Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.cer
File:                     B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.cer (raw, json)
Hash identifier:          I4ucDB/UUz+R3XrR5/Y4zGTUaDs7SAGg1a/hZq/BN0M=
Subject key identifier:   B9:35:CB:53:DB:7E:74:52:49:F1:AF:90:43:A9:E0:1F:3D:C6:2E:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15B0993AE227A2937458C262C9C7BC82D229FD0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 01:26:38 +0000
Certificate not after:    Fri 12 Jul 2024 01:31:38 +0000
Subordinate resources:    AS: 265128
                          IP: 143.208.112.0/22
                          IP: 170.239.52.0/22
                          IP: 2804:2af8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b0:99:3a:e2:27:a2:93:74:58:c2:62:c9:c7:bc:82:d2:29:fd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 01:26:38 2023 GMT
            Not After : Jul 12 01:31:38 2024 GMT
        Subject: CN=B935CB53DB7E745249F1AF9043A9E01F3DC62EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:e7:d6:31:0f:38:19:8d:da:03:c6:8a:41:
                    16:d6:ff:4f:08:fc:7a:7d:ca:04:7f:9d:cb:da:31:
                    b8:4f:0a:d2:a1:84:da:1d:41:35:47:b8:68:86:ca:
                    37:2b:d6:61:24:bc:95:2d:02:41:66:10:30:f6:2a:
                    92:a9:88:2d:de:2a:00:c1:d5:d3:55:99:48:f3:2a:
                    31:25:da:fd:4a:4e:e1:c4:05:b4:9e:89:b0:c7:e9:
                    34:0d:c6:4f:95:1d:6b:f4:ea:3d:8d:e5:85:4c:9d:
                    4e:8d:ee:26:9c:85:73:2a:20:23:98:ee:41:28:df:
                    04:c9:1c:12:3d:fb:50:28:48:c5:2d:0e:53:5c:c5:
                    90:06:0b:66:97:61:43:10:e1:ea:f2:13:36:43:8a:
                    34:72:97:1f:b6:85:f4:43:85:42:11:99:65:a3:98:
                    a5:e3:0a:aa:6d:31:a3:d4:d1:b3:c0:24:ec:08:09:
                    fc:53:7f:36:6b:00:2a:33:f7:b0:f1:da:35:8e:32:
                    08:de:2e:60:ae:71:4b:69:10:8b:25:64:bd:e5:3b:
                    8c:a3:09:5e:14:cc:88:7e:e1:27:b9:77:88:d1:73:
                    f2:27:47:7a:6c:27:a5:a8:c5:c5:c5:40:e8:8d:d0:
                    23:83:df:bc:3f:65:a6:ec:5a:b8:2a:5d:a9:71:58:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:35:CB:53:DB:7E:74:52:49:F1:AF:90:43:A9:E0:1F:3D:C6:2E:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.112.0/22
                  170.239.52.0/22
                IPv6:
                  2804:2af8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265128

    Signature Algorithm: sha256WithRSAEncryption
         b7:7b:58:ab:12:ab:f7:f5:9c:16:c9:39:d1:78:53:33:25:76:
         dc:70:67:9f:23:1d:22:3f:7a:0f:ce:db:66:6c:d1:cf:fc:ed:
         0c:5a:eb:b7:ec:27:9c:90:9a:80:84:5f:05:c6:ab:30:37:81:
         8e:e6:76:ee:d9:f9:64:f3:8c:0c:93:4b:6d:3b:ee:43:68:d0:
         3d:ec:38:f6:74:5f:71:dd:50:f2:f8:b1:44:df:c1:fd:cd:c0:
         fb:c7:97:0d:2a:db:80:7f:b2:d6:e6:20:ff:3c:c0:7a:b0:dc:
         d9:b8:9d:1f:5d:c1:b4:d2:75:5a:22:4d:98:09:e3:50:7e:09:
         b5:55:b9:b7:50:34:dd:7e:fa:25:9d:0b:86:e8:42:00:ac:83:
         0b:a1:2b:b9:2e:43:ea:d5:dd:c2:f7:41:ae:fd:62:95:d8:40:
         a4:16:ff:82:f0:3c:35:f2:14:97:0d:03:3b:b0:a5:05:43:ed:
         5d:a3:98:2e:5e:3d:f1:f4:2a:0d:1a:ef:7d:66:a3:a2:11:6a:
         24:87:ae:ee:6d:05:a6:ea:38:a4:a0:d6:6a:62:dd:35:1a:42:
         37:4d:6b:b3:11:88:5f:37:37:ec:20:3f:86:64:b6:c7:81:7d:
         3a:47:fa:e4:af:8b:45:91:4a:a4:87:3e:bb:19:57:4d:e8:67:
         1e:54:45:51
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUFbCZOuInopN0WMJiyce8gtIp/Q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTQwMTI2MzhaFw0yNDA3MTIwMTMxMzhaMDMxMTAvBgNV
BAMTKEI5MzVDQjUzREI3RTc0NTI0OUYxQUY5MDQzQTlFMDFGM0RDNjJFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sOfWMQ84GY3aA8aKQRbW/08I
/Hp9ygR/ncvaMbhPCtKhhNodQTVHuGiGyjcr1mEkvJUtAkFmEDD2KpKpiC3eKgDB
1dNVmUjzKjEl2v1KTuHEBbSeibDH6TQNxk+VHWv06j2N5YVMnU6N7iachXMqICOY
7kEo3wTJHBI9+1AoSMUtDlNcxZAGC2aXYUMQ4eryEzZDijRylx+2hfRDhUIRmWWj
mKXjCqptMaPU0bPAJOwICfxTfzZrACoz97Dx2jWOMgjeLmCucUtpEIslZL3lO4yj
CV4UzIh+4Se5d4jRc/InR3psJ6WoxcXFQOiN0COD37w/ZabsWrgqXalxWMlDAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5NctT2350Uknx
r5BDqeAfPcYurDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83UWdCdFhLd0VYcnJyNlFWZWFyRzdGVWdtaFd3eGI5VUdw
cTMzTGVvcmZjOS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83UWdCdFhLd0VYcnJyNlFWZWFyRzdGVWdtaFd3eGI5VUdw
cTMzTGVvcmZjOS8wL0I5MzVDQjUzREI3RTc0NTI0OUYxQUY5MDQzQTlFMDFGM0RD
NjJFQUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAo/QcAMEAqrvNDANBAIA
AjAHAwUAKAQq+DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC6gwDQYJKoZIhvcN
AQELBQADggEBALd7WKsSq/f1nBbJOdF4UzMldtxwZ58jHSI/eg/O22Zs0c/87Qxa
67fsJ5yQmoCEXwXGqzA3gY7mdu7Z+WTzjAyTS2077kNo0D3sOPZ0X3HdUPL4sUTf
wf3NwPvHlw0q24B/stbmIP88wHqw3Nm4nR9dwbTSdVoiTZgJ41B+CbVVubdQNN1+
+iWdC4boQgCsgwuhK7kuQ+rV3cL3Qa79YpXYQKQW/4LwPDXyFJcNAzuwpQVD7V2j
mC5ePfH0Kg0a731mo6IRaiSHru5tBabqOKSg1mpi3TUaQjdNa7MRiF83N+wgP4Zk
tseBfTpH+uSvi0WRSqSHPrsZV03oZx5URVE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org