Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
File:                     8AB43450812E7308AED6C09E136F489C2EAC6E66.cer (raw, json)
Hash identifier:          0/abvNND96U5B7imiFq5gE0z+e2apIOmNz9vYiZuhRw=
Subject key identifier:   8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58EFCAFEBBF7A6A776A984260DEC16FEBD9C88EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 02:56:12 +0000
Certificate not after:    Mon 21 Oct 2024 03:01:12 +0000
Subordinate resources:    AS: 271298
                          IP: 200.53.84.0/22
                          IP: 2804:7950::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ef:ca:fe:bb:f7:a6:a7:76:a9:84:26:0d:ec:16:fe:bd:9c:88:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 02:56:12 2023 GMT
            Not After : Oct 21 03:01:12 2024 GMT
        Subject: CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:90:3b:88:fe:d5:cb:1b:91:c4:f3:5a:23:
                    8f:be:88:f7:35:c4:bd:01:8f:b4:4f:35:31:41:ab:
                    c0:92:dd:9c:6c:fa:06:83:5c:15:db:cb:53:c8:33:
                    f1:da:3a:e7:10:8f:36:0d:aa:61:05:fc:63:7e:89:
                    16:ed:87:7c:9b:27:d2:ce:ed:05:9a:56:4b:23:e0:
                    43:f6:0a:ba:32:a4:a1:70:86:64:c4:4f:c0:c2:6b:
                    61:8f:fb:3a:fc:1b:b0:b7:32:f7:88:cf:a0:8a:da:
                    45:20:5b:c6:40:87:e1:5b:0d:b5:7b:99:e2:76:52:
                    65:c0:1d:9e:8d:6b:3c:01:64:64:bc:51:73:73:d0:
                    b1:6c:2e:f6:dd:69:45:37:a0:9e:f3:9e:8d:21:89:
                    4c:dc:2d:2a:ef:62:80:a1:3a:c3:13:64:04:a0:b6:
                    50:eb:f3:7a:68:5b:c3:d7:af:85:47:d5:d4:3a:82:
                    8a:b5:e9:f2:36:8a:d2:8a:79:6e:75:f4:06:b2:65:
                    da:f3:df:30:96:09:a6:be:84:ab:0e:26:75:ed:7f:
                    e0:cc:f8:3e:d8:e5:04:d9:8f:2a:4e:e0:2b:54:0d:
                    20:79:6e:25:c7:87:bd:11:f4:81:09:8d:9c:e7:48:
                    86:71:a9:47:23:d7:da:73:e7:0c:2c:3c:68:52:9b:
                    c9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/22
                IPv6:
                  2804:7950::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271298

    Signature Algorithm: sha256WithRSAEncryption
         76:69:5b:14:c4:11:96:28:1d:aa:67:6c:7e:5e:50:c4:19:f0:
         20:65:ec:01:53:57:e1:2c:8a:31:59:18:03:e5:b8:f7:8c:76:
         f5:4a:26:b7:95:11:ae:7c:7b:3b:8a:45:59:5c:2d:0b:ff:ed:
         22:4a:63:1a:56:94:cc:c3:f0:ea:9e:70:f7:58:31:80:2a:15:
         0b:4e:00:47:75:2b:a1:89:95:09:19:62:bb:3e:35:90:25:9c:
         76:32:a7:73:0a:53:51:2c:ab:42:7f:c2:82:96:ad:90:0e:bb:
         a8:65:54:76:c5:80:9f:2e:6a:d8:84:8a:c4:e2:c1:50:52:0f:
         bc:31:be:6a:b9:a9:d9:1c:bf:3b:31:e8:cb:10:b5:ab:a1:80:
         2d:f5:89:7b:3e:f7:9c:18:c4:e4:61:c9:5a:56:c0:87:d7:71:
         05:08:98:a9:10:16:4a:00:99:3b:75:81:7f:c7:0b:12:d0:bf:
         ea:bb:14:65:ec:22:ff:c6:f7:f0:5c:5a:a5:76:4e:1e:c2:6f:
         c5:d6:1b:17:69:68:e3:21:cd:a2:0c:8a:fa:92:91:c4:02:57:
         01:96:ae:8e:b0:07:ac:3b:f1:33:12:d3:81:6e:cb:73:fa:ee:
         ef:89:03:12:cc:fb:64:74:db:83:f7:c3:18:35:a3:c1:ac:e4:
         f7:f6:7b:f5
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUWO/K/rv3pqd2qYQmDewW/r2ciO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjMwMjU2MTJaFw0yNDEwMjEwMzAxMTJaMDMxMTAvBgNV
BAMTKDhBQjQzNDUwODEyRTczMDhBRUQ2QzA5RTEzNkY0ODlDMkVBQzZFNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFApA7iP7VyxuRxPNaI4++iPc1
xL0Bj7RPNTFBq8CS3Zxs+gaDXBXby1PIM/HaOucQjzYNqmEF/GN+iRbth3ybJ9LO
7QWaVksj4EP2CroypKFwhmTET8DCa2GP+zr8G7C3MveIz6CK2kUgW8ZAh+FbDbV7
meJ2UmXAHZ6NazwBZGS8UXNz0LFsLvbdaUU3oJ7zno0hiUzcLSrvYoChOsMTZASg
tlDr83poW8PXr4VH1dQ6goq16fI2itKKeW519AayZdrz3zCWCaa+hKsOJnXtf+DM
+D7Y5QTZjypO4CtUDSB5biXHh70R9IEJjZznSIZxqUcj19pz5wwsPGhSm8nPAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKtDRQgS5zCK7W
wJ4Tb0icLqxuZjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ya1NybUtXWWIxdU1TeE44VVA3TXpiVUE1QlZnZ1V3UTlC
eVBkSEg4YkN4Ni8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ya1NybUtXWWIxdU1TeE44VVA3TXpiVUE1QlZnZ1V3UTlC
eVBkSEg4YkN4Ni8wLzhBQjQzNDUwODEyRTczMDhBRUQ2QzA5RTEzNkY0ODlDMkVB
QzZFNjYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsg1VDANBAIAAjAHAwUA
KAR5UDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEI8IwDQYJKoZIhvcNAQELBQAD
ggEBAHZpWxTEEZYoHapnbH5eUMQZ8CBl7AFTV+EsijFZGAPluPeMdvVKJreVEa58
ezuKRVlcLQv/7SJKYxpWlMzD8OqecPdYMYAqFQtOAEd1K6GJlQkZYrs+NZAlnHYy
p3MKU1Esq0J/woKWrZAOu6hlVHbFgJ8uatiEisTiwVBSD7wxvmq5qdkcvzsx6MsQ
tauhgC31iXs+95wYxORhyVpWwIfXcQUImKkQFkoAmTt1gX/HCxLQv+q7FGXsIv/G
9/BcWqV2Th7Cb8XWGxdpaOMhzaIMivqSkcQCVwGWro6wB6w78TMS04Fuy3P67u+J
AxLM+2R024P3wxg1o8Gs5Pf2e/U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org