Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B11F4684B2C0D829C88E1B45C6A9E207956B1BE8.cer
File:                     B11F4684B2C0D829C88E1B45C6A9E207956B1BE8.cer (raw, json)
Hash identifier:          RigWXoIYvZ4e7MDH1lrBbcG/9qeH4UJc+DimJC668N8=
Subject key identifier:   B1:1F:46:84:B2:C0:D8:29:C8:8E:1B:45:C6:A9:E2:07:95:6B:1B:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5647D53C452FFCA6E46178C50B2CFB99DB62E99D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/B11F4684B2C0D829C88E1B45C6A9E207956B1BE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 13 Aug 2022 14:05:41 +0000
Certificate not after:    Sat 12 Aug 2023 14:10:41 +0000
Subordinate resources:    AS: 265008
                          IP: 170.0.60.0/22
                          IP: 2804:3158::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:47:d5:3c:45:2f:fc:a6:e4:61:78:c5:0b:2c:fb:99:db:62:e9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 13 14:05:41 2022 GMT
            Not After : Aug 12 14:10:41 2023 GMT
        Subject: CN=B11F4684B2C0D829C88E1B45C6A9E207956B1BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:d8:69:8c:d3:59:4a:a0:96:05:df:6f:98:
                    80:30:2f:10:c1:2a:77:35:90:01:25:93:85:3a:fd:
                    17:17:3e:ee:0e:3c:f0:a2:2a:e7:b4:8d:49:f3:67:
                    f0:07:31:97:55:c9:5e:d5:d9:c7:dd:43:7d:3f:13:
                    13:d0:fc:2c:83:0d:19:3e:bd:47:3a:98:17:47:9e:
                    3d:1a:5e:42:ce:e7:bd:e3:09:f1:28:5c:99:48:c2:
                    ac:00:83:48:14:4a:6f:14:7c:36:9e:d3:81:da:8c:
                    25:81:ff:62:68:d6:1d:26:4b:6d:24:5e:46:eb:52:
                    19:7b:79:6b:db:cf:d1:00:74:ed:ca:dc:37:ee:be:
                    39:09:44:5a:fd:e0:f3:92:1b:5a:47:4a:5a:13:3a:
                    a6:a7:15:7b:79:52:9e:05:23:4b:a3:f9:64:d1:09:
                    dd:b5:27:cc:51:29:14:70:b8:6e:28:10:7c:ce:7d:
                    15:d9:48:bc:f8:e8:4c:f0:2b:9a:a6:6b:55:38:8e:
                    49:1f:35:93:ac:3f:89:b5:2e:f4:c1:25:bd:13:46:
                    df:7e:66:60:40:70:39:12:62:d0:51:ff:52:52:45:
                    6b:5c:bd:4e:17:13:26:99:d9:a4:c4:d2:47:21:59:
                    0f:a9:f0:92:8b:43:10:84:2e:18:aa:25:3d:f2:1b:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:1F:46:84:B2:C0:D8:29:C8:8E:1B:45:C6:A9:E2:07:95:6B:1B:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/B11F4684B2C0D829C88E1B45C6A9E207956B1BE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.60.0/22
                IPv6:
                  2804:3158::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265008

    Signature Algorithm: sha256WithRSAEncryption
         54:fa:3d:99:02:f6:9d:d6:98:b2:0a:59:5e:b6:f9:53:c4:22:
         4b:f3:2d:eb:e3:8f:f7:10:b8:e0:f5:ae:9c:0c:78:6e:74:a1:
         bf:77:75:f6:dc:07:e3:0f:da:e8:06:d3:74:ae:1d:bc:a7:b7:
         5f:dd:ad:06:04:eb:aa:fe:20:fd:0f:7b:2a:ad:4e:d9:e6:3c:
         df:ec:b4:16:be:9b:67:dc:17:d5:a9:ed:2a:26:49:42:0d:ad:
         3a:cd:35:52:f7:45:b3:92:45:bb:8f:2e:5a:6c:46:3a:14:4b:
         8c:07:43:37:7d:6b:a9:35:ec:cb:c6:af:e4:cf:f3:0a:db:19:
         91:f7:7d:f0:cc:5a:d7:eb:0e:e9:5d:08:08:b4:b2:5d:49:47:
         c3:f2:f8:64:c1:c4:b7:c0:1d:86:7e:8a:7e:b6:87:64:40:f0:
         03:55:bd:7d:fb:bb:0b:58:b0:8d:0b:ca:bf:01:75:35:65:ad:
         bd:fc:f3:89:d5:95:d8:64:9e:a4:6a:e6:f6:07:28:74:2e:dd:
         a6:d8:54:97:2f:22:97:a0:ed:7f:0d:dc:81:c3:f8:5c:f2:18:
         be:a9:b9:f6:fa:4b:32:6b:f9:10:7b:10:db:96:17:df:84:0e:
         45:23:70:d7:2f:d7:70:63:16:f7:80:70:f2:22:ad:6f:c4:7b:
         b0:f7:3a:df
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUVkfVPEUv/KbkYXjFCyz7mdti6Z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MTMxNDA1NDFaFw0yMzA4MTIxNDEwNDFaMDMxMTAvBgNV
BAMTKEIxMUY0Njg0QjJDMEQ4MjlDODhFMUI0NUM2QTlFMjA3OTU2QjFCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPgthpjNNZSqCWBd9vmIAwLxDB
Knc1kAElk4U6/RcXPu4OPPCiKue0jUnzZ/AHMZdVyV7V2cfdQ30/ExPQ/CyDDRk+
vUc6mBdHnj0aXkLO573jCfEoXJlIwqwAg0gUSm8UfDae04HajCWB/2Jo1h0mS20k
XkbrUhl7eWvbz9EAdO3K3DfuvjkJRFr94POSG1pHSloTOqanFXt5Up4FI0uj+WTR
Cd21J8xRKRRwuG4oEHzOfRXZSLz46EzwK5qma1U4jkkfNZOsP4m1LvTBJb0TRt9+
ZmBAcDkSYtBR/1JSRWtcvU4XEyaZ2aTE0kchWQ+p8JKLQxCELhiqJT3yG0o1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxH0aEssDYKciO
G0XGqeIHlWsb6DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EVjlMU2FhVzZoMTE2bTkyNVJ1RVhBcWtvOW1VckxzNGdQ
NXA3OUphVmhFOC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EVjlMU2FhVzZoMTE2bTkyNVJ1RVhBcWtvOW1VckxzNGdQ
NXA3OUphVmhFOC8wL0IxMUY0Njg0QjJDMEQ4MjlDODhFMUI0NUM2QTlFMjA3OTU2
QjFCRTgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqoAPDANBAIAAjAHAwUA
KAQxWDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECzAwDQYJKoZIhvcNAQELBQAD
ggEBAFT6PZkC9p3WmLIKWV62+VPEIkvzLevjj/cQuOD1rpwMeG50ob93dfbcB+MP
2ugG03SuHbynt1/drQYE66r+IP0PeyqtTtnmPN/stBa+m2fcF9Wp7SomSUINrTrN
NVL3RbOSRbuPLlpsRjoUS4wHQzd9a6k17MvGr+TP8wrbGZH3ffDMWtfrDuldCAi0
sl1JR8Py+GTBxLfAHYZ+in62h2RA8ANVvX37uwtYsI0Lyr8BdTVlrb3884nVldhk
nqRq5vYHKHQu3abYVJcvIpeg7X8N3IHD+FzyGL6pufb6SzJr+RB7ENuWF9+EDkUj
cNcv13BjFveAcPIirW/Ee7D3Ot8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org