Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7626FC3B4AA291C68DF21B991C840C394DF9623.cer
File:                     B7626FC3B4AA291C68DF21B991C840C394DF9623.cer (raw, json)
Hash identifier:          +4fyDYw8n3rPKUuD3O+n40rovqgUpo1nEgOBRNaSo6A=
Subject key identifier:   B7:62:6F:C3:B4:AA:29:1C:68:DF:21:B9:91:C8:40:C3:94:DF:96:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49D4C4CC369170A721D71A88BECC8F45CA5AD25F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B7626FC3B4AA291C68DF21B991C840C394DF9623.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Jan 2023 20:33:10 +0000
Certificate not after:    Wed 17 Jan 2024 20:38:10 +0000
Subordinate resources:    AS: 265122
                          IP: 143.208.92.0/22
                          IP: 2804:2ad8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d4:c4:cc:36:91:70:a7:21:d7:1a:88:be:cc:8f:45:ca:5a:d2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 20:33:10 2023 GMT
            Not After : Jan 17 20:38:10 2024 GMT
        Subject: CN=B7626FC3B4AA291C68DF21B991C840C394DF9623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:6a:89:58:74:1f:8b:cd:9d:30:2f:0f:69:
                    e2:b7:9f:26:87:98:71:54:ea:ca:a1:ef:b1:eb:de:
                    a1:15:6e:bd:d5:14:18:aa:1b:e5:6a:32:c2:15:d4:
                    50:4a:f4:7f:83:b5:f7:e8:b0:1d:23:0d:66:87:16:
                    74:5c:a0:d1:26:ef:15:7f:50:b4:94:53:ba:ed:13:
                    12:fc:51:b6:69:e6:ec:ae:9a:e8:46:e9:f9:8e:c5:
                    b4:66:44:78:60:20:57:19:78:b6:0f:50:ab:39:9b:
                    7d:0a:9f:6a:20:42:73:b3:f5:1a:03:2c:0f:19:b7:
                    fd:5d:82:18:af:69:ce:e1:0c:31:08:46:1a:ef:47:
                    c9:ae:36:02:e2:9a:50:b2:84:c2:2e:86:5b:42:df:
                    ee:54:bd:94:4c:84:7a:ff:0d:61:5d:66:00:28:80:
                    43:c7:1f:63:ae:c9:e1:2e:8e:ab:0d:78:d8:44:72:
                    c7:fc:61:63:8f:91:8e:db:70:aa:87:56:76:ed:92:
                    38:4d:3a:f8:85:cc:88:90:df:be:38:df:0f:22:d0:
                    8b:ae:03:15:74:00:1c:6f:3a:0b:ea:70:e0:c9:29:
                    10:19:a1:9b:88:25:40:10:09:23:6b:56:9f:04:e3:
                    e2:4a:d0:a7:82:b8:98:a4:6a:8b:ad:26:05:42:64:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:62:6F:C3:B4:AA:29:1C:68:DF:21:B9:91:C8:40:C3:94:DF:96:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B7626FC3B4AA291C68DF21B991C840C394DF9623.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.92.0/22
                IPv6:
                  2804:2ad8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265122

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:34:d4:8c:f6:c2:3a:b7:48:9c:a3:5d:df:4b:34:a4:7b:
         d1:7e:d6:bb:d9:44:13:f7:bc:80:22:04:ec:31:12:e4:36:cc:
         a8:97:5d:ee:72:ca:44:07:74:84:eb:72:5f:40:a6:7d:76:38:
         d6:8a:6e:9c:00:b3:0a:cf:f0:ba:69:be:2e:9b:f4:0a:04:d6:
         06:10:32:1f:4f:2f:02:d4:ca:99:53:4e:7f:d1:70:e5:07:a2:
         a4:c7:68:3b:c3:89:36:06:3b:8c:35:95:37:1f:7a:76:a1:7f:
         81:6a:92:5f:e4:87:1f:7a:3a:cf:81:4e:97:cf:c0:f7:be:59:
         ae:f4:54:e8:1a:93:82:2c:b4:8f:cc:48:51:db:4b:86:0b:ec:
         2e:d2:19:8e:5c:67:52:64:60:b7:63:c5:ce:6d:f0:12:34:1b:
         c1:9b:08:41:49:ab:20:ec:cb:d9:6a:88:27:0f:d5:bf:a2:aa:
         57:68:f2:98:44:60:29:39:6e:37:48:09:8a:47:40:16:c1:25:
         3b:d4:5b:37:77:25:04:f5:81:33:72:cd:0d:77:c1:2e:c2:05:
         47:f7:9c:68:35:7a:92:4b:c1:b1:66:9b:1d:b9:d6:16:dd:f1:
         5b:c9:48:3c:bc:c6:27:4d:2d:db:65:a6:12:ad:a9:f6:71:c4:
         e8:f5:7d:b6
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSdTEzDaRcKch1xqIvsyPRcpa0l8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMTgyMDMzMTBaFw0yNDAxMTcyMDM4MTBaMDMxMTAvBgNV
BAMTKEI3NjI2RkMzQjRBQTI5MUM2OERGMjFCOTkxQzg0MEMzOTRERjk2MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa2WqJWHQfi82dMC8PaeK3nyaH
mHFU6sqh77Hr3qEVbr3VFBiqG+VqMsIV1FBK9H+DtffosB0jDWaHFnRcoNEm7xV/
ULSUU7rtExL8UbZp5uyumuhG6fmOxbRmRHhgIFcZeLYPUKs5m30Kn2ogQnOz9RoD
LA8Zt/1dghivac7hDDEIRhrvR8muNgLimlCyhMIuhltC3+5UvZRMhHr/DWFdZgAo
gEPHH2OuyeEujqsNeNhEcsf8YWOPkY7bcKqHVnbtkjhNOviFzIiQ37443w8i0Iuu
AxV0ABxvOgvqcODJKRAZoZuIJUAQCSNrVp8E4+JK0KeCuJikaoutJgVCZCGlAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3Ym/DtKopHGjf
IbmRyEDDlN+WIzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CNFJGOTlHVFNrRTRZdVk3aEZDanR5eXNvTEFVVXVKQ052
aHZEcmRCWVh1ZS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CNFJGOTlHVFNrRTRZdVk3aEZDanR5eXNvTEFVVXVKQ052
aHZEcmRCWVh1ZS8wL0I3NjI2RkMzQjRBQTI5MUM2OERGMjFCOTkxQzg0MEMzOTRE
Rjk2MjMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo/QXDANBAIAAjAHAwUA
KAQq2DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC6IwDQYJKoZIhvcNAQELBQAD
ggEBAFfqNNSM9sI6t0ico13fSzSke9F+1rvZRBP3vIAiBOwxEuQ2zKiXXe5yykQH
dITrcl9Apn12ONaKbpwAswrP8Lppvi6b9AoE1gYQMh9PLwLUyplTTn/RcOUHoqTH
aDvDiTYGO4w1lTcfenahf4Fqkl/khx96Os+BTpfPwPe+Wa70VOgak4IstI/MSFHb
S4YL7C7SGY5cZ1JkYLdjxc5t8BI0G8GbCEFJqyDsy9lqiCcP1b+iqldo8phEYCk5
bjdICYpHQBbBJTvUWzd3JQT1gTNyzQ13wS7CBUf3nGg1epJLwbFmmx251hbd8VvJ
SDy8xidNLdtlphKtqfZxxOj1fbY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org