Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0784FED658E3130EFD1B37FF9E51892675B11FD.cer
File:                     D0784FED658E3130EFD1B37FF9E51892675B11FD.cer (raw, json)
Hash identifier:          k83oqBmDYRmebrC+Vjc0unIubd8CWm+o365eIQgRVN8=
Subject key identifier:   D0:78:4F:ED:65:8E:31:30:EF:D1:B3:7F:F9:E5:18:92:67:5B:11:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       718234D34B23FAE3C267EC239C694AE4B7B8DF08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/D0784FED658E3130EFD1B37FF9E51892675B11FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 19:29:20 +0000
Certificate not after:    Fri 04 Oct 2024 19:34:20 +0000
Subordinate resources:    AS: 266376
                          IP: 170.80.112.0/22
                          IP: 2804:36d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:82:34:d3:4b:23:fa:e3:c2:67:ec:23:9c:69:4a:e4:b7:b8:df:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 19:29:20 2023 GMT
            Not After : Oct  4 19:34:20 2024 GMT
        Subject: CN=D0784FED658E3130EFD1B37FF9E51892675B11FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:ca:c2:3f:7b:4a:86:79:c5:2f:c1:52:71:
                    42:24:bf:90:c6:31:61:50:a2:d4:ad:92:18:1e:b9:
                    e6:65:ec:df:74:1e:4b:c3:5e:b2:97:c3:74:00:ef:
                    7d:33:af:c7:65:55:a5:8d:30:58:20:0a:a2:d7:8a:
                    3c:0d:7e:11:a5:9d:e7:10:ad:24:f6:07:4d:08:1a:
                    67:f6:46:5b:b6:86:f7:fa:b7:73:86:fb:23:90:64:
                    b2:ed:42:9c:1a:bd:b0:89:af:35:b2:c3:57:7e:90:
                    2d:74:8a:1c:4e:ca:ac:2d:c6:ec:d2:90:1a:23:af:
                    90:ba:73:ee:1a:fc:ae:7c:c2:84:a7:6d:19:06:7a:
                    c8:f3:3a:60:3f:6b:81:7d:91:29:4b:ed:c7:04:31:
                    a9:7a:4e:35:58:02:f3:0b:64:52:6e:40:cc:3d:46:
                    0f:61:b5:d0:87:d5:a5:6c:5f:ff:cd:be:67:58:49:
                    5f:34:0b:bb:2b:8b:16:2a:f7:d4:33:a2:91:21:20:
                    36:cb:d6:ca:5f:b1:b4:21:ab:8e:8c:dd:e5:6a:52:
                    fe:e0:79:4d:13:02:b8:76:18:54:8c:a8:ed:89:7b:
                    c8:84:d5:c6:aa:e5:fd:d0:a1:f8:26:a1:f6:ac:99:
                    11:93:f2:69:85:d3:9b:c3:59:7c:1e:6a:5c:00:c3:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:78:4F:ED:65:8E:31:30:EF:D1:B3:7F:F9:E5:18:92:67:5B:11:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/D0784FED658E3130EFD1B37FF9E51892675B11FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.112.0/22
                IPv6:
                  2804:36d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266376

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:7c:93:05:b7:ec:23:c7:9a:60:d5:ab:59:4d:a5:b6:b0:
         6d:b2:a0:cd:97:40:df:82:c7:c3:84:ce:38:d2:ef:71:45:fe:
         fe:1d:c6:0f:1e:96:bf:49:37:76:d2:2b:93:98:88:4e:1b:63:
         af:14:6d:85:4f:4c:51:90:e6:a6:41:b9:40:5a:1f:35:89:80:
         88:8e:f2:56:22:10:74:1a:32:5f:8b:9c:9c:cc:f6:df:a4:6e:
         fd:3d:d8:bb:95:05:2e:30:18:20:e1:2d:06:5b:a2:a8:19:d3:
         23:a0:1c:14:ed:6e:8e:c6:30:2b:9a:de:3f:cb:9a:c0:69:dd:
         74:dc:91:f4:d1:3c:42:8f:ce:b5:81:fe:12:76:3c:25:53:79:
         7c:b4:8b:35:60:84:e6:5f:78:17:95:7c:82:57:45:c5:0d:82:
         3a:ff:b7:d9:50:91:ae:b4:9d:42:ad:54:dc:50:77:c9:27:06:
         cc:5c:99:1f:7b:ad:c4:e5:f8:7f:51:8c:5a:62:a9:cc:98:06:
         96:2c:e5:f8:59:90:c4:25:cd:ca:ff:b9:43:bb:cb:2f:ef:44:
         2e:f8:3f:7d:d7:2b:fa:6f:32:2c:67:b2:d9:4d:62:c2:19:ed:
         56:6b:f2:1d:44:85:ce:8c:94:00:fd:d3:1b:1e:f6:a3:5a:cb:
         a2:8f:d1:6c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUcYI000sj+uPCZ+wjnGlK5Le43wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMDYxOTI5MjBaFw0yNDEwMDQxOTM0MjBaMDMxMTAvBgNV
BAMTKEQwNzg0RkVENjU4RTMxMzBFRkQxQjM3RkY5RTUxODkyNjc1QjExRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyMrCP3tKhnnFL8FScUIkv5DG
MWFQotStkhgeueZl7N90HkvDXrKXw3QA730zr8dlVaWNMFggCqLXijwNfhGlnecQ
rST2B00IGmf2Rlu2hvf6t3OG+yOQZLLtQpwavbCJrzWyw1d+kC10ihxOyqwtxuzS
kBojr5C6c+4a/K58woSnbRkGesjzOmA/a4F9kSlL7ccEMal6TjVYAvMLZFJuQMw9
Rg9htdCH1aVsX//NvmdYSV80C7srixYq99QzopEhIDbL1spfsbQhq46M3eVqUv7g
eU0TArh2GFSMqO2Je8iE1caq5f3QofgmofasmRGT8mmF05vDWXwealwAw7C3AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQeE/tZY4xMO/R
s3/55RiSZ1sR/TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HeWNmdTlZZXRMUE5YeGFIU2Q2d0pySmREdDZkOFVNYTlF
MUFEWDFqWVBqOC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3ljZnU5WWV0TFBOWHhhSFNkNndKckpkRHQ2ZDhVTWE5
RTFBRFgxallQajgvMC9EMDc4NEZFRDY1OEUzMTMwRUZEMUIzN0ZGOUU1MTg5MjY3
NUIxMUZELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqUHAwDQQCAAIwBwMF
ACgENtgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBCIMA0GCSqGSIb3DQEBCwUA
A4IBAQB7eHyTBbfsI8eaYNWrWU2ltrBtsqDNl0DfgsfDhM440u9xRf7+HcYPHpa/
STd20iuTmIhOG2OvFG2FT0xRkOamQblAWh81iYCIjvJWIhB0GjJfi5yczPbfpG79
Pdi7lQUuMBgg4S0GW6KoGdMjoBwU7W6OxjArmt4/y5rAad103JH00TxCj861gf4S
djwlU3l8tIs1YITmX3gXlXyCV0XFDYI6/7fZUJGutJ1CrVTcUHfJJwbMXJkfe63E
5fh/UYxaYqnMmAaWLOX4WZDEJc3K/7lDu8sv70Qu+D991yv6bzIsZ7LZTWLCGe1W
a/IdRIXOjJQA/dMbHvajWsuij9Fs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org