Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.cer
File:                     8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.cer (raw, json)
Hash identifier:          Ve/EsHNPUHOfhgy5X6EaWOVMLv96zhV1waq5IPSNpqw=
Subject key identifier:   8D:B6:DA:6B:EB:1D:8B:D2:87:39:7D:F4:88:2B:09:6C:D4:CE:C6:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CB4335DA04B00B3D5DD13760782AE2D114BCBD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 22:25:11 +0000
Certificate not after:    Mon 27 May 2024 22:30:11 +0000
Subordinate resources:    AS: 264268
                          IP: 138.118.176.0/22
                          IP: 2804:2540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b4:33:5d:a0:4b:00:b3:d5:dd:13:76:07:82:ae:2d:11:4b:cb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 22:25:11 2023 GMT
            Not After : May 27 22:30:11 2024 GMT
        Subject: CN=8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:1e:7b:a4:65:db:ea:aa:ae:aa:ff:9d:39:
                    c8:b1:ac:c1:83:ea:1a:e8:16:b6:be:66:3f:e1:20:
                    59:d1:39:9d:8e:86:3a:b4:b9:89:e7:04:2d:37:d2:
                    96:88:eb:f9:8b:e1:4c:9f:7d:0c:12:3d:af:b7:ed:
                    42:f9:ed:0a:b5:08:6b:b6:e4:78:67:3f:e1:14:18:
                    d2:cd:00:fd:b7:c1:35:ce:c8:42:93:de:d8:03:ae:
                    8d:4c:49:49:75:ba:b4:75:f1:82:d1:6a:04:f7:0c:
                    8e:dc:39:a5:20:2d:70:b0:80:72:2c:3c:e6:df:49:
                    f7:14:15:a2:6c:e0:20:43:56:b8:a2:57:e9:97:46:
                    41:7d:6c:2b:9b:44:18:af:c5:5c:ea:53:41:29:f9:
                    51:fa:1f:a4:0f:01:31:be:41:dd:2b:04:34:96:e6:
                    99:5e:08:8b:30:f6:a4:53:53:15:e9:49:e8:e8:bf:
                    e5:35:76:db:a7:88:15:3d:56:95:5c:01:a1:42:de:
                    93:b0:b8:1a:56:37:63:20:2d:0b:6b:1c:fb:d3:c2:
                    a9:ab:5b:05:b0:e0:6b:a9:97:3b:40:df:f5:c1:c8:
                    ae:45:30:86:1e:cf:2b:8f:22:3b:dc:e6:a3:f0:cc:
                    ee:74:88:db:b6:8a:7e:6f:4a:c5:4f:ff:71:fc:21:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:B6:DA:6B:EB:1D:8B:D2:87:39:7D:F4:88:2B:09:6C:D4:CE:C6:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.176.0/22
                IPv6:
                  2804:2540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264268

    Signature Algorithm: sha256WithRSAEncryption
         70:77:9f:2c:e4:96:af:b2:e1:5d:d3:58:05:a4:1a:99:62:9a:
         e9:c6:29:fb:2f:c7:49:47:80:14:0d:6d:4f:e6:70:94:e4:a1:
         ea:9d:e1:75:cc:c4:91:fc:c9:39:7b:c5:d8:ba:19:0d:02:8b:
         50:79:29:fb:0a:65:e8:0a:fc:83:57:f8:31:00:1e:e9:da:9c:
         a3:85:99:ed:f2:e9:54:17:ad:b2:eb:ac:b3:d5:5e:ab:18:f7:
         65:e7:b3:a5:33:61:39:ec:13:98:01:6b:ca:23:08:f8:57:a5:
         9e:61:f3:1b:1e:4c:79:38:6d:8f:bc:98:eb:21:e2:32:95:40:
         05:d4:4a:4f:bf:36:39:e9:f3:6c:2b:b3:93:71:15:f9:1b:c7:
         6b:44:16:9d:23:57:64:0a:76:ce:e7:50:6d:e0:76:46:a0:43:
         a9:8e:34:03:66:cf:89:ee:70:58:f3:b3:51:1d:eb:74:71:69:
         5d:4e:4d:ce:5c:69:b5:c4:d4:ee:87:8e:cf:95:da:f6:61:ba:
         87:80:75:e1:ed:a1:cb:4a:21:8b:11:76:9c:0a:de:88:da:4e:
         3d:7c:ea:1e:d8:ed:6b:bd:bb:54:84:c6:61:c1:e1:fd:0a:65:
         5b:84:47:e1:ab:1e:8d:27:89:f0:23:49:91:3d:81:75:d8:d1:
         0d:75:59:ac
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUHLQzXaBLALPV3RN2B4KuLRFLy9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjkyMjI1MTFaFw0yNDA1MjcyMjMwMTFaMDMxMTAvBgNV
BAMTKDhEQjZEQTZCRUIxRDhCRDI4NzM5N0RGNDg4MkIwOTZDRDRDRUM2RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCB57pGXb6qquqv+dOcixrMGD
6hroFra+Zj/hIFnROZ2Ohjq0uYnnBC030paI6/mL4UyffQwSPa+37UL57Qq1CGu2
5HhnP+EUGNLNAP23wTXOyEKT3tgDro1MSUl1urR18YLRagT3DI7cOaUgLXCwgHIs
PObfSfcUFaJs4CBDVriiV+mXRkF9bCubRBivxVzqU0Ep+VH6H6QPATG+Qd0rBDSW
5pleCIsw9qRTUxXpSejov+U1dtuniBU9VpVcAaFC3pOwuBpWN2MgLQtrHPvTwqmr
WwWw4GuplztA3/XByK5FMIYezyuPIjvc5qPwzO50iNu2in5vSsVP/3H8IfLzAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNttpr6x2L0oc5
ffSIKwls1M7G8DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IN3loVURmdW40WExFQWVyeTcxbnUzajh5U2NMbUUzancy
a0ptdlJOemI4ay8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSDd5aFVEZnVuNFhMRUFlcnk3MW51M2o4eVNjTG1FM2p3
MmtKbXZSTnpiOGsvMC84REI2REE2QkVCMUQ4QkQyODczOTdERjQ4ODJCMDk2Q0Q0
Q0VDNkYwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKdrAwDQQCAAIwBwMF
ACgEJUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAhMMA0GCSqGSIb3DQEBCwUA
A4IBAQBwd58s5JavsuFd01gFpBqZYprpxin7L8dJR4AUDW1P5nCU5KHqneF1zMSR
/Mk5e8XYuhkNAotQeSn7CmXoCvyDV/gxAB7p2pyjhZnt8ulUF62y66yz1V6rGPdl
57OlM2E57BOYAWvKIwj4V6WeYfMbHkx5OG2PvJjrIeIylUAF1EpPvzY56fNsK7OT
cRX5G8drRBadI1dkCnbO51Bt4HZGoEOpjjQDZs+J7nBY87NRHet0cWldTk3OXGm1
xNTuh47Pldr2YbqHgHXh7aHLSiGLEXacCt6I2k49fOoe2O1rvbtUhMZhweH9CmVb
hEfhqx6NJ4nwI0mRPYF12NENdVms
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org