Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer
File:                     DADE0C80639BA985F0F9357586063522E5D2116B.cer (raw, json)
Hash identifier:          DgxHEa2+8qtpAHHH0vMP723q6zND0MYl+x11UaQyB+w=
Subject key identifier:   DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       534878362DCBE77E5B3C826CF346FEDFA73D4551
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 13:47:21 +0000
Certificate not after:    Thu 13 Feb 2025 13:52:21 +0000
Subordinate resources:    AS: 262827
                          IP: 187.84.176.0/20
                          IP: 2804:ccc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:48:78:36:2d:cb:e7:7e:5b:3c:82:6c:f3:46:fe:df:a7:3d:45:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 13:47:21 2024 GMT
            Not After : Feb 13 13:52:21 2025 GMT
        Subject: CN=DADE0C80639BA985F0F9357586063522E5D2116B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:2a:9f:10:e1:75:fc:40:01:75:81:71:e8:
                    95:61:a0:40:8d:91:6b:dc:15:d8:f3:eb:aa:f9:a7:
                    3a:d2:62:e1:c3:71:09:2d:25:e2:ad:87:a9:77:d2:
                    7b:21:fa:68:0b:8a:1f:d8:1f:45:0e:58:3e:03:57:
                    b7:08:da:02:df:3b:09:fb:7e:e6:7c:76:e6:72:ff:
                    4d:10:19:b1:24:50:34:a4:96:d3:71:14:17:a3:41:
                    3f:9c:fd:e1:a6:62:aa:bb:14:47:09:c1:c8:91:d5:
                    03:fb:b8:e3:38:ee:80:97:ef:8d:5e:5a:e8:11:10:
                    41:87:e5:37:9c:dd:99:a8:a6:af:50:ae:cc:d2:52:
                    39:c1:08:f4:9f:03:ef:20:8f:a8:ba:af:7f:05:b6:
                    f8:fa:9f:17:d0:0b:0d:82:52:5c:1d:47:27:3d:64:
                    2d:32:63:2e:ab:8f:28:66:81:ab:48:e7:40:be:24:
                    1f:cb:d5:64:bf:49:d0:5d:8c:0b:ba:a6:cd:f2:70:
                    e3:51:4f:cf:9c:95:d1:9b:f5:17:66:80:60:5d:27:
                    c0:7d:ff:93:c4:56:31:c2:e9:f1:dd:98:69:f5:b2:
                    9f:40:3d:da:f2:5b:52:7b:9c:b4:3c:53:87:66:1f:
                    99:2d:f4:cf:5b:65:98:4b:eb:2d:1c:05:23:dd:0f:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.176.0/20
                IPv6:
                  2804:ccc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262827

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:94:52:26:91:aa:79:15:f7:11:f4:9c:ba:7d:40:96:32:
         3d:c0:54:5b:06:0f:7b:17:ba:72:54:81:54:f2:6b:71:57:39:
         95:e7:f4:4d:33:35:4f:af:66:6e:98:96:9f:f6:c8:2f:91:72:
         14:05:0e:cc:d7:8a:01:c3:9e:d8:22:d9:1d:65:25:93:bc:60:
         9a:57:80:cc:6d:d8:aa:ac:23:52:69:77:8a:8f:7f:1f:43:c9:
         38:8b:6b:04:f2:30:f1:82:95:52:90:aa:50:af:84:d6:81:5c:
         40:45:be:63:3e:c9:40:a5:39:4d:af:5c:cd:2f:e1:3c:f9:e5:
         0d:44:fb:a7:e6:40:8e:b3:21:88:ea:43:33:21:5d:1c:a6:15:
         17:3b:26:24:ed:52:91:07:c2:1c:52:e5:4d:3e:42:60:36:66:
         c4:6a:f5:2b:6f:a2:f2:fa:5f:45:3c:87:63:44:28:36:a4:a6:
         e3:1c:ae:95:3c:65:f0:13:0f:7a:73:d5:32:20:55:89:55:3d:
         2b:3a:06:8c:41:ba:6e:46:72:3e:d9:d1:cf:91:22:95:f9:e8:
         24:62:e0:81:4a:35:6d:98:50:93:e5:3d:b6:0c:06:f0:02:08:
         4c:68:1d:4c:65:00:03:ae:10:09:5c:df:8a:71:87:17:07:29:
         b1:39:35:53
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUU0h4Ni3L535bPIJs80b+36c9RVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxMzQ3MjFaFw0yNTAyMTMxMzUyMjFaMDMxMTAvBgNV
BAMTKERBREUwQzgwNjM5QkE5ODVGMEY5MzU3NTg2MDYzNTIyRTVEMjExNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1SqfEOF1/EABdYFx6JVhoECN
kWvcFdjz66r5pzrSYuHDcQktJeKth6l30nsh+mgLih/YH0UOWD4DV7cI2gLfOwn7
fuZ8duZy/00QGbEkUDSkltNxFBejQT+c/eGmYqq7FEcJwciR1QP7uOM47oCX741e
WugREEGH5Tec3Zmopq9QrszSUjnBCPSfA+8gj6i6r38Ftvj6nxfQCw2CUlwdRyc9
ZC0yYy6rjyhmgatI50C+JB/L1WS/SdBdjAu6ps3ycONRT8+cldGb9RdmgGBdJ8B9
/5PEVjHC6fHdmGn1sp9APdryW1J7nLQ8U4dmH5kt9M9bZZhL6y0cBSPdD2tTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTa3gyAY5uphfD5
NXWGBjUi5dIRazAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BQVVRWXNDRFk1c1JmZmdiOWp0cU1ka0JjR3ZLUkFVUnBL
Y0JvY2ZnWm4zYy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUFVUVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJw
S2NCb2NmZ1puM2MvMC9EQURFMEM4MDYzOUJBOTg1RjBGOTM1NzU4NjA2MzUyMkU1
RDIxMTZCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAS7VLAwDQQCAAIwBwMF
ACgEDMwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAKrMA0GCSqGSIb3DQEBCwUA
A4IBAQCNh5RSJpGqeRX3EfScun1AljI9wFRbBg97F7pyVIFU8mtxVzmV5/RNMzVP
r2ZumJaf9sgvkXIUBQ7M14oBw57YItkdZSWTvGCaV4DMbdiqrCNSaXeKj38fQ8k4
i2sE8jDxgpVSkKpQr4TWgVxARb5jPslApTlNr1zNL+E8+eUNRPun5kCOsyGI6kMz
IV0cphUXOyYk7VKRB8IcUuVNPkJgNmbEavUrb6Ly+l9FPIdjRCg2pKbjHK6VPGXw
Ew96c9UyIFWJVT0rOgaMQbpuRnI+2dHPkSKV+egkYuCBSjVtmFCT5T22DAbwAghM
aB1MZQADrhAJXN+KcYcXBymxOTVT
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org