Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B6585282B4DA94960EE46EA59E6553BE210A30A2.cer
File:                     B6585282B4DA94960EE46EA59E6553BE210A30A2.cer (raw, json)
Hash identifier:          M/hTUxhdiJtoQbUW6OQHhDMKLe9ksusHsgzTGwBANN4=
Subject key identifier:   B6:58:52:82:B4:DA:94:96:0E:E4:6E:A5:9E:65:53:BE:21:0A:30:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       225AD62ED1FF1B1F04E119EC427A56876BC24366
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/B6585282B4DA94960EE46EA59E6553BE210A30A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Mar 2023 22:42:13 +0000
Certificate not after:    Thu 07 Mar 2024 22:47:13 +0000
Subordinate resources:    AS: 270800
                          IP: 200.219.36.0/22
                          IP: 2804:719c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5a:d6:2e:d1:ff:1b:1f:04:e1:19:ec:42:7a:56:87:6b:c2:43:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 22:42:13 2023 GMT
            Not After : Mar  7 22:47:13 2024 GMT
        Subject: CN=B6585282B4DA94960EE46EA59E6553BE210A30A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:2b:94:63:3e:18:76:ab:64:6e:3b:c7:b1:
                    5f:2c:01:db:47:a7:cc:d0:63:22:f1:00:72:78:6a:
                    84:b3:c5:90:f5:7b:16:a5:89:a1:4d:5b:1c:63:d6:
                    c0:4c:ab:f7:5a:c0:24:94:24:1a:2c:69:c4:90:ca:
                    86:bb:61:44:03:73:8e:8e:85:fc:42:b2:82:4c:8e:
                    9b:ad:40:25:32:95:49:87:4f:25:b1:51:64:d1:1f:
                    c7:72:9e:c4:98:33:9a:e2:9a:28:a0:c9:09:3d:98:
                    d2:26:3d:09:98:39:ff:33:0c:2f:b8:a6:35:bd:36:
                    db:3c:a1:24:f9:98:85:ea:bb:59:5f:61:3f:0d:7a:
                    1b:03:a8:ea:1a:30:2d:28:22:10:4e:4b:7b:f4:83:
                    e8:7f:c2:63:d7:5e:90:e3:7a:9c:80:4e:81:52:8d:
                    38:65:82:a1:1f:b4:94:cc:7f:d3:1f:72:47:af:ef:
                    ef:2d:2f:49:d0:b0:fd:ca:40:7f:25:92:32:4f:57:
                    1a:27:47:ba:79:e3:56:1b:c3:40:b2:19:8f:80:aa:
                    f2:3c:41:cc:02:6f:fc:74:96:33:9e:02:a2:6d:1f:
                    19:f8:ad:c4:2a:80:3f:40:96:ca:1a:73:98:4d:5e:
                    b3:4e:17:ef:9b:7a:2c:cc:09:7a:e5:f9:b9:c5:61:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:58:52:82:B4:DA:94:96:0E:E4:6E:A5:9E:65:53:BE:21:0A:30:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/B6585282B4DA94960EE46EA59E6553BE210A30A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.36.0/22
                IPv6:
                  2804:719c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270800

    Signature Algorithm: sha256WithRSAEncryption
         af:2d:80:24:2d:cf:26:12:9e:db:51:6a:d1:ae:b2:a4:70:6c:
         85:f1:46:cd:ca:d5:b9:40:22:f0:7b:91:f6:d5:08:1f:ac:8f:
         81:3a:dc:7b:16:d6:1f:ae:ef:f7:7e:1f:ba:05:14:18:c6:b9:
         86:69:4d:dd:af:4c:9b:6b:23:58:30:c5:04:c2:5d:09:af:c8:
         fd:10:26:85:ee:4f:cf:2f:e9:f3:58:62:b4:09:d2:ba:54:3a:
         cd:f3:08:69:25:a7:33:a5:23:92:2f:d4:c3:25:7f:30:74:04:
         e6:9c:70:9f:9c:92:42:b8:5e:79:b1:d8:2f:e4:a8:d7:36:77:
         c5:e3:0c:79:59:fc:f5:f1:19:cd:59:0e:37:fe:82:b6:df:b7:
         83:12:11:8a:f0:02:28:a3:a7:7b:9a:60:4f:9f:72:3a:48:2f:
         4d:ec:8c:21:a8:90:fd:bf:fd:f8:8e:06:d7:18:66:f6:d3:c1:
         22:7c:7b:3c:4c:66:6a:03:25:09:ef:11:61:f0:5c:9c:3c:e6:
         4f:9e:db:de:15:48:62:a1:82:f0:23:48:22:a1:08:7a:9c:6f:
         2a:f9:68:5e:ba:be:45:65:e7:ee:9f:0e:f6:70:69:7a:b1:c9:
         13:ac:36:7b:50:e8:8d:09:a6:f5:95:1d:c4:5e:1c:d1:f6:79:
         c5:26:28:25
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUIlrWLtH/Gx8E4RnsQnpWh2vCQ2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDkyMjQyMTNaFw0yNDAzMDcyMjQ3MTNaMDMxMTAvBgNV
BAMTKEI2NTg1MjgyQjREQTk0OTYwRUU0NkVBNTlFNjU1M0JFMjEwQTMwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RyuUYz4YdqtkbjvHsV8sAdtH
p8zQYyLxAHJ4aoSzxZD1exaliaFNWxxj1sBMq/dawCSUJBosacSQyoa7YUQDc46O
hfxCsoJMjputQCUylUmHTyWxUWTRH8dynsSYM5rimiigyQk9mNImPQmYOf8zDC+4
pjW9Nts8oST5mIXqu1lfYT8NehsDqOoaMC0oIhBOS3v0g+h/wmPXXpDjepyAToFS
jThlgqEftJTMf9Mfckev7+8tL0nQsP3KQH8lkjJPVxonR7p541Ybw0CyGY+AqvI8
QcwCb/x0ljOeAqJtHxn4rcQqgD9Alsoac5hNXrNOF++beizMCXrl+bnFYftjAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2WFKCtNqUlg7k
bqWeZVO+IQowojAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IeVFXR01zdFAxQXRXS05FcWh2WWl3YlI3aTJUdmVOejY3
Y0w5Y251UXladC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IeVFXR01zdFAxQXRXS05FcWh2WWl3YlI3aTJUdmVOejY3
Y0w5Y251UXladC8wL0I2NTg1MjgyQjREQTk0OTYwRUU0NkVBNTlFNjU1M0JFMjEw
QTMwQTIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsjbJDANBAIAAjAHAwUA
KARxnDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIdAwDQYJKoZIhvcNAQELBQAD
ggEBAK8tgCQtzyYSnttRatGusqRwbIXxRs3K1blAIvB7kfbVCB+sj4E63HsW1h+u
7/d+H7oFFBjGuYZpTd2vTJtrI1gwxQTCXQmvyP0QJoXuT88v6fNYYrQJ0rpUOs3z
CGklpzOlI5Iv1MMlfzB0BOaccJ+ckkK4Xnmx2C/kqNc2d8XjDHlZ/PXxGc1ZDjf+
grbft4MSEYrwAiijp3uaYE+fcjpIL03sjCGokP2//fiOBtcYZvbTwSJ8ezxMZmoD
JQnvEWHwXJw85k+e294VSGKhgvAjSCKhCHqcbyr5aF66vkVl5+6fDvZwaXqxyROs
NntQ6I0JpvWVHcReHNH2ecUmKCU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org