Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.cer
File:                     D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.cer (raw, json)
Hash identifier:          sg/O0L7axDaHfuLHRgWvDDC3mWpEylg1sDlhFn1XatU=
Subject key identifier:   D2:66:3D:15:D2:03:91:6F:99:C7:C0:3E:E3:A8:16:EF:AD:3F:6B:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02F7830BAA9197441F61A4F90CBDAA60335FA6F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jul 2023 02:45:11 +0000
Certificate not after:    Fri 05 Jul 2024 02:50:11 +0000
Subordinate resources:    AS: 269387
                          IP: 45.185.168.0/22
                          IP: 2804:63d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f7:83:0b:aa:91:97:44:1f:61:a4:f9:0c:bd:aa:60:33:5f:a6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  7 02:45:11 2023 GMT
            Not After : Jul  5 02:50:11 2024 GMT
        Subject: CN=D2663D15D203916F99C7C03EE3A816EFAD3F6BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:1d:eb:1e:21:8d:14:87:fe:d3:2e:7f:7b:
                    de:3f:62:12:7e:22:2c:11:a8:c9:79:9f:0b:95:13:
                    4b:f3:41:25:04:1d:16:f9:3f:8f:19:c8:54:24:31:
                    b5:1a:98:5d:61:b2:e5:25:16:95:48:48:e8:f2:08:
                    f9:b0:a8:88:03:53:37:cb:d5:66:3f:48:55:24:38:
                    0c:37:a3:a2:e0:05:d6:5b:22:d6:e0:dd:b7:a8:95:
                    e9:b0:a8:9b:53:69:2c:12:22:5a:7e:4b:a9:a9:4f:
                    22:36:4a:30:ac:4f:49:67:f1:71:f2:cd:4d:71:a8:
                    48:60:fa:22:8e:b6:67:e6:51:0f:8d:cd:d1:b8:06:
                    1d:fc:0e:8d:90:2d:94:21:e8:78:36:60:57:60:d9:
                    f8:e4:d1:9c:f0:04:26:20:9e:98:a1:d6:de:fa:1e:
                    73:66:8d:39:c1:e6:74:c5:59:ec:ff:db:a8:3f:37:
                    78:27:c9:10:ef:7e:e7:7c:23:58:4d:c8:5c:a8:09:
                    6b:74:30:45:6b:50:b1:55:4c:3a:f1:f3:9f:4f:c6:
                    24:29:2e:23:ff:7f:1d:b0:8a:de:6f:cb:f3:9c:1d:
                    83:a6:74:6a:d0:ef:57:37:bd:e5:a3:45:b4:7b:18:
                    bb:09:27:f1:26:a4:8a:0e:1c:55:e1:40:16:6d:51:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:66:3D:15:D2:03:91:6F:99:C7:C0:3E:E3:A8:16:EF:AD:3F:6B:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.168.0/22
                IPv6:
                  2804:63d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269387

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:6c:37:2a:0a:cb:0c:f1:cd:71:e4:05:6b:e9:1f:ac:39:
         c6:f5:f2:21:db:ff:44:d3:a8:7c:b6:6f:f0:93:01:40:da:cc:
         aa:a0:27:10:8d:88:a1:c7:f4:6f:d2:bc:b1:aa:d5:44:c2:5e:
         27:d1:aa:0a:a0:1c:9c:9a:79:2f:bf:9a:61:b4:ea:9c:7b:93:
         64:a7:84:27:a0:54:a0:8b:21:4a:b7:c8:c4:fe:ad:41:c0:e2:
         95:20:e3:bb:2a:bd:02:6f:27:16:8f:bf:78:aa:11:9d:a6:d9:
         cc:41:52:c9:71:0b:fd:63:d7:76:06:63:14:ff:3f:37:4c:b7:
         4d:64:69:38:d7:4c:41:1b:98:16:e8:12:e8:19:68:4e:67:49:
         85:9d:aa:37:7a:26:14:a2:b8:03:96:49:4f:ea:23:46:b7:ae:
         2c:25:ec:58:db:85:5b:50:37:37:18:38:21:19:e4:31:ad:cd:
         68:fa:46:b7:46:87:1c:d8:26:e4:7b:c1:16:56:14:27:df:50:
         9b:48:45:56:c1:6f:b5:13:cc:03:50:81:51:65:88:02:26:58:
         85:c9:74:5b:8b:3c:c9:f8:f0:84:94:1e:d8:af:42:46:6e:9a:
         fc:e8:5e:8a:18:f5:c9:96:3a:c7:d2:40:f2:da:5d:8a:2f:bf:
         e3:9c:15:9a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUAveDC6qRl0QfYaT5DL2qYDNfpvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDcwMjQ1MTFaFw0yNDA3MDUwMjUwMTFaMDMxMTAvBgNV
BAMTKEQyNjYzRDE1RDIwMzkxNkY5OUM3QzAzRUUzQTgxNkVGQUQzRjZCQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVx3rHiGNFIf+0y5/e94/YhJ+
IiwRqMl5nwuVE0vzQSUEHRb5P48ZyFQkMbUamF1hsuUlFpVISOjyCPmwqIgDUzfL
1WY/SFUkOAw3o6LgBdZbItbg3beolemwqJtTaSwSIlp+S6mpTyI2SjCsT0ln8XHy
zU1xqEhg+iKOtmfmUQ+NzdG4Bh38Do2QLZQh6Hg2YFdg2fjk0ZzwBCYgnpih1t76
HnNmjTnB5nTFWez/26g/N3gnyRDvfud8I1hNyFyoCWt0MEVrULFVTDrx859PxiQp
LiP/fx2wit5vy/OcHYOmdGrQ71c3veWjRbR7GLsJJ/EmpIoOHFXhQBZtUfmzAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSZj0V0gORb5nH
wD7jqBbvrT9rwzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DN0JDRnJ6dFZLTmtzbk5FWlVXY0VNOGlGb1lQaFhiQXRG
M2RBNDNOODJ3Sy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQzdCQ0ZyenRWS05rc25ORVpVV2NFTThpRm9ZUGhYYkF0
RjNkQTQzTjgyd0svMC9EMjY2M0QxNUQyMDM5MTZGOTlDN0MwM0VFM0E4MTZFRkFE
M0Y2QkMzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItuagwDQQCAAIwBwMF
ACgEY9gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBxLMA0GCSqGSIb3DQEBCwUA
A4IBAQBAzGw3KgrLDPHNceQFa+kfrDnG9fIh2/9E06h8tm/wkwFA2syqoCcQjYih
x/Rv0ryxqtVEwl4n0aoKoBycmnkvv5phtOqce5Nkp4QnoFSgiyFKt8jE/q1BwOKV
IOO7Kr0CbycWj794qhGdptnMQVLJcQv9Y9d2BmMU/z83TLdNZGk410xBG5gW6BLo
GWhOZ0mFnao3eiYUorgDlklP6iNGt64sJexY24VbUDc3GDghGeQxrc1o+ka3Rocc
2Cbke8EWVhQn31CbSEVWwW+1E8wDUIFRZYgCJliFyXRbizzJ+PCElB7Yr0JGbpr8
6F6KGPXJljrH0kDy2l2KL7/jnBWa
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org