Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D1F0A7A929C6A95E7AB259586E6F8BF6FD45F608.cer
File:                     D1F0A7A929C6A95E7AB259586E6F8BF6FD45F608.cer (raw, json)
Hash identifier:          nT7vVrfYoGjZyd5De9TjneZzANSHLdtahd2dZpKfCcU=
Subject key identifier:   D1:F0:A7:A9:29:C6:A9:5E:7A:B2:59:58:6E:6F:8B:F6:FD:45:F6:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25ADEF321D369D53E848AE2E72C7CE662146D486
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/D1F0A7A929C6A95E7AB259586E6F8BF6FD45F608.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:04:07 +0000
Certificate not after:    Tue 28 May 2024 19:09:07 +0000
Subordinate resources:    AS: 271723
                          IP: 2804:8000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ad:ef:32:1d:36:9d:53:e8:48:ae:2e:72:c7:ce:66:21:46:d4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:04:07 2023 GMT
            Not After : May 28 19:09:07 2024 GMT
        Subject: CN=D1F0A7A929C6A95E7AB259586E6F8BF6FD45F608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:02:de:09:49:db:81:a2:55:ae:33:fb:92:
                    60:63:7e:0f:ba:59:88:37:9c:13:19:53:37:e9:fd:
                    2b:d1:36:d4:8b:0a:f7:cf:74:4b:f3:28:27:0f:52:
                    5d:c3:26:d6:63:91:7f:91:b3:6d:06:41:8b:6d:6f:
                    16:e3:71:dd:9c:8d:4a:c5:33:9a:fc:f2:96:05:d7:
                    57:e7:4a:80:dd:66:3e:4e:66:dd:4c:9a:48:f4:6b:
                    25:d3:f2:fe:9b:96:24:e2:23:17:6a:11:66:2d:a3:
                    e6:c7:1c:8c:0d:96:aa:6e:47:70:8b:db:79:8a:a9:
                    88:78:c6:58:13:ca:14:cd:ca:8b:d6:c5:34:23:81:
                    f4:69:4a:bd:8b:96:1e:e3:18:75:14:14:de:bb:b3:
                    bf:ba:51:a2:7c:9f:01:6a:c4:7f:fb:bf:38:78:75:
                    e5:b0:e9:2f:2f:63:83:d8:dd:4b:d6:6d:f0:99:eb:
                    4c:5d:32:85:27:00:08:00:93:a6:ae:12:3d:6b:f5:
                    19:91:f4:cd:0c:2a:5c:06:dc:dc:34:30:c0:ba:91:
                    a2:b1:71:da:b9:cd:c5:df:cc:8e:bc:d0:de:c5:c1:
                    d4:59:71:5c:f0:9c:46:6d:35:7b:d2:0c:61:94:17:
                    8b:e6:9e:b7:22:a6:24:f1:56:50:57:ae:ca:ad:46:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:F0:A7:A9:29:C6:A9:5E:7A:B2:59:58:6E:6F:8B:F6:FD:45:F6:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/D1F0A7A929C6A95E7AB259586E6F8BF6FD45F608.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271723

    Signature Algorithm: sha256WithRSAEncryption
         36:79:57:3b:a3:bf:5d:66:22:fd:c3:27:9b:14:77:67:b0:9d:
         2c:b5:f4:6a:bd:a9:a3:ea:c4:a5:f7:c5:ab:42:c1:58:28:32:
         71:d0:4d:c4:2c:65:bc:40:0c:dd:0b:8d:45:23:03:70:20:3c:
         47:de:15:10:08:be:ea:84:3d:d6:16:2a:18:40:e1:7c:68:b7:
         d8:d1:2b:11:d2:41:2b:8c:8c:bb:29:f7:9c:b1:d5:4f:03:ed:
         84:4c:77:86:c9:bd:52:b2:e3:af:27:ce:49:1f:3a:e1:33:a9:
         6f:85:b9:f1:0c:07:95:5c:40:cb:ff:7a:4e:d7:64:24:36:da:
         6a:9d:3d:13:80:57:69:05:7b:6b:3b:f5:55:f0:5a:be:07:a3:
         16:07:28:20:de:16:7f:15:a9:28:9f:05:e9:e1:cc:f1:72:61:
         42:99:a2:b4:4b:b0:91:71:bb:cf:f4:bc:3f:a3:ef:4b:c9:8b:
         f3:be:13:32:04:55:bb:32:98:92:a5:dd:41:88:dd:88:68:40:
         66:27:e3:bc:0a:3b:00:74:c3:63:2a:18:12:9f:e9:95:f6:bd:
         74:ed:4f:7e:39:d2:28:6b:2c:5f:41:6f:30:90:fa:aa:dd:b2:
         62:51:74:c0:57:f7:64:11:1d:67:19:c6:84:17:a2:4c:f8:51:
         e0:80:4d:ac
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUJa3vMh02nVPoSK4ucsfOZiFG1IYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MzAxOTA0MDdaFw0yNDA1MjgxOTA5MDdaMDMxMTAvBgNV
BAMTKEQxRjBBN0E5MjlDNkE5NUU3QUIyNTk1ODZFNkY4QkY2RkQ0NUY2MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXTALeCUnbgaJVrjP7kmBjfg+6
WYg3nBMZUzfp/SvRNtSLCvfPdEvzKCcPUl3DJtZjkX+Rs20GQYttbxbjcd2cjUrF
M5r88pYF11fnSoDdZj5OZt1Mmkj0ayXT8v6bliTiIxdqEWYto+bHHIwNlqpuR3CL
23mKqYh4xlgTyhTNyovWxTQjgfRpSr2Llh7jGHUUFN67s7+6UaJ8nwFqxH/7vzh4
deWw6S8vY4PY3UvWbfCZ60xdMoUnAAgAk6auEj1r9RmR9M0MKlwG3Nw0MMC6kaKx
cdq5zcXfzI680N7FwdRZcVzwnEZtNXvSDGGUF4vmnrcipiTxVlBXrsqtRtcJAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR8KepKcapXnqy
WVhub4v2/UX2CDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83SHNSTmU5Z2hURkNnTGJjenloTHREQ21xMXk3NlBqTHNB
NWhMNUYzRTdTay8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN0hzUk5lOWdoVEZDZ0xiY3p5aEx0RENtcTF5NzZQakxz
QTVoTDVGM0U3U2svMC9EMUYwQTdBOTI5QzZBOTVFN0FCMjU5NTg2RTZGOEJGNkZE
NDVGNjA4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIAAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQlazANBgkqhkiG9w0BAQsFAAOCAQEANnlXO6O/XWYi
/cMnmxR3Z7CdLLX0ar2po+rEpffFq0LBWCgycdBNxCxlvEAM3QuNRSMDcCA8R94V
EAi+6oQ91hYqGEDhfGi32NErEdJBK4yMuyn3nLHVTwPthEx3hsm9UrLjryfOSR86
4TOpb4W58QwHlVxAy/96TtdkJDbaap09E4BXaQV7azv1VfBavgejFgcoIN4WfxWp
KJ8F6eHM8XJhQpmitEuwkXG7z/S8P6PvS8mL874TMgRVuzKYkqXdQYjdiGhAZifj
vAo7AHTDYyoYEp/plfa9dO1PfjnSKGssX0FvMJD6qt2yYlF0wFf3ZBEdZxnGhBei
TPhR4IBNrA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org