Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD11323C0E6BB3E7C20013E38E3719626E213855.cer
File:                     AD11323C0E6BB3E7C20013E38E3719626E213855.cer (raw, json)
Hash identifier:          vaO2D/NfVt0VLwND2pLAqaQWLDZbvxMPAV+B2QJNeog=
Subject key identifier:   AD:11:32:3C:0E:6B:B3:E7:C2:00:13:E3:8E:37:19:62:6E:21:38:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       447B18EEFB1FF496C212C936F1540554709CF268
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/AD11323C0E6BB3E7C20013E38E3719626E213855.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 12 Mar 2023 17:10:39 +0000
Certificate not after:    Sun 10 Mar 2024 17:15:39 +0000
Subordinate resources:    AS: 61951
                          IP: 201.219.248.0/22
                          IP: 2804:18c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7b:18:ee:fb:1f:f4:96:c2:12:c9:36:f1:54:05:54:70:9c:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 17:10:39 2023 GMT
            Not After : Mar 10 17:15:39 2024 GMT
        Subject: CN=AD11323C0E6BB3E7C20013E38E3719626E213855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:58:ba:02:95:cb:24:03:51:5a:5c:18:7c:
                    b2:55:de:b7:1a:71:fd:d7:2c:46:e3:25:0d:3c:5d:
                    5b:be:f2:41:00:9d:e1:9a:7b:94:d2:25:e4:fa:fa:
                    26:1f:65:7b:6e:f4:00:6a:58:9a:b6:5e:b2:fb:aa:
                    b9:9a:34:a5:b9:20:c2:f7:cc:26:0b:0f:63:be:55:
                    ab:ee:97:d1:1b:49:d1:83:fb:1e:25:3b:5b:06:a3:
                    79:c5:8b:91:9d:fb:1a:53:b1:4f:8e:de:dd:83:ac:
                    3e:60:b5:c3:4f:f9:c7:f6:7a:bf:a8:47:50:77:95:
                    2c:df:ea:da:50:a2:e1:48:00:c6:00:5e:8f:ad:98:
                    db:d3:44:0f:c9:a5:08:c6:66:7d:32:25:ee:0e:5d:
                    e3:dd:82:b5:2a:83:1a:37:f7:89:d4:51:10:c4:36:
                    96:f4:22:fd:30:0d:79:bb:19:d1:fb:14:ec:27:fb:
                    ff:f0:72:45:81:b7:ce:52:99:0a:ca:5b:7b:c3:26:
                    ed:5f:20:07:c4:04:86:a1:19:4b:ce:d3:b6:41:1d:
                    2d:99:61:7b:be:3c:c1:de:52:19:e9:6b:04:3f:ab:
                    f9:b2:34:61:31:7f:81:41:72:b9:b6:30:6e:21:15:
                    28:73:8f:8d:6d:39:2d:2d:e6:17:f2:21:27:1b:10:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:11:32:3C:0E:6B:B3:E7:C2:00:13:E3:8E:37:19:62:6E:21:38:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/AD11323C0E6BB3E7C20013E38E3719626E213855.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.248.0/22
                IPv6:
                  2804:18c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61951

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:63:f3:88:36:68:34:eb:40:fb:33:34:d0:3b:62:68:4d:
         7f:05:1a:38:47:26:dd:43:d9:60:3c:5b:86:a1:f9:5e:f9:d2:
         a5:85:9d:f7:fb:59:6d:c6:78:f9:78:ad:98:2a:46:cc:1b:4b:
         10:a3:60:2a:21:87:ec:63:fb:e6:d1:74:87:94:98:65:9c:28:
         b9:d7:1e:d0:6b:43:f1:b6:67:2f:b1:21:9d:45:06:7e:e1:76:
         8a:27:5c:91:75:e5:19:6b:b4:68:e3:fa:b8:25:5d:0a:b6:ad:
         4b:76:0a:56:a6:4c:c5:60:1d:92:c8:de:6b:97:5b:56:5f:f3:
         9a:df:a9:10:af:7e:6e:5c:90:ae:40:a4:f2:45:c2:da:51:35:
         c4:02:59:9c:73:bb:f3:4f:cb:44:dc:83:7a:cd:58:d4:fe:c4:
         4e:c5:ac:c0:48:ac:91:2a:bb:3c:c3:89:eb:12:ec:45:b0:e0:
         88:49:b5:69:89:b7:bd:88:73:ac:36:e4:a3:2f:57:53:41:63:
         64:33:50:dd:d3:b7:ba:a4:f2:5c:6b:60:3d:8e:4c:5e:27:70:
         ec:c5:05:2f:47:84:53:c3:32:75:55:88:1b:8f:a1:0c:ab:7d:
         59:a9:dc:42:56:65:91:9c:d6:26:aa:a0:66:93:91:05:75:23:
         ff:2d:2b:6f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIURHsY7vsf9JbCEsk28VQFVHCc8mgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMTIxNzEwMzlaFw0yNDAzMTAxNzE1MzlaMDMxMTAvBgNV
BAMTKEFEMTEzMjNDMEU2QkIzRTdDMjAwMTNFMzhFMzcxOTYyNkUyMTM4NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4Fi6ApXLJANRWlwYfLJV3rca
cf3XLEbjJQ08XVu+8kEAneGae5TSJeT6+iYfZXtu9ABqWJq2XrL7qrmaNKW5IML3
zCYLD2O+Vavul9EbSdGD+x4lO1sGo3nFi5Gd+xpTsU+O3t2DrD5gtcNP+cf2er+o
R1B3lSzf6tpQouFIAMYAXo+tmNvTRA/JpQjGZn0yJe4OXePdgrUqgxo394nUURDE
Npb0Iv0wDXm7GdH7FOwn+//wckWBt85SmQrKW3vDJu1fIAfEBIahGUvO07ZBHS2Z
YXu+PMHeUhnpawQ/q/myNGExf4FBcrm2MG4hFShzj41tOS0t5hfyIScbEGC/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStETI8Dmuz58IA
E+OONxlibiE4VTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENkx1WFB5eU1ETXBQcjFzQldaRko0UnY1UHliYkRXNmlT
TmNGM2VKaEo4Ti8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENkx1WFB5eU1ETXBQcjFzQldaRko0UnY1UHliYkRXNmlT
TmNGM2VKaEo4Ti8wL0FEMTEzMjNDMEU2QkIzRTdDMjAwMTNFMzhFMzcxOTYyNkUy
MTM4NTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsnb+DANBAIAAjAHAwUA
KAQYwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8f8wDQYJKoZIhvcNAQELBQAD
ggEBAAhvY/OINmg060D7MzTQO2JoTX8FGjhHJt1D2WA8W4ah+V750qWFnff7WW3G
ePl4rZgqRswbSxCjYCohh+xj++bRdIeUmGWcKLnXHtBrQ/G2Zy+xIZ1FBn7hdoon
XJF15RlrtGjj+rglXQq2rUt2ClamTMVgHZLI3muXW1Zf85rfqRCvfm5ckK5ApPJF
wtpRNcQCWZxzu/NPy0Tcg3rNWNT+xE7FrMBIrJEquzzDiesS7EWw4IhJtWmJt72I
c6w25KMvV1NBY2QzUN3Tt7qk8lxrYD2OTF4ncOzFBS9HhFPDMnVViBuPoQyrfVmp
3EJWZZGc1iaqoGaTkQV1I/8tK28=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org