Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/867DBAB0F22681F84B3D63871811789CF5D3C83D.cer
File:                     867DBAB0F22681F84B3D63871811789CF5D3C83D.cer (raw, json)
Hash identifier:          +zFfc9QhOSx5UHyZu5dasN1E3WaPOY4rRFUCqYMkcuQ=
Subject key identifier:   86:7D:BA:B0:F2:26:81:F8:4B:3D:63:87:18:11:78:9C:F5:D3:C8:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       309A032A0313065A71C3C2F815D2D8EB4DBA7DA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/867DBAB0F22681F84B3D63871811789CF5D3C83D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Aug 2021 21:14:11 +0000
Certificate not after:    Thu 25 Aug 2022 21:19:11 +0000
Subordinate resources:    AS: 266253
                          IP: 190.123.192.0/22
                          IP: 2804:3d18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9a:03:2a:03:13:06:5a:71:c3:c2:f8:15:d2:d8:eb:4d:ba:7d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 26 21:14:11 2021 GMT
            Not After : Aug 25 21:19:11 2022 GMT
        Subject: CN=867DBAB0F22681F84B3D63871811789CF5D3C83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:ab:e9:f0:5d:95:e3:c6:6a:8c:c6:29:92:
                    68:8e:e4:8e:8a:29:a0:6e:ae:b0:77:05:2b:4e:68:
                    c5:ee:07:ae:37:1d:94:e8:dd:54:fd:6e:6e:1c:51:
                    f4:4d:32:5a:40:94:82:cf:d2:b4:c0:36:66:ce:5a:
                    5d:ff:4e:b6:29:e4:4b:bd:20:70:fa:d3:f6:89:c2:
                    ad:d3:47:38:03:34:5a:a6:c2:6c:a8:e7:c3:ed:a8:
                    bd:a5:6c:1a:9e:d0:21:5b:c8:5e:93:3f:de:2a:21:
                    3b:59:a8:54:54:ff:4b:8b:d1:c8:30:98:52:d2:a8:
                    cf:dd:b2:f9:05:24:e7:87:44:89:7d:7f:74:75:f4:
                    53:ae:b5:4f:94:6a:ef:df:a9:11:b9:f2:40:77:61:
                    71:7f:ad:e6:26:87:27:8a:76:39:14:a4:13:2e:50:
                    65:75:8c:67:6f:25:1d:bc:c0:81:f7:07:18:d9:f9:
                    03:a1:6c:27:0e:78:a1:4c:2a:da:bd:64:4e:96:9d:
                    50:0a:e3:7a:c4:a0:3b:69:aa:1d:1d:70:ab:1d:eb:
                    73:dc:e9:9e:2a:25:c4:60:75:33:cc:63:37:2c:c0:
                    11:4c:24:0a:23:5b:77:74:64:33:aa:ac:8c:7f:75:
                    92:55:fb:90:c6:2a:8d:df:a5:05:45:26:c8:77:a8:
                    67:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:7D:BA:B0:F2:26:81:F8:4B:3D:63:87:18:11:78:9C:F5:D3:C8:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/867DBAB0F22681F84B3D63871811789CF5D3C83D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.192.0/22
                IPv6:
                  2804:3d18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266253

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:17:a5:0b:55:9d:b3:3a:63:8e:a1:5d:a3:48:1a:4c:4c:
         9d:a8:05:ce:9e:3c:4c:31:df:53:b0:bf:89:31:13:0b:7f:74:
         d3:b1:ac:0d:25:fa:be:29:20:e9:35:e2:50:11:7b:49:a3:7f:
         22:07:9d:87:46:2f:9d:78:bc:b4:f1:eb:ca:b4:fe:9f:3c:fa:
         81:58:36:b6:88:fe:a3:4c:18:5a:c9:14:a6:7f:ef:a9:ea:59:
         6d:56:91:5c:2d:c3:4e:cc:61:db:47:93:52:f9:23:3b:1f:b1:
         73:13:26:84:f9:3b:a0:bf:e4:0e:ec:39:33:c9:b7:a8:91:33:
         d3:0e:72:a6:82:ac:37:7a:2b:26:db:51:73:d8:4a:a7:ab:72:
         33:89:a3:af:1e:eb:82:0e:10:b0:7f:2d:cd:6d:84:15:c1:e3:
         6d:22:44:f9:bd:94:60:7e:43:4f:25:b7:07:af:99:b7:6a:46:
         55:d4:d1:0a:3d:0c:59:16:66:67:58:67:3b:43:49:f8:3f:37:
         65:68:4a:1a:c7:22:ca:2a:35:3a:cf:2e:1a:e7:01:86:d4:15:
         81:56:86:64:a8:73:f5:4c:5d:fe:47:97:0c:3b:9e:c2:c1:56:
         b3:78:91:06:6e:af:a7:d2:6d:aa:07:e7:da:00:f7:0a:bc:1e:
         2e:95:95:50
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUMJoDKgMTBlpxw8L4FdLY6026facwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTA4MjYyMTE0MTFaFw0yMjA4MjUyMTE5MTFaMDMxMTAvBgNV
BAMTKDg2N0RCQUIwRjIyNjgxRjg0QjNENjM4NzE4MTE3ODlDRjVEM0M4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYqvp8F2V48ZqjMYpkmiO5I6K
KaBurrB3BStOaMXuB643HZTo3VT9bm4cUfRNMlpAlILP0rTANmbOWl3/TrYp5Eu9
IHD60/aJwq3TRzgDNFqmwmyo58PtqL2lbBqe0CFbyF6TP94qITtZqFRU/0uL0cgw
mFLSqM/dsvkFJOeHRIl9f3R19FOutU+Uau/fqRG58kB3YXF/reYmhyeKdjkUpBMu
UGV1jGdvJR28wIH3BxjZ+QOhbCcOeKFMKtq9ZE6WnVAK43rEoDtpqh0dcKsd63Pc
6Z4qJcRgdTPMYzcswBFMJAojW3d0ZDOqrIx/dZJV+5DGKo3fpQVFJsh3qGenAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGfbqw8iaB+Es9
Y4cYEXic9dPIPTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85TGhhNnI2ZHpMVGJHNmpYNFRIcEhGNXd2TXZuWXFTQVZO
czdxcmp2TmU2ci8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FW
TnM3cXJqdk5lNnIvMC84NjdEQkFCMEYyMjY4MUY4NEIzRDYzODcxODExNzg5Q0Y1
RDNDODNELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+e8AwDQQCAAIwBwMF
ACgEPRgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBANMA0GCSqGSIb3DQEBCwUA
A4IBAQBUnRelC1WdszpjjqFdo0gaTEydqAXOnjxMMd9TsL+JMRMLf3TTsawNJfq+
KSDpNeJQEXtJo38iB52HRi+deLy08evKtP6fPPqBWDa2iP6jTBhayRSmf++p6llt
VpFcLcNOzGHbR5NS+SM7H7FzEyaE+Tugv+QO7DkzybeokTPTDnKmgqw3eism21Fz
2Eqnq3IziaOvHuuCDhCwfy3NbYQVweNtIkT5vZRgfkNPJbcHr5m3akZV1NEKPQxZ
FmZnWGc7Q0n4PzdlaEoaxyLKKjU6zy4a5wGG1BWBVoZkqHP1TF3+R5cMO57CwVaz
eJEGbq+n0m2qB+faAPcKvB4ulZVQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org