Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
File:                     8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer (raw, json)
Hash identifier:          BRcOoYuW29SCx9amcahLxPicCioJfBUC0f0ledbQj9w=
Subject key identifier:   8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       782F5ABF96E09AACC508462E8096D5BCB11D5DD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 22 Oct 2023 19:39:34 +0000
Certificate not after:    Sun 20 Oct 2024 19:44:34 +0000
Subordinate resources:    AS: 266630
                          IP: 128.201.136.0/22
                          IP: 2804:3ef0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2f:5a:bf:96:e0:9a:ac:c5:08:46:2e:80:96:d5:bc:b1:1d:5d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 19:39:34 2023 GMT
            Not After : Oct 20 19:44:34 2024 GMT
        Subject: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:d8:07:ac:0a:96:20:95:f6:5e:74:1c:84:
                    6c:0c:bd:c7:63:11:7c:c7:67:4d:52:41:82:4a:c4:
                    93:79:81:21:e3:d9:09:37:99:99:9e:15:6d:2c:84:
                    ca:33:ad:6e:1d:97:57:24:8e:65:c3:bb:95:31:54:
                    29:cb:2a:f4:82:89:fe:d6:b9:47:48:c9:fa:bf:5c:
                    6e:84:e3:c3:d2:5e:b2:1f:52:0c:9f:93:1a:d5:8f:
                    e8:21:e2:3c:f7:63:8e:67:08:83:b1:cd:e5:aa:0e:
                    60:c9:3d:2e:2d:49:57:44:8e:f9:cb:3e:f2:fd:05:
                    47:2a:88:0c:7e:31:25:09:a4:b7:43:ce:9d:79:b3:
                    e7:dc:ac:29:6e:49:10:9f:b1:a3:6f:6c:2f:cb:db:
                    19:bd:c2:c8:06:81:a2:69:f4:0d:86:0a:fe:2b:f2:
                    a2:dd:80:3e:69:bf:c8:21:a7:4a:78:71:f1:21:59:
                    7d:6c:25:54:cf:4e:c7:9a:84:c2:c7:97:55:04:3f:
                    f0:04:4a:71:7e:75:05:9c:a3:98:a2:4f:02:01:f0:
                    0a:86:06:1b:85:6d:4a:1b:25:1c:48:48:ce:c3:30:
                    42:38:fa:55:bf:41:be:8a:35:67:01:9f:73:d8:bc:
                    00:53:81:d3:49:ae:11:72:b2:91:5c:e9:b0:1d:a2:
                    f2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.136.0/22
                IPv6:
                  2804:3ef0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266630

    Signature Algorithm: sha256WithRSAEncryption
         81:60:d8:98:2f:bc:d3:c2:5b:fd:cb:09:25:b3:e0:67:9e:50:
         67:db:9e:41:8d:3b:96:46:2e:11:9f:57:9b:96:f1:c2:b0:a3:
         79:45:6c:15:f1:17:b6:72:b9:81:8c:7a:82:09:31:fb:db:5f:
         60:ec:20:2d:6a:51:a3:59:66:cf:4f:ea:c7:0c:1b:ea:9a:3c:
         fa:04:8f:38:92:fe:82:3c:97:b2:60:e8:bb:8e:be:13:c4:09:
         e4:b5:c0:79:f9:aa:95:ab:8a:6c:a6:60:d3:de:82:9d:36:46:
         34:57:ff:e6:a9:07:35:7e:ee:ed:48:af:67:12:2d:9d:ea:d0:
         e2:e0:c3:24:33:23:65:b0:ba:4d:ad:81:02:bd:e6:d6:16:dd:
         ca:1a:20:3b:1f:be:1e:a8:c2:11:cb:da:02:02:f0:3b:c5:17:
         99:3f:89:f7:9b:74:c3:60:37:50:9a:6a:b4:41:7a:34:6e:62:
         3b:cd:87:8e:b8:dc:dd:80:c4:7f:52:e3:e8:56:a2:a9:e1:54:
         53:6c:b6:2f:41:67:13:ec:39:5b:34:60:2d:b5:f0:72:6a:b0:
         2c:20:11:36:64:21:78:e4:ff:99:32:eb:4a:7b:06:87:68:52:
         63:cb:b5:e4:b0:3f:94:94:90:2d:8f:2e:88:16:99:e8:39:33:
         54:33:94:aa
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUeC9av5bgmqzFCEYugJbVvLEdXdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjIxOTM5MzRaFw0yNDEwMjAxOTQ0MzRaMDMxMTAvBgNV
BAMTKDhGRDk4Q0Q4RDU3RDRCMjU0RUY1QjJCNkQ3QzQ2RjZCMDAyNjM2OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfK9gHrAqWIJX2XnQchGwMvcdj
EXzHZ01SQYJKxJN5gSHj2Qk3mZmeFW0shMozrW4dl1ckjmXDu5UxVCnLKvSCif7W
uUdIyfq/XG6E48PSXrIfUgyfkxrVj+gh4jz3Y45nCIOxzeWqDmDJPS4tSVdEjvnL
PvL9BUcqiAx+MSUJpLdDzp15s+fcrCluSRCfsaNvbC/L2xm9wsgGgaJp9A2GCv4r
8qLdgD5pv8ghp0p4cfEhWX1sJVTPTseahMLHl1UEP/AESnF+dQWco5iiTwIB8AqG
BhuFbUobJRxISM7DMEI4+lW/Qb6KNWcBn3PYvABTgdNJrhFyspFc6bAdovJxAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSP2YzY1X1LJU71
srbXxG9rACY2nzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zd1FaRGhlUE1vMTV4U1NVSHR2aGdQN1A1ZDFSYzVOb3Bi
c3pObXU0eFozRS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM3dRWkRoZVBNbzE1eFNTVUh0dmhnUDdQNWQxUmM1Tm9w
YnN6Tm11NHhaM0UvMC84RkQ5OENEOEQ1N0Q0QjI1NEVGNUIyQjZEN0M0NkY2QjAw
MjYzNjlGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKAyYgwDQQCAAIwBwMF
ACgEPvAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBGGMA0GCSqGSIb3DQEBCwUA
A4IBAQCBYNiYL7zTwlv9ywkls+BnnlBn255BjTuWRi4Rn1eblvHCsKN5RWwV8Re2
crmBjHqCCTH7219g7CAtalGjWWbPT+rHDBvqmjz6BI84kv6CPJeyYOi7jr4TxAnk
tcB5+aqVq4pspmDT3oKdNkY0V//mqQc1fu7tSK9nEi2d6tDi4MMkMyNlsLpNrYEC
vebWFt3KGiA7H74eqMIRy9oCAvA7xReZP4n3m3TDYDdQmmq0QXo0bmI7zYeOuNzd
gMR/UuPoVqKp4VRTbLYvQWcT7DlbNGAttfByarAsIBE2ZCF45P+ZMutKewaHaFJj
y7XksD+UlJAtjy6IFpnoOTNUM5Sq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org