Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D152ECEA9B1F9ECE7A41F95BC0C65D054A45C5D7.cer
File:                     D152ECEA9B1F9ECE7A41F95BC0C65D054A45C5D7.cer (raw, json)
Hash identifier:          Rne5H+f0pm+MrDjPI1g9T5cdeU9PzwabysGTJjUum8o=
Subject key identifier:   D1:52:EC:EA:9B:1F:9E:CE:7A:41:F9:5B:C0:C6:5D:05:4A:45:C5:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5575BF0ED887B9AEB18FBE0158AE5AD8353D0738
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/D152ECEA9B1F9ECE7A41F95BC0C65D054A45C5D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Oct 2022 20:56:51 +0000
Certificate not after:    Thu 05 Oct 2023 21:01:51 +0000
Subordinate resources:    AS: 265066
                          IP: 168.121.200.0/22
                          IP: 170.79.96.0/22
                          IP: 170.231.112.0/22
                          IP: 179.125.20.0/22
                          IP: 2804:3244::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:75:bf:0e:d8:87:b9:ae:b1:8f:be:01:58:ae:5a:d8:35:3d:07:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 20:56:51 2022 GMT
            Not After : Oct  5 21:01:51 2023 GMT
        Subject: CN=D152ECEA9B1F9ECE7A41F95BC0C65D054A45C5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:17:c2:35:8d:40:c5:bf:bd:42:71:6d:b5:dd:
                    27:36:5a:c8:8d:47:e5:e8:0f:28:07:59:ab:40:94:
                    7a:38:ca:34:d9:95:7d:ee:a4:1e:37:49:c9:3e:d6:
                    ff:31:2c:33:5c:f1:9d:b3:8d:29:1a:f8:fa:f2:f5:
                    32:f8:41:a9:b5:44:3a:87:d0:eb:c4:a2:b2:6d:9b:
                    08:12:0b:b8:f2:13:0c:d8:06:74:a1:26:64:64:74:
                    9a:67:16:6a:4e:97:0c:d5:07:04:51:5e:93:ed:35:
                    3a:c9:12:c0:71:40:aa:8d:a6:4d:21:cd:73:76:b8:
                    af:5c:13:79:df:b6:b8:da:c0:25:9d:f8:b0:b3:4c:
                    21:31:f2:fc:a5:d6:11:80:c5:a3:a3:cf:77:22:f7:
                    55:2e:0b:f1:02:12:44:92:76:f4:b6:0a:45:65:d7:
                    66:03:53:b8:83:5e:06:c0:cb:29:dd:82:c4:21:a1:
                    db:6b:51:a4:85:9e:30:d7:e1:12:75:64:8f:e8:96:
                    22:fe:52:fd:76:72:68:ba:14:c8:d8:b2:eb:4b:fd:
                    67:ee:eb:32:7b:ed:6b:45:ae:8b:ce:cb:6a:f0:cb:
                    d4:63:08:83:18:6c:fc:11:0d:5c:c9:c8:53:ec:b9:
                    c3:0d:16:bc:d0:80:a7:ba:90:3b:45:0b:10:21:21:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:52:EC:EA:9B:1F:9E:CE:7A:41:F9:5B:C0:C6:5D:05:4A:45:C5:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/D152ECEA9B1F9ECE7A41F95BC0C65D054A45C5D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22
                  170.79.96.0/22
                  170.231.112.0/22
                  179.125.20.0/22
                IPv6:
                  2804:3244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265066

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:2f:d7:3a:46:8d:90:9b:52:7e:a7:2a:f6:8a:de:54:86:
         b5:0a:05:4d:41:3f:92:ea:9d:b6:fb:3d:c0:8f:bb:df:1b:65:
         a0:c2:86:ca:e0:f0:e0:e7:06:d7:0c:ca:c6:dd:1d:4c:08:a0:
         3e:10:6c:dd:c0:68:3a:c2:1a:9d:11:9e:57:87:17:9a:92:74:
         a5:56:e2:b5:f8:c2:e2:54:fa:08:0f:25:d5:81:be:6d:0a:a2:
         08:24:fe:c4:87:44:36:97:3f:9f:6a:3a:3b:ea:69:cc:20:25:
         f1:8c:a5:84:f3:ce:52:a1:2e:41:2f:9c:21:84:c1:3b:d0:e7:
         10:ad:f5:39:ba:27:9d:45:1d:c9:86:83:71:67:01:0f:07:9d:
         cf:90:8a:3f:00:ca:74:0a:33:54:c0:dd:1b:81:b8:76:50:d8:
         67:7e:cf:9e:f9:88:98:7c:78:70:fa:4a:2e:18:50:13:35:67:
         00:16:7d:3b:e4:a1:97:1f:63:e6:52:7d:67:5a:8e:5f:11:43:
         5d:85:f8:d7:9f:89:39:94:ec:ab:86:d0:23:03:99:28:4d:f8:
         a4:d5:18:21:54:28:53:c7:ae:15:88:ec:5a:dd:ae:b7:eb:d9:
         93:4c:b7:fc:e0:62:3b:e3:4c:bd:a3:0f:0e:86:83:31:44:cf:
         fb:14:21:f0
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUVXW/DtiHua6xj74BWK5a2DU9BzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMDYyMDU2NTFaFw0yMzEwMDUyMTAxNTFaMDMxMTAvBgNV
BAMTKEQxNTJFQ0VBOUIxRjlFQ0U3QTQxRjk1QkMwQzY1RDA1NEE0NUM1RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7F8I1jUDFv71CcW213Sc2WsiN
R+XoDygHWatAlHo4yjTZlX3upB43Sck+1v8xLDNc8Z2zjSka+Pry9TL4Qam1RDqH
0OvEorJtmwgSC7jyEwzYBnShJmRkdJpnFmpOlwzVBwRRXpPtNTrJEsBxQKqNpk0h
zXN2uK9cE3nftrjawCWd+LCzTCEx8vyl1hGAxaOjz3ci91UuC/ECEkSSdvS2CkVl
12YDU7iDXgbAyyndgsQhodtrUaSFnjDX4RJ1ZI/oliL+Uv12cmi6FMjYsutL/Wfu
6zJ77WtFrovOy2rwy9RjCIMYbPwRDVzJyFPsucMNFrzQgKe6kDtFCxAhIVxHAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRUuzqmx+eznpB
+VvAxl0FSkXF1zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlUa1g4VmV1M1F6aXVzc2lY
Y0hKUEgxQ1hUai8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNzNVd3RBUkwyZ0dvWHdub3E5VGtYOFZldTNReml1c3Np
WGNISlBIMUNYVGovMC9EMTUyRUNFQTlCMUY5RUNFN0E0MUY5NUJDMEM2NUQwNTRB
NDVDNUQ3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKoecgDBAKqT2ADBAKq
53ADBAKzfRQwDQQCAAIwBwMFACgEMkQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BAtqMA0GCSqGSIb3DQEBCwUAA4IBAQCGCi/XOkaNkJtSfqcq9oreVIa1CgVNQT+S
6p22+z3Aj7vfG2WgwobK4PDg5wbXDMrG3R1MCKA+EGzdwGg6whqdEZ5XhxeaknSl
VuK1+MLiVPoIDyXVgb5tCqIIJP7Eh0Q2lz+fajo76mnMICXxjKWE885SoS5BL5wh
hME70OcQrfU5uiedRR3JhoNxZwEPB53PkIo/AMp0CjNUwN0bgbh2UNhnfs+e+YiY
fHhw+kouGFATNWcAFn075KGXH2PmUn1nWo5fEUNdhfjXn4k5lOyrhtAjA5koTfik
1RghVChTx64ViOxa3a6369mTTLf84GI740y9ow8OhoMxRM/7FCHw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org