Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.cer
File:                     CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.cer (raw, json)
Hash identifier:          PzzW43YuWg6yZplfpdqLhb2uJ3pp5kvQlVR/s0ZD8t8=
Subject key identifier:   CF:5F:C3:9C:AA:8D:DA:A0:86:EC:7A:FC:20:96:F9:16:A4:C7:1B:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60330530090FEEA8E2B433CC2901334A2C20C340
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 22:15:10 +0000
Certificate not after:    Mon 15 Jul 2024 22:20:10 +0000
Subordinate resources:    AS: 266289
                          IP: 170.79.0.0/22
                          IP: 2804:357c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:33:05:30:09:0f:ee:a8:e2:b4:33:cc:29:01:33:4a:2c:20:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 17 22:15:10 2023 GMT
            Not After : Jul 15 22:20:10 2024 GMT
        Subject: CN=CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:21:85:79:b8:ad:7f:51:a4:5f:48:7b:dc:
                    67:3e:2a:fa:f0:c7:36:b1:54:a8:fc:b2:a5:20:85:
                    ed:1b:c9:fb:3b:e0:56:42:59:1a:1b:c0:c9:97:a8:
                    1d:d7:88:85:b4:38:94:e0:33:9d:57:02:86:c7:59:
                    aa:e5:1e:3d:83:90:f2:5d:c8:8f:74:24:1f:6e:53:
                    0b:80:08:7d:be:6a:e4:11:7b:26:96:24:ac:43:64:
                    b2:03:32:66:05:a6:36:83:ac:47:47:45:bb:91:8b:
                    11:75:ca:71:a7:d0:a7:cb:6a:5e:aa:54:66:69:88:
                    55:97:bc:ec:bf:41:04:be:cc:60:83:82:1c:69:3c:
                    de:1f:e6:d0:ef:14:94:b7:b1:b7:56:27:27:1c:d9:
                    70:82:66:37:08:3b:b8:96:b0:56:38:9f:98:38:df:
                    ec:27:0b:c7:f8:30:7e:aa:84:be:d4:3e:56:d7:94:
                    34:7f:76:10:86:f3:e4:e6:bd:8e:cc:ea:ac:85:be:
                    5f:49:ea:32:b1:70:08:21:c7:19:cb:3d:d2:f8:9c:
                    19:5d:ab:7e:f3:9a:f7:fb:4b:31:be:61:2a:23:e6:
                    4b:af:90:15:03:95:6d:8c:57:cc:70:3f:c3:f2:b0:
                    70:a3:5f:cd:f6:f7:a1:39:76:0d:d1:7f:51:d9:60:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:5F:C3:9C:AA:8D:DA:A0:86:EC:7A:FC:20:96:F9:16:A4:C7:1B:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.0.0/22
                IPv6:
                  2804:357c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266289

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:61:1d:bd:ce:dc:42:69:97:09:54:e1:97:c5:36:48:ff:
         38:74:01:8e:35:c9:0e:d4:36:a4:6f:00:ad:00:b2:bd:2f:45:
         85:79:0e:c8:15:34:d8:43:1d:e6:47:26:69:57:23:ad:92:8d:
         a8:4b:7a:41:1c:d4:f6:f5:8f:7c:28:98:cb:93:a1:ea:43:7b:
         c3:a6:ba:ec:23:d8:b7:9f:54:63:36:b5:f4:03:2d:e2:ea:91:
         3c:7a:d0:73:c5:7d:a4:8f:b7:0b:17:4e:83:57:41:3b:94:f3:
         0c:74:f3:05:50:88:8f:04:c5:86:53:dc:84:d0:85:05:0d:40:
         79:6f:f9:a4:58:76:bc:a0:a3:11:be:64:dd:3e:30:2d:ac:bc:
         d3:a4:ad:cd:ec:cf:e7:b9:54:69:7a:c9:95:37:2f:40:57:7e:
         67:b1:8a:83:c6:4e:55:5a:c5:0c:33:35:91:26:1d:bb:e6:f4:
         c7:3f:88:3b:e0:3a:c6:3d:6e:f6:6c:be:6f:d9:bd:da:35:00:
         e1:b1:83:55:c7:32:be:20:de:88:ce:19:ca:d9:e2:46:e8:b0:
         88:d8:50:0b:3b:dd:82:36:09:b9:62:37:2e:cf:ae:99:8e:a5:
         d3:b1:03:e9:e9:6b:49:a7:96:9a:62:65:58:37:c6:b1:c5:8a:
         02:53:8e:06
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUYDMFMAkP7qjitDPMKQEzSiwgw0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTcyMjE1MTBaFw0yNDA3MTUyMjIwMTBaMDMxMTAvBgNV
BAMTKENGNUZDMzlDQUE4RERBQTA4NkVDN0FGQzIwOTZGOTE2QTRDNzFCMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OCGFebitf1GkX0h73Gc+Kvrw
xzaxVKj8sqUghe0byfs74FZCWRobwMmXqB3XiIW0OJTgM51XAobHWarlHj2DkPJd
yI90JB9uUwuACH2+auQReyaWJKxDZLIDMmYFpjaDrEdHRbuRixF1ynGn0KfLal6q
VGZpiFWXvOy/QQS+zGCDghxpPN4f5tDvFJS3sbdWJycc2XCCZjcIO7iWsFY4n5g4
3+wnC8f4MH6qhL7UPlbXlDR/dhCG8+TmvY7M6qyFvl9J6jKxcAghxxnLPdL4nBld
q37zmvf7SzG+YSoj5kuvkBUDlW2MV8xwP8PysHCjX83296E5dg3Rf1HZYGqJAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPX8Ocqo3aoIbs
evwglvkWpMcbDDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DajVvNjlLWUdrd2ZYUG9wNHdITkJTNWl0VUxDeFJQWXRp
enJaS0R1aHVIVy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ2o1bzY5S1lHa3dmWFBvcDR3SE5CUzVpdFVMQ3hSUFl0
aXpyWktEdWh1SFcvMC9DRjVGQzM5Q0FBOEREQUEwODZFQzdBRkMyMDk2RjkxNkE0
QzcxQjBDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqTwAwDQQCAAIwBwMF
ACgENXwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBAxMA0GCSqGSIb3DQEBCwUA
A4IBAQBQpWEdvc7cQmmXCVThl8U2SP84dAGONckO1DakbwCtALK9L0WFeQ7IFTTY
Qx3mRyZpVyOtko2oS3pBHNT29Y98KJjLk6HqQ3vDprrsI9i3n1RjNrX0Ay3i6pE8
etBzxX2kj7cLF06DV0E7lPMMdPMFUIiPBMWGU9yE0IUFDUB5b/mkWHa8oKMRvmTd
PjAtrLzTpK3N7M/nuVRpesmVNy9AV35nsYqDxk5VWsUMMzWRJh275vTHP4g74DrG
PW72bL5v2b3aNQDhsYNVxzK+IN6IzhnK2eJG6LCI2FALO92CNgm5Yjcuz66ZjqXT
sQPp6WtJp5aaYmVYN8axxYoCU44G
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org