Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD300DC6F24D48228F17188B196AF1F231037240.cer
File:                     AD300DC6F24D48228F17188B196AF1F231037240.cer (raw, json)
Hash identifier:          j5J7GiVEjZyeVaBCantrs1w3ce+rH15so2WWC/ZNM+4=
Subject key identifier:   AD:30:0D:C6:F2:4D:48:22:8F:17:18:8B:19:6A:F1:F2:31:03:72:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       020FEB28F908C93F82203E73381B7E3C89560A77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/AD300DC6F24D48228F17188B196AF1F231037240.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 29 Jul 2023 17:28:58 +0000
Certificate not after:    Sat 27 Jul 2024 17:33:58 +0000
Subordinate resources:    AS: 53049
                          IP: 200.142.184.0/22
                          IP: 2804:18c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0f:eb:28:f9:08:c9:3f:82:20:3e:73:38:1b:7e:3c:89:56:0a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 17:28:58 2023 GMT
            Not After : Jul 27 17:33:58 2024 GMT
        Subject: CN=AD300DC6F24D48228F17188B196AF1F231037240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:5e:84:7c:5a:a9:23:9d:2f:01:d3:cd:79:
                    98:fd:21:7d:b0:c8:39:93:00:22:91:6f:b6:ab:af:
                    ff:0d:93:db:4e:ee:b7:80:43:26:68:73:02:4c:f3:
                    5b:c4:15:a9:c2:02:43:da:f4:33:ea:41:fa:0f:da:
                    c5:2e:9b:a7:0b:86:2a:68:df:50:41:80:b2:61:cf:
                    a7:7f:7a:a5:4d:77:f7:5f:ec:16:0c:b5:47:80:a3:
                    05:4d:8a:8b:0d:a9:f3:f4:80:31:cc:23:20:f7:76:
                    12:75:b0:7b:99:22:30:1f:01:c9:d0:aa:69:7f:34:
                    71:45:dc:b6:80:1f:4d:2d:14:91:d7:b4:7d:f3:a2:
                    51:66:c2:53:c4:61:b6:e2:73:31:76:a9:97:dd:46:
                    f8:2c:4d:98:92:c4:36:60:c8:71:0c:f2:49:5f:bc:
                    56:71:6c:9b:75:51:bf:e6:26:a7:54:50:23:8a:11:
                    c0:23:52:3f:48:b5:57:8b:fb:09:d7:cb:d0:76:27:
                    87:54:b3:d8:b5:8a:44:23:43:eb:a5:9e:58:e5:ee:
                    07:87:63:31:2d:4e:6c:a5:46:75:8a:c8:e3:1d:e4:
                    53:1b:83:82:36:74:a7:16:67:ea:88:04:3b:e6:1a:
                    6e:86:2a:dc:96:6a:29:ba:fb:3c:fd:2b:85:ee:72:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:30:0D:C6:F2:4D:48:22:8F:17:18:8B:19:6A:F1:F2:31:03:72:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/AD300DC6F24D48228F17188B196AF1F231037240.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.184.0/22
                IPv6:
                  2804:18c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53049

    Signature Algorithm: sha256WithRSAEncryption
         b0:fb:df:e0:50:0b:15:46:c9:8b:ad:7c:e3:e9:35:e9:81:70:
         cb:64:5e:95:a1:4b:cc:a9:bb:1c:64:2f:aa:82:6e:a0:51:27:
         ec:d0:d8:1b:90:d1:a6:67:b8:b5:e4:9b:63:f7:e0:0f:a8:39:
         dc:84:31:11:cb:32:e5:37:84:6b:9c:b4:77:c1:0d:a1:85:7b:
         d8:0d:fa:55:5a:04:71:6e:81:32:70:02:74:19:72:df:4b:fa:
         10:5e:d6:b7:ef:77:f4:56:26:9c:36:4f:57:e5:ea:0e:d4:db:
         c9:5d:b3:8c:3b:38:cf:f5:bd:41:37:9d:b2:71:ed:bf:b5:62:
         da:7d:9b:8b:13:9d:aa:59:9f:aa:8b:b4:ad:2f:13:61:1d:28:
         67:cf:33:d1:ef:fc:2c:04:c4:b4:2c:b5:2d:d9:9e:d4:ea:89:
         04:95:92:1d:35:27:a2:2f:a1:d7:0a:1f:bb:5f:7d:ce:bb:b0:
         bd:13:1f:be:45:dc:38:98:bc:2f:b2:14:f8:01:97:f5:f7:9a:
         4a:01:fb:f1:8d:84:62:89:9c:e7:b4:a4:71:35:28:77:25:b1:
         5b:24:eb:22:3d:78:65:fe:8f:8e:d9:10:cb:2e:f8:28:6d:02:
         b7:f4:20:b9:95:ac:9f:1c:ac:35:8a:9e:68:9b:ed:49:78:20:
         43:94:ab:ff
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUAg/rKPkIyT+CID5zOBt+PIlWCncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjkxNzI4NThaFw0yNDA3MjcxNzMzNThaMDMxMTAvBgNV
BAMTKEFEMzAwREM2RjI0RDQ4MjI4RjE3MTg4QjE5NkFGMUYyMzEwMzcyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYF6EfFqpI50vAdPNeZj9IX2w
yDmTACKRb7arr/8Nk9tO7reAQyZocwJM81vEFanCAkPa9DPqQfoP2sUum6cLhipo
31BBgLJhz6d/eqVNd/df7BYMtUeAowVNiosNqfP0gDHMIyD3dhJ1sHuZIjAfAcnQ
qml/NHFF3LaAH00tFJHXtH3zolFmwlPEYbbiczF2qZfdRvgsTZiSxDZgyHEM8klf
vFZxbJt1Ub/mJqdUUCOKEcAjUj9ItVeL+wnXy9B2J4dUs9i1ikQjQ+ulnljl7geH
YzEtTmylRnWKyOMd5FMbg4I2dKcWZ+qIBDvmGm6GKtyWaim6+zz9K4XucnB5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStMA3G8k1IIo8X
GIsZavHyMQNyQDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EaWJ1RlNkVXZqSmFidFZEcWNvaldXUVVDS1hOUkY2am5T
Zk1NRnFDR3pMbS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRGlidUZTZFV2akphYnRWRHFjb2pXV1FVQ0tYTlJGNmpu
U2ZNTUZxQ0d6TG0vMC9BRDMwMERDNkYyNEQ0ODIyOEYxNzE4OEIxOTZBRjFGMjMx
MDM3MjQwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIjrgwDQQCAAIwBwMF
ACgEGMQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM85MA0GCSqGSIb3DQEBCwUA
A4IBAQCw+9/gUAsVRsmLrXzj6TXpgXDLZF6VoUvMqbscZC+qgm6gUSfs0NgbkNGm
Z7i15Jtj9+APqDnchDERyzLlN4RrnLR3wQ2hhXvYDfpVWgRxboEycAJ0GXLfS/oQ
Xta373f0ViacNk9X5eoO1NvJXbOMOzjP9b1BN52yce2/tWLafZuLE52qWZ+qi7St
LxNhHShnzzPR7/wsBMS0LLUt2Z7U6okElZIdNSeiL6HXCh+7X33Ou7C9Ex++Rdw4
mLwvshT4AZf195pKAfvxjYRiiZzntKRxNSh3JbFbJOsiPXhl/o+O2RDLLvgobQK3
9CC5layfHKw1ip5om+1JeCBDlKv/
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org