Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D94E7CBA4B0D83E8A3FC9011D30F767BC2E91A88.cer
File:                     D94E7CBA4B0D83E8A3FC9011D30F767BC2E91A88.cer (raw, json)
Hash identifier:          eskdd/XQoSoATUGOODQ+kvqhvvJD4YMAgSh4cMx/Vek=
Subject key identifier:   D9:4E:7C:BA:4B:0D:83:E8:A3:FC:90:11:D3:0F:76:7B:C2:E9:1A:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6555CF04717773F869F15E47E7CC1070869E204C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/D94E7CBA4B0D83E8A3FC9011D30F767BC2E91A88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 04:16:44 +0000
Certificate not after:    Thu 21 Nov 2024 04:21:44 +0000
Subordinate resources:    AS: 269420
                          IP: 45.186.116.0/22
                          IP: 2804:6450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:55:cf:04:71:77:73:f8:69:f1:5e:47:e7:cc:10:70:86:9e:20:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 04:16:44 2023 GMT
            Not After : Nov 21 04:21:44 2024 GMT
        Subject: CN=D94E7CBA4B0D83E8A3FC9011D30F767BC2E91A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:98:c3:02:77:d6:37:99:19:d0:92:18:cc:
                    1f:59:f1:5c:8f:aa:ce:43:2c:8f:44:5d:40:eb:17:
                    31:78:d5:6a:c0:e4:a6:4a:97:6f:c3:cc:f3:e8:fe:
                    0b:12:bf:cd:15:4e:c4:1a:fc:f1:fc:b4:12:45:c0:
                    82:e2:25:cc:51:d6:20:86:eb:48:76:d4:2a:a4:bd:
                    f3:a7:83:ff:c3:fb:c4:07:74:c7:48:ab:85:0d:a4:
                    e5:e7:94:16:24:4e:f2:bd:88:7a:42:4d:a2:3c:9a:
                    b2:ec:ee:07:8b:f6:25:34:d5:8a:4d:f4:43:12:4c:
                    31:f0:18:bc:a9:2d:9d:44:cd:61:03:72:89:6f:f5:
                    d0:57:d3:8b:34:98:5a:a8:35:8c:3f:5f:19:5f:c2:
                    04:f8:1a:bb:b3:dc:79:2c:4e:59:1a:6c:f5:5b:35:
                    13:d0:ac:6d:c2:25:8d:45:19:93:19:95:00:50:d9:
                    fa:62:29:f7:cd:00:3d:65:92:61:3f:02:fa:7f:ed:
                    12:b4:75:e0:da:e8:dd:93:e8:46:17:39:4e:6c:68:
                    1d:c1:8f:ce:a8:f1:1e:b2:36:54:f7:45:9d:8f:84:
                    93:5b:3b:4f:c6:a6:60:53:de:5e:0a:ed:6d:aa:d1:
                    e4:f8:80:72:52:e2:95:76:48:23:38:2c:ce:6b:29:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:4E:7C:BA:4B:0D:83:E8:A3:FC:90:11:D3:0F:76:7B:C2:E9:1A:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/D94E7CBA4B0D83E8A3FC9011D30F767BC2E91A88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.116.0/22
                IPv6:
                  2804:6450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269420

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:2e:d2:e0:1d:22:9a:fc:73:9c:f5:1c:fa:b9:7a:4c:2e:
         b5:e9:9c:7a:a0:ab:99:8f:1a:1d:79:df:75:a5:1e:d9:40:aa:
         28:01:79:da:ac:84:fc:fe:8f:3f:56:10:b6:ed:30:be:3b:95:
         82:42:18:a6:c4:a9:b0:bd:ef:85:ec:cb:09:5b:79:2c:3a:72:
         74:eb:71:72:46:da:7b:c1:1e:99:0e:9c:f0:62:67:e8:0a:fe:
         b1:e8:09:80:3d:63:a9:fa:ec:fe:60:75:d9:4e:c4:3a:74:42:
         d4:70:91:73:dd:c4:27:74:0d:76:af:66:d0:d4:2a:0c:fe:32:
         3f:7d:44:5a:27:b2:fb:36:e9:89:47:f5:02:93:32:4f:07:d8:
         5e:88:5f:e9:58:1f:d4:9f:57:02:26:24:17:50:87:65:2e:d3:
         eb:45:bd:2f:55:37:a5:72:5c:f5:a5:be:ac:70:89:06:a2:e2:
         bb:b9:7c:cf:79:3c:6d:7b:19:43:cc:a2:04:55:00:06:50:f6:
         b4:4e:a5:7e:c2:d7:3e:5e:7b:f5:df:8c:23:c4:89:be:04:03:
         73:38:ea:49:7e:6c:6b:34:90:25:b0:4d:26:97:cc:3d:e2:94:
         e3:a2:eb:08:38:32:1b:a3:45:e4:3e:4d:9b:36:59:2a:87:e5:
         09:2b:7b:f2
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUZVXPBHF3c/hp8V5H58wQcIaeIEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjMwNDE2NDRaFw0yNDExMjEwNDIxNDRaMDMxMTAvBgNV
BAMTKEQ5NEU3Q0JBNEIwRDgzRThBM0ZDOTAxMUQzMEY3NjdCQzJFOTFBODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BpjDAnfWN5kZ0JIYzB9Z8VyP
qs5DLI9EXUDrFzF41WrA5KZKl2/DzPPo/gsSv80VTsQa/PH8tBJFwILiJcxR1iCG
60h21CqkvfOng//D+8QHdMdIq4UNpOXnlBYkTvK9iHpCTaI8mrLs7geL9iU01YpN
9EMSTDHwGLypLZ1EzWEDcolv9dBX04s0mFqoNYw/XxlfwgT4Gruz3HksTlkabPVb
NRPQrG3CJY1FGZMZlQBQ2fpiKffNAD1lkmE/Avp/7RK0deDa6N2T6EYXOU5saB3B
j86o8R6yNlT3RZ2PhJNbO0/GpmBT3l4K7W2q0eT4gHJS4pV2SCM4LM5rKdIXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZTny6Sw2D6KP8
kBHTD3Z7wukaiDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IQjNKZkNKWTFDQUpRQVVzNmlld0NjVFgzU2dzYnM1Mnd5
clNxN1JiSlFtYi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSEIzSmZDSlkxQ0FKUUFVczZpZXdDY1RYM1Nnc2JzNTJ3
eXJTcTdSYkpRbWIvMC9EOTRFN0NCQTRCMEQ4M0U4QTNGQzkwMTFEMzBGNzY3QkMy
RTkxQTg4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItunQwDQQCAAIwBwMF
ACgEZFAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBxsMA0GCSqGSIb3DQEBCwUA
A4IBAQAerC7S4B0imvxznPUc+rl6TC616Zx6oKuZjxoded91pR7ZQKooAXnarIT8
/o8/VhC27TC+O5WCQhimxKmwve+F7MsJW3ksOnJ063FyRtp7wR6ZDpzwYmfoCv6x
6AmAPWOp+uz+YHXZTsQ6dELUcJFz3cQndA12r2bQ1CoM/jI/fURaJ7L7NumJR/UC
kzJPB9heiF/pWB/Un1cCJiQXUIdlLtPrRb0vVTelclz1pb6scIkGouK7uXzPeTxt
exlDzKIEVQAGUPa0TqV+wtc+Xnv134wjxIm+BANzOOpJfmxrNJAlsE0ml8w94pTj
ousIODIbo0XkPk2bNlkqh+UJK3vy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org