Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D019263BB7CC1DC5591FE5F5525650626FF98886.cer
File:                     D019263BB7CC1DC5591FE5F5525650626FF98886.cer (raw, json)
Hash identifier:          SH2oijN+dgyWF9RfKlCvaWX9Uk6T6wLkX1lFqPWiPRQ=
Subject key identifier:   D0:19:26:3B:B7:CC:1D:C5:59:1F:E5:F5:52:56:50:62:6F:F9:88:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6606854B7B1DF4305F03F4DE9D280D5C66D2BD3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/D019263BB7CC1DC5591FE5F5525650626FF98886.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 02:55:27 +0000
Certificate not after:    Fri 11 Apr 2025 03:00:27 +0000
Subordinate resources:    AS: 263873
                          IP: 138.186.16.0/22
                          IP: 2804:2710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:06:85:4b:7b:1d:f4:30:5f:03:f4:de:9d:28:0d:5c:66:d2:bd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 02:55:27 2024 GMT
            Not After : Apr 11 03:00:27 2025 GMT
        Subject: CN=D019263BB7CC1DC5591FE5F5525650626FF98886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:8a:b0:23:79:63:33:b5:6f:c5:92:5b:50:
                    31:f3:fa:67:57:28:e8:34:ab:cd:72:d3:05:21:6c:
                    b1:e3:c3:9e:cc:cc:54:44:68:57:7d:bc:d7:a5:53:
                    10:89:1b:5f:99:01:64:b1:01:46:1e:ac:28:2a:2d:
                    fa:a1:18:c0:92:88:50:e1:0e:60:d3:82:2e:d6:44:
                    f8:03:f5:92:c9:9d:3f:39:95:92:89:51:6b:33:82:
                    fe:d4:ef:d4:6c:59:b5:c8:0f:ca:f7:e9:aa:fc:f0:
                    0b:d8:9a:39:3f:f9:a2:d0:15:ca:2f:53:e5:3a:84:
                    30:32:ea:32:fe:a1:f3:a8:2c:f5:2b:30:c7:97:c2:
                    8d:90:ab:9d:af:eb:41:37:40:d5:77:62:40:aa:b4:
                    e5:d8:8a:03:2c:18:bc:f1:65:e1:03:db:a0:a2:8b:
                    69:6a:ae:42:44:d9:85:ac:3b:a9:4e:a0:a9:97:b5:
                    71:66:a6:53:20:e3:ea:69:92:11:4d:fa:6f:51:e9:
                    f8:88:dc:cb:9c:32:0d:60:fd:d5:36:b0:ed:01:f6:
                    cd:e2:06:c3:48:0b:70:40:2d:6a:3e:a7:1b:c7:b7:
                    d0:4e:60:4c:94:7e:70:0c:53:f3:cc:44:e9:91:75:
                    8c:bc:6a:c7:0f:d5:c0:e6:65:56:be:24:ea:00:84:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:19:26:3B:B7:CC:1D:C5:59:1F:E5:F5:52:56:50:62:6F:F9:88:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/D019263BB7CC1DC5591FE5F5525650626FF98886.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.16.0/22
                IPv6:
                  2804:2710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263873

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:85:9c:c6:1c:2c:9b:14:69:5b:87:2c:c5:9a:07:fd:e5:
         7f:89:ad:46:72:4a:17:d9:2c:d8:dd:69:17:9c:16:f5:8e:2d:
         f5:4f:63:47:ed:c6:fc:a4:c5:d7:b7:df:99:84:aa:20:08:64:
         eb:b4:c6:82:63:bc:36:16:fe:07:1e:74:38:a1:c0:c6:3f:d5:
         66:be:54:14:d6:f9:12:06:ba:73:24:82:bc:23:05:e7:1e:3e:
         c8:97:a9:b6:22:df:b5:ec:cd:42:b9:65:b0:b8:61:4c:8c:51:
         50:5d:4e:a7:04:33:a0:30:9e:f3:19:23:93:db:0d:99:cc:67:
         2e:08:d9:71:f2:fb:d5:cd:22:24:91:df:5b:5c:6b:58:80:de:
         e2:ef:fa:6d:aa:7c:a0:b4:22:7d:68:65:b1:ad:3c:37:7b:16:
         f0:01:21:32:09:a3:82:ba:35:7f:24:19:8e:c8:5a:5f:66:90:
         41:c1:47:ae:7a:a5:62:fd:ec:93:ac:7e:42:31:79:28:d7:99:
         de:54:39:c7:2f:7b:c6:79:5c:92:d3:22:6a:ec:67:cb:18:72:
         b5:ed:2f:0d:6d:6d:ef:5a:82:c6:78:08:cc:b6:80:aa:d9:35:
         4c:13:3a:4e:82:9e:48:53:ec:fd:1a:ae:2c:f5:fb:98:71:55:
         9e:6a:aa:86
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZgaFS3sd9DBfA/TenSgNXGbSvT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MTIwMjU1MjdaFw0yNTA0MTEwMzAwMjdaMDMxMTAvBgNV
BAMTKEQwMTkyNjNCQjdDQzFEQzU1OTFGRTVGNTUyNTY1MDYyNkZGOTg4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0D4qwI3ljM7VvxZJbUDHz+mdX
KOg0q81y0wUhbLHjw57MzFREaFd9vNelUxCJG1+ZAWSxAUYerCgqLfqhGMCSiFDh
DmDTgi7WRPgD9ZLJnT85lZKJUWszgv7U79RsWbXID8r36ar88AvYmjk/+aLQFcov
U+U6hDAy6jL+ofOoLPUrMMeXwo2Qq52v60E3QNV3YkCqtOXYigMsGLzxZeED26Ci
i2lqrkJE2YWsO6lOoKmXtXFmplMg4+ppkhFN+m9R6fiI3MucMg1g/dU2sO0B9s3i
BsNIC3BALWo+pxvHt9BOYEyUfnAMU/PMROmRdYy8ascP1cDmZVa+JOoAhP99AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQGSY7t8wdxVkf
5fVSVlBib/mIhjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FZFFzanFBMVVCWGFzYjZha3ViNDlrUVBhUnRuNUU5djY4
UERTWUJ4NEdGbS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FZFFzanFBMVVCWGFzYjZha3ViNDlrUVBhUnRuNUU5djY4
UERTWUJ4NEdGbS8wL0QwMTkyNjNCQjdDQzFEQzU1OTFGRTVGNTUyNTY1MDYyNkZG
OTg4ODYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoq6EDANBAIAAjAHAwUA
KAQnEDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBsEwDQYJKoZIhvcNAQELBQAD
ggEBAIpJhZzGHCybFGlbhyzFmgf95X+JrUZyShfZLNjdaRecFvWOLfVPY0ftxvyk
xde335mEqiAIZOu0xoJjvDYW/gcedDihwMY/1Wa+VBTW+RIGunMkgrwjBecePsiX
qbYi37XszUK5ZbC4YUyMUVBdTqcEM6AwnvMZI5PbDZnMZy4I2XHy+9XNIiSR31tc
a1iA3uLv+m2qfKC0In1oZbGtPDd7FvABITIJo4K6NX8kGY7IWl9mkEHBR656pWL9
7JOsfkIxeSjXmd5UOccve8Z5XJLTImrsZ8sYcrXtLw1tbe9agsZ4CMy2gKrZNUwT
Ok6CnkhT7P0ariz1+5hxVZ5qqoY=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org