Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.cer
File:                     CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.cer (raw, json)
Hash identifier:          fRZtuagjqM8oDikTeVixDoctzX/qQ5oXxPPjz1BRtJY=
Subject key identifier:   CA:D8:EF:96:AD:82:45:BB:46:82:9D:D6:84:DD:C3:AC:21:43:F0:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D40D88C85C6A2CC48E3EA55B38D1B5D3331DA9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 21:18:33 +0000
Certificate not after:    Thu 08 Aug 2024 21:23:33 +0000
Subordinate resources:    AS: 266631
                          IP: 128.201.140.0/22
                          IP: 2804:3ef4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:40:d8:8c:85:c6:a2:cc:48:e3:ea:55:b3:8d:1b:5d:33:31:da:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 21:18:33 2023 GMT
            Not After : Aug  8 21:23:33 2024 GMT
        Subject: CN=CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:bc:9f:5e:79:e4:92:8b:34:48:e9:40:4b:
                    1b:5f:af:d2:3a:bf:ae:61:b1:34:5d:ad:0f:9f:76:
                    b2:60:4f:2a:5e:47:6c:42:14:5b:5f:30:a3:b7:9f:
                    be:41:36:1b:75:23:a3:0e:3b:f7:92:a3:64:f3:92:
                    4f:f1:6f:38:6a:2d:c2:29:22:a3:97:0a:55:92:70:
                    04:69:7d:8a:a1:04:b6:b0:4e:6d:b0:df:5d:9a:ed:
                    ba:2c:ca:f3:0c:59:e7:c4:e0:85:59:a2:b4:e5:29:
                    13:3d:5a:99:73:c6:f0:6a:d9:ca:bf:a9:ed:56:9b:
                    3b:f2:25:04:a0:6d:47:8f:c4:40:9c:a2:35:52:39:
                    11:23:aa:9b:8d:df:d6:35:dc:03:ed:b1:09:c9:7a:
                    cc:03:6d:e4:04:c2:89:76:dd:0c:d4:2d:db:57:1b:
                    af:2e:3a:7e:d5:76:d0:64:6c:ca:5f:7e:e8:7d:cb:
                    c3:2e:d8:da:10:18:89:55:a5:07:50:00:75:5e:ef:
                    0e:79:59:fb:b9:de:ea:5e:7c:0f:dd:e7:25:e4:b9:
                    86:06:51:09:f3:e8:7a:82:29:d2:ee:16:5e:5a:7f:
                    9e:c6:1d:a2:29:9a:83:c4:f0:54:e1:86:d2:c8:8f:
                    8c:f4:ac:c5:da:77:c8:3d:83:33:a1:cc:71:44:29:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:D8:EF:96:AD:82:45:BB:46:82:9D:D6:84:DD:C3:AC:21:43:F0:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.140.0/22
                IPv6:
                  2804:3ef4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266631

    Signature Algorithm: sha256WithRSAEncryption
         28:e2:0d:31:23:01:be:79:aa:e5:df:5b:1a:aa:6f:eb:4e:1e:
         20:6d:00:04:93:2d:fa:51:82:05:b5:62:5d:85:90:50:0f:80:
         51:d8:69:bf:06:c2:7c:37:dd:28:7c:8b:cf:ee:cb:52:0b:69:
         5f:b7:40:f5:31:55:11:7a:c1:b7:93:83:44:c9:46:11:de:3f:
         e6:43:69:47:76:8a:26:7b:88:35:1d:bf:60:53:2c:52:6c:75:
         73:8c:1d:83:67:d8:d0:89:58:9c:95:a5:4d:60:a2:9d:6f:bf:
         12:10:65:df:c2:75:46:0d:ab:1e:0e:87:a3:a2:28:3b:d9:85:
         e2:08:20:5e:b0:96:66:1f:94:72:eb:70:cf:17:fd:c6:83:4d:
         da:69:f7:04:6c:df:10:0d:03:87:cf:17:a4:5e:85:15:eb:68:
         5c:4e:35:c2:dd:1c:f1:cd:73:33:fa:b3:5c:8f:86:d2:f6:0a:
         1c:06:a9:93:73:84:09:52:f4:82:5b:48:7c:cc:dc:41:44:35:
         d3:57:05:98:d1:18:f1:70:c1:0b:59:94:c2:c9:a1:f4:82:4c:
         61:4d:f5:e5:a7:99:3f:d6:5b:70:66:b2:3b:73:ae:81:fb:61:
         e6:5f:a8:37:b3:79:dc:44:2f:72:3b:82:99:a7:2f:94:28:ac:
         54:eb:3b:e1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXUDYjIXGosxI4+pVs40bXTMx2p0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTAyMTE4MzNaFw0yNDA4MDgyMTIzMzNaMDMxMTAvBgNV
BAMTKENBRDhFRjk2QUQ4MjQ1QkI0NjgyOURENjg0RERDM0FDMjE0M0YwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJqryfXnnkkos0SOlASxtfr9I6
v65hsTRdrQ+fdrJgTypeR2xCFFtfMKO3n75BNht1I6MOO/eSo2Tzkk/xbzhqLcIp
IqOXClWScARpfYqhBLawTm2w312a7bosyvMMWefE4IVZorTlKRM9WplzxvBq2cq/
qe1WmzvyJQSgbUePxECcojVSOREjqpuN39Y13APtsQnJeswDbeQEwol23QzULdtX
G68uOn7VdtBkbMpffuh9y8Mu2NoQGIlVpQdQAHVe7w55Wfu53upefA/d5yXkuYYG
UQnz6HqCKdLuFl5af57GHaIpmoPE8FThhtLIj4z0rMXad8g9gzOhzHFEKVudAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTK2O+WrYJFu0aC
ndaE3cOsIUPwyjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81SlNXSDZpZ0czSFd5Y3FkNnR0NlprOTJRZ1hRRmlmeEtB
SkM3NzVCeThnSi8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUpTV0g2aWdHM0hXeWNxZDZ0dDZaazkyUWdYUUZpZnhL
QUpDNzc1Qnk4Z0ovMS9DQUQ4RUY5NkFEODI0NUJCNDY4MjlERDY4NEREQzNBQzIx
NDNGMENBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKAyYwwDQQCAAIwBwMF
ACgEPvQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBGHMA0GCSqGSIb3DQEBCwUA
A4IBAQAo4g0xIwG+earl31saqm/rTh4gbQAEky36UYIFtWJdhZBQD4BR2Gm/BsJ8
N90ofIvP7stSC2lft0D1MVUResG3k4NEyUYR3j/mQ2lHdoome4g1Hb9gUyxSbHVz
jB2DZ9jQiViclaVNYKKdb78SEGXfwnVGDaseDoejoig72YXiCCBesJZmH5Ry63DP
F/3Gg03aafcEbN8QDQOHzxekXoUV62hcTjXC3RzxzXMz+rNcj4bS9gocBqmTc4QJ
UvSCW0h8zNxBRDXTVwWY0RjxcMELWZTCyaH0gkxhTfXlp5k/1ltwZrI7c66B+2Hm
X6g3s3ncRC9yO4KZpy+UKKxU6zvh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org