Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer
File:                     D5E118C26CD1A6C958406265B147D4287D85F5CD.cer (raw, json)
Hash identifier:          NeDzGrCrACW+/OhjYRV/Gvy4+Brmk5JDaOwIExPZRik=
Subject key identifier:   D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B5258C70CF23461130151356F44B65A14E1DF5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 19:24:18 +0000
Certificate not after:    Fri 14 Mar 2025 19:29:18 +0000
Subordinate resources:    AS: 263650
                          IP: 138.255.148.0/22
                          IP: 170.79.80.0/22
                          IP: 177.74.152.0/21
                          IP: 2804:10cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:52:58:c7:0c:f2:34:61:13:01:51:35:6f:44:b6:5a:14:e1:df:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 19:24:18 2024 GMT
            Not After : Mar 14 19:29:18 2025 GMT
        Subject: CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:df:b4:3d:fb:ef:b3:af:8b:56:ba:72:34:bc:
                    f5:ee:8c:e8:75:79:cc:64:52:b8:15:fd:aa:b5:31:
                    b3:70:08:cc:2e:36:f2:b1:7a:d6:62:71:b1:2e:5d:
                    a0:75:d8:fe:f3:fe:6c:d3:ea:9a:f6:a8:0c:9c:c0:
                    39:e8:31:9f:bf:1d:f2:f9:ca:36:00:85:4d:47:ac:
                    b5:ad:6e:ce:5a:d5:fc:fe:41:a8:4b:fc:5f:92:cf:
                    27:0a:05:b7:29:1a:17:f8:f1:23:f8:ef:27:43:b2:
                    12:b7:29:60:d5:3e:5e:01:0d:43:51:56:e7:12:06:
                    e5:bf:0f:04:40:50:2b:b2:04:49:42:89:a7:82:e1:
                    53:22:4e:9f:01:0e:35:19:cb:b1:98:bd:4b:96:3f:
                    1f:d7:9e:69:b6:d2:fc:ae:b7:15:c6:d4:28:6a:a8:
                    77:8a:12:9a:af:83:19:c6:7f:e6:41:59:7d:82:4d:
                    6c:1e:c4:56:31:94:c7:1b:d9:f2:bc:a7:bd:86:a5:
                    69:86:c5:fb:61:1a:41:ea:5d:f3:f8:03:eb:b6:e7:
                    b7:83:83:a0:b5:c2:7a:bb:65:f3:21:12:d4:c2:fd:
                    af:ed:94:5b:20:67:ed:a5:0f:0f:79:af:45:90:47:
                    9d:3d:2d:cd:0e:e9:9b:4d:a7:c1:d1:f6:f8:63:28:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.148.0/22
                  170.79.80.0/22
                  177.74.152.0/21
                IPv6:
                  2804:10cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263650

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:34:3c:8b:b6:9d:ad:ca:38:51:d6:d6:2f:bd:9d:03:c2:
         91:1f:0c:a7:8b:17:85:6f:a8:56:b4:8b:2d:2f:8d:3b:2d:08:
         83:f2:7a:48:b8:b2:16:e4:54:3f:98:c8:c1:9f:d6:d7:c6:17:
         12:e0:f7:22:48:49:c7:a8:3e:da:00:b6:68:01:4c:6d:c9:48:
         52:be:19:f1:05:f7:ff:ba:03:38:65:5c:4e:cc:35:e2:1e:77:
         8b:9f:b1:a0:8b:6a:09:6c:ab:b1:8a:5b:d6:e4:17:0a:28:85:
         55:eb:5c:1f:b6:c4:71:cd:f7:5f:6e:5a:01:c4:9a:d9:b6:b0:
         0f:a3:17:c9:09:b9:5a:76:74:8a:7c:d2:9e:8f:3f:78:6b:3c:
         0c:54:26:f8:97:50:d9:fa:9c:85:a4:89:92:a5:04:11:8f:d3:
         c9:d6:b1:42:e4:83:4d:29:82:c7:34:5b:4e:0e:77:c4:ef:2f:
         83:ab:c7:c9:cd:f8:d1:2c:c6:60:2a:e1:e6:5e:7c:57:63:0f:
         70:17:56:c0:a1:41:16:b5:a6:d9:de:d2:d7:a0:66:22:bc:f3:
         7c:7e:69:26:44:7d:86:62:ee:a5:b7:1e:ce:dd:24:c4:05:6b:
         74:20:ea:72:91:c1:42:12:56:56:f5:6a:ff:e0:99:e1:2e:dc:
         4f:02:0d:39
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUK1JYxwzyNGETAVE1b0S2WhTh31owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTUxOTI0MThaFw0yNTAzMTQxOTI5MThaMDMxMTAvBgNV
BAMTKEQ1RTExOEMyNkNEMUE2Qzk1ODQwNjI2NUIxNDdENDI4N0Q4NUY1Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ37Q9+++zr4tWunI0vPXujOh1
ecxkUrgV/aq1MbNwCMwuNvKxetZicbEuXaB12P7z/mzT6pr2qAycwDnoMZ+/HfL5
yjYAhU1HrLWtbs5a1fz+QahL/F+SzycKBbcpGhf48SP47ydDshK3KWDVPl4BDUNR
VucSBuW/DwRAUCuyBElCiaeC4VMiTp8BDjUZy7GYvUuWPx/Xnmm20vyutxXG1Chq
qHeKEpqvgxnGf+ZBWX2CTWwexFYxlMcb2fK8p72GpWmGxfthGkHqXfP4A+u257eD
g6C1wnq7ZfMhEtTC/a/tlFsgZ+2lDw95r0WQR509Lc0O6ZtNp8HR9vhjKKKhAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTV4RjCbNGmyVhA
YmWxR9QofYX1zTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TDFqV05MaWdXWU05eG0zOXplWll4eXJMalRZZnlxa0dD
ZW9FM1hYaFp6TC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUwxaldOTGlnV1lNOXhtMzl6ZVpZeHlyTGpUWWZ5cWtH
Q2VvRTNYWGhaekwvMC9ENUUxMThDMjZDRDFBNkM5NTg0MDYyNjVCMTQ3RDQyODdE
ODVGNUNELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKK/5QDBAKqT1ADBAOx
SpgwDQQCAAIwBwMFACgEEMwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAXiMA0G
CSqGSIb3DQEBCwUAA4IBAQAWDjQ8i7adrco4UdbWL72dA8KRHwynixeFb6hWtIst
L407LQiD8npIuLIW5FQ/mMjBn9bXxhcS4PciSEnHqD7aALZoAUxtyUhSvhnxBff/
ugM4ZVxOzDXiHneLn7Ggi2oJbKuxilvW5BcKKIVV61wftsRxzfdfbloBxJrZtrAP
oxfJCbladnSKfNKejz94azwMVCb4l1DZ+pyFpImSpQQRj9PJ1rFC5INNKYLHNFtO
DnfE7y+Dq8fJzfjRLMZgKuHmXnxXYw9wF1bAoUEWtabZ3tLXoGYivPN8fmkmRH2G
Yu6ltx7O3STEBWt0IOpykcFCElZW9Wr/4JnhLtxPAg05
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org