Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86FB7EF412B3ADA8EA22B20AD7072D97ADC6BACC.cer
File:                     86FB7EF412B3ADA8EA22B20AD7072D97ADC6BACC.cer (raw, json)
Hash identifier:          1l2bdI+iIZXMLOW4vT4kri07EB2dPS+TBA+vZkWKFFU=
Subject key identifier:   86:FB:7E:F4:12:B3:AD:A8:EA:22:B2:0A:D7:07:2D:97:AD:C6:BA:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D0A159E1F6A50FD22186CB3D2FAD3B408C05DC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/86FB7EF412B3ADA8EA22B20AD7072D97ADC6BACC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Oct 2022 18:22:12 +0000
Certificate not after:    Fri 13 Oct 2023 18:27:12 +0000
Subordinate resources:    AS: 266030
                          IP: 170.245.244.0/22
                          IP: 2804:3970::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0a:15:9e:1f:6a:50:fd:22:18:6c:b3:d2:fa:d3:b4:08:c0:5d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 14 18:22:12 2022 GMT
            Not After : Oct 13 18:27:12 2023 GMT
        Subject: CN=86FB7EF412B3ADA8EA22B20AD7072D97ADC6BACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:4d:4e:83:fb:ae:2e:84:5f:0d:64:86:73:
                    cf:82:2d:d4:4b:b2:0f:fb:f2:c1:7a:22:6e:ac:77:
                    05:b2:3c:04:e8:ea:9e:bd:5d:ff:b3:b4:36:b1:5f:
                    5a:fb:da:4a:28:9b:76:c8:fe:1e:59:a9:32:2f:3a:
                    da:e9:39:52:19:3e:f0:41:7c:f9:7b:4b:f8:91:4a:
                    bf:2d:db:2a:5e:d6:50:81:5f:72:ae:5b:15:13:6c:
                    0e:c6:13:c9:e2:d2:31:1c:31:68:00:18:0a:c6:52:
                    32:36:7b:40:8f:b1:80:af:65:3c:fd:23:9b:9b:15:
                    02:4a:8f:4d:5d:b3:16:a3:0a:42:46:32:96:d4:28:
                    e8:02:02:86:51:6f:94:eb:ef:a2:fb:8e:96:a7:9b:
                    6e:d9:29:7d:ea:62:ea:26:af:62:a3:55:3c:05:a5:
                    3d:1f:ac:9a:7e:58:64:c6:85:f6:75:03:58:ef:5a:
                    3c:66:4e:7d:cc:9b:c1:c4:c0:b5:41:25:f7:dc:b4:
                    4c:52:4a:08:18:30:07:eb:21:49:89:4a:55:3f:02:
                    70:6f:e5:8f:44:24:e9:b5:10:7a:e7:e0:5e:da:be:
                    64:53:97:70:43:61:f4:61:6c:65:8e:9f:34:23:22:
                    9e:12:33:46:a4:18:c5:1e:06:5c:20:e5:d8:e5:17:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:FB:7E:F4:12:B3:AD:A8:EA:22:B2:0A:D7:07:2D:97:AD:C6:BA:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/86FB7EF412B3ADA8EA22B20AD7072D97ADC6BACC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.244.0/22
                IPv6:
                  2804:3970::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266030

    Signature Algorithm: sha256WithRSAEncryption
         80:8c:f0:60:e2:f7:7f:64:8b:c0:68:ef:55:9f:45:ea:cc:ca:
         04:54:1f:9e:d5:25:13:2f:e4:36:1d:07:ba:6e:9c:ad:83:06:
         7e:49:d4:f5:32:f7:10:69:26:2c:90:70:e0:2e:70:94:ad:21:
         33:0a:00:6b:3f:db:ec:d4:a6:86:31:c9:b1:3a:f4:7f:97:1f:
         fc:97:43:d8:ff:8a:7a:05:16:1e:cd:ac:c5:16:8a:1c:2b:67:
         31:90:0f:0f:39:00:41:71:7b:d3:90:35:96:88:f8:76:eb:1e:
         49:1c:40:69:e8:61:fb:c1:cb:bf:a2:89:57:f1:42:4c:aa:87:
         e7:32:4b:18:c7:a9:60:b4:a4:0e:29:6f:ae:91:c8:e4:4b:01:
         7f:69:50:f6:00:90:8b:39:0c:3b:7b:9f:d4:49:03:31:3e:82:
         a3:76:09:48:66:be:be:83:72:4a:ba:4a:b5:83:83:43:71:89:
         3a:9d:d6:9a:80:f4:0d:f7:a9:75:63:45:70:1b:4e:4b:19:df:
         01:6a:90:51:4f:e3:f6:14:b2:4b:a8:e5:f9:d9:8d:38:fd:27:
         b1:d8:f5:3e:17:e6:e8:f5:65:21:c5:c7:4c:72:ab:b3:a2:47:
         b1:f6:af:32:69:d8:7e:4a:cc:2b:09:7f:a8:78:27:c0:ec:c7:
         9c:88:7f:11
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUDQoVnh9qUP0iGGyz0vrTtAjAXcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMTQxODIyMTJaFw0yMzEwMTMxODI3MTJaMDMxMTAvBgNV
BAMTKDg2RkI3RUY0MTJCM0FEQThFQTIyQjIwQUQ3MDcyRDk3QURDNkJBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/U1Og/uuLoRfDWSGc8+CLdRL
sg/78sF6Im6sdwWyPATo6p69Xf+ztDaxX1r72koom3bI/h5ZqTIvOtrpOVIZPvBB
fPl7S/iRSr8t2ype1lCBX3KuWxUTbA7GE8ni0jEcMWgAGArGUjI2e0CPsYCvZTz9
I5ubFQJKj01dsxajCkJGMpbUKOgCAoZRb5Tr76L7jpanm27ZKX3qYuomr2KjVTwF
pT0frJp+WGTGhfZ1A1jvWjxmTn3Mm8HEwLVBJffctExSSggYMAfrIUmJSlU/AnBv
5Y9EJOm1EHrn4F7avmRTl3BDYfRhbGWOnzQjIp4SM0akGMUeBlwg5djlF6SVAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSG+370ErOtqOoi
sgrXBy2Xrca6zDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BUmRZVnQ3QjczZjE4U296UUdodmExRktiS3lxUmlwakFX
N1R3dnVHa2ZSYS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BUmRZVnQ3QjczZjE4U296UUdodmExRktiS3lxUmlwakFX
N1R3dnVHa2ZSYS8wLzg2RkI3RUY0MTJCM0FEQThFQTIyQjIwQUQ3MDcyRDk3QURD
NkJBQ0MubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr19DANBAIAAjAHAwUA
KAQ5cDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDy4wDQYJKoZIhvcNAQELBQAD
ggEBAICM8GDi939ki8Bo71WfRerMygRUH57VJRMv5DYdB7punK2DBn5J1PUy9xBp
JiyQcOAucJStITMKAGs/2+zUpoYxybE69H+XH/yXQ9j/inoFFh7NrMUWihwrZzGQ
Dw85AEFxe9OQNZaI+HbrHkkcQGnoYfvBy7+iiVfxQkyqh+cySxjHqWC0pA4pb66R
yORLAX9pUPYAkIs5DDt7n9RJAzE+gqN2CUhmvr6Dckq6SrWDg0NxiTqd1pqA9A33
qXVjRXAbTksZ3wFqkFFP4/YUskuo5fnZjTj9J7HY9T4X5uj1ZSHFx0xyq7OiR7H2
rzJp2H5KzCsJf6h4J8Dsx5yIfxE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org