Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.cer
File:                     871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.cer (raw, json)
Hash identifier:          SnwDRFbpTrsIwIBUrr1TgQUXkNBKekEytRD4WIGtYB4=
Subject key identifier:   87:1D:E3:38:B0:AD:69:AA:6F:06:31:33:8A:E0:8D:B2:7D:7D:8F:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       398157B30CEDF8AAB511BE6124D1D9558D2395F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 18:50:19 +0000
Certificate not after:    Thu 09 Jan 2025 18:55:19 +0000
Subordinate resources:    AS: 52682
                          IP: 177.221.192.0/19
                          IP: 2804:2d90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:81:57:b3:0c:ed:f8:aa:b5:11:be:61:24:d1:d9:55:8d:23:95:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 18:50:19 2024 GMT
            Not After : Jan  9 18:55:19 2025 GMT
        Subject: CN=871DE338B0AD69AA6F0631338AE08DB27D7D8F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:97:62:44:95:66:73:06:79:da:68:ca:d5:
                    57:f8:9c:e3:ab:72:84:2c:40:04:61:47:65:c0:68:
                    b4:53:3e:a8:d4:3d:7c:0e:f0:77:3d:a7:bd:a5:38:
                    e8:a8:49:91:30:4f:3d:09:22:5d:45:63:1b:e9:3d:
                    a0:05:b6:ac:e4:7b:71:56:b3:f2:20:54:15:6e:45:
                    54:cc:1e:02:fc:b3:88:fd:ea:cf:61:3f:f8:1a:d4:
                    b4:a8:29:83:de:85:20:95:2d:6e:df:61:40:84:dd:
                    eb:29:32:a9:ab:a6:17:b0:93:61:87:83:40:41:17:
                    0c:9f:1a:0f:0f:4e:1d:cc:4d:b9:18:58:67:8d:45:
                    2b:31:51:67:49:6c:57:63:3a:54:f8:2e:02:1b:f3:
                    45:7c:e3:91:c2:f9:d1:46:47:66:42:13:8b:c9:e1:
                    dc:63:e5:74:5d:ae:69:9a:ab:97:76:1b:00:2c:81:
                    49:68:33:d7:8c:83:61:8c:a4:fb:f5:44:b8:bc:52:
                    70:4b:b1:ac:df:be:7d:96:a9:8a:4f:4a:6e:fa:2b:
                    88:a0:de:56:5e:f8:73:33:b7:01:5e:67:ac:06:9f:
                    35:c2:2b:7b:e9:37:43:bd:8f:4a:0a:a6:a6:3a:81:
                    f3:38:5d:9e:f8:04:df:10:63:ad:10:dd:03:8c:f7:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:1D:E3:38:B0:AD:69:AA:6F:06:31:33:8A:E0:8D:B2:7D:7D:8F:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.192.0/19
                IPv6:
                  2804:2d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52682

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:a2:e6:be:39:08:9c:8b:17:f4:a3:a8:28:bb:45:98:c3:
         b1:b8:a5:17:81:65:b5:bd:47:8b:87:1d:76:90:ac:cd:9f:41:
         89:1b:3e:cd:5a:6f:9e:11:cb:cb:1d:f5:d0:4b:0b:bf:db:a4:
         bb:f4:1e:3b:26:af:6d:d0:9a:74:72:23:65:95:07:9a:26:1d:
         5d:0a:e5:6b:c7:fe:5c:56:86:af:a7:5d:43:f2:28:98:e4:77:
         b3:21:98:ec:e8:20:f2:fd:75:6f:60:87:96:1c:ec:62:dd:c3:
         f4:12:e2:36:d7:76:d6:1c:54:9d:10:29:64:16:85:da:7a:62:
         52:07:8c:b1:2e:b7:dd:d4:ec:a2:c7:79:47:41:bd:c8:c4:ab:
         9c:7e:33:c2:55:70:48:f4:08:75:bd:1e:a5:8a:94:2b:c3:55:
         7b:22:1d:c8:c1:21:a4:f0:04:df:8b:86:f3:9d:a6:1b:69:69:
         13:e5:95:3e:c9:65:9c:bc:25:e2:87:06:15:13:23:42:06:16:
         46:ad:05:5e:92:5f:58:a0:ae:39:69:28:f2:85:3b:e4:26:47:
         76:75:6d:4f:48:27:de:41:ee:54:73:0e:39:87:72:0f:dd:63:
         26:31:ae:dc:17:4a:60:25:24:df:9c:fd:0f:cf:02:ae:80:af:
         26:30:80:38
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUOYFXswzt+Kq1Eb5hJNHZVY0jlfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTExODUwMTlaFw0yNTAxMDkxODU1MTlaMDMxMTAvBgNV
BAMTKDg3MURFMzM4QjBBRDY5QUE2RjA2MzEzMzhBRTA4REIyN0Q3RDhGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSZdiRJVmcwZ52mjK1Vf4nOOr
coQsQARhR2XAaLRTPqjUPXwO8Hc9p72lOOioSZEwTz0JIl1FYxvpPaAFtqzke3FW
s/IgVBVuRVTMHgL8s4j96s9hP/ga1LSoKYPehSCVLW7fYUCE3espMqmrphewk2GH
g0BBFwyfGg8PTh3MTbkYWGeNRSsxUWdJbFdjOlT4LgIb80V845HC+dFGR2ZCE4vJ
4dxj5XRdrmmaq5d2GwAsgUloM9eMg2GMpPv1RLi8UnBLsazfvn2WqYpPSm76K4ig
3lZe+HMztwFeZ6wGnzXCK3vpN0O9j0oKpqY6gfM4XZ74BN8QY60Q3QOM9z7HAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHHeM4sK1pqm8G
MTOK4I2yfX2PazAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83QlhXRHRXdHd5dTR6OGNuSkJUNGhwbjF5eWg1cGVXaHl3
SjNQTHh1elUyNS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN0JYV0R0V3R3eXU0ejhjbkpCVDRocG4xeXloNXBlV2h5
d0ozUEx4dXpVMjUvMC84NzFERTMzOEIwQUQ2OUFBNkYwNjMxMzM4QUUwOERCMjdE
N0Q4RjZCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAWx3cAwDQQCAAIwBwMF
ACgELZAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM3KMA0GCSqGSIb3DQEBCwUA
A4IBAQB83KLmvjkInIsX9KOoKLtFmMOxuKUXgWW1vUeLhx12kKzNn0GJGz7NWm+e
EcvLHfXQSwu/26S79B47Jq9t0Jp0ciNllQeaJh1dCuVrx/5cVoavp11D8iiY5Hez
IZjs6CDy/XVvYIeWHOxi3cP0EuI213bWHFSdEClkFoXaemJSB4yxLrfd1Oyix3lH
Qb3IxKucfjPCVXBI9Ah1vR6lipQrw1V7Ih3IwSGk8ATfi4bznaYbaWkT5ZU+yWWc
vCXihwYVEyNCBhZGrQVekl9YoK45aSjyhTvkJkd2dW1PSCfeQe5Ucw45h3IP3WMm
Ma7cF0pgJSTfnP0PzwKugK8mMIA4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org