Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer
File:                     D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer (raw, json)
Hash identifier:          CwR5v3Fkhj9vKGU5FT9FIywhzcruJWqNJWIYfhMfnCs=
Subject key identifier:   D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41929879C693E311DE2B7B476F3582D74F015A89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 06:53:14 +0000
Certificate not after:    Sat 16 Nov 2024 06:58:14 +0000
Subordinate resources:    AS: 28326
                          IP: 189.50.40.0 -- 189.50.51.255
                          IP: 2804:88e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:92:98:79:c6:93:e3:11:de:2b:7b:47:6f:35:82:d7:4f:01:5a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 06:53:14 2023 GMT
            Not After : Nov 16 06:58:14 2024 GMT
        Subject: CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:c1:77:24:fe:b8:de:60:fb:8f:f5:0b:cd:
                    c4:70:dd:c1:22:3a:0e:01:e2:62:f9:88:2e:83:84:
                    8d:8e:b6:2e:c8:58:2b:81:dd:09:3d:ea:c7:0b:f2:
                    2d:38:11:ff:fb:de:d5:72:2a:10:88:a9:55:72:8f:
                    3f:21:3d:5f:71:af:e3:00:53:d6:d7:2e:2d:ca:01:
                    7e:c0:2c:c6:81:47:c4:7f:80:ce:5d:8c:18:2d:20:
                    13:76:d0:83:e9:de:30:bd:67:91:f7:b9:48:cc:cc:
                    29:d9:3c:c8:15:41:50:6d:4b:6e:10:f5:85:59:81:
                    88:ea:90:3b:60:58:a9:b7:20:07:0d:07:5a:ed:fd:
                    f6:b2:b0:56:54:d2:e7:a8:c4:67:f5:ca:80:1c:61:
                    c8:6e:39:90:80:ad:2a:43:93:98:7e:a7:0f:1c:cb:
                    4f:11:70:64:47:59:6b:1d:32:24:6f:e3:ac:10:7b:
                    40:79:ea:de:e7:f2:08:ab:f3:d8:62:e1:25:74:57:
                    f6:d3:ef:bf:2e:82:4b:eb:cb:b8:df:8d:f7:d9:7e:
                    ba:37:d0:ad:40:fe:f4:62:3e:39:cc:32:fc:0c:05:
                    ff:c6:6c:f2:3a:cc:1c:db:b8:75:ba:0f:2b:d2:81:
                    90:6b:5a:45:af:87:99:58:70:7e:13:0d:19:75:ce:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.40.0-189.50.51.255
                IPv6:
                  2804:88e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28326

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:fd:3c:0c:fc:b2:8a:e7:17:a1:59:17:c3:b1:93:42:84:
         9e:94:8d:c7:e6:6a:49:4a:46:93:ef:0f:40:5e:8c:a8:bd:5f:
         bf:89:dd:49:53:9d:b3:15:cf:01:eb:4d:fd:a7:40:50:96:fc:
         d4:87:e6:b6:2a:dd:1a:60:2b:e2:ac:bd:98:0d:b5:2f:49:c7:
         9b:02:20:cc:3d:90:1b:37:02:ee:90:6c:51:a3:0e:ef:bc:20:
         c9:fa:a1:de:75:28:b9:62:1f:92:cb:44:d7:58:44:ea:37:e0:
         9c:aa:19:25:28:b3:ca:c2:31:d6:0b:9f:ab:d2:7c:ca:f1:66:
         84:0a:c4:c3:09:c9:ce:b8:2c:02:cd:4d:4f:6b:6e:85:ea:03:
         3a:68:23:c4:61:07:e9:91:52:73:4b:23:a5:4c:ff:c1:f9:b3:
         32:29:0d:b3:f6:c2:09:3e:01:29:f0:73:9a:52:0d:75:dd:42:
         03:f6:ff:ed:83:2c:29:a0:91:b3:57:bf:8b:a0:f6:a8:15:ad:
         b7:f1:33:98:cb:95:d3:f9:b7:02:69:66:bf:4e:b6:e7:8f:95:
         bd:8d:44:6e:8b:f8:58:3f:dd:ff:1d:5c:19:f0:75:6e:74:24:
         6d:22:ac:f2:af:71:71:8f:50:8f:e9:05:22:37:10:2c:b1:b3:
         31:8d:9c:95
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUQZKYecaT4xHeK3tHbzWC108BWokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMTgwNjUzMTRaFw0yNDExMTYwNjU4MTRaMDMxMTAvBgNV
BAMTKEQ4REM5MThCMjlFMzYxOTM4QjhCOUYyMDkzRjEwNEUyQzNDQkFEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDssF3JP643mD7j/ULzcRw3cEi
Og4B4mL5iC6DhI2Oti7IWCuB3Qk96scL8i04Ef/73tVyKhCIqVVyjz8hPV9xr+MA
U9bXLi3KAX7ALMaBR8R/gM5djBgtIBN20IPp3jC9Z5H3uUjMzCnZPMgVQVBtS24Q
9YVZgYjqkDtgWKm3IAcNB1rt/faysFZU0ueoxGf1yoAcYchuOZCArSpDk5h+pw8c
y08RcGRHWWsdMiRv46wQe0B56t7n8gir89hi4SV0V/bT778ugkvry7jfjffZfro3
0K1A/vRiPjnMMvwMBf/GbPI6zBzbuHW6DyvSgZBrWkWvh5lYcH4TDRl1zhvxAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTY3JGLKeNhk4uL
nyCT8QTiw8utuTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BY1J5WWtBZTdCODFIbWg4UnBEUVBybUNuNkd6TU1UZEpC
eVRxUE1qeWJtYS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BY1J5WWtBZTdCODFIbWg4UnBEUVBybUNuNkd6TU1UZEpC
eVRxUE1qeWJtYS8wL0Q4REM5MThCMjlFMzYxOTM4QjhCOUYyMDkzRjEwNEUyQzND
QkFEQjkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwFAQCAAEwDjAMAwQDvTIoAwQCvTIwMA0E
AgACMAcDBQAoBIjgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm6mMA0GCSqGSIb3
DQEBCwUAA4IBAQAC8/08DPyyiucXoVkXw7GTQoSelI3H5mpJSkaT7w9AXoyovV+/
id1JU52zFc8B6039p0BQlvzUh+a2Kt0aYCvirL2YDbUvScebAiDMPZAbNwLukGxR
ow7vvCDJ+qHedSi5Yh+Sy0TXWETqN+CcqhklKLPKwjHWC5+r0nzK8WaECsTDCcnO
uCwCzU1Pa26F6gM6aCPEYQfpkVJzSyOlTP/B+bMyKQ2z9sIJPgEp8HOaUg113UID
9v/tgywpoJGzV7+LoPaoFa238TOYy5XT+bcCaWa/Trbnj5W9jURui/hYP93/HVwZ
8HVudCRtIqzyr3Fxj1CP6QUiNxAssbMxjZyV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org