Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.cer
File:                     8D73F533955BE76ECBC1190057DAB05442B4A50E.cer (raw, json)
Hash identifier:          9LFXTnXqkh+xwSjZMt+vBLi9/GTV4Bp+/QTUlcXfxUQ=
Subject key identifier:   8D:73:F5:33:95:5B:E7:6E:CB:C1:19:00:57:DA:B0:54:42:B4:A5:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E691A5D00024CE92571D9705BC0D76B9BC27D99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 20:55:55 +0000
Certificate not after:    Thu 20 Jul 2023 21:00:55 +0000
Subordinate resources:    AS: 264353
                          IP: 131.108.116.0/22
                          IP: 138.186.104.0/22
                          IP: 2804:1d30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:69:1a:5d:00:02:4c:e9:25:71:d9:70:5b:c0:d7:6b:9b:c2:7d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 20:55:55 2022 GMT
            Not After : Jul 20 21:00:55 2023 GMT
        Subject: CN=8D73F533955BE76ECBC1190057DAB05442B4A50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:37:7b:07:09:99:b2:37:97:5c:15:e6:56:
                    8e:2e:ad:25:df:95:05:1d:a7:d2:2a:dd:f2:af:4d:
                    07:fb:9c:62:46:27:8a:a7:41:97:59:46:dd:b6:ef:
                    24:d3:3c:e1:d6:7b:99:30:20:b4:6b:0f:2d:45:a1:
                    97:fa:0b:f8:05:75:10:ff:bc:9e:1e:86:8c:fa:45:
                    8c:9c:9a:c5:be:3a:49:8d:c7:8c:fb:dd:7a:65:2b:
                    5b:ec:a0:72:31:60:82:c8:92:fa:13:7f:eb:49:0e:
                    70:24:93:50:1a:ab:e6:6d:a7:66:d5:0e:7c:bd:3d:
                    a1:03:15:69:dd:e8:a4:b5:f9:b3:9c:3f:54:41:95:
                    37:d2:fe:50:64:01:64:30:cb:0c:a1:bf:29:a5:34:
                    87:08:c6:69:a6:60:29:b3:46:1c:65:6b:cc:9e:b8:
                    e8:44:fd:03:0f:59:de:64:c3:d7:3d:e3:f7:36:6b:
                    9f:41:11:36:64:76:6b:fd:cb:74:15:1e:75:66:56:
                    2f:2d:99:61:86:b6:9b:fe:0b:d2:2e:57:6c:b0:cc:
                    81:5c:1a:8b:f3:60:bd:d5:46:c0:db:e8:d2:d1:29:
                    90:70:bd:bb:7f:a5:73:fc:38:82:0a:04:af:81:fb:
                    78:2d:24:19:bf:9d:80:29:7a:d0:60:bf:16:68:5e:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:73:F5:33:95:5B:E7:6E:CB:C1:19:00:57:DA:B0:54:42:B4:A5:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.116.0/22
                  138.186.104.0/22
                IPv6:
                  2804:1d30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264353

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:64:5d:56:8f:37:4d:68:60:43:10:98:77:e5:ba:45:84:
         cc:5e:7f:8d:a0:fb:e4:0b:6f:5a:16:3d:58:cd:4b:d6:62:d8:
         b2:0b:2d:2f:9e:9a:fd:69:7e:6c:1a:b1:72:f4:57:8b:03:eb:
         db:08:bd:81:cb:1f:26:59:4f:a1:38:3b:3d:fa:54:9f:53:8b:
         3b:af:0d:40:45:61:3d:71:9e:2d:d3:e4:ca:16:d4:16:1f:75:
         9a:5e:7b:35:cf:29:43:0f:a4:3e:c8:c6:7f:11:4a:39:44:a6:
         58:f0:e4:7c:68:ae:87:d8:a9:ba:9c:0f:3e:0a:95:83:b2:cb:
         3c:38:aa:2e:3e:03:1c:b9:ad:d7:53:7f:e2:6a:fc:e7:ac:68:
         6f:92:a6:d5:c8:87:62:37:b3:dd:39:35:2c:b0:42:33:92:0b:
         29:5d:64:c1:61:d0:9d:ae:4c:9f:21:a7:83:d2:b4:f8:34:b6:
         36:b8:fb:fd:58:02:b0:a5:12:e6:ee:78:dc:5e:96:a9:f3:78:
         dc:77:38:bd:1c:e9:ae:15:64:da:96:59:d6:71:8f:a6:b6:27:
         f2:53:a3:e1:a3:89:71:d3:bb:bf:dc:38:55:d0:8e:c1:09:2c:
         4d:03:af:c2:76:dd:f1:72:70:b3:f3:f9:9a:df:23:7a:a5:2f:
         f9:a3:cc:2e
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIULmkaXQACTOklcdlwW8DXa5vCfZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MjEyMDU1NTVaFw0yMzA3MjAyMTAwNTVaMDMxMTAvBgNV
BAMTKDhENzNGNTMzOTU1QkU3NkVDQkMxMTkwMDU3REFCMDU0NDJCNEE1MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhsjd7BwmZsjeXXBXmVo4urSXf
lQUdp9Iq3fKvTQf7nGJGJ4qnQZdZRt227yTTPOHWe5kwILRrDy1FoZf6C/gFdRD/
vJ4ehoz6RYycmsW+OkmNx4z73XplK1vsoHIxYILIkvoTf+tJDnAkk1Aaq+Ztp2bV
Dny9PaEDFWnd6KS1+bOcP1RBlTfS/lBkAWQwywyhvymlNIcIxmmmYCmzRhxla8ye
uOhE/QMPWd5kw9c94/c2a59BETZkdmv9y3QVHnVmVi8tmWGGtpv+C9IuV2ywzIFc
GovzYL3VRsDb6NLRKZBwvbt/pXP8OIIKBK+B+3gtJBm/nYApetBgvxZoXvg5AgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNc/UzlVvnbsvB
GQBX2rBUQrSlDjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yTHBUQWU0djduU1kyclJZUjg5eWFzNFAxYUZjd1lFVDlo
ZHBDZ2ltblFrdS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yTHBUQWU0djduU1kyclJZUjg5eWFzNFAxYUZjd1lFVDlo
ZHBDZ2ltblFrdS8wLzhENzNGNTMzOTU1QkU3NkVDQkMxMTkwMDU3REFCMDU0NDJC
NEE1MEUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoNsdAMEAoq6aDANBAIA
AjAHAwUAKAQdMDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECKEwDQYJKoZIhvcN
AQELBQADggEBAHtUZF1WjzdNaGBDEJh35bpFhMxef42g++QLb1oWPVjNS9Zi2LIL
LS+emv1pfmwasXL0V4sD69sIvYHLHyZZT6E4Oz36VJ9TizuvDUBFYT1xni3T5MoW
1BYfdZpeezXPKUMPpD7Ixn8RSjlEpljw5HxorofYqbqcDz4KlYOyyzw4qi4+Axy5
rddTf+Jq/OesaG+SptXIh2I3s905NSywQjOSCyldZMFh0J2uTJ8hp4PStPg0tja4
+/1YArClEubueNxelqnzeNx3OL0c6a4VZNqWWdZxj6a2J/JTo+GjiXHTu7/cOFXQ
jsEJLE0Dr8J23fFycLPz+ZrfI3qlL/mjzC4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org