Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D20859B570AC0361878637E4B92D0539812F25C4.cer
File:                     D20859B570AC0361878637E4B92D0539812F25C4.cer (raw, json)
Hash identifier:          Ivguo0iafWgkomoZpx0jrnpOQ1T3laGiswf40JoI8qc=
Subject key identifier:   D2:08:59:B5:70:AC:03:61:87:86:37:E4:B9:2D:05:39:81:2F:25:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42104E22CFD30531E60D3F883F18CE4AC9A42854
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GJbkMPE6VVsZL7VVDTWfebsrETv8Tfxe7rHDW2KAw1rC/0/D20859B570AC0361878637E4B92D0539812F25C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GJbkMPE6VVsZL7VVDTWfebsrETv8Tfxe7rHDW2KAw1rC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 17:45:15 +0000
Certificate not after:    Thu 20 Jul 2023 17:50:15 +0000
Subordinate resources:    AS: 262737
                          IP: 186.195.128.0/20
                          IP: 2804:848::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:10:4e:22:cf:d3:05:31:e6:0d:3f:88:3f:18:ce:4a:c9:a4:28:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 17:45:15 2022 GMT
            Not After : Jul 20 17:50:15 2023 GMT
        Subject: CN=D20859B570AC0361878637E4B92D0539812F25C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:b9:15:58:c1:9a:ed:54:10:a8:a9:29:4b:
                    c1:8c:d4:1f:8c:cf:17:e8:ac:32:4b:47:1f:53:8b:
                    76:67:23:75:6a:7d:12:73:49:d2:bd:a5:06:45:87:
                    27:f8:95:b1:d4:3d:4b:6f:5b:57:94:c6:39:bb:02:
                    21:48:b7:cb:c9:3b:a7:dd:6e:53:a9:36:a4:28:64:
                    7e:a2:30:7e:42:29:e1:cf:d7:b5:6c:28:18:61:3f:
                    fb:3d:68:d7:07:db:a3:5d:8f:b5:5d:85:f0:e8:f4:
                    e6:b4:d5:d7:ff:d7:65:8c:cb:fc:77:4a:b1:cc:93:
                    b4:3f:1d:67:d2:f6:f9:94:19:c0:c7:e2:c7:6a:0b:
                    eb:d2:8f:7a:5f:8f:ac:8c:02:0c:07:17:ef:73:c1:
                    05:7b:fd:40:d9:3d:3d:12:d3:99:24:c9:ac:7c:93:
                    98:6e:b6:37:3e:44:49:8d:06:7c:74:23:da:a6:46:
                    cc:49:47:5a:db:bd:34:96:5a:5f:6c:bc:53:83:a6:
                    c6:8f:fc:ef:43:cb:a8:3c:4c:7b:09:37:9f:98:25:
                    2f:b8:23:91:21:16:b0:db:46:f2:e3:66:ef:fb:e0:
                    06:41:11:35:a5:ec:80:e7:7a:d1:00:cf:af:a5:16:
                    dd:9a:38:f8:94:4b:80:12:a7:43:b3:84:81:d3:9c:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:08:59:B5:70:AC:03:61:87:86:37:E4:B9:2D:05:39:81:2F:25:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GJbkMPE6VVsZL7VVDTWfebsrETv8Tfxe7rHDW2KAw1rC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GJbkMPE6VVsZL7VVDTWfebsrETv8Tfxe7rHDW2KAw1rC/0/D20859B570AC0361878637E4B92D0539812F25C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.128.0/20
                IPv6:
                  2804:848::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262737

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:b9:8c:75:e7:7e:af:65:25:d6:f3:ca:a7:65:f9:35:de:
         6f:4d:e4:7c:89:ae:a9:8a:9c:25:39:62:64:ae:d6:70:d4:46:
         c6:ae:ab:a9:00:a4:75:6d:4d:d6:63:d4:64:83:c9:c7:14:bf:
         73:62:94:de:fe:23:cc:8d:04:d0:c4:df:bd:ce:a3:69:c6:0e:
         eb:40:df:54:2f:8c:bb:77:76:e6:67:7a:eb:94:44:03:56:2b:
         62:79:42:94:62:c6:68:a8:4e:2f:0a:f1:bc:06:2a:a4:26:91:
         0e:aa:b4:98:28:e7:51:41:b1:a5:3c:6f:49:b3:42:75:7a:59:
         cb:d8:58:89:16:49:23:20:54:7a:c5:94:c0:fe:33:69:f5:94:
         6d:6c:0f:87:f1:dc:80:92:ad:9f:0f:f0:9d:dd:f1:17:22:03:
         3c:a7:70:c0:06:ce:a9:e5:33:6a:30:7c:46:44:7d:67:9b:fd:
         d3:d5:4e:54:66:da:66:44:68:a9:47:f9:a5:59:03:96:08:15:
         e3:00:63:6b:25:4f:fb:70:a8:b0:bb:32:62:3a:98:8d:1b:17:
         a9:cf:ee:1f:25:27:2b:f0:ff:76:67:91:1b:d6:6f:6a:d3:df:
         51:91:a2:83:3c:5f:71:75:51:9e:aa:b2:ea:f3:82:c9:bd:0a:
         ac:9d:74:c3
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQhBOIs/TBTHmDT+IPxjOSsmkKFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MjExNzQ1MTVaFw0yMzA3MjAxNzUwMTVaMDMxMTAvBgNV
BAMTKEQyMDg1OUI1NzBBQzAzNjE4Nzg2MzdFNEI5MkQwNTM5ODEyRjI1QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSrkVWMGa7VQQqKkpS8GM1B+M
zxforDJLRx9Ti3ZnI3VqfRJzSdK9pQZFhyf4lbHUPUtvW1eUxjm7AiFIt8vJO6fd
blOpNqQoZH6iMH5CKeHP17VsKBhhP/s9aNcH26Ndj7VdhfDo9Oa01df/12WMy/x3
SrHMk7Q/HWfS9vmUGcDH4sdqC+vSj3pfj6yMAgwHF+9zwQV7/UDZPT0S05kkyax8
k5hutjc+REmNBnx0I9qmRsxJR1rbvTSWWl9svFODpsaP/O9Dy6g8THsJN5+YJS+4
I5EhFrDbRvLjZu/74AZBETWl7IDnetEAz6+lFt2aOPiUS4ASp0OzhIHTnHXLAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSCFm1cKwDYYeG
N+S5LQU5gS8lxDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HSmJrTVBFNlZWc1pMN1ZWRFRXZmVic3JFVHY4VGZ4ZTdy
SERXMktBdzFyQy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR0pia01QRTZWVnNaTDdWVkRUV2ZlYnNyRVR2OFRmeGU3
ckhEVzJLQXcxckMvMC9EMjA4NTlCNTcwQUMwMzYxODc4NjM3RTRCOTJEMDUzOTgx
MkYyNUM0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAS6w4AwDQQCAAIwBwMF
ACgECEgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAJRMA0GCSqGSIb3DQEBCwUA
A4IBAQBbBbmMded+r2Ul1vPKp2X5Nd5vTeR8ia6pipwlOWJkrtZw1EbGrqupAKR1
bU3WY9Rkg8nHFL9zYpTe/iPMjQTQxN+9zqNpxg7rQN9UL4y7d3bmZ3rrlEQDViti
eUKUYsZoqE4vCvG8BiqkJpEOqrSYKOdRQbGlPG9Js0J1elnL2FiJFkkjIFR6xZTA
/jNp9ZRtbA+H8dyAkq2fD/Cd3fEXIgM8p3DABs6p5TNqMHxGRH1nm/3T1U5UZtpm
RGipR/mlWQOWCBXjAGNrJU/7cKiwuzJiOpiNGxepz+4fJScr8P92Z5Eb1m9q099R
kaKDPF9xdVGeqrLq84LJvQqsnXTD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org