Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer
File:                     B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer (raw, json)
Hash identifier:          avBPJx1e7q82s4jchoywC9/pIQqilsnKLn8NWDWLpAc=
Subject key identifier:   B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       06F4236C5AB8939BCB083F212D2406B218031CB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Oct 2022 11:55:36 +0000
Certificate not after:    Wed 11 Oct 2023 12:00:36 +0000
Subordinate resources:    AS: 270583
                          IP: 177.8.140.0/22
                          IP: 2804:6e38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f4:23:6c:5a:b8:93:9b:cb:08:3f:21:2d:24:06:b2:18:03:1c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 12 11:55:36 2022 GMT
            Not After : Oct 11 12:00:36 2023 GMT
        Subject: CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:e8:ee:58:08:e5:24:df:53:1b:63:fa:2c:
                    48:da:41:e7:26:d0:c7:ee:dc:dd:80:c4:d5:6c:ef:
                    a3:94:df:40:cc:48:17:d0:9e:70:c8:6c:52:f0:04:
                    88:37:e6:19:9f:61:ed:3a:e7:ec:e8:35:b2:b7:4b:
                    7f:22:77:94:16:13:3c:c1:28:e8:06:57:bb:ca:cf:
                    9c:b4:06:f3:bb:79:95:a0:b9:bb:8a:bc:10:64:f3:
                    e4:f8:4b:2f:48:25:2c:ed:97:97:89:7b:2e:d2:11:
                    1b:57:5a:5b:16:a1:d4:f3:62:9b:6d:98:71:fc:1c:
                    9a:c0:e3:47:03:56:ea:b9:81:42:43:35:ec:7e:74:
                    60:3c:32:a1:c3:00:eb:60:26:69:ef:f4:ab:6d:43:
                    33:73:50:14:9b:67:35:76:d0:42:75:33:a6:2a:ee:
                    86:7b:25:6f:c0:88:db:56:02:37:9f:22:ff:3c:be:
                    03:2e:26:86:09:27:0f:c8:44:47:0d:6b:c2:5a:25:
                    5f:32:ed:8d:79:cb:f1:e9:6c:d9:b6:3c:03:84:61:
                    e3:92:fe:d9:41:3a:31:fd:d8:ca:0f:e7:c0:5f:20:
                    d2:33:76:b3:6e:a0:0b:3c:6c:7a:13:4c:95:42:c7:
                    1e:88:28:d9:57:db:2a:b9:d9:73:2b:00:2e:f5:d8:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.140.0/22
                IPv6:
                  2804:6e38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270583

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:ce:d2:96:ce:7c:fb:26:aa:79:98:e0:70:14:9f:a6:28:
         dd:4f:9a:90:a3:84:5e:75:4a:d5:65:3b:7c:26:f7:0f:f9:b4:
         23:87:3b:af:bd:37:d9:a8:6d:3e:d1:2a:3b:97:53:c6:a7:f4:
         9c:bb:36:34:0b:e7:d4:a0:8d:73:59:06:8e:3c:5c:e7:17:3c:
         ab:df:d0:7c:73:0b:00:e9:95:fb:2e:30:f3:de:de:7d:52:f2:
         76:ac:9a:3f:f3:2d:18:9e:ef:cf:85:2d:2f:14:65:33:e8:92:
         4a:ba:d1:dc:02:14:68:e8:69:fc:14:25:a4:19:fc:3b:43:1d:
         55:71:ba:cc:0a:48:14:76:73:62:61:19:d5:58:96:ce:e3:cf:
         fe:17:4d:8f:ab:09:3d:4e:c2:c7:de:07:09:76:38:82:eb:40:
         45:ba:ec:28:15:f9:ca:48:4a:3c:1a:42:df:1f:7b:54:20:cb:
         db:fc:25:c2:60:75:b4:f8:3d:86:d7:f3:a2:7c:e2:2c:c8:eb:
         89:17:04:77:2f:10:7c:4a:9b:c0:28:8a:8b:05:c1:4b:33:7e:
         88:05:e1:f6:73:f0:72:44:ec:85:36:63:7d:37:b9:20:b0:8b:
         4d:45:a0:02:26:3e:5a:2c:3b:f7:de:14:5f:ae:76:82:e5:5e:
         08:36:c4:96
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUBvQjbFq4k5vLCD8hLSQGshgDHLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMTIxMTU1MzZaFw0yMzEwMTExMjAwMzZaMDMxMTAvBgNV
BAMTKEIwMjcwMUZERTdEQTUyRkYwRTMyMDVGQzE0NEM5RkM3QTQ0RjZDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIC+juWAjlJN9TG2P6LEjaQecm
0Mfu3N2AxNVs76OU30DMSBfQnnDIbFLwBIg35hmfYe065+zoNbK3S38id5QWEzzB
KOgGV7vKz5y0BvO7eZWgubuKvBBk8+T4Sy9IJSztl5eJey7SERtXWlsWodTzYptt
mHH8HJrA40cDVuq5gUJDNex+dGA8MqHDAOtgJmnv9KttQzNzUBSbZzV20EJ1M6Yq
7oZ7JW/AiNtWAjefIv88vgMuJoYJJw/IREcNa8JaJV8y7Y15y/HpbNm2PAOEYeOS
/tlBOjH92MoP58BfINIzdrNuoAs8bHoTTJVCxx6IKNlX2yq52XMrAC712JXlAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwJwH959pS/w4y
BfwUTJ/HpE9sTDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yNjFGcWtzNVVTNGNONXYyUTk3Y1pSRTY5THZxZzR2MzV6
bm8xWDZ5UUp5eC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yNjFGcWtzNVVTNGNONXYyUTk3Y1pSRTY5THZxZzR2MzV6
bm8xWDZ5UUp5eC8wL0IwMjcwMUZERTdEQTUyRkYwRTMyMDVGQzE0NEM5RkM3QTQ0
RjZDNEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArEIjDANBAIAAjAHAwUA
KARuODAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIPcwDQYJKoZIhvcNAQELBQAD
ggEBAHnQztKWznz7Jqp5mOBwFJ+mKN1PmpCjhF51StVlO3wm9w/5tCOHO6+9N9mo
bT7RKjuXU8an9Jy7NjQL59SgjXNZBo48XOcXPKvf0HxzCwDplfsuMPPe3n1S8nas
mj/zLRie78+FLS8UZTPokkq60dwCFGjoafwUJaQZ/DtDHVVxuswKSBR2c2JhGdVY
ls7jz/4XTY+rCT1OwsfeBwl2OILrQEW67CgV+cpISjwaQt8fe1Qgy9v8JcJgdbT4
PYbX86J84izI64kXBHcvEHxKm8AoiosFwUszfogF4fZz8HJE7IU2Y303uSCwi01F
oAImPlosO/feFF+udoLlXgg2xJY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org