Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.cer
File:                     C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.cer (raw, json)
Hash identifier:          uvgfdRSUWgy8hU3mFHnJTO2/BpIwEp/uiF8oONW49QE=
Subject key identifier:   C8:C1:E9:D2:CF:F5:1D:0F:16:E2:D0:4F:DE:71:23:3C:E0:5C:9F:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E7C1F13B3B2FA3F22E0250C4B1084CD7F69CF67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2023 19:34:17 +0000
Certificate not after:    Mon 25 Nov 2024 19:39:17 +0000
Subordinate resources:    AS: 270701
                          IP: 189.127.132.0/22
                          IP: 2804:7010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7c:1f:13:b3:b2:fa:3f:22:e0:25:0c:4b:10:84:cd:7f:69:cf:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 27 19:34:17 2023 GMT
            Not After : Nov 25 19:39:17 2024 GMT
        Subject: CN=C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:77:99:60:d9:7f:00:ea:82:92:43:c9:f1:
                    29:a6:0c:e0:f9:af:76:be:02:32:f7:1f:7d:14:e1:
                    74:f6:56:ca:b2:93:f1:6d:44:65:b9:2c:21:79:8c:
                    78:56:e3:90:b7:62:f9:b7:85:1c:a2:1e:87:1b:98:
                    68:e7:9a:dd:23:f3:66:35:0f:35:ba:1c:41:87:46:
                    1d:9f:2a:4f:32:02:0a:fa:38:69:9e:35:c4:fd:a0:
                    4f:a9:6a:19:ff:b2:c1:56:50:81:5c:16:ee:df:38:
                    ff:10:26:f1:78:09:43:3b:4b:a4:92:9c:52:94:62:
                    a1:40:f4:09:42:2e:d2:19:d1:77:2e:14:83:92:0a:
                    4d:63:ac:52:1f:88:a0:3a:7f:af:37:fb:0e:4d:93:
                    db:f5:48:45:98:f5:ee:10:4e:1e:ec:5a:ae:2d:7d:
                    4f:f5:3a:f7:6d:41:f3:6a:56:65:06:b9:3f:b0:ae:
                    ca:3e:19:89:bf:46:af:0d:9d:51:63:20:d6:6c:19:
                    a1:14:ef:b3:c5:05:f6:59:f7:dc:28:44:8b:cf:70:
                    f1:2a:57:1a:ce:fb:ca:dd:7e:a1:66:4d:66:d7:ee:
                    38:58:0f:96:28:03:c2:53:e4:e6:69:9a:b8:f9:01:
                    61:58:38:b1:65:15:23:e6:dd:f7:6b:b1:95:39:24:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:C1:E9:D2:CF:F5:1D:0F:16:E2:D0:4F:DE:71:23:3C:E0:5C:9F:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/22
                IPv6:
                  2804:7010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270701

    Signature Algorithm: sha256WithRSAEncryption
         31:05:25:74:19:7f:12:38:07:ee:ae:05:1e:c0:f1:aa:7b:0f:
         97:8d:46:36:f4:da:7c:9b:3c:06:ec:72:22:db:0f:d7:9c:96:
         20:be:ec:7e:1c:b9:e1:b6:24:ae:ee:b1:0b:13:cb:ab:0e:53:
         1a:a9:47:b8:29:34:e8:4f:75:aa:aa:07:82:6e:ea:19:6d:1a:
         3f:42:be:5a:df:b2:5f:4b:3a:3f:b4:b7:62:c7:08:f7:b9:91:
         7a:fa:31:34:d0:29:12:08:ab:94:37:b7:08:d4:ff:12:8c:dd:
         a5:57:48:08:8b:2c:ff:f6:7d:da:d7:c5:07:2b:2b:d6:61:20:
         55:55:2c:d1:14:0b:b1:0a:8c:6d:a3:b9:ba:41:37:4f:c7:65:
         02:e2:83:14:e2:fb:69:0e:8c:98:e0:07:d4:00:93:92:86:f5:
         07:ed:b9:48:d9:df:73:88:16:bd:b3:74:f7:6c:0e:b2:3d:1a:
         c4:41:60:93:12:2a:f1:82:51:c1:98:13:65:f8:74:f2:18:4d:
         9f:f5:df:45:04:8f:c9:06:5c:63:61:d8:00:62:0e:cd:c9:88:
         fc:46:7f:a1:3d:ab:ed:7b:5b:08:2f:1e:9a:3f:f0:1e:b7:b0:
         1d:24:ab:30:bb:f0:7a:1c:7a:d6:b2:4f:7b:a8:84:7f:2c:17:
         1e:f5:ac:b6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXnwfE7Oy+j8i4CUMSxCEzX9pz2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjcxOTM0MTdaFw0yNDExMjUxOTM5MTdaMDMxMTAvBgNV
BAMTKEM4QzFFOUQyQ0ZGNTFEMEYxNkUyRDA0RkRFNzEyMzNDRTA1QzlGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEXeZYNl/AOqCkkPJ8SmmDOD5
r3a+AjL3H30U4XT2Vsqyk/FtRGW5LCF5jHhW45C3Yvm3hRyiHocbmGjnmt0j82Y1
DzW6HEGHRh2fKk8yAgr6OGmeNcT9oE+pahn/ssFWUIFcFu7fOP8QJvF4CUM7S6SS
nFKUYqFA9AlCLtIZ0XcuFIOSCk1jrFIfiKA6f683+w5Nk9v1SEWY9e4QTh7sWq4t
fU/1OvdtQfNqVmUGuT+wrso+GYm/Rq8NnVFjINZsGaEU77PFBfZZ99woRIvPcPEq
VxrO+8rdfqFmTWbX7jhYD5YoA8JT5OZpmrj5AWFYOLFlFSPm3fdrsZU5JBynAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIwenSz/UdDxbi
0E/ecSM84FyfrjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83UWt4eUtreTNGWDRUZEVrVUpZZG9wTVByV1YydVRQa1NN
dUZTaW5xMjFYcS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN1FreHlLa3kzRlg0VGRFa1VKWWRvcE1QcldWMnVUUGtT
TXVGU2lucTIxWHEvMC9DOEMxRTlEMkNGRjUxRDBGMTZFMkQwNEZERTcxMjMzQ0Uw
NUM5RkFFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK9f4QwDQQCAAIwBwMF
ACgEcBAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCFtMA0GCSqGSIb3DQEBCwUA
A4IBAQAxBSV0GX8SOAfurgUewPGqew+XjUY29Np8mzwG7HIi2w/XnJYgvux+HLnh
tiSu7rELE8urDlMaqUe4KTToT3WqqgeCbuoZbRo/Qr5a37JfSzo/tLdixwj3uZF6
+jE00CkSCKuUN7cI1P8SjN2lV0gIiyz/9n3a18UHKyvWYSBVVSzRFAuxCoxto7m6
QTdPx2UC4oMU4vtpDoyY4AfUAJOShvUH7blI2d9ziBa9s3T3bA6yPRrEQWCTEirx
glHBmBNl+HTyGE2f9d9FBI/JBlxjYdgAYg7NyYj8Rn+hPavte1sILx6aP/Aet7Ad
JKswu/B6HHrWsk97qIR/LBce9ay2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org