Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.cer
File:                     C705331F0A907F8D2B8A4719ECE2288993AFDA38.cer (raw, json)
Hash identifier:          DrgNHGt0CWvZKtIvWiE3pC2E1CZtiOwT45TuFgfL4bE=
Subject key identifier:   C7:05:33:1F:0A:90:7F:8D:2B:8A:47:19:EC:E2:28:89:93:AF:DA:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76D7CCFEADE2560EAD7B60B750570E359649B66A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Feb 2023 13:19:28 +0000
Certificate not after:    Fri 23 Feb 2024 13:24:28 +0000
Subordinate resources:    AS: 262901
                          IP: 177.22.192.0/20
                          IP: 191.240.176.0/20
                          IP: 2804:1110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d7:cc:fe:ad:e2:56:0e:ad:7b:60:b7:50:57:0e:35:96:49:b6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 13:19:28 2023 GMT
            Not After : Feb 23 13:24:28 2024 GMT
        Subject: CN=C705331F0A907F8D2B8A4719ECE2288993AFDA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:1f:14:58:c6:5b:53:d0:cc:8e:7a:dc:9c:
                    ad:3f:18:b6:be:f8:4e:ef:3c:fc:93:70:87:b1:01:
                    a5:ff:28:5e:17:20:55:a7:76:a3:4e:59:19:6a:24:
                    b8:db:f2:94:7a:b1:97:fa:f1:7f:b3:36:da:ae:29:
                    4c:eb:cf:11:6f:21:94:fe:da:95:d8:a9:ac:b0:24:
                    73:13:74:bb:a0:f9:ed:3e:e6:95:07:41:6e:32:4f:
                    08:6b:27:02:49:ce:f0:c2:4f:f6:e0:2e:c4:4c:22:
                    45:33:ad:fc:31:4d:dc:d6:5a:6f:96:48:47:60:0b:
                    d2:6e:c6:4e:41:b8:1a:ed:0b:99:65:ba:fe:9b:e5:
                    2a:5d:08:26:27:66:a3:26:e9:20:b0:4d:7d:94:1c:
                    0d:f2:39:b6:ff:e2:8d:a4:a5:72:f9:3d:a1:02:78:
                    b6:cb:bf:f2:6f:70:7f:78:0a:8a:b5:4b:25:a9:f4:
                    15:f4:fc:e2:da:ed:5c:c0:d3:91:49:05:cf:8c:f3:
                    3b:21:76:bb:67:16:6f:92:92:dd:d1:60:81:c3:10:
                    fd:ae:8e:c2:00:9e:7d:9d:4e:cb:13:80:3b:27:3f:
                    38:15:5e:b1:f3:5b:ac:15:93:5b:f8:b9:24:e7:c3:
                    95:af:a7:a5:83:fe:cf:42:05:81:95:70:f2:fb:9f:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:05:33:1F:0A:90:7F:8D:2B:8A:47:19:EC:E2:28:89:93:AF:DA:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/20
                  191.240.176.0/20
                IPv6:
                  2804:1110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262901

    Signature Algorithm: sha256WithRSAEncryption
         41:ed:31:15:53:91:c9:82:4b:96:26:8a:04:35:c6:77:70:fa:
         b0:b0:7d:03:7e:a9:16:13:db:2b:ac:e5:ca:df:36:4c:33:63:
         9c:48:24:64:47:e8:b9:dd:2a:c6:e0:16:bb:c4:08:6b:cc:3b:
         ab:77:09:12:81:7f:90:0e:e0:40:d7:28:db:1d:21:53:ec:53:
         09:0a:cc:e8:19:6c:fb:b8:b8:24:0f:f6:a6:2a:60:d9:d2:39:
         6c:71:09:fe:84:4b:7d:8e:1b:54:fc:f9:51:7d:2c:0b:d1:9b:
         79:02:f5:41:62:82:b6:2a:c5:4b:1d:d3:d9:f1:21:f5:17:21:
         15:3f:15:d8:1b:10:8e:f6:07:5d:0f:1d:c5:bf:ce:55:70:ed:
         8e:49:0c:d1:9c:36:fc:f5:6b:ce:f2:5d:dd:dc:b6:49:f2:75:
         f3:9b:20:38:e8:56:45:56:f3:6c:0a:18:c0:16:ec:c2:ab:80:
         82:a1:d5:2a:8d:19:3f:27:2f:f3:37:3d:fb:21:9f:99:76:bb:
         0e:94:2e:60:c3:65:46:37:16:4d:2b:d4:cf:9d:8e:41:e0:ad:
         0b:6e:44:dc:37:1e:68:4d:fd:2a:05:e8:27:bd:e2:74:ab:d0:
         41:00:ba:8b:41:4e:09:83:77:9c:d6:da:ce:26:29:c5:48:49:
         2c:00:e4:15
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUdtfM/q3iVg6te2C3UFcONZZJtmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMjQxMzE5MjhaFw0yNDAyMjMxMzI0MjhaMDMxMTAvBgNV
BAMTKEM3MDUzMzFGMEE5MDdGOEQyQjhBNDcxOUVDRTIyODg5OTNBRkRBMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfR8UWMZbU9DMjnrcnK0/GLa+
+E7vPPyTcIexAaX/KF4XIFWndqNOWRlqJLjb8pR6sZf68X+zNtquKUzrzxFvIZT+
2pXYqaywJHMTdLug+e0+5pUHQW4yTwhrJwJJzvDCT/bgLsRMIkUzrfwxTdzWWm+W
SEdgC9Juxk5BuBrtC5lluv6b5SpdCCYnZqMm6SCwTX2UHA3yObb/4o2kpXL5PaEC
eLbLv/JvcH94Coq1SyWp9BX0/OLa7VzA05FJBc+M8zshdrtnFm+Skt3RYIHDEP2u
jsIAnn2dTssTgDsnPzgVXrHzW6wVk1v4uSTnw5Wvp6WD/s9CBYGVcPL7n5RHAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHBTMfCpB/jSuK
Rxns4iiJk6/aODAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RXMyNjFZanFXYlBHVXU2ekhHN2c4dm9YY2l3OUM1NUxL
bTVtSnY1QUdwai8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RXMyNjFZanFXYlBHVXU2ekhHN2c4dm9YY2l3OUM1NUxL
bTVtSnY1QUdwai8wL0M3MDUzMzFGMEE5MDdGOEQyQjhBNDcxOUVDRTIyODg5OTNB
RkRBMzgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLEWwAMEBL/wsDANBAIA
AjAHAwUAKAQREDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAvUwDQYJKoZIhvcN
AQELBQADggEBAEHtMRVTkcmCS5YmigQ1xndw+rCwfQN+qRYT2yus5crfNkwzY5xI
JGRH6LndKsbgFrvECGvMO6t3CRKBf5AO4EDXKNsdIVPsUwkKzOgZbPu4uCQP9qYq
YNnSOWxxCf6ES32OG1T8+VF9LAvRm3kC9UFigrYqxUsd09nxIfUXIRU/FdgbEI72
B10PHcW/zlVw7Y5JDNGcNvz1a87yXd3ctknydfObIDjoVkVW82wKGMAW7MKrgIKh
1SqNGT8nL/M3Pfshn5l2uw6ULmDDZUY3Fk0r1M+djkHgrQtuRNw3HmhN/SoF6Ce9
4nSr0EEAuotBTgmDd5zW2s4mKcVISSwA5BU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org