Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer
File:                     8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer (raw, json)
Hash identifier:          4/JwDAi9AMCOOvNmu9xy8mRDUrZ09kVPyNJawj0NhUw=
Subject key identifier:   8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05F54B8E7A201E5EBF2B33BECE5D9F38F88D51FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 19:27:35 +0000
Certificate not after:    Thu 21 Nov 2024 19:32:35 +0000
Subordinate resources:    AS: 266631
                          IP: 128.201.140.0/22
                          IP: 2804:3ef4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f5:4b:8e:7a:20:1e:5e:bf:2b:33:be:ce:5d:9f:38:f8:8d:51:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 19:27:35 2023 GMT
            Not After : Nov 21 19:32:35 2024 GMT
        Subject: CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:69:00:ff:3d:20:c0:97:e5:43:f8:82:b0:
                    a4:2c:9f:96:8b:14:f4:39:4a:2c:01:6e:e6:4c:5d:
                    12:3a:d0:d3:b4:79:75:88:5c:13:66:0c:e8:3a:8c:
                    3d:c7:e8:bc:cd:a7:f1:57:0e:61:a7:8b:44:48:b5:
                    9b:6e:3b:00:b4:cf:e9:84:1e:02:a2:16:41:d6:bd:
                    19:a8:28:03:12:aa:a2:bf:2b:ca:bc:ed:aa:86:b5:
                    4a:7c:4e:30:f9:7d:90:b4:e6:46:61:85:48:24:b8:
                    f4:20:40:83:8f:21:66:eb:78:17:aa:b5:76:e1:fb:
                    d3:74:1e:98:b4:b9:2f:67:19:f6:2a:9b:85:9a:f8:
                    7d:f0:62:05:bf:8a:cd:f9:26:a4:cf:c4:98:40:40:
                    e3:46:ba:e8:d7:b4:d8:ca:71:80:90:5f:ba:e0:b8:
                    00:c4:e1:60:03:68:58:4f:a7:79:9b:63:d3:13:14:
                    9e:05:45:76:ac:ee:4b:80:84:a9:14:4b:5e:bb:49:
                    97:2e:7a:41:c3:81:8f:1e:6f:6c:57:c6:e8:ff:4b:
                    89:eb:75:bd:94:17:9f:50:d2:ba:e0:6a:a2:ec:6e:
                    13:fd:b1:27:d5:08:f1:43:d0:4d:a3:65:79:0e:fd:
                    7a:8b:7a:71:78:da:d7:55:18:c6:b2:34:d5:96:d1:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.140.0/22
                IPv6:
                  2804:3ef4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266631

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:4f:3f:4d:72:91:8a:dc:49:e6:cc:c2:e6:d6:1d:72:af:
         67:92:d5:fc:07:eb:5b:69:bf:f4:4c:d0:99:f2:2b:e0:b0:34:
         a0:36:59:82:62:16:8d:10:b5:7f:e7:27:01:84:27:7f:7c:50:
         cc:c5:a5:f4:81:54:00:6e:6c:53:d1:d7:65:d0:4f:da:1d:05:
         73:1b:80:0b:63:bb:f3:21:15:f0:b1:66:f6:b0:03:79:c5:32:
         b1:71:f2:0c:10:39:7f:5c:a3:dc:2d:54:24:31:79:50:41:e4:
         c8:8a:1a:3b:fa:1c:cc:91:d8:e8:6c:14:8b:56:90:c7:25:be:
         ae:b9:9a:8a:26:f4:8a:db:68:6c:6a:49:ab:86:17:21:69:8c:
         49:29:70:96:99:5d:3f:66:87:13:be:54:dd:32:f3:98:7a:9a:
         a0:5f:ea:2d:b8:6a:97:26:d5:10:3d:9c:05:6a:b9:a7:e6:f8:
         fe:01:8c:4a:8f:9f:ff:9d:30:8d:22:4a:98:52:e9:e8:fd:e9:
         ac:9f:f9:a2:01:30:7d:83:8f:fa:c6:36:cf:20:b6:e8:0f:58:
         84:36:d5:92:5e:aa:0c:ce:47:e4:63:41:6a:93:1b:76:b6:f4:
         5c:7b:3c:95:e9:bc:d1:b5:47:78:b6:2c:5e:90:2c:df:3a:16:
         0e:ee:d5:3f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBfVLjnogHl6/KzO+zl2fOPiNUf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjMxOTI3MzVaFw0yNDExMjExOTMyMzVaMDMxMTAvBgNV
BAMTKDhDNERGQUU4QUVCQTk5MDg1RENDNTFEMUMxMEY5OUI4QTNDODg4NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RGkA/z0gwJflQ/iCsKQsn5aL
FPQ5SiwBbuZMXRI60NO0eXWIXBNmDOg6jD3H6LzNp/FXDmGni0RItZtuOwC0z+mE
HgKiFkHWvRmoKAMSqqK/K8q87aqGtUp8TjD5fZC05kZhhUgkuPQgQIOPIWbreBeq
tXbh+9N0Hpi0uS9nGfYqm4Wa+H3wYgW/is35JqTPxJhAQONGuujXtNjKcYCQX7rg
uADE4WADaFhPp3mbY9MTFJ4FRXas7kuAhKkUS167SZcuekHDgY8eb2xXxuj/S4nr
db2UF59Q0rrgaqLsbhP9sSfVCPFD0E2jZXkO/XqLenF42tdVGMayNNWW0ag5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMTfrorrqZCF3M
UdHBD5m4o8iIczAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81SlNXSDZpZ0czSFd5Y3FkNnR0NlprOTJRZ1hRRmlmeEtB
SkM3NzVCeThnSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUpTV0g2aWdHM0hXeWNxZDZ0dDZaazkyUWdYUUZpZnhL
QUpDNzc1Qnk4Z0ovMC84QzRERkFFOEFFQkE5OTA4NURDQzUxRDFDMTBGOTlCOEEz
Qzg4ODczLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKAyYwwDQQCAAIwBwMF
ACgEPvQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBGHMA0GCSqGSIb3DQEBCwUA
A4IBAQCnRU8/TXKRitxJ5szC5tYdcq9nktX8B+tbab/0TNCZ8ivgsDSgNlmCYhaN
ELV/5ycBhCd/fFDMxaX0gVQAbmxT0ddl0E/aHQVzG4ALY7vzIRXwsWb2sAN5xTKx
cfIMEDl/XKPcLVQkMXlQQeTIiho7+hzMkdjobBSLVpDHJb6uuZqKJvSK22hsakmr
hhchaYxJKXCWmV0/ZocTvlTdMvOYepqgX+otuGqXJtUQPZwFarmn5vj+AYxKj5//
nTCNIkqYUuno/emsn/miATB9g4/6xjbPILboD1iENtWSXqoMzkfkY0Fqkxt2tvRc
ezyV6bzRtUd4tixekCzfOhYO7tU/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org