Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/932FD06E95E9079EDF40C5BB219C0F5BBA3791B3.cer
File:                     932FD06E95E9079EDF40C5BB219C0F5BBA3791B3.cer (raw, json)
Hash identifier:          KBCDsD9U3TFuapAkW6BKkz5tHa1c3xtI8U/fdhCDvH8=
Subject key identifier:   93:2F:D0:6E:95:E9:07:9E:DF:40:C5:BB:21:9C:0F:5B:BA:37:91:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78EE9CCD7D1030A275FD83BBB54BA3308CDA57CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/932FD06E95E9079EDF40C5BB219C0F5BBA3791B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 Sep 2022 15:48:26 +0000
Certificate not after:    Sat 02 Sep 2023 15:53:26 +0000
Subordinate resources:    AS: 264415
                          IP: 131.221.20.0/22
                          IP: 2804:1e38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ee:9c:cd:7d:10:30:a2:75:fd:83:bb:b5:4b:a3:30:8c:da:57:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  3 15:48:26 2022 GMT
            Not After : Sep  2 15:53:26 2023 GMT
        Subject: CN=932FD06E95E9079EDF40C5BB219C0F5BBA3791B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:8f:07:4e:1b:1c:23:e4:5b:9b:c4:99:e7:
                    73:84:92:c8:64:0d:58:f8:9e:69:ac:d6:21:ba:90:
                    51:7a:99:c1:82:8e:e6:6e:69:62:c1:8f:3b:86:0d:
                    c0:5e:62:9e:19:4c:9f:39:73:73:e6:d0:a7:81:25:
                    c7:9a:b4:fd:1b:be:c0:6f:7c:a6:62:40:3a:f1:e3:
                    59:6e:3d:17:5c:d9:98:4f:77:f8:49:0c:ba:59:ae:
                    b7:bc:a4:64:b1:6d:1f:b6:e8:5c:cb:f2:18:f1:f7:
                    af:32:b0:d8:11:46:b1:10:c1:c1:2b:48:26:dc:4f:
                    e8:43:58:57:ce:b2:63:8e:0c:00:87:88:a1:31:ba:
                    77:4c:e1:ea:75:ad:5e:53:e9:56:aa:fa:24:87:21:
                    f8:03:59:42:30:56:99:f4:a5:5a:7e:d2:5c:53:e1:
                    89:bd:ea:91:39:05:84:25:0f:87:88:72:65:28:f8:
                    65:e9:97:ad:20:af:5f:8f:ba:54:35:77:9c:24:5c:
                    27:ad:b8:49:d3:ba:68:a0:59:ca:64:c9:23:66:9a:
                    ae:9d:dd:b4:43:00:63:56:8f:8e:6d:db:c1:f2:41:
                    3b:6e:90:23:ba:d9:0d:a0:59:58:ba:32:52:8f:a5:
                    1a:c1:fb:ef:1a:dd:6e:18:93:2f:c9:f6:48:c7:e3:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:2F:D0:6E:95:E9:07:9E:DF:40:C5:BB:21:9C:0F:5B:BA:37:91:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/932FD06E95E9079EDF40C5BB219C0F5BBA3791B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.20.0/22
                IPv6:
                  2804:1e38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264415

    Signature Algorithm: sha256WithRSAEncryption
         72:15:a0:28:8b:b0:30:99:7f:15:c4:99:63:02:45:29:99:ad:
         47:0b:f3:18:f4:53:c2:90:6d:19:c3:85:08:c3:d0:57:06:28:
         51:85:c9:7e:8e:9a:78:f9:94:09:15:98:42:b3:55:02:97:db:
         ed:a6:f5:52:81:f4:ef:77:84:8b:8b:c3:33:31:03:05:12:72:
         70:85:d5:8d:4e:f7:67:3c:3a:88:46:e3:3f:0b:4b:cd:90:d8:
         ec:2f:f3:f4:38:14:4d:80:26:2f:81:f2:15:96:67:64:5a:56:
         11:71:18:1d:3b:cb:ba:c3:94:d0:03:4c:84:28:f2:d1:00:f1:
         09:78:e6:fb:d7:53:95:57:19:43:da:47:53:24:e6:39:93:7d:
         3d:8b:31:51:d0:11:66:69:e3:a2:d3:d4:e8:09:29:b3:a6:c6:
         a7:42:74:17:ed:d1:4b:30:3c:a5:6c:13:4f:dd:4f:18:16:2d:
         0c:91:f8:8e:cc:24:10:0a:57:8f:8d:88:d4:53:c4:b0:59:07:
         e7:2a:4c:5b:b9:92:40:fd:13:88:73:5c:b4:d9:37:c1:9b:61:
         e3:14:b9:49:74:c2:ea:3a:d4:cc:8e:04:c7:85:c3:55:8a:9a:
         a9:73:2a:1c:68:41:b8:4a:90:cd:4e:7b:5d:1b:7d:bc:ce:90:
         49:ee:f9:c4
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUeO6czX0QMKJ1/YO7tUujMIzaV80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MDMxNTQ4MjZaFw0yMzA5MDIxNTUzMjZaMDMxMTAvBgNV
BAMTKDkzMkZEMDZFOTVFOTA3OUVERjQwQzVCQjIxOUMwRjVCQkEzNzkxQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszo8HThscI+Rbm8SZ53OEkshk
DVj4nmms1iG6kFF6mcGCjuZuaWLBjzuGDcBeYp4ZTJ85c3Pm0KeBJceatP0bvsBv
fKZiQDrx41luPRdc2ZhPd/hJDLpZrre8pGSxbR+26FzL8hjx968ysNgRRrEQwcEr
SCbcT+hDWFfOsmOODACHiKExundM4ep1rV5T6Vaq+iSHIfgDWUIwVpn0pVp+0lxT
4Ym96pE5BYQlD4eIcmUo+GXpl60gr1+PulQ1d5wkXCetuEnTumigWcpkySNmmq6d
3bRDAGNWj45t28HyQTtukCO62Q2gWVi6MlKPpRrB++8a3W4Yky/J9kjH43OtAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTL9BulekHnt9A
xbshnA9bujeRszAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TjhBQncyOXFUQm01NUpVZzkzSnNMNlQxYXE5UkxES2h3
Qk13eXlrbmRBTi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNU44QUJ3MjlxVEJtNTVKVWc5M0pzTDZUMWFxOVJMREto
d0JNd3l5a25kQU4vMC85MzJGRDA2RTk1RTkwNzlFREY0MEM1QkIyMTlDMEY1QkJB
Mzc5MUIzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKD3RQwDQQCAAIwBwMF
ACgEHjgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAjfMA0GCSqGSIb3DQEBCwUA
A4IBAQByFaAoi7AwmX8VxJljAkUpma1HC/MY9FPCkG0Zw4UIw9BXBihRhcl+jpp4
+ZQJFZhCs1UCl9vtpvVSgfTvd4SLi8MzMQMFEnJwhdWNTvdnPDqIRuM/C0vNkNjs
L/P0OBRNgCYvgfIVlmdkWlYRcRgdO8u6w5TQA0yEKPLRAPEJeOb711OVVxlD2kdT
JOY5k309izFR0BFmaeOi09ToCSmzpsanQnQX7dFLMDylbBNP3U8YFi0MkfiOzCQQ
ClePjYjUU8SwWQfnKkxbuZJA/ROIc1y02TfBm2HjFLlJdMLqOtTMjgTHhcNVipqp
cyocaEG4SpDNTntdG328zpBJ7vnE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org