Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAE8885178B85CFA28412406D7CCD5592233BD89.cer
File:                     CAE8885178B85CFA28412406D7CCD5592233BD89.cer (raw, json)
Hash identifier:          TeHINUdLx8CK4mLDPg0z9lOE4NC5Y17W2bW3r04K+WU=
Subject key identifier:   CA:E8:88:51:78:B8:5C:FA:28:41:24:06:D7:CC:D5:59:22:33:BD:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5626ACA13BD94E4304D712CFE70E3A1F903DFC11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/0/CAE8885178B85CFA28412406D7CCD5592233BD89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:26:19 +0000
Certificate not after:    Mon 30 Dec 2024 22:31:19 +0000
Subordinate resources:    AS: 273763
                          IP: 2804:8bd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:ac:a1:3b:d9:4e:43:04:d7:12:cf:e7:0e:3a:1f:90:3d:fc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  1 22:26:19 2024 GMT
            Not After : Dec 30 22:31:19 2024 GMT
        Subject: CN=CAE8885178B85CFA28412406D7CCD5592233BD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:4f:e5:92:36:34:cd:89:16:3f:00:1d:21:
                    71:91:ff:ba:bd:4c:eb:07:19:28:5e:97:1c:ad:5a:
                    ef:d2:d4:65:c2:23:71:25:18:13:a6:dd:68:93:0b:
                    c5:77:0f:f7:3b:b9:42:5c:71:38:af:71:f1:c5:8b:
                    61:14:f3:2e:ea:6d:19:87:12:c7:10:34:ca:77:8e:
                    12:a5:74:ab:84:14:1d:3d:0c:bc:15:b1:2a:81:80:
                    22:1e:14:40:46:25:01:3c:e2:22:d0:7a:0b:ac:cc:
                    01:58:1a:57:63:0c:b3:05:ad:6d:c7:f3:32:c6:fd:
                    d0:0d:99:a5:9a:df:7f:21:59:4d:00:ec:b6:30:ae:
                    b6:24:3b:c0:b4:21:13:a8:53:c1:12:24:28:9c:be:
                    5b:c6:b3:eb:7e:e0:cf:14:c3:33:4c:06:29:5f:45:
                    04:0c:f7:33:ef:6a:14:32:44:b6:42:d5:93:8f:b4:
                    30:ae:4a:86:d6:9c:a2:4d:b4:d7:39:c5:db:dd:aa:
                    d2:79:21:67:80:a7:d3:77:07:5f:06:b7:58:b6:28:
                    5a:f5:1a:95:c8:5a:52:72:92:dd:d5:ae:68:fb:d5:
                    6a:08:10:67:b9:7c:32:c8:a8:28:ea:fd:b1:9a:86:
                    35:8e:65:92:f9:76:df:45:37:54:4d:c0:48:27:87:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:E8:88:51:78:B8:5C:FA:28:41:24:06:D7:CC:D5:59:22:33:BD:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/0/CAE8885178B85CFA28412406D7CCD5592233BD89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273763

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:30:1b:a4:df:f9:7d:bf:0e:c5:39:07:83:9b:cf:4c:35:
         64:86:34:c1:5e:62:76:dc:37:a2:c7:9c:1c:43:0a:8a:0b:a7:
         55:8f:8f:c8:e6:b3:be:b0:f5:fc:b8:11:88:e6:f5:27:55:a9:
         5e:68:a7:a4:cf:89:36:11:ee:3d:e5:6e:1c:6d:df:3c:9e:ab:
         d8:e7:21:ae:1e:50:79:8f:d5:10:10:0f:ba:f6:59:21:0a:5b:
         b3:7c:2a:6c:31:b4:6b:71:44:62:ab:18:7a:78:f1:11:56:41:
         c9:8f:bb:18:83:d7:77:32:ce:99:ec:39:cd:a8:0f:38:34:43:
         10:ff:45:f7:cf:b0:d3:9e:86:da:b1:12:2c:fe:85:b0:55:a1:
         cb:58:ec:4d:a0:5f:68:7d:a1:c8:23:8f:f5:08:5b:bb:4e:f7:
         8c:59:cb:32:2d:33:04:b7:3b:34:0a:ec:83:8a:37:31:90:d9:
         c9:5e:1e:0c:51:2a:70:9c:1f:9a:7c:9f:16:9b:9a:8c:04:99:
         96:8b:bc:bf:c0:1d:3a:d7:f0:3e:a5:17:d2:bd:11:56:00:3e:
         8a:5a:a7:16:90:60:28:99:8f:b4:71:a6:95:13:cb:ca:1a:57:
         f9:ac:d9:30:2e:52:1e:5c:6e:24:b0:cb:29:a9:81:06:8a:00:
         cb:c5:b2:17
-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgIUViasoTvZTkME1xLP5w46H5A9/BEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDEyMjI2MTlaFw0yNDEyMzAyMjMxMTlaMDMxMTAvBgNV
BAMTKENBRTg4ODUxNzhCODVDRkEyODQxMjQwNkQ3Q0NENTU5MjIzM0JEODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChxE/lkjY0zYkWPwAdIXGR/7q9
TOsHGShelxytWu/S1GXCI3ElGBOm3WiTC8V3D/c7uUJccTivcfHFi2EU8y7qbRmH
EscQNMp3jhKldKuEFB09DLwVsSqBgCIeFEBGJQE84iLQeguszAFYGldjDLMFrW3H
8zLG/dANmaWa338hWU0A7LYwrrYkO8C0IROoU8ESJCicvlvGs+t+4M8UwzNMBilf
RQQM9zPvahQyRLZC1ZOPtDCuSobWnKJNtNc5xdvdqtJ5IWeAp9N3B18Gt1i2KFr1
GpXIWlJykt3Vrmj71WoIEGe5fDLIqCjq/bGahjWOZZL5dt9FN1RNwEgnhx4lAgMB
AAGjggMKMIIDBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTK6IhReLhc+ihB
JAbXzNVZIjO9iTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9NcVlXU2Z5R2dKbWMzcEJ0R2NpN2dOcU1ZYlllZTNvajRp
ZzM3WjhtekN6LzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL01xWVdTZnlHZ0ptYzNwQnRHY2k3Z05xTVliWWVlM29qNGln
MzdaOG16Q3ovMC9DQUU4ODg1MTc4Qjg1Q0ZBMjg0MTI0MDZEN0NDRDU1OTIyMzNC
RDg5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIvYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQtYzANBgkqhkiG9w0BAQsFAAOCAQEAjaUwG6Tf+X2/DsU5
B4Obz0w1ZIY0wV5idtw3osecHEMKigunVY+PyOazvrD1/LgRiOb1J1WpXminpM+J
NhHuPeVuHG3fPJ6r2Ochrh5QeY/VEBAPuvZZIQpbs3wqbDG0a3FEYqsYenjxEVZB
yY+7GIPXdzLOmew5zagPODRDEP9F98+w056G2rESLP6FsFWhy1jsTaBfaH2hyCOP
9Qhbu073jFnLMi0zBLc7NArsg4o3MZDZyV4eDFEqcJwfmnyfFpuajASZlou8v8Ad
OtfwPqUX0r0RVgA+ilqnFpBgKJmPtHGmlRPLyhpX+azZMC5SHlxuJLDLKamBBooA
y8WyFw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org