Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C21134134C5B8ACCB13D5962CBA1413300788AE1.cer
File:                     C21134134C5B8ACCB13D5962CBA1413300788AE1.cer (raw, json)
Hash identifier:          wmWH8DvmzHKkIgHo/LTveyNBGUcR2jGxcxGzLd60pQU=
Subject key identifier:   C2:11:34:13:4C:5B:8A:CC:B1:3D:59:62:CB:A1:41:33:00:78:8A:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       446B1BBB4AD30BFD5ADF9E53CCFFA32353A01891
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C21134134C5B8ACCB13D5962CBA1413300788AE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 14:51:34 +0000
Certificate not after:    Thu 27 Jun 2024 14:56:34 +0000
Subordinate resources:    AS: 263515
                          IP: 191.243.216.0/21
                          IP: 2804:1318::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6b:1b:bb:4a:d3:0b:fd:5a:df:9e:53:cc:ff:a3:23:53:a0:18:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 14:51:34 2023 GMT
            Not After : Jun 27 14:56:34 2024 GMT
        Subject: CN=C21134134C5B8ACCB13D5962CBA1413300788AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:74:2e:0c:5e:0e:1e:ae:ef:01:12:8d:0a:
                    c7:5f:29:5d:86:ab:b6:8e:5d:9a:d7:b3:60:99:37:
                    67:ad:fd:12:23:2e:9a:31:54:fd:09:2c:bc:ea:04:
                    e0:0b:a0:cd:da:2b:c3:2e:aa:15:95:8f:0c:0c:cf:
                    d0:1b:a1:27:9e:ef:ef:7b:b3:78:22:c9:c2:4e:54:
                    de:3b:f1:6b:a6:74:89:92:87:89:ad:2c:19:76:11:
                    e1:45:56:4f:74:b4:76:dd:d3:f0:d4:f0:8f:40:6c:
                    be:b3:b0:81:29:77:c3:a3:3e:41:32:7a:a0:db:eb:
                    16:f6:85:c6:d0:d9:bd:e1:c6:e8:bf:1d:5e:c5:ba:
                    e6:85:2e:19:62:12:43:0f:d0:4a:9c:08:e3:6c:4c:
                    3c:58:90:71:36:7a:40:f5:cb:13:11:b6:52:54:09:
                    4a:fe:fb:2d:2b:fa:d8:f9:8d:ed:67:e1:0d:ce:61:
                    ad:ca:9e:69:86:45:99:d2:51:69:70:df:9c:ce:fe:
                    f5:99:5a:01:7b:dd:9d:3a:f4:9b:9b:e1:d8:ae:4b:
                    92:30:42:6b:06:d9:b3:d5:ca:17:4b:00:b0:1e:fa:
                    63:00:aa:c4:8c:9d:6e:a4:fc:8b:0d:35:de:88:b2:
                    58:6c:3d:33:3e:16:66:4b:32:d4:ff:58:cd:b2:b6:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:11:34:13:4C:5B:8A:CC:B1:3D:59:62:CB:A1:41:33:00:78:8A:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C21134134C5B8ACCB13D5962CBA1413300788AE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.216.0/21
                IPv6:
                  2804:1318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263515

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:56:be:d7:5a:1e:43:b5:3c:5d:9e:08:1f:7b:7e:f0:af:
         85:b3:f9:a9:b6:ed:0a:61:e0:05:16:cc:7d:d3:2a:d6:88:5f:
         b5:2c:a7:ef:18:44:63:22:12:a0:3c:e2:57:d6:99:c7:69:c1:
         e3:15:88:73:d9:2b:0c:46:2c:d1:aa:eb:8d:4e:e3:98:ca:48:
         1f:5f:13:46:c2:a1:11:89:94:db:79:e6:25:bb:7e:c6:ea:04:
         af:05:ea:8f:d0:f4:b3:1c:93:20:6f:e6:2d:10:47:48:d7:92:
         9c:a0:60:18:d5:40:00:65:85:57:c8:a2:6f:1a:0a:a7:5c:10:
         25:21:b5:3e:23:89:06:b7:99:b0:ed:e5:43:64:33:2a:e7:08:
         c0:44:37:ea:8e:04:1b:34:8a:a4:0e:7c:2b:a7:53:13:22:4b:
         4f:40:bc:74:ea:62:87:96:c8:da:5e:c5:e4:d5:51:9c:f4:f3:
         89:a8:7b:97:bd:ad:72:fc:12:79:d9:91:22:b3:49:b7:bf:f8:
         d1:7e:be:51:4a:b4:50:6a:a8:86:b2:fe:2b:28:4a:73:2e:14:
         88:64:7c:4d:5c:0b:75:29:c2:ff:54:6c:1b:a7:8c:41:6d:8c:
         00:2a:a5:bb:c9:4c:43:40:9c:81:8b:32:47:54:a7:30:75:90:
         f5:d7:be:03
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIURGsbu0rTC/1a355TzP+jI1OgGJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjkxNDUxMzRaFw0yNDA2MjcxNDU2MzRaMDMxMTAvBgNV
BAMTKEMyMTEzNDEzNEM1QjhBQ0NCMTNENTk2MkNCQTE0MTMzMDA3ODhBRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+sXQuDF4OHq7vARKNCsdfKV2G
q7aOXZrXs2CZN2et/RIjLpoxVP0JLLzqBOALoM3aK8MuqhWVjwwMz9AboSee7+97
s3giycJOVN478WumdImSh4mtLBl2EeFFVk90tHbd0/DU8I9AbL6zsIEpd8OjPkEy
eqDb6xb2hcbQ2b3hxui/HV7FuuaFLhliEkMP0EqcCONsTDxYkHE2ekD1yxMRtlJU
CUr++y0r+tj5je1n4Q3OYa3KnmmGRZnSUWlw35zO/vWZWgF73Z069Jub4diuS5Iw
QmsG2bPVyhdLALAe+mMAqsSMnW6k/IsNNd6IslhsPTM+FmZLMtT/WM2ytoVrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCETQTTFuKzLE9
WWLLoUEzAHiK4TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zVzlmRTJ0RHZNckNEeVc3UXhYc0VQcWZ5S2NyWlZZZnpL
UVljZmdhOU5TZy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM1c5ZkUydER2TXJDRHlXN1F4WHNFUHFmeUtjclpWWWZ6
S1FZY2ZnYTlOU2cvMC9DMjExMzQxMzRDNUI4QUNDQjEzRDU5NjJDQkExNDEzMzAw
Nzg4QUUxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAO/89gwDQQCAAIwBwMF
ACgEExgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAVbMA0GCSqGSIb3DQEBCwUA
A4IBAQCpVVa+11oeQ7U8XZ4IH3t+8K+Fs/mptu0KYeAFFsx90yrWiF+1LKfvGERj
IhKgPOJX1pnHacHjFYhz2SsMRizRquuNTuOYykgfXxNGwqERiZTbeeYlu37G6gSv
BeqP0PSzHJMgb+YtEEdI15KcoGAY1UAAZYVXyKJvGgqnXBAlIbU+I4kGt5mw7eVD
ZDMq5wjARDfqjgQbNIqkDnwrp1MTIktPQLx06mKHlsjaXsXk1VGc9POJqHuXva1y
/BJ52ZEis0m3v/jRfr5RSrRQaqiGsv4rKEpzLhSIZHxNXAt1KcL/VGwbp4xBbYwA
KqW7yUxDQJyBizJHVKcwdZD1174D
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org