Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D23FD01D2A56116CA9D396262945E5223B8E14A1.cer
File:                     D23FD01D2A56116CA9D396262945E5223B8E14A1.cer (raw, json)
Hash identifier:          jCEzUq6Uwx621qaUWutSzvBWJ/Ix5SxxDT8ta2265I4=
Subject key identifier:   D2:3F:D0:1D:2A:56:11:6C:A9:D3:96:26:29:45:E5:22:3B:8E:14:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B77071DCA2CF025CC05F8E552ABDB5FB89841AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/D23FD01D2A56116CA9D396262945E5223B8E14A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Feb 2022 12:37:30 +0000
Certificate not after:    Thu 02 Feb 2023 12:42:30 +0000
Subordinate resources:    AS: 265329
                          IP: 168.181.28.0/22
                          IP: 2804:2e2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:77:07:1d:ca:2c:f0:25:cc:05:f8:e5:52:ab:db:5f:b8:98:41:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  3 12:37:30 2022 GMT
            Not After : Feb  2 12:42:30 2023 GMT
        Subject: CN=D23FD01D2A56116CA9D396262945E5223B8E14A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:db:ac:ba:97:22:45:b4:97:21:5e:7e:d5:
                    87:33:de:45:b9:27:07:b4:0a:03:32:a3:c8:9d:eb:
                    49:5f:f3:61:c9:aa:b1:90:99:3a:b2:3b:25:09:e3:
                    6b:f1:ea:16:b2:df:ba:62:0c:ef:83:13:bf:59:97:
                    c5:b2:49:15:dc:8e:0f:13:11:fe:ce:ee:2a:73:ea:
                    0f:17:52:08:d1:ed:a0:e7:f1:51:cf:1e:2f:92:65:
                    f0:48:25:3d:f2:e2:82:74:4e:81:26:9e:39:18:f2:
                    5a:00:91:04:23:fe:3e:54:c8:27:91:72:46:8f:19:
                    6a:65:7a:15:fc:ef:77:5c:9e:71:5f:56:b4:82:8d:
                    8a:04:85:2b:ac:56:cf:a6:5a:76:9c:27:f6:bd:81:
                    01:d3:33:0e:c1:8e:bb:05:ce:3e:a4:ea:58:32:ab:
                    03:94:e7:0b:5b:ae:47:72:23:83:8f:52:cc:76:56:
                    c2:ba:78:28:38:ee:db:9b:a4:ea:2f:59:35:02:21:
                    f3:d7:79:ba:6d:78:60:bb:ac:60:9c:6c:11:1c:40:
                    e8:25:fa:47:0d:41:97:5e:a5:5d:e6:91:88:cd:76:
                    7f:09:ed:e8:cc:16:4c:ab:88:16:6e:cc:3f:a4:47:
                    e1:9e:76:29:ed:aa:be:11:cd:5f:5d:69:ea:6a:bf:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:3F:D0:1D:2A:56:11:6C:A9:D3:96:26:29:45:E5:22:3B:8E:14:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/D23FD01D2A56116CA9D396262945E5223B8E14A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.28.0/22
                IPv6:
                  2804:2e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265329

    Signature Algorithm: sha256WithRSAEncryption
         22:9f:33:d5:aa:af:47:78:f0:57:aa:bc:e5:99:27:59:7e:d1:
         b6:e0:22:cc:ec:ef:ff:fc:23:48:b2:b5:e8:8e:99:63:32:b3:
         2b:61:e0:78:3f:59:93:3a:ea:ad:bf:37:c1:df:2b:53:29:80:
         fd:69:85:fe:5a:8c:52:f3:ed:59:73:f4:38:73:ac:3b:6f:29:
         c9:68:17:1d:45:84:97:5e:53:6e:ed:a9:74:a1:7d:d6:46:f2:
         2c:5f:79:1f:64:88:64:ee:38:2a:92:a4:e0:3d:6c:9d:ef:89:
         67:89:0b:89:e8:c0:99:c1:5f:cd:22:0c:cd:0b:2e:46:de:d3:
         dc:04:be:f6:7b:e1:4c:00:26:e4:8b:99:c9:9b:cf:2d:6a:80:
         34:01:b6:0d:f7:a8:85:8a:07:dd:86:2a:29:d4:f6:92:9b:88:
         d0:c3:60:aa:38:b3:2c:cd:f8:8f:50:28:00:40:bf:36:78:29:
         3d:3c:65:10:8d:28:d1:e8:14:05:3e:ef:90:57:79:12:f1:3b:
         4c:9a:cf:8e:06:11:b1:65:0d:8d:ea:28:79:dd:42:06:8d:a4:
         5b:73:c2:44:62:e8:5e:35:3f:94:c0:88:b3:0e:30:1d:cb:f1:
         59:14:f5:70:20:e2:45:89:de:84:88:8b:31:9b:4c:a1:b9:f1:
         5b:da:e8:8d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUG3cHHcos8CXMBfjlUqvbX7iYQaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAyMDMxMjM3MzBaFw0yMzAyMDIxMjQyMzBaMDMxMTAvBgNV
BAMTKEQyM0ZEMDFEMkE1NjExNkNBOUQzOTYyNjI5NDVFNTIyM0I4RTE0QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOH9usupciRbSXIV5+1Ycz3kW5
Jwe0CgMyo8id60lf82HJqrGQmTqyOyUJ42vx6hay37piDO+DE79Zl8WySRXcjg8T
Ef7O7ipz6g8XUgjR7aDn8VHPHi+SZfBIJT3y4oJ0ToEmnjkY8loAkQQj/j5UyCeR
ckaPGWplehX873dcnnFfVrSCjYoEhSusVs+mWnacJ/a9gQHTMw7BjrsFzj6k6lgy
qwOU5wtbrkdyI4OPUsx2VsK6eCg47tubpOovWTUCIfPXebpteGC7rGCcbBEcQOgl
+kcNQZdepV3mkYjNdn8J7ejMFkyriBZuzD+kR+Gedintqr4RzV9daepqv3yFAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSP9AdKlYRbKnT
liYpReUiO44UoTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84bU41RTRHUVF0WFB6bjhKSjhvTlNZNW8zZGtRMlBiRW5F
c1Z5dVhqc0NCUS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84bU41RTRHUVF0WFB6bjhKSjhvTlNZNW8zZGtRMlBiRW5F
c1Z5dVhqc0NCUS8wL0QyM0ZEMDFEMkE1NjExNkNBOUQzOTYyNjI5NDVFNTIyM0I4
RTE0QTEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqi1HDANBAIAAjAHAwUA
KAQuLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDHEwDQYJKoZIhvcNAQELBQAD
ggEBACKfM9Wqr0d48FeqvOWZJ1l+0bbgIszs7//8I0iyteiOmWMysyth4Hg/WZM6
6q2/N8HfK1MpgP1phf5ajFLz7Vlz9DhzrDtvKcloFx1FhJdeU27tqXShfdZG8ixf
eR9kiGTuOCqSpOA9bJ3viWeJC4nowJnBX80iDM0LLkbe09wEvvZ74UwAJuSLmcmb
zy1qgDQBtg33qIWKB92GKinU9pKbiNDDYKo4syzN+I9QKABAvzZ4KT08ZRCNKNHo
FAU+75BXeRLxO0yaz44GEbFlDY3qKHndQgaNpFtzwkRi6F41P5TAiLMOMB3L8VkU
9XAg4kWJ3oSIizGbTKG58Vva6I0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org