Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8FD8DDF34AC96D163CA088E8D83D9B927834608.cer
File:                     C8FD8DDF34AC96D163CA088E8D83D9B927834608.cer (raw, json)
Hash identifier:          QiSFb8Y2JdZmYPodwLyJ4w8d4iNKBoRMamoBvk+xSOQ=
Subject key identifier:   C8:FD:8D:DF:34:AC:96:D1:63:CA:08:8E:8D:83:D9:B9:27:83:46:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B69B4448DDCA76E72A6C778D15C238D6755668E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/C8FD8DDF34AC96D163CA088E8D83D9B927834608.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 19:46:26 +0000
Certificate not after:    Thu 04 Jul 2024 19:51:26 +0000
Subordinate resources:    AS: 263582
                          IP: 131.255.204.0/22
                          IP: 168.196.80.0/22
                          IP: 179.109.80.0/21
                          IP: 2804:f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:69:b4:44:8d:dc:a7:6e:72:a6:c7:78:d1:5c:23:8d:67:55:66:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 19:46:26 2023 GMT
            Not After : Jul  4 19:51:26 2024 GMT
        Subject: CN=C8FD8DDF34AC96D163CA088E8D83D9B927834608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:cf:5e:e5:ad:04:72:c6:52:7e:32:9b:34:
                    f4:61:36:ab:3e:1f:a5:03:67:1e:35:ba:bf:aa:9b:
                    ff:26:29:f5:f2:41:73:1c:8a:e7:bb:58:4c:45:ae:
                    90:e1:9c:de:2b:0b:5d:2a:98:3f:88:82:61:6f:05:
                    e4:95:26:fc:44:fe:20:d4:37:1c:89:cb:1f:8a:89:
                    50:ed:48:05:c3:c9:ba:81:be:ba:62:33:ef:98:c6:
                    f4:8e:91:2e:5f:6d:55:e1:ce:e2:c4:fe:3e:a3:23:
                    f6:cc:7a:bd:34:f0:0d:a3:ba:52:5a:78:a2:d8:73:
                    66:c9:4d:1e:ac:38:da:4d:06:d7:47:01:c3:c3:ad:
                    5f:6c:10:af:f1:a0:03:96:81:41:db:0d:dd:ff:72:
                    2e:6b:8a:b1:a7:03:e1:3f:98:fc:af:b9:48:b9:3f:
                    1f:e5:43:cc:74:33:d2:92:fd:b0:a9:8b:3f:ff:4c:
                    a5:0c:03:fd:a1:ec:ce:f8:de:cc:43:af:33:aa:a8:
                    ac:5e:80:ad:72:37:6c:98:38:04:25:96:67:12:7a:
                    f5:df:e8:16:a6:0b:72:e0:90:5f:95:2c:bf:10:23:
                    e3:20:2f:1d:f0:91:56:44:52:99:93:3c:59:8e:aa:
                    52:0d:6e:33:20:0c:1f:f6:60:e9:4c:19:f4:7b:e2:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:FD:8D:DF:34:AC:96:D1:63:CA:08:8E:8D:83:D9:B9:27:83:46:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/C8FD8DDF34AC96D163CA088E8D83D9B927834608.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.204.0/22
                  168.196.80.0/22
                  179.109.80.0/21
                IPv6:
                  2804:f60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263582

    Signature Algorithm: sha256WithRSAEncryption
         8a:6d:fc:d5:cc:0e:cc:7d:cf:44:61:c0:7d:9d:50:c6:64:7d:
         cf:df:d5:04:95:f2:8e:86:8c:25:3c:c7:18:43:c2:d9:77:e4:
         c7:5a:29:aa:bb:cd:19:66:54:6a:9c:ad:7a:5b:3f:20:fe:a4:
         79:2c:f9:02:93:5d:06:33:d3:9f:a0:6a:97:d7:7c:cd:0b:3f:
         90:fa:ba:e3:cf:94:b0:68:a9:ca:d4:83:5d:e1:92:b0:b9:ac:
         0d:06:a2:71:7a:c3:d1:a3:d3:ef:5e:56:2a:f1:92:2c:7a:f8:
         82:57:58:fa:f8:b9:85:05:31:58:01:1d:b2:76:ae:2d:f4:91:
         03:ee:08:2c:8c:b1:65:4d:59:4a:b4:70:54:d3:78:ca:a2:11:
         88:76:ed:23:22:6f:12:51:6e:44:e0:89:fa:f8:74:87:f1:8c:
         bc:18:58:53:95:2e:bb:81:8f:af:9b:63:b8:0e:60:00:0d:93:
         f5:5f:4b:b2:73:8e:69:ea:ee:8e:ec:5b:22:c8:a1:95:5d:56:
         44:cc:cc:3b:9e:ca:8f:06:d9:27:eb:17:9f:4a:43:0f:2e:98:
         71:1b:97:65:26:4e:24:fc:a2:f3:13:e4:7d:89:d0:2f:15:0a:
         ff:02:55:3c:6f:3f:54:5d:d1:fe:a6:4a:59:ea:d4:11:36:6e:
         93:6d:2f:29
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUa2m0RI3cp25ypsd40VwjjWdVZo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDYxOTQ2MjZaFw0yNDA3MDQxOTUxMjZaMDMxMTAvBgNV
BAMTKEM4RkQ4RERGMzRBQzk2RDE2M0NBMDg4RThEODNEOUI5Mjc4MzQ2MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Bc9e5a0EcsZSfjKbNPRhNqs+
H6UDZx41ur+qm/8mKfXyQXMciue7WExFrpDhnN4rC10qmD+IgmFvBeSVJvxE/iDU
NxyJyx+KiVDtSAXDybqBvrpiM++YxvSOkS5fbVXhzuLE/j6jI/bMer008A2julJa
eKLYc2bJTR6sONpNBtdHAcPDrV9sEK/xoAOWgUHbDd3/ci5rirGnA+E/mPyvuUi5
Px/lQ8x0M9KS/bCpiz//TKUMA/2h7M743sxDrzOqqKxegK1yN2yYOAQllmcSevXf
6BamC3LgkF+VLL8QI+MgLx3wkVZEUpmTPFmOqlINbjMgDB/2YOlMGfR74sD7AgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTI/Y3fNKyW0WPK
CI6Ng9m5J4NGCDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85U0diOW9TeHV6RWM0Y2NQdUR6VXRzMzdBVU1vbWJodFg1
MVBlMjVzOThGaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOVNHYjlvU3h1ekVjNGNjUHVEelV0czM3QVVNb21iaHRY
NTFQZTI1czk4RmgvMC9DOEZEOERERjM0QUM5NkQxNjNDQTA4OEU4RDgzRDlCOTI3
ODM0NjA4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKD/8wDBAKoxFADBAOz
bVAwDQQCAAIwBwMFACgED2AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAWeMA0G
CSqGSIb3DQEBCwUAA4IBAQCKbfzVzA7Mfc9EYcB9nVDGZH3P39UElfKOhowlPMcY
Q8LZd+THWimqu80ZZlRqnK16Wz8g/qR5LPkCk10GM9OfoGqX13zNCz+Q+rrjz5Sw
aKnK1INd4ZKwuawNBqJxesPRo9PvXlYq8ZIseviCV1j6+LmFBTFYAR2ydq4t9JED
7ggsjLFlTVlKtHBU03jKohGIdu0jIm8SUW5E4In6+HSH8Yy8GFhTlS67gY+vm2O4
DmAADZP1X0uyc45p6u6O7FsiyKGVXVZEzMw7nsqPBtkn6xefSkMPLphxG5dlJk4k
/KLzE+R9idAvFQr/AlU8bz9UXdH+pkpZ6tQRNm6TbS8p
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org