Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FB2CF13A6347C7DFF2D9B8F3DE050464D5F52B1.cer
File:                     8FB2CF13A6347C7DFF2D9B8F3DE050464D5F52B1.cer (raw, json)
Hash identifier:          bTHPvXySqMTzSOhJkE0Ed9tmT0wujjjGhutOrlqKEJ4=
Subject key identifier:   8F:B2:CF:13:A6:34:7C:7D:FF:2D:9B:8F:3D:E0:50:46:4D:5F:52:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5DF992AF22928F64165F412CFC9445709433EAA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/8FB2CF13A6347C7DFF2D9B8F3DE050464D5F52B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Nov 2022 11:08:26 +0000
Certificate not after:    Mon 20 Nov 2023 11:13:26 +0000
Subordinate resources:    AS: 268138
                          IP: 45.168.64.0/22
                          IP: 2804:5898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f9:92:af:22:92:8f:64:16:5f:41:2c:fc:94:45:70:94:33:ea:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 11:08:26 2022 GMT
            Not After : Nov 20 11:13:26 2023 GMT
        Subject: CN=8FB2CF13A6347C7DFF2D9B8F3DE050464D5F52B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:a3:16:da:4c:11:ae:a5:f8:d7:c6:04:b1:
                    bf:5e:32:ca:ec:14:61:e4:51:df:61:6d:9b:88:86:
                    28:a5:29:a9:c8:43:5d:52:10:05:b1:93:6f:ab:7b:
                    4c:f3:b7:27:5d:06:6c:6f:56:56:da:99:d9:c2:30:
                    f6:cb:93:e6:2f:55:5b:85:c0:73:83:b9:05:2a:2e:
                    a5:f3:e5:2d:3f:4e:32:3c:97:18:54:9a:f2:fa:d9:
                    b9:4d:b3:4a:c1:8f:1c:f0:17:40:6c:a9:86:cd:e1:
                    54:f6:b2:e2:59:8d:f3:b4:f9:6b:a0:cc:e2:d4:61:
                    2c:41:89:0b:2c:e3:c2:93:30:a8:ee:b2:fa:9c:78:
                    9f:6a:59:27:42:fd:9c:e2:4a:9f:eb:6a:24:90:6c:
                    4d:4a:40:29:d7:85:c3:0b:4a:6a:17:8e:6b:38:60:
                    46:23:19:f1:3c:08:56:11:7e:69:b2:52:03:01:92:
                    30:ab:34:0c:0d:fe:91:75:e6:2b:da:71:7d:b4:14:
                    3c:56:0f:f4:ad:be:fd:45:43:68:0c:e8:47:3e:14:
                    7e:c9:78:12:17:4e:2a:aa:b4:06:1d:44:7c:0f:5b:
                    84:e9:02:fd:c5:76:c1:9b:10:ad:e2:a5:46:c9:80:
                    43:97:e0:56:af:6e:f5:af:d5:01:29:be:de:35:1a:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:B2:CF:13:A6:34:7C:7D:FF:2D:9B:8F:3D:E0:50:46:4D:5F:52:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/8FB2CF13A6347C7DFF2D9B8F3DE050464D5F52B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.64.0/22
                IPv6:
                  2804:5898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268138

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:4e:5f:f6:2d:ed:c0:10:8a:00:16:28:e1:77:92:03:a6:
         b5:25:4b:57:42:9b:55:6c:27:a1:4a:53:27:57:44:e7:6b:4f:
         6e:34:6a:78:59:28:93:99:cf:a7:16:62:81:0a:f0:ee:ef:0f:
         ac:25:72:3a:bd:84:73:b3:f5:ec:bb:46:90:bc:b0:73:5f:23:
         08:5d:60:13:00:09:cb:b8:a5:a1:fa:70:8d:ab:df:d3:65:15:
         b7:c7:2e:44:95:4c:14:63:c5:1f:3a:5c:e1:eb:c4:be:c7:6d:
         8b:92:db:c0:86:33:68:fe:e6:5a:cc:17:ec:50:c7:98:18:81:
         42:16:c7:85:1f:ed:42:ce:4c:56:ef:32:c6:fe:64:78:17:35:
         6b:13:58:37:65:2f:ca:f6:c6:b5:e8:a2:1f:c8:c0:2b:69:07:
         67:61:70:96:27:4c:57:47:55:d1:d8:91:ba:bb:39:a4:ac:80:
         35:9e:4f:d2:89:6a:be:3c:91:f4:b7:25:6f:fc:95:1a:e8:e6:
         e2:9b:a3:82:44:80:cd:f8:40:ac:b2:b9:62:88:1e:5a:97:a8:
         db:e4:dc:fa:ec:a6:3d:9d:31:c8:70:2f:5f:8c:53:9e:81:23:
         ed:d7:1a:c1:b2:f5:b6:11:47:59:09:45:4b:1c:c5:92:64:09:
         1d:a7:83:ca
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUXfmSryKSj2QWX0Es/JRFcJQz6qUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMjExMTA4MjZaFw0yMzExMjAxMTEzMjZaMDMxMTAvBgNV
BAMTKDhGQjJDRjEzQTYzNDdDN0RGRjJEOUI4RjNERTA1MDQ2NEQ1RjUyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPa6MW2kwRrqX418YEsb9eMsrs
FGHkUd9hbZuIhiilKanIQ11SEAWxk2+re0zztyddBmxvVlbamdnCMPbLk+YvVVuF
wHODuQUqLqXz5S0/TjI8lxhUmvL62blNs0rBjxzwF0BsqYbN4VT2suJZjfO0+Wug
zOLUYSxBiQss48KTMKjusvqceJ9qWSdC/ZziSp/raiSQbE1KQCnXhcMLSmoXjms4
YEYjGfE8CFYRfmmyUgMBkjCrNAwN/pF15ivacX20FDxWD/Stvv1FQ2gM6Ec+FH7J
eBIXTiqqtAYdRHwPW4TpAv3FdsGbEK3ipUbJgEOX4FavbvWv1QEpvt41GsnZAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPss8TpjR8ff8t
m4894FBGTV9SsTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydloyYkd1TDRzRDI2cUR6RUVIV1NoYm4xa3BoQnkzYVI5
NWZaWEEzajJoUy8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydloyYkd1TDRzRDI2cUR6RUVIV1NoYm4xa3BoQnkzYVI5
NWZaWEEzajJoUy8xLzhGQjJDRjEzQTYzNDdDN0RGRjJEOUI4RjNERTA1MDQ2NEQ1
RjUyQjEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2oQDANBAIAAjAHAwUA
KARYmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF2owDQYJKoZIhvcNAQELBQAD
ggEBAHDxTl/2Le3AEIoAFijhd5IDprUlS1dCm1VsJ6FKUydXROdrT240anhZKJOZ
z6cWYoEK8O7vD6wlcjq9hHOz9ey7RpC8sHNfIwhdYBMACcu4paH6cI2r39NlFbfH
LkSVTBRjxR86XOHrxL7HbYuS28CGM2j+5lrMF+xQx5gYgUIWx4Uf7ULOTFbvMsb+
ZHgXNWsTWDdlL8r2xrXooh/IwCtpB2dhcJYnTFdHVdHYkbq7OaSsgDWeT9KJar48
kfS3JW/8lRro5uKbo4JEgM34QKyyuWKIHlqXqNvk3Prspj2dMchwL1+MU56BI+3X
GsGy9bYRR1kJRUscxZJkCR2ng8o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org