Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.cer
File:                     B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.cer (raw, json)
Hash identifier:          nNQ/O9sXhh0uCGTr2hWZLEhZ0Jx66rzU6QT4CJ/TSKQ=
Subject key identifier:   B4:BD:B5:51:1B:5A:40:76:CB:2A:6E:FD:1B:3D:77:43:A3:88:BA:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61379453FD3AF06873CA884FB263BB6C5F27415D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Jul 2023 13:42:48 +0000
Certificate not after:    Sat 13 Jul 2024 13:47:48 +0000
Subordinate resources:    AS: 266631
                          IP: 128.201.140.0/22
                          IP: 2804:3ef4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:94:53:fd:3a:f0:68:73:ca:88:4f:b2:63:bb:6c:5f:27:41:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 15 13:42:48 2023 GMT
            Not After : Jul 13 13:47:48 2024 GMT
        Subject: CN=B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:3f:2c:b4:e1:f9:ae:e9:f1:5d:27:2e:8e:
                    70:ce:d9:3c:b5:0d:a2:91:49:d3:52:12:85:f8:72:
                    7d:83:c8:03:d5:06:bf:ae:2a:16:08:4f:b6:64:10:
                    d0:76:3e:c7:9c:b9:c1:f5:09:7a:cc:1b:87:84:bf:
                    db:b6:19:87:4f:b1:32:3e:a9:a1:14:24:9b:61:2b:
                    e8:17:4c:a7:89:21:6e:e8:5f:a1:5d:4b:59:6e:4c:
                    e3:f5:4a:a9:f5:9c:45:6c:82:7a:c4:42:4c:0d:f8:
                    2c:ac:8d:cb:ba:96:89:0e:2c:a0:f9:56:6f:56:d0:
                    ea:33:80:84:17:ef:f0:d7:b7:85:41:a6:e5:5e:09:
                    1f:d5:bc:d4:dc:b3:99:74:b4:32:ac:37:a6:6d:7d:
                    e3:71:2c:32:b8:21:17:01:a5:3b:08:20:4a:6b:1b:
                    25:4e:84:b5:84:5a:c3:8d:c4:6f:e2:51:d8:74:5c:
                    7a:95:ae:c3:82:2e:bb:25:58:c6:79:54:05:df:8a:
                    ab:ef:2e:94:5a:4c:5e:cc:97:6d:e4:b8:c7:9c:35:
                    f1:c4:62:96:61:f0:8d:48:c4:09:a9:2e:4b:7e:5b:
                    ba:85:53:94:c4:9e:f1:fe:20:63:fc:75:5e:20:c2:
                    ad:50:23:fd:4d:0e:8a:6e:62:8e:1f:44:67:e1:17:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:BD:B5:51:1B:5A:40:76:CB:2A:6E:FD:1B:3D:77:43:A3:88:BA:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.140.0/22
                IPv6:
                  2804:3ef4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266631

    Signature Algorithm: sha256WithRSAEncryption
         14:61:61:6c:bb:9e:ac:5a:cb:fa:66:f4:86:a2:40:2e:21:80:
         2d:f1:09:a1:dc:89:1b:e6:f3:99:e4:ed:c7:cd:b4:28:a8:2c:
         5f:6b:b3:04:e1:39:18:92:ba:79:9a:2b:46:41:13:69:72:30:
         49:7d:d9:c5:90:da:06:17:5b:79:8a:c1:05:34:ce:89:ab:76:
         51:9f:bb:43:a7:f6:ca:1e:fb:66:61:7b:b2:f4:a5:8c:4e:2d:
         6b:e8:bd:c9:b2:ed:77:55:f5:52:f1:04:fb:44:2a:6b:f4:ec:
         26:de:ba:9d:17:4c:7a:15:d9:e4:0f:f7:eb:21:15:f5:d6:52:
         5d:ef:5e:cb:39:7d:4d:87:78:a5:1b:10:3d:2b:53:19:40:7a:
         99:04:16:15:9a:99:18:1a:2b:32:54:33:e3:8f:da:4c:8c:62:
         26:b3:b6:89:38:ae:53:db:9d:ab:31:87:d3:76:d6:1d:5d:37:
         ac:2b:a1:c1:e4:18:72:b0:3c:b6:a4:bb:e8:ec:e2:48:67:7a:
         8a:e0:aa:06:2a:ac:73:c0:d3:70:f4:37:b9:d8:3e:c8:6d:5c:
         94:bc:e5:8c:98:7a:bd:a2:41:fd:81:73:7f:5f:ae:de:0b:7d:
         a6:d9:32:7d:7b:e3:79:29:5b:73:51:28:3e:73:62:59:61:b6:
         7c:5a:5b:d6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUYTeUU/068GhzyohPsmO7bF8nQV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTUxMzQyNDhaFw0yNDA3MTMxMzQ3NDhaMDMxMTAvBgNV
BAMTKEI0QkRCNTUxMUI1QTQwNzZDQjJBNkVGRDFCM0Q3NzQzQTM4OEJBRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg7j8stOH5runxXScujnDO2Ty1
DaKRSdNSEoX4cn2DyAPVBr+uKhYIT7ZkENB2PsecucH1CXrMG4eEv9u2GYdPsTI+
qaEUJJthK+gXTKeJIW7oX6FdS1luTOP1Sqn1nEVsgnrEQkwN+Cysjcu6lokOLKD5
Vm9W0OozgIQX7/DXt4VBpuVeCR/VvNTcs5l0tDKsN6ZtfeNxLDK4IRcBpTsIIEpr
GyVOhLWEWsONxG/iUdh0XHqVrsOCLrslWMZ5VAXfiqvvLpRaTF7Ml23kuMecNfHE
YpZh8I1IxAmpLkt+W7qFU5TEnvH+IGP8dV4gwq1QI/1NDopuYo4fRGfhF0nvAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0vbVRG1pAdssq
bv0bPXdDo4i66TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81SlNXSDZpZ0czSFd5Y3FkNnR0NlprOTJRZ1hRRmlmeEtB
SkM3NzVCeThnSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUpTV0g2aWdHM0hXeWNxZDZ0dDZaazkyUWdYUUZpZnhL
QUpDNzc1Qnk4Z0ovMC9CNEJEQjU1MTFCNUE0MDc2Q0IyQTZFRkQxQjNENzc0M0Ez
ODhCQUU5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKAyYwwDQQCAAIwBwMF
ACgEPvQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBGHMA0GCSqGSIb3DQEBCwUA
A4IBAQAUYWFsu56sWsv6ZvSGokAuIYAt8Qmh3Ikb5vOZ5O3HzbQoqCxfa7ME4TkY
krp5mitGQRNpcjBJfdnFkNoGF1t5isEFNM6Jq3ZRn7tDp/bKHvtmYXuy9KWMTi1r
6L3Jsu13VfVS8QT7RCpr9Owm3rqdF0x6FdnkD/frIRX11lJd717LOX1Nh3ilGxA9
K1MZQHqZBBYVmpkYGisyVDPjj9pMjGIms7aJOK5T252rMYfTdtYdXTesK6HB5Bhy
sDy2pLvo7OJIZ3qK4KoGKqxzwNNw9De52D7IbVyUvOWMmHq9okH9gXN/X67eC32m
2TJ9e+N5KVtzUSg+c2JZYbZ8WlvW
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org