Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8ABBC319149E26860931B24D3897D7D0C64DF537.cer
File:                     8ABBC319149E26860931B24D3897D7D0C64DF537.cer (raw, json)
Hash identifier:          Tq51RtAho3feJZMnYyNa0bqTz1FsrOcLU/7KMWbU4sg=
Subject key identifier:   8A:BB:C3:19:14:9E:26:86:09:31:B2:4D:38:97:D7:D0:C6:4D:F5:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E1ED48417CE6632280655147379EA229BD6ABA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/8ABBC319149E26860931B24D3897D7D0C64DF537.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 21:13:36 +0000
Certificate not after:    Mon 09 Sep 2024 21:18:36 +0000
Subordinate resources:    AS: 269523
                          IP: 45.188.68.0/22
                          IP: 2804:65ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1e:d4:84:17:ce:66:32:28:06:55:14:73:79:ea:22:9b:d6:ab:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 21:13:36 2023 GMT
            Not After : Sep  9 21:18:36 2024 GMT
        Subject: CN=8ABBC319149E26860931B24D3897D7D0C64DF537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:3d:eb:7b:aa:73:88:23:f3:70:6d:46:0e:
                    aa:65:30:1a:d5:1e:51:5e:72:d3:19:0b:dd:d0:5f:
                    91:41:17:27:46:8c:56:48:dc:87:61:2e:12:fa:ab:
                    0e:b5:f9:95:98:5b:e7:3a:34:68:6b:c6:5e:6f:09:
                    ad:d3:30:72:b8:e6:2a:03:0d:1e:84:83:7d:cc:c5:
                    12:a1:a9:bf:12:19:3e:e6:af:dd:0a:34:22:8b:b2:
                    66:9d:6a:b7:5d:4b:4d:3b:87:75:96:8f:65:29:c8:
                    80:fc:d3:8b:55:f1:78:46:a3:5d:5c:9e:53:bb:f8:
                    9e:cf:e4:4b:88:e4:ba:39:34:91:42:19:e9:db:8b:
                    39:90:ad:a5:58:8d:3f:d2:0a:61:17:5e:c2:78:63:
                    88:da:1d:7d:2b:d8:46:ee:e8:b9:2b:b8:04:28:98:
                    d5:9a:6f:04:3e:16:e6:fb:80:33:4f:e7:02:ea:8c:
                    ec:b1:9e:51:a4:cb:40:21:e7:42:31:2a:b5:fc:a7:
                    7e:dc:44:9f:4d:af:43:28:2e:9f:a1:e2:30:e4:46:
                    8b:e7:da:6b:c0:7d:0e:84:f6:1e:2d:86:ea:fe:1b:
                    7e:33:18:3f:b7:a6:9a:84:55:5f:a3:19:0b:9f:88:
                    d4:a6:9f:c2:96:34:fe:2e:26:f9:de:93:81:3c:34:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:BB:C3:19:14:9E:26:86:09:31:B2:4D:38:97:D7:D0:C6:4D:F5:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/8ABBC319149E26860931B24D3897D7D0C64DF537.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.68.0/22
                IPv6:
                  2804:65ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269523

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:45:8a:d4:4b:28:6a:cf:ad:37:8f:d4:a6:be:c8:1a:93:
         d5:ae:5a:d2:0a:86:a7:00:a5:dc:02:ef:e5:a6:38:d8:2f:27:
         e5:3c:a6:3f:af:dc:04:54:4a:89:dd:64:4d:b4:6f:31:99:ec:
         ce:60:c0:55:fc:b4:b8:6d:fd:3b:34:18:72:a0:4d:89:b9:14:
         90:e0:f1:f8:ff:b5:2e:69:05:f6:b5:72:4a:37:62:56:e2:38:
         b3:d7:bd:3d:90:12:00:e2:2e:17:3f:f7:e5:f7:1f:7a:e7:a8:
         a1:a2:45:da:a9:c2:4b:14:81:e7:25:d4:c9:b1:0a:ad:be:bf:
         8a:a9:23:68:04:7f:f8:bc:0a:a5:45:66:45:8c:ff:6c:ae:72:
         8c:d0:22:62:94:35:2e:0c:a9:59:d9:c0:7f:60:38:76:a6:44:
         a6:ce:80:ac:6f:8e:55:7e:13:ef:65:e6:4e:e8:67:53:38:af:
         05:7b:94:36:3b:bc:6e:96:73:f9:3d:b7:f4:a9:7f:8e:49:e7:
         05:0f:4c:f7:d8:b7:a0:6b:13:aa:e0:cd:3c:56:77:ed:1d:ed:
         70:1f:3d:5a:5d:18:6c:3a:96:5e:de:62:ac:83:b5:6a:0c:5a:
         8d:4e:7a:cd:bc:62:03:5a:43:e8:58:e0:e9:7a:da:9c:4a:54:
         b4:1c:4c:c6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUDh7UhBfOZjIoBlUUc3nqIpvWq6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTEyMTEzMzZaFw0yNDA5MDkyMTE4MzZaMDMxMTAvBgNV
BAMTKDhBQkJDMzE5MTQ5RTI2ODYwOTMxQjI0RDM4OTdEN0QwQzY0REY1MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFj3re6pziCPzcG1GDqplMBrV
HlFectMZC93QX5FBFydGjFZI3IdhLhL6qw61+ZWYW+c6NGhrxl5vCa3TMHK45ioD
DR6Eg33MxRKhqb8SGT7mr90KNCKLsmadarddS007h3WWj2UpyID804tV8XhGo11c
nlO7+J7P5EuI5Lo5NJFCGenbizmQraVYjT/SCmEXXsJ4Y4jaHX0r2Ebu6LkruAQo
mNWabwQ+Fub7gDNP5wLqjOyxnlGky0Ah50IxKrX8p37cRJ9Nr0MoLp+h4jDkRovn
2mvAfQ6E9h4thur+G34zGD+3ppqEVV+jGQufiNSmn8KWNP4uJvnek4E8NMuHAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKu8MZFJ4mhgkx
sk04l9fQxk31NzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CQXRIeTk0UFp4ZXVIOThKTnhEenJ0dXdwN0w0SFdKcFAx
QzQ0Z25mdUVRdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQkF0SHk5NFBaeGV1SDk4Sk54RHpydHV3cDdMNEhXSnBQ
MUM0NGduZnVFUXQvMC84QUJCQzMxOTE0OUUyNjg2MDkzMUIyNEQzODk3RDdEMEM2
NERGNTM3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvEQwDQQCAAIwBwMF
ACgEZewwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBzTMA0GCSqGSIb3DQEBCwUA
A4IBAQBvmEWK1Esoas+tN4/Upr7IGpPVrlrSCoanAKXcAu/lpjjYLyflPKY/r9wE
VEqJ3WRNtG8xmezOYMBV/LS4bf07NBhyoE2JuRSQ4PH4/7UuaQX2tXJKN2JW4jiz
1709kBIA4i4XP/fl9x9656ihokXaqcJLFIHnJdTJsQqtvr+KqSNoBH/4vAqlRWZF
jP9srnKM0CJilDUuDKlZ2cB/YDh2pkSmzoCsb45VfhPvZeZO6GdTOK8Fe5Q2O7xu
lnP5Pbf0qX+OSecFD0z32LegaxOq4M08VnftHe1wHz1aXRhsOpZe3mKsg7VqDFqN
TnrNvGIDWkPoWODpetqcSlS0HEzG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org