Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.cer
File:                     DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.cer (raw, json)
Hash identifier:          ENjJItS00XWAD/UBjgW3dQ7LUHwdL9c1JnReY6Rrf28=
Subject key identifier:   DA:35:6B:6D:E9:FF:AE:56:64:C7:73:DD:2B:7E:A0:D6:18:6F:39:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BBC33DC8FEA365D5B3E9A83B313AABDB0C47BC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Nov 2023 19:22:36 +0000
Certificate not after:    Sat 23 Nov 2024 19:27:36 +0000
Subordinate resources:    AS: 61932
                          IP: 200.23.180.0/22
                          IP: 2804:1870::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bc:33:dc:8f:ea:36:5d:5b:3e:9a:83:b3:13:aa:bd:b0:c4:7b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 25 19:22:36 2023 GMT
            Not After : Nov 23 19:27:36 2024 GMT
        Subject: CN=DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:6d:4b:0d:5b:49:dd:83:be:12:b4:97:ca:
                    29:a2:97:7a:fd:47:65:c7:94:1c:53:82:3a:74:51:
                    24:b2:d0:f3:a8:46:5c:23:64:60:8b:b6:67:e5:2d:
                    da:17:c1:d5:7b:df:66:4a:3d:20:a9:0e:88:ce:27:
                    9d:33:e8:88:7b:12:5e:d1:b8:44:3b:74:3c:c6:58:
                    ef:b6:56:40:37:d7:ba:94:b9:98:f6:3f:5b:71:8a:
                    bf:ad:5c:b9:20:27:e1:0e:59:1b:91:af:90:c0:5d:
                    0a:6a:8c:2b:7b:db:c2:04:5c:56:30:98:8c:23:0c:
                    d8:5a:11:34:85:fc:7f:ae:bc:f9:42:5f:b1:27:f4:
                    d2:6a:94:24:b2:49:6f:67:13:aa:19:80:97:4f:f8:
                    e6:75:1c:c7:da:e7:5d:1c:e0:0e:9b:86:c0:d4:77:
                    52:2e:1f:d0:a8:f8:46:d8:b3:b6:a3:f8:a0:e6:1d:
                    82:72:90:ac:f9:10:ce:3a:bb:49:e4:06:9e:21:db:
                    e8:8f:87:68:85:8e:e6:82:cf:0d:ca:c2:55:18:4d:
                    65:c2:7b:37:7d:e0:98:fa:9a:1d:0e:e3:da:40:36:
                    6a:0a:16:8d:00:5c:3e:c1:61:c6:44:b0:65:bb:e6:
                    16:94:68:34:05:d6:c6:a5:d9:ec:fc:fe:d6:8a:5d:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:35:6B:6D:E9:FF:AE:56:64:C7:73:DD:2B:7E:A0:D6:18:6F:39:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.180.0/22
                IPv6:
                  2804:1870::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61932

    Signature Algorithm: sha256WithRSAEncryption
         18:e3:a6:48:79:dd:92:39:03:09:29:16:14:e1:84:a0:5c:e7:
         f0:34:bf:28:5d:fb:2c:88:91:d5:6c:ed:a1:fe:90:61:bd:20:
         87:50:e3:df:22:42:d4:af:a2:dc:ce:c2:9e:4d:41:7a:89:e1:
         7f:f0:99:26:ad:17:2e:21:67:76:c3:94:a2:9f:29:4f:ab:a0:
         d0:da:d4:44:fb:7f:eb:e7:1c:cb:c8:b8:86:e3:e6:b3:2c:a5:
         7d:b2:16:bf:ef:d4:20:d6:42:0c:96:e6:45:d3:fe:01:e0:16:
         33:a3:c0:b7:bd:b9:5b:44:0d:2f:8a:78:93:3a:41:9e:af:af:
         cf:24:c5:01:ee:67:e2:a4:14:3b:ab:dc:85:e5:ed:76:4e:8c:
         8e:4e:8b:ff:12:79:0f:4a:4d:69:a4:f0:fe:13:6e:f3:9e:52:
         6d:a5:c3:2b:2d:d8:64:33:26:9e:fb:33:5b:32:2b:77:f7:1d:
         91:1a:ef:18:35:0f:37:db:1d:51:b3:d3:b8:35:96:29:58:06:
         5d:43:bf:13:31:42:c8:d1:69:38:77:de:88:08:46:2b:83:03:
         5b:3c:57:2b:c1:7c:e9:be:d5:d7:81:5d:45:e4:36:d7:d8:c0:
         ad:64:e9:08:82:f4:4f:75:8b:86:ab:92:5c:f8:c5:7c:2c:5a:
         b1:ef:88:04
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUW7wz3I/qNl1bPpqDsxOqvbDEe8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjUxOTIyMzZaFw0yNDExMjMxOTI3MzZaMDMxMTAvBgNV
BAMTKERBMzU2QjZERTlGRkFFNTY2NEM3NzNERDJCN0VBMEQ2MTg2RjM5MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHm1LDVtJ3YO+ErSXyimil3r9
R2XHlBxTgjp0USSy0POoRlwjZGCLtmflLdoXwdV732ZKPSCpDojOJ50z6Ih7El7R
uEQ7dDzGWO+2VkA317qUuZj2P1txir+tXLkgJ+EOWRuRr5DAXQpqjCt728IEXFYw
mIwjDNhaETSF/H+uvPlCX7En9NJqlCSySW9nE6oZgJdP+OZ1HMfa510c4A6bhsDU
d1IuH9Co+EbYs7aj+KDmHYJykKz5EM46u0nkBp4h2+iPh2iFjuaCzw3KwlUYTWXC
ezd94Jj6mh0O49pANmoKFo0AXD7BYcZEsGW75haUaDQF1sal2ez8/taKXSW7AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaNWtt6f+uVmTH
c90rfqDWGG85BzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81dmE2RjlQaXp4Z0s0d00yOFhmalNaNWJTbVRYcGFWcWc2
elZ0MTNDYThGaS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNXZhNkY5UGl6eGdLNHdNMjhYZmpTWjViU21UWHBhVnFn
NnpWdDEzQ2E4RmkvMC9EQTM1NkI2REU5RkZBRTU2NjRDNzczREQyQjdFQTBENjE4
NkYzOTA3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIF7QwDQQCAAIwBwMF
ACgEGHAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPHsMA0GCSqGSIb3DQEBCwUA
A4IBAQAY46ZIed2SOQMJKRYU4YSgXOfwNL8oXfssiJHVbO2h/pBhvSCHUOPfIkLU
r6LczsKeTUF6ieF/8JkmrRcuIWd2w5SinylPq6DQ2tRE+3/r5xzLyLiG4+azLKV9
sha/79Qg1kIMluZF0/4B4BYzo8C3vblbRA0viniTOkGer6/PJMUB7mfipBQ7q9yF
5e12ToyOTov/EnkPSk1ppPD+E27znlJtpcMrLdhkMyae+zNbMit39x2RGu8YNQ83
2x1Rs9O4NZYpWAZdQ78TMULI0Wk4d96ICEYrgwNbPFcrwXzpvtXXgV1F5DbX2MCt
ZOkIgvRPdYuGq5Jc+MV8LFqx74gE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org