Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B87A89936073CED5E442457650C264A65B276C7A.cer
File:                     B87A89936073CED5E442457650C264A65B276C7A.cer (raw, json)
Hash identifier:          VqfM7RTHs8MrYwdYagAamY8/vAcIJv4D8AGOqzRWZTE=
Subject key identifier:   B8:7A:89:93:60:73:CE:D5:E4:42:45:76:50:C2:64:A6:5B:27:6C:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BDB7F1DCA1FC556BEEE1A81DAF80784EECDDCF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/B87A89936073CED5E442457650C264A65B276C7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Sep 2022 19:18:33 +0000
Certificate not after:    Wed 13 Sep 2023 19:23:33 +0000
Subordinate resources:    AS: 61574 -- 61576
                          AS: 263842 -- 263844
                          IP: 138.185.228.0/22
                          IP: 2804:269c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:db:7f:1d:ca:1f:c5:56:be:ee:1a:81:da:f8:07:84:ee:cd:dc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 19:18:33 2022 GMT
            Not After : Sep 13 19:23:33 2023 GMT
        Subject: CN=B87A89936073CED5E442457650C264A65B276C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:42:e8:a3:d5:9f:c4:4f:c4:88:35:2c:f8:
                    f6:b7:e7:d3:89:9e:e4:7e:04:b2:e3:3e:dc:dd:a4:
                    b5:24:4e:e2:40:f1:6d:41:17:3f:86:54:4e:08:01:
                    a7:69:9b:89:9a:84:a1:29:ed:17:be:b6:94:49:d2:
                    9f:36:a4:fb:2a:d4:00:da:ee:d6:3e:1f:d4:3d:5d:
                    7c:0f:0b:78:50:c1:01:a7:09:62:4d:b6:0b:77:d4:
                    a2:f0:83:5c:0f:81:ba:e4:ea:6a:ae:59:68:02:d5:
                    8d:34:68:27:15:fc:a2:54:0e:36:5c:ee:74:b6:e0:
                    ea:ef:58:99:c8:05:52:55:d9:b8:c2:ab:3c:67:24:
                    30:c5:88:3b:bb:ac:a8:80:76:55:6c:b5:f9:57:06:
                    87:e5:45:e2:f8:05:34:0a:6b:1a:da:a6:7b:5c:85:
                    c5:f7:9f:b0:8e:19:df:8a:28:cb:95:00:e6:b1:b6:
                    d0:48:8e:91:13:85:2a:e0:a7:5c:55:d2:9c:85:f5:
                    88:26:89:0f:94:fa:fc:c1:75:5d:c1:f8:43:76:a4:
                    5e:a5:87:02:08:e0:b7:c7:b0:42:b9:77:77:c7:7e:
                    d4:a9:7d:5b:04:87:86:f1:39:d8:fe:2c:d4:c3:ea:
                    16:55:6b:83:dd:60:2f:5f:05:0e:5c:b6:f8:16:61:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:7A:89:93:60:73:CE:D5:E4:42:45:76:50:C2:64:A6:5B:27:6C:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/B87A89936073CED5E442457650C264A65B276C7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.228.0/22
                IPv6:
                  2804:269c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61574-61576
                  263842-263844

    Signature Algorithm: sha256WithRSAEncryption
         51:68:9e:01:05:e3:c9:c8:12:b9:93:72:10:ec:d4:06:3c:f0:
         e7:9a:20:4d:75:e7:41:6a:26:86:1e:31:26:2c:4d:6b:92:b2:
         9b:c9:12:3a:df:ab:7d:3b:87:cd:d6:58:87:57:c7:33:7b:72:
         2e:0c:e1:23:df:8c:58:52:0b:e1:c1:e9:72:b5:8e:68:0d:29:
         0c:e8:87:88:d0:e5:97:d9:c2:a1:fc:62:12:e6:33:2b:af:98:
         b1:f5:da:97:71:8a:f4:c7:cf:54:b3:7e:3b:f7:43:b9:96:b6:
         08:09:0e:2b:d3:fb:a1:39:1d:c1:c4:20:eb:99:c4:3a:af:fd:
         f5:92:5f:5a:56:df:bb:08:82:f7:31:17:65:c6:bd:c6:b3:3d:
         29:eb:e7:17:69:e4:a2:e4:cf:c9:00:0a:88:d4:48:04:17:cf:
         19:fd:38:1a:db:bf:eb:d5:91:78:8e:2c:b7:d5:fe:de:98:3a:
         1d:7c:2d:ee:78:94:71:1b:ba:29:eb:09:f2:1a:f2:2f:5f:74:
         04:a8:65:74:1b:50:74:64:a8:e0:a4:fd:6d:bc:fc:50:8b:4c:
         45:51:42:d0:85:ff:f0:f5:ca:1e:6a:ba:07:52:a8:ea:6f:d1:
         f6:15:ea:57:1c:f3:2f:00:5b:2e:8c:af:ae:16:67:79:01:57:
         9e:97:8d:d9
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUK9t/HcofxVa+7hqB2vgHhO7N3PQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MTQxOTE4MzNaFw0yMzA5MTMxOTIzMzNaMDMxMTAvBgNV
BAMTKEI4N0E4OTkzNjA3M0NFRDVFNDQyNDU3NjUwQzI2NEE2NUIyNzZDN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK0Loo9WfxE/EiDUs+Pa359OJ
nuR+BLLjPtzdpLUkTuJA8W1BFz+GVE4IAadpm4mahKEp7Re+tpRJ0p82pPsq1ADa
7tY+H9Q9XXwPC3hQwQGnCWJNtgt31KLwg1wPgbrk6mquWWgC1Y00aCcV/KJUDjZc
7nS24OrvWJnIBVJV2bjCqzxnJDDFiDu7rKiAdlVstflXBoflReL4BTQKaxrapntc
hcX3n7COGd+KKMuVAOaxttBIjpEThSrgp1xV0pyF9YgmiQ+U+vzBdV3B+EN2pF6l
hwII4LfHsEK5d3fHftSpfVsEh4bxOdj+LNTD6hZVa4PdYC9fBQ5ctvgWYTzfAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4eomTYHPO1eRC
RXZQwmSmWydsejAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80SFZZNDJLN1lVUzY0OUZOWjNESnZHSldXYkJKM3YxNjJ3
U245SnQ3UXlOSy8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80SFZZNDJLN1lVUzY0OUZOWjNESnZHSldXYkJKM3YxNjJ3
U245SnQ3UXlOSy8xL0I4N0E4OTkzNjA3M0NFRDVFNDQyNDU3NjUwQzI2NEE2NUIy
NzZDN0EubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoq55DANBAIAAjAHAwUA
KAQmnDAtBggrBgEFBQcBCAEB/wQeMBygGjAYMAoCAwDwhgIDAPCIMAoCAwQGogID
BAakMA0GCSqGSIb3DQEBCwUAA4IBAQBRaJ4BBePJyBK5k3IQ7NQGPPDnmiBNdedB
aiaGHjEmLE1rkrKbyRI636t9O4fN1liHV8cze3IuDOEj34xYUgvhwelytY5oDSkM
6IeI0OWX2cKh/GIS5jMrr5ix9dqXcYr0x89Us34790O5lrYICQ4r0/uhOR3BxCDr
mcQ6r/31kl9aVt+7CIL3MRdlxr3Gsz0p6+cXaeSi5M/JAAqI1EgEF88Z/Tga27/r
1ZF4jiy31f7emDodfC3ueJRxG7op6wnyGvIvX3QEqGV0G1B0ZKjgpP1tvPxQi0xF
UULQhf/w9coearoHUqjqb9H2FepXHPMvAFsujK+uFmd5AVeel43Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org