Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C865ECE4F12E22C0EEA78EAA298F43EE9D784C48.cer
File:                     C865ECE4F12E22C0EEA78EAA298F43EE9D784C48.cer (raw, json)
Hash identifier:          cmsX4NvOU16H/aEfnEPYwWX0RhA7IGziQUqFFhCSia0=
Subject key identifier:   C8:65:EC:E4:F1:2E:22:C0:EE:A7:8E:AA:29:8F:43:EE:9D:78:4C:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D2D4B0F79D97B0C6E8914C2B8D8F3500353A073
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/C865ECE4F12E22C0EEA78EAA298F43EE9D784C48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Jan 2023 00:37:44 +0000
Certificate not after:    Wed 17 Jan 2024 00:42:44 +0000
Subordinate resources:    AS: 265174
                          IP: 167.249.204.0/22
                          IP: 2804:2bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2d:4b:0f:79:d9:7b:0c:6e:89:14:c2:b8:d8:f3:50:03:53:a0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 00:37:44 2023 GMT
            Not After : Jan 17 00:42:44 2024 GMT
        Subject: CN=C865ECE4F12E22C0EEA78EAA298F43EE9D784C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:7a:11:b0:0e:54:73:25:24:cd:d5:84:eb:
                    d6:ac:35:82:55:65:30:b3:46:98:7b:86:c4:bc:d2:
                    e5:a0:18:ee:03:6a:4b:b0:1c:2c:1b:54:70:0f:2c:
                    52:ca:bb:6d:a5:0c:f9:43:5a:43:a8:4f:b0:25:be:
                    fc:92:d0:86:bc:40:52:b3:48:86:93:c0:15:0b:b2:
                    86:1a:81:07:c9:fa:23:9c:47:1f:c1:f0:90:b1:94:
                    a2:ee:0c:26:1e:d8:0c:05:5a:27:9e:f0:5f:cc:83:
                    3e:d9:a9:be:dd:a6:8c:a6:50:1f:ca:7c:23:3b:02:
                    0e:b9:5d:44:54:3a:bb:30:f6:8e:7a:c0:87:73:72:
                    34:8c:d0:e3:7c:78:d6:32:f2:78:32:63:95:19:68:
                    99:15:08:75:81:59:17:ee:c3:12:1b:3f:89:ea:9f:
                    e4:5e:56:df:bf:04:80:cb:9e:09:92:96:39:8f:bd:
                    62:53:f4:5d:be:d2:2c:f3:88:01:87:b0:43:d3:86:
                    44:e9:ed:28:38:0d:19:ce:3e:30:cb:23:5d:eb:ea:
                    00:2c:cd:87:e1:29:c2:f3:56:c1:4c:11:a3:72:f3:
                    a3:b4:93:d2:e9:f2:91:e3:b9:60:40:23:5f:e1:f9:
                    ab:cb:47:0d:7b:3f:7b:6b:da:90:8f:76:23:d6:fb:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:65:EC:E4:F1:2E:22:C0:EE:A7:8E:AA:29:8F:43:EE:9D:78:4C:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/C865ECE4F12E22C0EEA78EAA298F43EE9D784C48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.204.0/22
                IPv6:
                  2804:2bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265174

    Signature Algorithm: sha256WithRSAEncryption
         71:43:b9:5f:95:a7:8e:c6:76:bb:88:eb:72:e2:13:88:ec:4a:
         48:ea:8e:1f:be:31:0c:5f:8d:23:05:3b:c1:b6:31:d9:7d:cb:
         00:39:67:e6:b4:e0:0f:4c:51:0a:48:1e:2d:6e:7d:8d:80:f2:
         1c:55:a6:35:1a:a9:cc:94:e1:c2:b7:7a:04:d3:f8:78:98:34:
         bd:25:07:94:ca:10:42:cd:6a:70:7f:92:50:26:7c:61:8c:28:
         ab:39:d0:4c:38:fb:fd:d4:4e:a0:94:d6:cd:d2:73:6a:0e:b3:
         61:78:af:6b:48:71:88:e8:fc:55:d0:ee:68:00:bd:ca:28:8d:
         32:44:08:e3:a2:81:b4:e7:78:75:bb:0e:e8:d5:98:c2:ec:34:
         a8:52:cb:ee:8f:96:d5:81:45:70:21:5e:a6:1a:af:cb:75:5a:
         0a:ae:5c:be:58:c7:c3:40:19:cf:e7:e9:da:06:af:ac:a8:f0:
         3c:66:fa:26:99:98:e9:b7:da:f1:ff:13:e4:5e:c2:5c:34:06:
         05:0d:12:74:2e:67:ac:5e:23:72:b6:96:97:97:bd:6a:ea:e7:
         b4:e2:66:58:82:58:37:d6:3b:db:c0:ae:64:c1:ce:94:35:c2:
         d0:98:21:ba:c0:f8:0d:47:3a:ac:1e:3e:f2:6c:7e:05:e3:df:
         80:db:49:3a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUfS1LD3nZewxuiRTCuNjzUANToHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMTgwMDM3NDRaFw0yNDAxMTcwMDQyNDRaMDMxMTAvBgNV
BAMTKEM4NjVFQ0U0RjEyRTIyQzBFRUE3OEVBQTI5OEY0M0VFOUQ3ODRDNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtXoRsA5UcyUkzdWE69asNYJV
ZTCzRph7hsS80uWgGO4DakuwHCwbVHAPLFLKu22lDPlDWkOoT7AlvvyS0Ia8QFKz
SIaTwBULsoYagQfJ+iOcRx/B8JCxlKLuDCYe2AwFWiee8F/Mgz7Zqb7dpoymUB/K
fCM7Ag65XURUOrsw9o56wIdzcjSM0ON8eNYy8ngyY5UZaJkVCHWBWRfuwxIbP4nq
n+ReVt+/BIDLngmSljmPvWJT9F2+0izziAGHsEPThkTp7Sg4DRnOPjDLI13r6gAs
zYfhKcLzVsFMEaNy86O0k9Lp8pHjuWBAI1/h+avLRw17P3tr2pCPdiPW+6IXAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIZezk8S4iwO6n
jqopj0PunXhMSDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GYU5KdnM4U2JNUUh6REdZaWhlSm1ZS1hGamdXcFFmVGtk
UVoyd3I4UEpXNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GYU5KdnM4U2JNUUh6REdZaWhlSm1ZS1hGamdXcFFmVGtk
UVoyd3I4UEpXNC8wL0M4NjVFQ0U0RjEyRTIyQzBFRUE3OEVBQTI5OEY0M0VFOUQ3
ODRDNDgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqf5zDANBAIAAjAHAwUA
KAQrxDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC9YwDQYJKoZIhvcNAQELBQAD
ggEBAHFDuV+Vp47GdruI63LiE4jsSkjqjh++MQxfjSMFO8G2Mdl9ywA5Z+a04A9M
UQpIHi1ufY2A8hxVpjUaqcyU4cK3egTT+HiYNL0lB5TKEELNanB/klAmfGGMKKs5
0Ew4+/3UTqCU1s3Sc2oOs2F4r2tIcYjo/FXQ7mgAvcoojTJECOOigbTneHW7DujV
mMLsNKhSy+6PltWBRXAhXqYar8t1WgquXL5Yx8NAGc/n6doGr6yo8Dxm+iaZmOm3
2vH/E+Rewlw0BgUNEnQuZ6xeI3K2lpeXvWrq57TiZliCWDfWO9vArmTBzpQ1wtCY
IbrA+A1HOqwePvJsfgXj34DbSTo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org