Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.cer
File:                     C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.cer (raw, json)
Hash identifier:          EEbOi2trUEbEapvcL56gHsozTEJzB85Iig+ypAs6AAk=
Subject key identifier:   C6:59:ED:35:D6:77:4A:DA:1B:4D:FC:B5:2B:2B:CA:0F:9F:B9:C8:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C8C1E0FCD9FA5B685B8B4F810F3FC261A2045BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Apr 2022 19:54:37 +0000
Certificate not after:    Sat 08 Apr 2023 19:59:37 +0000
Subordinate resources:    AS: 265135
                          IP: 143.255.20.0/22
                          IP: 2804:2b1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8c:1e:0f:cd:9f:a5:b6:85:b8:b4:f8:10:f3:fc:26:1a:20:45:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  9 19:54:37 2022 GMT
            Not After : Apr  8 19:59:37 2023 GMT
        Subject: CN=C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:6c:6e:23:27:ba:15:97:46:90:3a:d7:8c:
                    93:f0:2f:c3:a5:79:bd:1e:81:39:17:fc:81:4a:b1:
                    e3:15:63:66:db:70:0c:f0:ce:41:e2:46:ed:16:70:
                    84:fd:57:f5:46:7f:ed:bc:1c:22:46:b1:11:74:e6:
                    9e:1b:8d:67:ee:55:bf:65:59:f3:f5:a5:33:ae:68:
                    00:22:74:35:56:c3:ee:57:97:3f:ec:0c:33:41:cd:
                    8c:b1:20:fd:44:5f:bd:43:3a:66:7b:33:96:be:1b:
                    71:b6:69:52:68:1c:28:a4:7c:9a:56:89:23:c7:d1:
                    10:63:a9:10:89:9d:af:97:9a:cd:ad:9d:52:bf:12:
                    b2:c2:84:53:2a:89:ba:05:2a:93:ce:de:69:fa:2a:
                    03:85:a8:e7:89:0c:49:7c:c5:89:48:88:5e:8f:4a:
                    c2:11:30:a8:68:9a:55:af:29:74:1b:c5:40:8e:96:
                    2d:66:34:67:d9:a8:74:22:96:d3:c8:b5:27:8d:ec:
                    d2:e5:84:0d:bb:27:73:46:d1:e6:0a:a1:81:c9:12:
                    15:32:85:b4:00:89:0d:f7:c1:f1:1a:9e:a4:ca:de:
                    1a:a1:9c:51:ee:ab:dc:8c:e3:c6:bf:f7:6b:a7:5e:
                    c9:5e:da:e0:d7:ce:2e:a7:8b:7e:ca:f9:69:a9:9a:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:59:ED:35:D6:77:4A:DA:1B:4D:FC:B5:2B:2B:CA:0F:9F:B9:C8:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.20.0/22
                IPv6:
                  2804:2b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265135

    Signature Algorithm: sha256WithRSAEncryption
         77:9b:bf:2a:84:96:2c:b4:51:6a:1e:58:a9:f4:16:f4:1f:c6:
         6d:d5:84:c6:5d:ca:38:16:45:99:20:30:a8:6d:74:64:59:e9:
         38:13:f8:fc:a3:e0:96:10:91:e6:9d:45:42:76:5f:51:37:43:
         b8:e7:98:6d:2c:6d:2c:8d:0b:48:97:a4:43:3b:ff:1c:19:6d:
         35:72:eb:66:1f:2e:13:4d:f1:0a:c8:0d:f0:3f:3a:8b:33:ac:
         41:3b:d5:1e:bd:e8:f9:93:a8:7b:be:f0:84:74:a5:43:04:9a:
         67:64:3a:d1:92:8a:73:71:aa:bb:8b:5d:93:c3:d3:9a:db:04:
         e5:74:6c:5d:f3:74:41:6b:a3:bd:41:a4:d4:ec:60:43:09:31:
         d4:aa:66:85:ec:81:73:a4:37:15:2d:8d:e8:02:3a:99:36:ec:
         cb:5f:b4:92:c6:2e:67:8b:68:03:76:27:b4:b1:1e:ac:71:15:
         58:f2:38:6f:66:17:41:ba:93:46:c9:be:18:64:57:e2:db:8c:
         c9:3f:cb:ab:4b:1d:01:84:ca:07:30:d5:82:33:b6:c0:72:95:
         99:77:a2:a9:ba:17:16:5b:0a:2a:5a:66:64:38:09:a4:90:ad:
         cd:55:c0:30:f2:ec:dd:90:5d:59:21:f7:d4:ee:fd:56:ef:54:
         76:9a:39:5f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUDIweD82fpbaFuLT4EPP8JhogRbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA0MDkxOTU0MzdaFw0yMzA0MDgxOTU5MzdaMDMxMTAvBgNV
BAMTKEM2NTlFRDM1RDY3NzRBREExQjRERkNCNTJCMkJDQTBGOUZCOUM4MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3A2xuIye6FZdGkDrXjJPwL8Ol
eb0egTkX/IFKseMVY2bbcAzwzkHiRu0WcIT9V/VGf+28HCJGsRF05p4bjWfuVb9l
WfP1pTOuaAAidDVWw+5Xlz/sDDNBzYyxIP1EX71DOmZ7M5a+G3G2aVJoHCikfJpW
iSPH0RBjqRCJna+Xms2tnVK/ErLChFMqiboFKpPO3mn6KgOFqOeJDEl8xYlIiF6P
SsIRMKhomlWvKXQbxUCOli1mNGfZqHQiltPItSeN7NLlhA27J3NG0eYKoYHJEhUy
hbQAiQ33wfEanqTK3hqhnFHuq9yM48a/92unXsle2uDXzi6ni37K+WmpmqTZAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTGWe011ndK2htN
/LUrK8oPn7nIJzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83Q2RqajlTa21ZVVZkdXVMU2RmOVFuU1dwTmRhbTN0Qlc2
ZXBiM0xpMnpoZi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83Q2RqajlTa21ZVVZkdXVMU2RmOVFuU1dwTmRhbTN0Qlc2
ZXBiM0xpMnpoZi8wL0M2NTlFRDM1RDY3NzRBREExQjRERkNCNTJCMkJDQTBGOUZC
OUM4MjcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo//FDANBAIAAjAHAwUA
KAQrHDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC68wDQYJKoZIhvcNAQELBQAD
ggEBAHebvyqEliy0UWoeWKn0FvQfxm3VhMZdyjgWRZkgMKhtdGRZ6TgT+Pyj4JYQ
keadRUJ2X1E3Q7jnmG0sbSyNC0iXpEM7/xwZbTVy62YfLhNN8QrIDfA/OoszrEE7
1R696PmTqHu+8IR0pUMEmmdkOtGSinNxqruLXZPD05rbBOV0bF3zdEFro71BpNTs
YEMJMdSqZoXsgXOkNxUtjegCOpk27MtftJLGLmeLaAN2J7SxHqxxFVjyOG9mF0G6
k0bJvhhkV+LbjMk/y6tLHQGEygcw1YIztsBylZl3oqm6FxZbCipaZmQ4CaSQrc1V
wDDy7N2QXVkh99Tu/VbvVHaaOV8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org