Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C18C1318757B221116457DC9E4FC357DB6F285A1.cer
File:                     C18C1318757B221116457DC9E4FC357DB6F285A1.cer (raw, json)
Hash identifier:          Go282la8yJTwR/RfO9F9r3R+vbXiA8xSAkZhGSqeqvY=
Subject key identifier:   C1:8C:13:18:75:7B:22:11:16:45:7D:C9:E4:FC:35:7D:B6:F2:85:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E5BA472EFC8BA38988E2D0FD48D914C3019B93E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/C18C1318757B221116457DC9E4FC357DB6F285A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 20:22:35 +0000
Certificate not after:    Mon 13 May 2024 20:27:35 +0000
Subordinate resources:    AS: 264352
                          IP: 131.108.228.0/22
                          IP: 2804:1d2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5b:a4:72:ef:c8:ba:38:98:8e:2d:0f:d4:8d:91:4c:30:19:b9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 15 20:22:35 2023 GMT
            Not After : May 13 20:27:35 2024 GMT
        Subject: CN=C18C1318757B221116457DC9E4FC357DB6F285A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:6b:18:ec:59:7f:d8:65:ea:75:4c:21:b0:
                    62:eb:9d:01:6f:22:fe:e7:af:9c:62:38:a6:44:a3:
                    7c:9b:94:f8:22:eb:9e:d5:7e:3e:9e:15:11:6d:0d:
                    70:5c:b9:07:55:ee:82:d1:b8:87:e5:ed:76:fe:94:
                    35:0f:90:98:a4:d4:94:f4:d1:92:ea:bc:53:5f:f4:
                    33:7e:27:61:5f:63:a5:ec:19:b7:e8:b5:24:bb:b5:
                    c7:9f:29:ce:e2:54:65:4f:25:92:de:30:50:a1:96:
                    40:d3:be:12:dd:b8:1d:db:95:be:b1:ce:da:f7:2d:
                    4b:9e:c6:58:2f:bb:e5:89:ff:9f:d6:47:cf:cd:a5:
                    8e:5c:3d:fc:fc:80:f2:13:c3:a7:c4:72:35:8f:ef:
                    8e:05:09:b0:e1:39:e1:d8:28:a4:ff:89:64:24:aa:
                    fa:54:58:e0:3f:a0:49:d1:8d:ea:9c:ee:a0:c1:5e:
                    0a:78:bc:14:58:4a:3f:8b:34:a3:fa:04:ed:2e:4a:
                    36:65:08:d3:58:9c:dc:46:15:11:17:a9:95:16:92:
                    80:c1:4b:5a:5b:33:0e:5f:c0:76:f2:bb:3c:fc:ad:
                    9b:fc:23:d8:00:c9:3c:cd:d1:f0:36:02:44:78:d0:
                    02:60:40:33:14:f9:cf:c0:ca:3e:1b:ce:69:11:9f:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:8C:13:18:75:7B:22:11:16:45:7D:C9:E4:FC:35:7D:B6:F2:85:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/C18C1318757B221116457DC9E4FC357DB6F285A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264352

    Signature Algorithm: sha256WithRSAEncryption
         00:68:7e:4e:69:e6:df:eb:e9:4b:8b:6c:35:cb:f8:54:30:78:
         ec:6c:ef:02:7f:54:f8:cc:0a:52:03:05:ba:ec:d8:6c:f7:cd:
         97:ae:88:d6:2d:1f:26:39:5d:7f:e4:46:f3:be:c1:13:30:4c:
         53:72:85:c6:43:99:5b:d0:89:17:43:fc:a2:af:4a:5b:71:26:
         46:c3:92:f1:9b:d7:6d:13:4f:85:b0:da:4f:bf:ce:23:fe:0a:
         6f:c3:97:43:be:6a:2a:28:51:6e:97:1c:8a:94:3d:88:05:05:
         19:cd:c8:5b:8a:59:1c:f6:35:cd:58:8f:9c:50:4f:77:f2:c0:
         ac:ce:54:2a:7c:4e:69:0e:5c:15:97:c8:6b:fc:bb:55:4a:f0:
         e5:95:33:1f:7f:d9:0d:06:bf:fa:6d:f2:40:0e:bc:66:fb:7c:
         b0:43:88:52:78:b0:c8:45:89:c5:12:9e:82:32:f7:c9:64:97:
         ba:59:30:de:aa:d2:b7:9d:5b:e1:9b:26:d5:d8:b3:83:0c:5f:
         f7:4e:cc:54:75:61:06:57:fe:a5:d2:dc:9c:9c:ec:1b:81:ba:
         31:3f:e7:99:40:fc:17:3f:03:5a:c2:a3:04:b7:73:a1:ce:96:
         e4:20:65:32:0a:56:ce:b7:17:bc:e5:b7:0a:2f:b5:69:60:a7:
         00:3a:ad:65
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIULlukcu/IujiYji0P1I2RTDAZuT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTUyMDIyMzVaFw0yNDA1MTMyMDI3MzVaMDMxMTAvBgNV
BAMTKEMxOEMxMzE4NzU3QjIyMTExNjQ1N0RDOUU0RkMzNTdEQjZGMjg1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWqGsY7Fl/2GXqdUwhsGLrnQFv
Iv7nr5xiOKZEo3yblPgi657Vfj6eFRFtDXBcuQdV7oLRuIfl7Xb+lDUPkJik1JT0
0ZLqvFNf9DN+J2FfY6XsGbfotSS7tcefKc7iVGVPJZLeMFChlkDTvhLduB3blb6x
ztr3LUuexlgvu+WJ/5/WR8/NpY5cPfz8gPITw6fEcjWP744FCbDhOeHYKKT/iWQk
qvpUWOA/oEnRjeqc7qDBXgp4vBRYSj+LNKP6BO0uSjZlCNNYnNxGFREXqZUWkoDB
S1pbMw5fwHbyuzz8rZv8I9gAyTzN0fA2AkR40AJgQDMU+c/Ayj4bzmkRn1xXAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBjBMYdXsiERZF
fcnk/DV9tvKFoTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GS0F4U2I1RkJ3NFRZVjFqUkp6MXRwUlYyclBVa2VtQ1dC
aEtuTEFLVUpuci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GS0F4U2I1RkJ3NFRZVjFqUkp6MXRwUlYyclBVa2VtQ1dC
aEtuTEFLVUpuci8wL0MxOEMxMzE4NzU3QjIyMTExNjQ1N0RDOUU0RkMzNTdEQjZG
Mjg1QTEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoNs5DANBAIAAjAHAwUA
KAQdLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECKAwDQYJKoZIhvcNAQELBQAD
ggEBAABofk5p5t/r6UuLbDXL+FQweOxs7wJ/VPjMClIDBbrs2Gz3zZeuiNYtHyY5
XX/kRvO+wRMwTFNyhcZDmVvQiRdD/KKvSltxJkbDkvGb120TT4Ww2k+/ziP+Cm/D
l0O+aiooUW6XHIqUPYgFBRnNyFuKWRz2Nc1Yj5xQT3fywKzOVCp8TmkOXBWXyGv8
u1VK8OWVMx9/2Q0Gv/pt8kAOvGb7fLBDiFJ4sMhFicUSnoIy98lkl7pZMN6q0red
W+GbJtXYs4MMX/dOzFR1YQZX/qXS3Jyc7BuBujE/55lA/Bc/A1rCowS3c6HOluQg
ZTIKVs63F7zltwovtWlgpwA6rWU=
-----END CERTIFICATE-----