae:f4:c6:64:
         d4:65:25:0b:46:47:a5:c6:fd:c2:eb:00:69:51:29:71:ef:fa:
         d4:11:6e:88:dc:f2:e3:26:de:fe:b5:ca:66:ab:ec:46:d8:ff:
         f0:50:4c:d4:60:b3:bd:7e:7a:43:b6:54:56:70:ab:9e:e4:3f:
         e6:c3:8b:f2:24:4f:3b:a9:37:37:b9:54:58:a6:a8:97:8a:e0:
         7d:6d:7c:14:0c:71:3b:95:38:a7:68:cc:89:97:cd:e9:35:36:
         e8:5e:10:17:31:6a:7d:88:e3:b4:2a:ca:6a:48:15:61:36:3b:
         62:c4:fb:35
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFrwJR7fWlEBFkyr258WmrLdsCk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEyMDcxODI4MDVaFw0yMjEyMDYxODMzMDVaMDMxMTAvBgNV
BAMTKDg1NjhCRDUwQ0QxN0JFQTREQ0RGMDdCN0MwNzdDMkM2Rjk1NEM4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABvo0qPZxJXAJRlvUBLKm47GP
wsZZf5K0K2n1+UJmaOz97VfPSd2O1Yen0vdELEKj0UXb4Ca8QPo9+zNogPXWAVtc
+WEStZY/EiVFlsC5sv5rBxSdG9qXOuro/GMpE6VedeS8qonzf1c6RTJcInLYoX/8
p3hO9ZSymXsGD6oiX37Uzw9nCBSsrnzbm0SpyC0XmS8Amj7NucSTD6XZj81r2dRT
8Xi/2yO9V0xWSpWfygHJnx3N1h8nynSqoB2KG0xyfwuDqEXac7tBYEzz3aDwK4Sn
f+DbM97PAp2dkJX2l8GMw4NM7r2SIhrQuOxwComhI7OMvmZarz+6GihyCiIBAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFaL1QzRe+pNzf
B7fAd8LG+VTI1zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EZEdacm1YR3FEamlLNWh2VFZaNHFFYWFycmkyUU1LOGhM
OHZGeTc0S1NaUC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EZEdacm1YR3FEamlLNWh2VFZaNHFFYWFycmkyUU1LOGhM
OHZGeTc0S1NaUC8wLzg1NjhCRDUwQ0QxN0JFQTREQ0RGMDdCN0MwNzdDMkM2Rjk1
NEM4RDcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7ELcDANBAIAAjAHAwUA
KAQqdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAztQwDQYJKoZIhvcNAQELBQAD
ggEBAJCo1tkmkRQWVai9eLSjWZx6pxsq8kHYs5hoiCbHIuCFgjHddVy80YmpJ2m4
39SOKCOFVwkaG6Gxby4uP6XCFYjEv6QiegwhTofPm8k9N8/peEXSlj3Pob7cWlJP
fFJnau78sTB+o3f83z1ByX7ctH4dOtipPc27F8zrfCqxssTRrKetZnOQAKew1LXm
rvTGZNRlJQtGR6XG/cLrAGlRKXHv+tQRbojc8uMm3v61ymar7EbY//BQTNRgs71+
ekO2VFZwq57kP+bDi/IkTzupNze5VFimqJeK4H1tfBQMcTuVOKdozImXzek1Nuhe
EBcxan2I47QqympIFWE2O2LE+zU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org