Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer
File:                     CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer (raw, json)
Hash identifier:          +vmOhJGFAhDhtxvYvdijhCOU9GWbECUcRI6AWvEq4/g=
Subject key identifier:   CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33CFF950DBFC2ABE48D77B97077872D48AFFD960
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Jul 2022 12:44:55 +0000
Certificate not after:    Tue 11 Jul 2023 12:49:55 +0000
Subordinate resources:    AS: 52901
                          IP: 138.94.4.0/22
                          IP: 177.11.152.0/21
                          IP: 191.7.80.0/20
                          IP: 2804:1420::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:f9:50:db:fc:2a:be:48:d7:7b:97:07:78:72:d4:8a:ff:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 12:44:55 2022 GMT
            Not After : Jul 11 12:49:55 2023 GMT
        Subject: CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:e6:d0:c8:b4:40:4d:98:8b:f6:7f:75:7d:
                    c2:90:5f:22:3b:de:95:87:05:f1:dd:1d:c1:30:5e:
                    b5:a5:47:f9:9b:b8:b5:2a:f3:da:a4:6a:1b:f7:a8:
                    34:f6:0b:04:bc:f7:fd:d3:33:1a:cd:d7:9a:5f:92:
                    27:68:55:52:aa:0e:6d:14:9d:56:7e:ab:0f:2f:20:
                    91:f1:82:82:26:5f:64:5c:bd:41:2c:3c:51:e5:f8:
                    93:46:73:ce:4d:c1:cc:3b:27:b2:14:2f:56:59:5b:
                    09:b8:4d:28:40:13:4e:a3:64:0f:67:06:f2:66:a6:
                    4d:06:e7:6e:2f:b7:62:97:d7:b3:b0:21:7f:2e:39:
                    2e:59:38:dd:a8:34:63:c6:5f:51:dd:4a:8a:e5:3f:
                    34:5f:27:ab:f0:8f:b6:17:f5:e1:6e:3b:a7:82:72:
                    02:bb:81:b6:43:fd:8f:c4:61:7c:76:0e:22:e8:ae:
                    eb:d1:7a:d3:da:bf:43:00:c9:4c:5e:4f:ce:71:23:
                    09:32:66:4e:ed:8b:d9:cc:1e:7a:f7:e7:d1:a8:d4:
                    5b:5c:ea:04:3a:ad:2b:99:80:69:63:af:f7:87:ef:
                    ea:ed:82:36:d4:cf:92:19:7d:ba:ec:32:fa:da:2e:
                    ec:2d:d3:5a:3c:22:5d:96:45:c7:ad:e0:8d:5f:f3:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.4.0/22
                  177.11.152.0/21
                  191.7.80.0/20
                IPv6:
                  2804:1420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52901

    Signature Algorithm: sha256WithRSAEncryption
         34:8e:4e:f9:c4:03:d0:17:2d:ae:41:47:50:f0:2e:0a:90:48:
         1e:30:ce:44:75:54:92:7b:09:a9:49:b4:82:0d:7e:b7:4a:c6:
         25:df:ce:4a:88:82:64:82:fd:7a:40:c0:6c:e7:14:35:9b:c6:
         9b:cf:bd:7c:22:e3:98:a7:84:f1:6a:f5:ca:4c:db:8f:32:e2:
         5c:bb:49:1c:f6:1e:a5:a6:76:d8:85:44:08:eb:5c:01:ab:f3:
         6b:d5:47:b7:3e:1f:2a:f4:02:d0:15:15:8c:dc:51:5c:04:4d:
         64:fb:18:be:82:94:3c:f0:95:a0:96:f7:ed:68:1e:9f:1a:3c:
         9e:55:62:c5:d3:87:99:40:8e:fe:0b:5b:e7:54:7e:14:a4:ac:
         33:7c:2e:89:b5:4b:59:c4:56:d2:9b:aa:c6:32:ce:f7:6c:60:
         79:61:4d:cb:d9:f4:c1:0b:04:59:40:55:32:b3:e7:aa:71:8d:
         3b:ac:34:e2:d5:3c:53:7f:78:2c:3c:10:ba:7e:20:ca:96:51:
         3e:be:a5:4b:12:6a:55:ab:ef:fc:ce:d2:5a:0e:fa:01:0f:35:
         3c:9b:00:bb:d3:23:b0:1a:17:d2:5c:47:60:db:6c:b4:51:b1:
         02:85:dc:46:73:5a:28:9c:43:eb:20:f8:f6:40:ae:d7:af:54:
         b4:7f:6a:96
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUM8/5UNv8Kr5I13uXB3hy1Ir/2WAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MTIxMjQ0NTVaFw0yMzA3MTExMjQ5NTVaMDMxMTAvBgNV
BAMTKENENDMwRkExMUNGOTlBMkEwMkJBODJENTA1Q0NGMjRGQkM4Q0U3N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHObQyLRATZiL9n91fcKQXyI7
3pWHBfHdHcEwXrWlR/mbuLUq89qkahv3qDT2CwS89/3TMxrN15pfkidoVVKqDm0U
nVZ+qw8vIJHxgoImX2RcvUEsPFHl+JNGc85Nwcw7J7IUL1ZZWwm4TShAE06jZA9n
BvJmpk0G524vt2KX17OwIX8uOS5ZON2oNGPGX1HdSorlPzRfJ6vwj7YX9eFuO6eC
cgK7gbZD/Y/EYXx2DiLoruvRetPav0MAyUxeT85xIwkyZk7ti9nMHnr359Go1Ftc
6gQ6rSuZgGljr/eH7+rtgjbUz5IZfbrsMvraLuwt01o8Il2WRcet4I1f89l3AgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNQw+hHPmaKgK6
gtUFzPJPvIznfjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zVTd1cGNVTVg0OUczVlNvWXFEUGF4WFluSldwMTlDbnIy
YWt3cVlkazlyeC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zVTd1cGNVTVg0OUczVlNvWXFEUGF4WFluSldwMTlDbnIy
YWt3cVlkazlyeC8wL0NENDMwRkExMUNGOTlBMkEwMkJBODJENTA1Q0NGMjRGQkM4
Q0U3N0UubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAopeBAMEA7ELmAMEBL8H
UDANBAIAAjAHAwUAKAQUIDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzqUwDQYJ
KoZIhvcNAQELBQADggEBADSOTvnEA9AXLa5BR1DwLgqQSB4wzkR1VJJ7CalJtIIN
frdKxiXfzkqIgmSC/XpAwGznFDWbxpvPvXwi45inhPFq9cpM248y4ly7SRz2HqWm
dtiFRAjrXAGr82vVR7c+Hyr0AtAVFYzcUVwETWT7GL6ClDzwlaCW9+1oHp8aPJ5V
YsXTh5lAjv4LW+dUfhSkrDN8Lom1S1nEVtKbqsYyzvdsYHlhTcvZ9MELBFlAVTKz
56pxjTusNOLVPFN/eCw8ELp+IMqWUT6+pUsSalWr7/zO0loO+gEPNTybALvTI7Aa
F9JcR2DbbLRRsQKF3EZzWiicQ+sg+PZArtevVLR/apY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org