Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/919E622EF3F1FA79978A87AB73285ED4B5F50E48.cer
File:                     919E622EF3F1FA79978A87AB73285ED4B5F50E48.cer (raw, json)
Hash identifier:          10OZ5FboenYZER70z63iEejqYtnECvpUh9oNW0auwmI=
Subject key identifier:   91:9E:62:2E:F3:F1:FA:79:97:8A:87:AB:73:28:5E:D4:B5:F5:0E:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A1A95C61E5E50C0FB5AF167290EB4680CDC5646
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/919E622EF3F1FA79978A87AB73285ED4B5F50E48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Aug 2023 11:55:28 +0000
Certificate not after:    Wed 21 Aug 2024 12:00:28 +0000
Subordinate resources:    AS: 272674
                          IP: 179.63.48.0/22
                          IP: 2804:86e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1a:95:c6:1e:5e:50:c0:fb:5a:f1:67:29:0e:b4:68:0c:dc:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 23 11:55:28 2023 GMT
            Not After : Aug 21 12:00:28 2024 GMT
        Subject: CN=919E622EF3F1FA79978A87AB73285ED4B5F50E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:b4:4b:00:7a:38:8d:a6:6e:b0:1c:89:72:
                    16:55:b5:9d:92:6d:4c:b1:b2:cb:a1:1b:30:fe:c2:
                    ba:3c:fa:4a:d6:93:9b:6f:cb:90:86:7a:44:f4:f8:
                    e1:f9:bf:33:2c:67:cf:2e:7c:4d:d0:30:e2:cb:a1:
                    7e:4d:52:ae:4f:fb:19:6b:be:37:12:ff:b6:eb:dd:
                    2a:e4:b2:a7:1a:d6:bd:72:48:07:c2:79:f7:f5:e3:
                    1a:28:50:c5:4c:eb:60:d1:4b:1a:47:53:84:0e:6d:
                    92:13:3b:59:31:40:ee:0f:86:bb:c3:58:69:ad:b3:
                    74:f1:5a:88:18:a2:cc:b5:35:89:84:9b:58:3b:2b:
                    2b:96:8c:db:c6:30:7d:d9:29:83:47:db:7a:b5:47:
                    7f:26:0d:df:7f:c2:80:30:39:28:b5:63:9a:b9:e1:
                    e7:88:6e:04:af:ef:aa:de:b1:77:0e:37:78:15:d2:
                    be:c0:dd:32:1f:9e:4e:ab:c0:e3:07:85:14:f1:74:
                    49:bc:70:ed:f8:69:8c:d6:4d:5a:92:12:0b:38:58:
                    c1:37:43:db:9f:6e:11:e4:89:24:05:ed:68:30:c8:
                    a5:4d:5c:5d:83:e6:3b:6b:9d:51:0c:2f:7c:7a:78:
                    1f:2b:1a:07:23:1e:e6:f6:49:ec:58:20:7b:31:59:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:9E:62:2E:F3:F1:FA:79:97:8A:87:AB:73:28:5E:D4:B5:F5:0E:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/919E622EF3F1FA79978A87AB73285ED4B5F50E48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.48.0/22
                IPv6:
                  2804:86e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272674

    Signature Algorithm: sha256WithRSAEncryption
         a8:11:eb:28:62:3e:cd:8d:a0:ef:1e:25:e4:d6:30:01:50:59:
         a6:50:f5:d9:39:b4:b0:61:05:02:0c:4b:13:fc:e1:6c:69:c5:
         49:8c:90:7f:5b:1b:17:b9:bb:b9:bb:00:90:79:c8:f5:8f:b2:
         35:c2:38:88:50:1d:70:6e:e1:78:61:d8:fd:4c:59:a6:dc:2d:
         b4:52:4c:16:b4:4a:42:ba:04:ac:75:4c:33:47:0e:e2:f2:16:
         9c:dd:71:b8:78:b1:52:d6:4e:fa:a7:32:60:35:57:20:61:d0:
         83:67:1d:17:7d:ba:af:9c:af:93:83:b7:3f:e8:f9:ee:73:a6:
         5e:8c:cc:e7:2a:a8:09:bf:2f:92:c8:d9:7e:dc:61:18:e2:78:
         15:95:0c:8e:40:bc:e4:bd:8a:1e:ba:7d:e5:b3:b2:7e:db:23:
         c9:d2:61:9b:42:3a:fa:ea:c1:ef:c0:36:0e:f6:7f:d1:c1:17:
         94:f3:e4:38:6c:b1:45:0b:6b:d7:56:3e:4f:b1:1c:df:d9:f3:
         3e:06:07:fb:da:1e:7b:c1:c2:e1:6c:9f:fb:55:ef:d3:65:08:
         39:fb:2c:42:69:cf:6c:ae:ef:a9:c7:01:23:a4:51:66:b8:27:
         55:ce:9f:3c:e4:2b:f4:ee:fb:75:5b:ed:a2:7b:48:bd:22:5f:
         7a:cb:c5:52
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUehqVxh5eUMD7WvFnKQ60aAzcVkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjMxMTU1MjhaFw0yNDA4MjExMjAwMjhaMDMxMTAvBgNV
BAMTKDkxOUU2MjJFRjNGMUZBNzk5NzhBODdBQjczMjg1RUQ0QjVGNTBFNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWbbRLAHo4jaZusByJchZVtZ2S
bUyxssuhGzD+wro8+krWk5tvy5CGekT0+OH5vzMsZ88ufE3QMOLLoX5NUq5P+xlr
vjcS/7br3Srksqca1r1ySAfCeff14xooUMVM62DRSxpHU4QObZITO1kxQO4PhrvD
WGmts3TxWogYosy1NYmEm1g7KyuWjNvGMH3ZKYNH23q1R38mDd9/woAwOSi1Y5q5
4eeIbgSv76resXcON3gV0r7A3TIfnk6rwOMHhRTxdEm8cO34aYzWTVqSEgs4WME3
Q9ufbhHkiSQF7WgwyKVNXF2D5jtrnVEML3x6eB8rGgcjHub2SexYIHsxWbkfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRnmIu8/H6eZeK
h6tzKF7UtfUOSDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81aTg2d1Y1cUZiN05Ka0RVblFxRnE2UFBuNDdZOTdpaXBj
RjFodkc0bVBkRy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNWk4NndWNXFGYjdOSmtEVW5RcUZxNlBQbjQ3WTk3aWlw
Y0YxaHZHNG1QZEcvMC85MTlFNjIyRUYzRjFGQTc5OTc4QTg3QUI3MzI4NUVENEI1
RjUwRTQ4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzPzAwDQQCAAIwBwMF
ACgEhugwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCkiMA0GCSqGSIb3DQEBCwUA
A4IBAQCoEesoYj7NjaDvHiXk1jABUFmmUPXZObSwYQUCDEsT/OFsacVJjJB/WxsX
ubu5uwCQecj1j7I1wjiIUB1wbuF4Ydj9TFmm3C20UkwWtEpCugSsdUwzRw7i8hac
3XG4eLFS1k76pzJgNVcgYdCDZx0XfbqvnK+Tg7c/6Pnuc6ZejMznKqgJvy+SyNl+
3GEY4ngVlQyOQLzkvYoeun3ls7J+2yPJ0mGbQjr66sHvwDYO9n/RwReU8+Q4bLFF
C2vXVj5PsRzf2fM+Bgf72h57wcLhbJ/7Ve/TZQg5+yxCac9sru+pxwEjpFFmuCdV
zp885Cv07vt1W+2ie0i9Il96y8VS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org