Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B865001546FF4DE2A16852379E26B40329F29025.cer
File:                     B865001546FF4DE2A16852379E26B40329F29025.cer (raw, json)
Hash identifier:          Z8ppdqWauYlk5F01/yhst0smJQM3KR13hZlmGgIbwKQ=
Subject key identifier:   B8:65:00:15:46:FF:4D:E2:A1:68:52:37:9E:26:B4:03:29:F2:90:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       048EFF6E04CFEE9F45FD75BA3810E3E00AF1AE2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/B865001546FF4DE2A16852379E26B40329F29025.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 19:35:57 +0000
Certificate not after:    Mon 10 Feb 2025 19:40:57 +0000
Subordinate resources:    AS: 271700
                          IP: 189.84.56.0/22
                          IP: 2804:7fa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8e:ff:6e:04:cf:ee:9f:45:fd:75:ba:38:10:e3:e0:0a:f1:ae:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 19:35:57 2024 GMT
            Not After : Feb 10 19:40:57 2025 GMT
        Subject: CN=B865001546FF4DE2A16852379E26B40329F29025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:83:d5:84:39:db:85:43:5a:f9:19:66:54:
                    27:79:dc:38:7d:5a:ad:ff:b9:0c:09:f7:2c:86:12:
                    80:96:5c:25:91:2f:cc:40:63:5a:4f:1a:26:90:a3:
                    66:8d:fa:d6:81:84:a5:df:49:15:40:69:28:9c:ed:
                    d8:04:d3:1d:8f:ac:15:39:a3:82:1b:7c:94:99:29:
                    72:5e:96:99:20:a1:f0:f3:a1:bb:74:1a:21:31:a8:
                    5e:bf:65:6c:3f:1e:99:ec:7f:de:ec:62:7f:60:00:
                    f2:bb:14:23:6e:9d:84:22:1a:51:07:12:eb:25:06:
                    e5:06:4b:08:61:f2:52:45:e4:08:bc:04:62:2c:f9:
                    c3:70:c5:f2:05:06:5a:ff:e8:65:51:b2:eb:d7:1d:
                    d4:5b:6f:7b:b6:89:30:55:1e:cd:c1:a7:c9:14:5f:
                    94:6c:b0:91:87:26:47:3f:d1:7a:30:a5:1b:1f:12:
                    c0:37:d7:da:3e:f9:d6:1b:6b:d0:4e:17:15:68:86:
                    ed:a3:bd:1e:78:f1:63:2d:a0:f9:db:43:ad:4f:06:
                    35:73:e1:85:f9:16:0e:6f:9c:3d:e9:d8:a3:a5:c4:
                    44:c3:ee:68:05:f2:20:78:74:15:3f:ee:fe:8a:f1:
                    0d:9e:b4:fd:b7:35:dd:8a:30:c1:30:cc:3a:1e:7e:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:65:00:15:46:FF:4D:E2:A1:68:52:37:9E:26:B4:03:29:F2:90:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/B865001546FF4DE2A16852379E26B40329F29025.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.56.0/22
                IPv6:
                  2804:7fa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271700

    Signature Algorithm: sha256WithRSAEncryption
         3d:5a:ce:31:ff:eb:b3:b7:9f:33:55:f6:79:81:74:fe:ea:02:
         07:a7:0b:a2:bc:ed:61:79:18:48:ba:e4:1d:82:7a:70:eb:ca:
         f6:d6:64:7a:33:fb:f1:0d:3d:2f:b7:fe:63:d2:ba:e5:e7:2a:
         82:aa:67:42:7b:9a:d9:52:2f:dd:45:b4:c6:54:39:e3:51:5c:
         86:a1:f6:02:52:10:c6:1f:e8:04:7b:43:bd:a3:8f:e9:d7:1f:
         22:62:5f:e5:72:f9:21:66:57:20:a6:56:53:5f:0c:4a:61:6b:
         07:75:16:bd:63:1f:da:73:20:43:51:f8:1e:86:5d:4d:91:7a:
         4e:df:64:ce:fc:4c:de:f7:b5:cd:96:32:ae:df:ee:05:c9:06:
         96:be:a4:bd:e2:c8:22:2a:ee:8e:32:20:d9:00:b3:19:6f:ee:
         2b:1b:3a:68:66:ea:ee:68:9d:4a:c7:3c:b5:4c:f0:33:78:1f:
         f7:56:a3:ad:11:2d:fc:08:11:58:71:0c:28:ec:5d:e6:da:c1:
         25:8e:21:c6:1b:60:fb:9c:b2:18:a2:23:41:75:bd:16:f0:d9:
         ce:be:f1:66:4c:5d:29:a6:5b:ec:3c:06:8f:35:73:19:9f:7c:
         41:3e:52:2c:f5:0d:60:35:cf:34:f0:62:51:c4:f0:fb:17:0f:
         49:2c:db:53
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBI7/bgTP7p9F/XW6OBDj4ArxriswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTIxOTM1NTdaFw0yNTAyMTAxOTQwNTdaMDMxMTAvBgNV
BAMTKEI4NjUwMDE1NDZGRjRERTJBMTY4NTIzNzlFMjZCNDAzMjlGMjkwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLIPVhDnbhUNa+RlmVCd53Dh9
Wq3/uQwJ9yyGEoCWXCWRL8xAY1pPGiaQo2aN+taBhKXfSRVAaSic7dgE0x2PrBU5
o4IbfJSZKXJelpkgofDzobt0GiExqF6/ZWw/Hpnsf97sYn9gAPK7FCNunYQiGlEH
EuslBuUGSwhh8lJF5Ai8BGIs+cNwxfIFBlr/6GVRsuvXHdRbb3u2iTBVHs3Bp8kU
X5RssJGHJkc/0XowpRsfEsA319o++dYba9BOFxVohu2jvR548WMtoPnbQ61PBjVz
4YX5Fg5vnD3p2KOlxETD7mgF8iB4dBU/7v6K8Q2etP23Nd2KMMEwzDoefsrNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4ZQAVRv9N4qFo
UjeeJrQDKfKQJTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GOHpTZWlpTkxqYThiMzd2QmtHd0wxYmdYWjJFcVlaZ1By
dHJOcW41dWY3Yy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRjh6U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQ
cnRyTnFuNXVmN2MvMC9CODY1MDAxNTQ2RkY0REUyQTE2ODUyMzc5RTI2QjQwMzI5
RjI5MDI1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK9VDgwDQQCAAIwBwMF
ACgEf6QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCVUMA0GCSqGSIb3DQEBCwUA
A4IBAQA9Ws4x/+uzt58zVfZ5gXT+6gIHpwuivO1heRhIuuQdgnpw68r21mR6M/vx
DT0vt/5j0rrl5yqCqmdCe5rZUi/dRbTGVDnjUVyGofYCUhDGH+gEe0O9o4/p1x8i
Yl/lcvkhZlcgplZTXwxKYWsHdRa9Yx/acyBDUfgehl1NkXpO32TO/Eze97XNljKu
3+4FyQaWvqS94sgiKu6OMiDZALMZb+4rGzpoZuruaJ1Kxzy1TPAzeB/3VqOtES38
CBFYcQwo7F3m2sEljiHGG2D7nLIYoiNBdb0W8NnOvvFmTF0pplvsPAaPNXMZn3xB
PlIs9Q1gNc808GJRxPD7Fw9JLNtT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org