Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979.cer
File:                     921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979.cer (raw, json)
Hash identifier:          1LX7OE/itfK++P8Lyk5A+x5YHewXLZLHIZ6jj+5zY84=
Subject key identifier:   92:1B:04:DA:6E:7A:E8:B4:90:8B:2A:8A:2C:F8:DE:FD:63:BF:79:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E93C32407A6D5F80F91FF8A3255529C47BA6472
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 06:13:39 +0000
Certificate not after:    Tue 24 Sep 2024 06:18:39 +0000
Subordinate resources:    AS: 265166
                          IP: 167.249.24.0/22
                          IP: 2804:2ba4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:c3:24:07:a6:d5:f8:0f:91:ff:8a:32:55:52:9c:47:ba:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 06:13:39 2023 GMT
            Not After : Sep 24 06:18:39 2024 GMT
        Subject: CN=921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:36:b6:b3:6d:a9:8d:95:ac:aa:3f:19:b2:
                    82:5b:ba:09:eb:7e:d5:50:68:c2:2c:2f:90:91:dd:
                    b5:95:c5:81:d2:b2:45:2f:a4:ef:2b:90:53:af:56:
                    0f:6a:c1:c5:02:de:74:e3:e0:37:78:bc:85:24:bb:
                    28:25:29:46:c6:43:51:78:d3:17:b3:5e:d6:83:90:
                    f0:67:2e:56:e0:2a:08:be:44:74:66:69:ac:34:40:
                    d1:86:57:31:ed:be:26:01:84:64:5a:d0:ef:54:7e:
                    3e:10:42:6a:3f:ec:0d:37:ea:a7:dc:a5:1a:1f:21:
                    43:33:1a:d2:ad:5a:da:c4:ad:96:2d:d9:da:6c:68:
                    92:d4:32:88:9c:1a:51:cf:75:0f:c6:be:eb:41:93:
                    90:22:ad:f1:66:96:72:2c:c9:b3:2b:63:f4:13:54:
                    ba:5a:80:43:1d:86:9e:b9:37:4d:d0:40:0a:1c:53:
                    36:66:ad:e5:fd:9b:65:9c:72:3b:ed:67:99:bd:74:
                    47:56:ab:1c:ae:86:c0:4c:0b:47:39:ac:52:18:0e:
                    84:b6:b9:32:1f:cd:78:08:de:f8:52:91:4f:66:24:
                    fb:5a:b3:f7:cc:bd:c5:0a:5d:68:10:54:95:d3:c3:
                    6d:6b:83:d9:1b:9a:58:50:99:ea:b4:29:e1:e4:69:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:1B:04:DA:6E:7A:E8:B4:90:8B:2A:8A:2C:F8:DE:FD:63:BF:79:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.24.0/22
                IPv6:
                  2804:2ba4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265166

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:b3:bb:5f:d3:0b:2b:00:17:a6:d0:ca:22:e9:ab:06:e8:
         69:48:31:ca:a0:da:55:1b:45:ec:65:4e:7a:0a:e1:7d:d5:1e:
         bf:ae:d2:8d:ae:9a:1c:01:0f:04:7c:5d:0a:fb:26:c0:4b:6d:
         8f:34:0f:5c:db:45:39:b0:89:d6:d8:c7:1c:b8:80:44:e2:82:
         93:59:93:83:02:91:b5:6a:f4:87:dc:8e:c5:0f:f1:fd:1a:b7:
         e1:44:65:ed:15:33:0a:46:db:4d:ef:ad:e2:4b:e3:ed:6d:40:
         25:52:cd:83:96:2f:25:f4:ec:07:21:8c:71:e5:c0:9c:09:95:
         24:cd:6b:55:3a:70:15:a8:ff:23:77:2d:f6:71:e5:2d:f2:9e:
         58:f1:0e:7f:22:85:a5:bc:c1:83:9d:87:58:d0:8d:09:88:52:
         30:2d:63:06:51:35:25:7d:3a:82:20:1c:da:58:a1:6c:3a:eb:
         9a:73:a5:18:0e:e6:1c:14:82:d0:1b:df:fa:1d:18:ad:85:c9:
         7e:70:b8:4b:11:17:e2:95:c2:81:b5:1a:ed:0f:0c:96:61:5b:
         d9:76:1b:83:20:e8:77:36:f4:95:1c:09:e6:e4:3d:18:6b:c7:
         37:48:ad:7d:e3:95:c6:f2:31:d1:c4:38:25:4b:98:13:ee:86:
         b8:f5:0f:c6
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUfpPDJAem1fgPkf+KMlVSnEe6ZHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjYwNjEzMzlaFw0yNDA5MjQwNjE4MzlaMDMxMTAvBgNV
BAMTKDkyMUIwNERBNkU3QUU4QjQ5MDhCMkE4QTJDRjhERUZENjNCRjc5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87Da2s22pjZWsqj8ZsoJbugnr
ftVQaMIsL5CR3bWVxYHSskUvpO8rkFOvVg9qwcUC3nTj4Dd4vIUkuyglKUbGQ1F4
0xezXtaDkPBnLlbgKgi+RHRmaaw0QNGGVzHtviYBhGRa0O9Ufj4QQmo/7A036qfc
pRofIUMzGtKtWtrErZYt2dpsaJLUMoicGlHPdQ/GvutBk5AirfFmlnIsybMrY/QT
VLpagEMdhp65N03QQAocUzZmreX9m2WccjvtZ5m9dEdWqxyuhsBMC0c5rFIYDoS2
uTIfzXgI3vhSkU9mJPtas/fMvcUKXWgQVJXTw21rg9kbmlhQmeq0KeHkabFnAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSGwTabnrotJCL
Koos+N79Y795eTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KNEFuaUhidkdCVWpiY0NMU1h0bktXMmhTdzVjdGJvS0tw
OE5FakdyV1Q0eS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KNEFuaUhidkdCVWpiY0NMU1h0bktXMmhTdzVjdGJvS0tw
OE5FakdyV1Q0eS8wLzkyMUIwNERBNkU3QUU4QjQ5MDhCMkE4QTJDRjhERUZENjNC
Rjc5NzkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqf5GDANBAIAAjAHAwUA
KAQrpDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC84wDQYJKoZIhvcNAQELBQAD
ggEBAGTSs7tf0wsrABem0Moi6asG6GlIMcqg2lUbRexlTnoK4X3VHr+u0o2umhwB
DwR8XQr7JsBLbY80D1zbRTmwidbYxxy4gETigpNZk4MCkbVq9IfcjsUP8f0at+FE
Ze0VMwpG203vreJL4+1tQCVSzYOWLyX07AchjHHlwJwJlSTNa1U6cBWo/yN3LfZx
5S3ynljxDn8ihaW8wYOdh1jQjQmIUjAtYwZRNSV9OoIgHNpYoWw665pzpRgO5hwU
gtAb3/odGK2FyX5wuEsRF+KVwoG1Gu0PDJZhW9l2G4Mg6Hc29JUcCebkPRhrxzdI
rX3jlcbyMdHEOCVLmBPuhrj1D8Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org