Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer
File:                     C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer (raw, json)
Hash identifier:          a1bzfkU7Ld7BTzKz/aLQfqBK8akI2ePyuCLVqez+0oQ=
Subject key identifier:   C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DA69D96697FFBC17E899A70B834A330CBDB7F3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 14:05:09 +0000
Certificate not after:    Wed 23 Oct 2024 14:10:09 +0000
Subordinate resources:    AS: 268224
                          IP: 45.236.64.0/22
                          IP: 2804:4ddc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a6:9d:96:69:7f:fb:c1:7e:89:9a:70:b8:34:a3:30:cb:db:7f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 14:05:09 2023 GMT
            Not After : Oct 23 14:10:09 2024 GMT
        Subject: CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:28:cc:e4:31:b8:90:52:49:2e:a7:26:52:
                    8e:c9:3d:9e:46:f6:b5:d3:5a:f1:8a:c2:14:1d:0d:
                    ac:10:36:5e:9f:c3:83:20:aa:0e:3f:48:13:d2:9f:
                    98:6d:7a:c8:e0:52:71:aa:22:10:68:e2:d0:97:05:
                    64:46:ac:04:37:0f:7f:fa:06:04:de:2e:92:9f:75:
                    a6:3f:c4:8a:4c:4b:37:6b:b9:14:9c:d8:c9:d9:d0:
                    e4:1b:ec:48:1d:3f:e4:2e:dd:91:09:99:c9:92:04:
                    84:23:a9:f7:82:33:58:21:9c:6f:f2:28:dc:82:c0:
                    16:88:46:36:94:c7:32:1d:a7:e3:a4:ec:83:cb:e1:
                    4e:4a:f4:44:fe:16:89:80:35:11:16:07:99:e4:d7:
                    92:65:20:bc:53:93:41:dd:cc:c7:12:5a:dc:4f:0a:
                    f6:06:15:e9:ce:ef:b2:4b:f0:d4:67:00:6b:d7:2b:
                    cd:e4:aa:70:00:57:5d:86:c7:d1:58:e7:76:2f:e7:
                    d4:38:2b:dd:cc:06:62:3f:db:b5:a7:2e:0d:3f:7c:
                    69:0d:ad:c0:02:3f:a1:98:30:f9:ec:99:94:a1:bb:
                    78:8d:84:56:b6:af:c0:8c:73:ab:9e:04:02:84:43:
                    3d:a3:08:f0:d1:5f:39:f9:90:b1:61:98:0a:aa:1d:
                    b3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.64.0/22
                IPv6:
                  2804:4ddc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268224

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:11:91:90:8c:da:06:8a:a1:7d:b9:47:e9:29:b0:55:c3:
         e1:ea:ad:be:a1:8b:da:88:60:77:54:be:e6:dd:17:69:98:7b:
         0b:fc:61:3d:6b:af:73:38:f5:04:64:85:8a:a1:43:74:33:23:
         56:94:92:9f:a0:0b:fa:07:77:74:d3:46:ef:35:22:82:ca:fb:
         4a:d5:79:1f:30:69:13:9d:9f:28:09:9c:88:d8:f6:a6:9b:0e:
         42:26:91:44:a1:d6:b5:12:ec:ce:c3:d3:95:7d:b3:0a:bd:1a:
         a4:42:92:a6:9b:ac:c6:d7:dc:d0:fa:35:77:91:28:2f:a6:25:
         0d:ef:dd:8f:e5:0c:dd:d5:cc:57:67:85:e1:79:47:94:5c:9a:
         9d:ae:21:73:0e:3a:0c:9b:e2:f7:33:dc:33:7e:00:db:ff:6f:
         38:2b:6c:8a:18:1d:32:8f:49:2e:12:ca:c8:f4:01:0e:a4:f3:
         57:0e:46:05:e7:4f:ab:92:d8:de:9b:72:80:96:fd:85:12:74:
         d8:da:9a:13:97:dd:a2:85:a8:52:60:bd:94:94:df:a5:ea:21:
         ea:a2:dd:38:af:0b:5d:44:d8:0d:02:79:93:ec:a1:77:2d:46:
         44:5a:f1:97:5a:87:06:64:8f:3c:dc:c9:74:7e:37:09:da:96:
         16:85:5e:73
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIULaadlml/+8F+iZpwuDSjMMvbfzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjUxNDA1MDlaFw0yNDEwMjMxNDEwMDlaMDMxMTAvBgNV
BAMTKEM4MEQ2NzUxM0MzQTM3QjFERTE2RjgxMEFGNkRCNzhENkI4QTM1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkijM5DG4kFJJLqcmUo7JPZ5G
9rXTWvGKwhQdDawQNl6fw4Mgqg4/SBPSn5htesjgUnGqIhBo4tCXBWRGrAQ3D3/6
BgTeLpKfdaY/xIpMSzdruRSc2MnZ0OQb7EgdP+Qu3ZEJmcmSBIQjqfeCM1ghnG/y
KNyCwBaIRjaUxzIdp+Ok7IPL4U5K9ET+FomANREWB5nk15JlILxTk0HdzMcSWtxP
CvYGFenO77JL8NRnAGvXK83kqnAAV12Gx9FY53Yv59Q4K93MBmI/27WnLg0/fGkN
rcACP6GYMPnsmZShu3iNhFa2r8CMc6ueBAKEQz2jCPDRXzn5kLFhmAqqHbN/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIDWdRPDo3sd4W
+BCvbbeNa4o1+DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GeW5BVlhOclI4NWZLQmI0aEpZY1pKUEs4UHlIZHhXcnNt
b0ZRQVliTEdESy8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GeW5BVlhOclI4NWZLQmI0aEpZY1pKUEs4UHlIZHhXcnNt
b0ZRQVliTEdESy8xL0M4MEQ2NzUxM0MzQTM3QjFERTE2RjgxMEFGNkRCNzhENkI4
QTM1RjgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3sQDANBAIAAjAHAwUA
KARN3DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF8AwDQYJKoZIhvcNAQELBQAD
ggEBADFuEZGQjNoGiqF9uUfpKbBVw+Hqrb6hi9qIYHdUvubdF2mYewv8YT1rr3M4
9QRkhYqhQ3QzI1aUkp+gC/oHd3TTRu81IoLK+0rVeR8waROdnygJnIjY9qabDkIm
kUSh1rUS7M7D05V9swq9GqRCkqabrMbX3ND6NXeRKC+mJQ3v3Y/lDN3VzFdnheF5
R5Rcmp2uIXMOOgyb4vcz3DN+ANv/bzgrbIoYHTKPSS4Sysj0AQ6k81cORgXnT6uS
2N6bcoCW/YUSdNjamhOX3aKFqFJgvZSU36XqIeqi3TivC11E2A0CeZPsoXctRkRa
8ZdahwZkjzzcyXR+NwnalhaFXnM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org