Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C26E56C3FA7771BC3E999EFB207FC2B97558EAB2.cer
File:                     C26E56C3FA7771BC3E999EFB207FC2B97558EAB2.cer (raw, json)
Hash identifier:          9gnVtT03NR9d6sf8tfO/wyW8SyGcQ1ujbcV2ZZXjya4=
Subject key identifier:   C2:6E:56:C3:FA:77:71:BC:3E:99:9E:FB:20:7F:C2:B9:75:58:EA:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EF3A99DB7329D5CA165F371F40CAE8C80EF8CB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/74XGv6BVJarzGg3Sg9CAxKycK64oUaDL6NNg28pm24fF/0/C26E56C3FA7771BC3E999EFB207FC2B97558EAB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/74XGv6BVJarzGg3Sg9CAxKycK64oUaDL6NNg28pm24fF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Nov 2022 19:45:12 +0000
Certificate not after:    Tue 28 Nov 2023 19:50:12 +0000
Subordinate resources:    AS: 28294
                          IP: 131.72.84.0/22
                          IP: 138.36.88.0/22
                          IP: 138.204.208.0/22
                          IP: 168.181.0.0/22
                          IP: 168.194.92.0/22
                          IP: 170.246.140.0/22
                          IP: 177.221.0.0/19
                          IP: 179.107.192.0/19
                          IP: 186.226.128.0/20
                          IP: 189.36.144.0/20
                          IP: 2804:b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f3:a9:9d:b7:32:9d:5c:a1:65:f3:71:f4:0c:ae:8c:80:ef:8c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 19:45:12 2022 GMT
            Not After : Nov 28 19:50:12 2023 GMT
        Subject: CN=C26E56C3FA7771BC3E999EFB207FC2B97558EAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6b:cd:c6:7e:b6:dc:35:9d:b8:ea:aa:5b:27:
                    da:32:fe:8b:15:e4:da:92:c8:3d:ca:b9:a4:76:cd:
                    6a:2a:86:d9:33:11:97:73:ea:3b:33:6d:c4:ff:be:
                    d7:df:7b:a8:42:c8:b3:72:2b:f2:f6:8a:8c:88:d3:
                    ac:a0:6b:8d:3d:9b:d4:48:77:90:32:69:28:94:0c:
                    71:22:9d:db:ff:49:ac:a8:8a:bb:45:f8:d5:9e:48:
                    56:3f:22:5f:5d:e2:02:8d:fc:86:f2:fb:3e:47:df:
                    a3:80:0d:0d:ac:51:4f:f6:04:a9:ea:f9:63:3b:40:
                    34:3b:6c:84:f9:e9:98:13:ac:5d:db:20:e2:7f:78:
                    92:c9:a6:2c:c7:db:2b:85:dd:7d:77:5f:35:ad:d5:
                    64:ff:72:ef:ba:a8:8a:0a:2b:27:ae:86:57:0c:3c:
                    d3:e6:32:a2:81:df:7b:9d:11:e0:e9:9d:12:1c:8f:
                    a3:35:ed:93:86:9e:06:5a:e3:96:c5:75:58:82:f2:
                    f3:a2:a6:98:06:88:27:15:e8:99:9a:d4:b5:e5:6b:
                    23:fd:cf:48:92:8d:a9:cf:20:06:d4:d7:ce:db:57:
                    be:7e:71:99:d9:62:fe:3c:c6:38:77:4b:18:63:26:
                    be:a0:71:13:0c:dc:52:81:82:df:4d:6d:3c:79:fd:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:6E:56:C3:FA:77:71:BC:3E:99:9E:FB:20:7F:C2:B9:75:58:EA:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/74XGv6BVJarzGg3Sg9CAxKycK64oUaDL6NNg28pm24fF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/74XGv6BVJarzGg3Sg9CAxKycK64oUaDL6NNg28pm24fF/0/C26E56C3FA7771BC3E999EFB207FC2B97558EAB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.84.0/22
                  138.36.88.0/22
                  138.204.208.0/22
                  168.181.0.0/22
                  168.194.92.0/22
                  170.246.140.0/22
                  177.221.0.0/19
                  179.107.192.0/19
                  186.226.128.0/20
                  189.36.144.0/20
                IPv6:
                  2804:b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28294

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:22:4b:52:77:fb:26:7f:2e:ad:76:a9:95:79:37:78:98:
         a3:24:1e:a3:b5:8b:0b:34:82:25:af:2a:5e:f8:f2:e9:ce:66:
         97:80:9f:95:69:67:b4:12:02:f1:2d:6e:8d:7b:f0:44:d2:eb:
         ba:48:23:76:9b:0f:e9:02:8a:a3:57:c8:9b:82:2a:6c:d2:24:
         7c:ab:57:b8:0c:5f:da:6c:d1:4c:db:71:59:6b:ac:42:e0:00:
         ff:13:7f:53:cc:a4:4c:65:1c:b3:4a:53:59:b8:72:c3:1b:50:
         87:c0:75:53:83:c6:ca:e5:2d:98:30:ec:94:15:4c:7d:90:cd:
         d5:fa:0a:8d:f6:6b:d5:bc:bc:b8:1a:f1:eb:a4:ba:61:99:81:
         f9:c6:02:a7:30:a4:de:03:70:50:fe:97:b0:ec:59:28:07:1f:
         0e:60:44:ec:4d:ba:b8:0e:2a:36:98:b5:25:08:f8:b5:44:ab:
         b5:6a:f1:4a:21:8e:8b:63:59:8f:20:7c:5f:7e:99:6e:a9:3c:
         6e:9a:63:0e:cd:da:5e:4d:04:30:5b:11:3f:41:08:df:58:50:
         2d:7b:fa:29:3f:36:3b:41:dd:01:57:91:51:a8:54:90:a7:23:
         2a:ce:f2:67:bd:69:41:30:2f:69:95:9a:62:11:ce:f4:4e:ef:
         e8:62:95:48
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUfvOpnbcynVyhZfNx9AyujIDvjLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMjkxOTQ1MTJaFw0yMzExMjgxOTUwMTJaMDMxMTAvBgNV
BAMTKEMyNkU1NkMzRkE3NzcxQkMzRTk5OUVGQjIwN0ZDMkI5NzU1OEVBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDya83GfrbcNZ246qpbJ9oy/osV
5NqSyD3KuaR2zWoqhtkzEZdz6jszbcT/vtffe6hCyLNyK/L2ioyI06yga409m9RI
d5AyaSiUDHEindv/SayoirtF+NWeSFY/Il9d4gKN/Iby+z5H36OADQ2sUU/2BKnq
+WM7QDQ7bIT56ZgTrF3bIOJ/eJLJpizH2yuF3X13XzWt1WT/cu+6qIoKKyeuhlcM
PNPmMqKB33udEeDpnRIcj6M17ZOGngZa45bFdViC8vOippgGiCcV6Jma1LXlayP9
z0iSjanPIAbU187bV75+cZnZYv48xjh3SxhjJr6gcRMM3FKBgt9NbTx5/S2RAgMB
AAGjggNPMIIDSzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCblbD+ndxvD6Z
nvsgf8K5dVjqsjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83NFhHdjZCVkphcnpHZzNTZzlDQXhLeWNLNjRvVWFETDZO
TmcyOHBtMjRmRi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83NFhHdjZCVkphcnpHZzNTZzlDQXhLeWNLNjRvVWFETDZO
TmcyOHBtMjRmRi8wL0MyNkU1NkMzRkE3NzcxQkMzRTk5OUVGQjIwN0ZDMkI5NzU1
OEVBQjIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBkBggrBgEFBQcBBwEB/wRVMFMwQgQCAAEwPAMEAoNIVAMEAookWAMEAorM
0AMEAqi1AAMEAqjCXAMEAqr2jAMEBbHdAAMEBbNrwAMEBLrigAMEBL0kkDANBAIA
AjAHAwUAKAQAtDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuhjANBgkqhkiG9w0B
AQsFAAOCAQEAR+QiS1J3+yZ/Lq12qZV5N3iYoyQeo7WLCzSCJa8qXvjy6c5ml4Cf
lWlntBIC8S1ujXvwRNLrukgjdpsP6QKKo1fIm4IqbNIkfKtXuAxf2mzRTNtxWWus
QuAA/xN/U8ykTGUcs0pTWbhywxtQh8B1U4PGyuUtmDDslBVMfZDN1foKjfZr1by8
uBrx66S6YZmB+cYCpzCk3gNwUP6XsOxZKAcfDmBE7E26uA4qNpi1JQj4tUSrtWrx
SiGOi2NZjyB8X36Zbqk8bppjDs3aXk0EMFsRP0EI31hQLXv6KT82O0HdAVeRUahU
kKcjKs7yZ71pQTAvaZWaYhHO9E7v6GKVSA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org