Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DE165093213A05EE33EFC42523BC4AB18F104C4C.cer
File:                     DE165093213A05EE33EFC42523BC4AB18F104C4C.cer (raw, json)
Hash identifier:          df5AXo4bpIYPws/oE0pvwhMiMBEoWHnwqwNLvX0HnC0=
Subject key identifier:   DE:16:50:93:21:3A:05:EE:33:EF:C4:25:23:BC:4A:B1:8F:10:4C:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BA13ABE2F14BA28FACDAF274E51C203B2B639F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/DE165093213A05EE33EFC42523BC4AB18F104C4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 13:05:22 +0000
Certificate not after:    Thu 18 Jul 2024 13:10:22 +0000
Subordinate resources:    AS: 264881
                          IP: 168.227.172.0/22
                          IP: 170.79.20.0/22
                          IP: 2804:2f44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a1:3a:be:2f:14:ba:28:fa:cd:af:27:4e:51:c2:03:b2:b6:39:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 13:05:22 2023 GMT
            Not After : Jul 18 13:10:22 2024 GMT
        Subject: CN=DE165093213A05EE33EFC42523BC4AB18F104C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:c3:66:a6:98:df:0f:75:60:81:74:d2:12:
                    3a:32:ef:ea:1c:c1:57:ae:a5:54:bb:84:d7:9c:64:
                    d0:0b:c8:c3:96:07:fe:75:3d:d1:a8:2e:44:83:a1:
                    0f:1b:69:70:de:9c:4f:6b:ea:5a:fd:be:e1:22:0c:
                    df:3d:e2:8e:2c:87:92:4c:63:7c:dd:f6:b6:7d:a8:
                    ff:5c:47:c2:73:1f:29:82:fa:3a:49:f4:ef:ab:76:
                    64:e6:e1:d6:52:2c:d4:e6:51:ad:c9:6e:e9:25:c9:
                    9c:f0:16:84:5b:0d:22:6e:cb:ef:1d:9e:d8:0c:04:
                    eb:d3:e3:f1:0c:9c:58:fb:bf:fb:99:9b:a0:e3:77:
                    9c:17:db:ee:e6:1b:8b:20:7c:5d:2e:c5:1f:50:18:
                    73:e4:0d:27:2e:6d:91:50:c4:31:3e:f1:d2:2c:dc:
                    6a:9f:a9:be:2f:68:07:59:04:60:ca:ee:3b:83:88:
                    42:35:8a:8d:82:a0:78:70:15:d8:56:a5:d3:cd:6d:
                    3c:21:15:e4:13:8e:b2:b4:34:f5:1e:59:21:15:7b:
                    b0:f9:87:8b:20:c5:0c:57:49:d5:5a:75:f8:a1:b2:
                    f1:04:cc:73:15:bb:b0:33:35:c9:71:15:77:af:cb:
                    d3:3c:ce:91:b0:67:2b:5f:27:29:46:d2:94:f7:49:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:16:50:93:21:3A:05:EE:33:EF:C4:25:23:BC:4A:B1:8F:10:4C:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/DE165093213A05EE33EFC42523BC4AB18F104C4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.172.0/22
                  170.79.20.0/22
                IPv6:
                  2804:2f44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264881

    Signature Algorithm: sha256WithRSAEncryption
         34:f6:91:e9:34:b6:77:29:d3:fb:91:39:10:8e:8e:78:92:ca:
         35:79:df:d4:d9:55:9c:fc:97:87:c4:ec:ab:09:f7:19:9b:d8:
         82:63:42:b7:eb:8d:01:7e:55:ef:e5:be:fa:06:f9:b9:57:d3:
         09:fa:31:a3:d6:c7:92:5f:b8:e9:13:c1:65:27:a7:db:c8:ef:
         e5:b3:27:60:f7:88:6d:82:11:dc:96:7b:f8:bb:69:6d:27:61:
         7f:94:5d:3f:5a:61:49:7b:41:bb:1b:e9:b8:de:98:45:c0:f7:
         e5:e6:30:33:47:0e:5a:42:eb:30:0d:60:c3:ee:a5:49:73:0d:
         a7:b7:48:ab:e8:0e:81:59:dd:24:40:d3:8b:2c:68:88:d0:3f:
         01:11:81:2f:97:37:a5:c9:9c:a1:05:e6:b8:c7:a4:27:b6:a9:
         00:2c:05:ca:72:b7:8a:c9:d9:4e:e3:e2:47:dc:8e:a7:1f:be:
         8e:69:b9:96:49:26:03:51:ae:ae:ee:15:6d:45:e0:fa:18:86:
         25:b3:d3:19:df:47:e7:2f:43:e5:f4:cf:0b:32:64:8f:e0:db:
         c4:99:01:0d:bc:47:f8:08:a7:f2:80:83:33:0d:a1:3c:f8:62:
         21:f7:47:ac:36:7e:12:03:fb:54:86:a7:d4:0b:51:4e:2f:71:
         c8:97:7d:4a
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUO6E6vi8Uuij6za8nTlHCA7K2OfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjAxMzA1MjJaFw0yNDA3MTgxMzEwMjJaMDMxMTAvBgNV
BAMTKERFMTY1MDkzMjEzQTA1RUUzM0VGQzQyNTIzQkM0QUIxOEYxMDRDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNMNmppjfD3VggXTSEjoy7+oc
wVeupVS7hNecZNALyMOWB/51PdGoLkSDoQ8baXDenE9r6lr9vuEiDN894o4sh5JM
Y3zd9rZ9qP9cR8JzHymC+jpJ9O+rdmTm4dZSLNTmUa3JbuklyZzwFoRbDSJuy+8d
ntgMBOvT4/EMnFj7v/uZm6Djd5wX2+7mG4sgfF0uxR9QGHPkDScubZFQxDE+8dIs
3Gqfqb4vaAdZBGDK7juDiEI1io2CoHhwFdhWpdPNbTwhFeQTjrK0NPUeWSEVe7D5
h4sgxQxXSdVadfihsvEEzHMVu7AzNclxFXevy9M8zpGwZytfJylG0pT3SY1BAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeFlCTIToF7jPv
xCUjvEqxjxBMTDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82U1NxVHBpQ0xFSm5EMWVvNnRvb1NzUTNMcDJMUkwyM3RH
TjczRHJERmdjNi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0
R043M0RyREZnYzYvMC9ERTE2NTA5MzIxM0EwNUVFMzNFRkM0MjUyM0JDNEFCMThG
MTA0QzRDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKo46wDBAKqTxQwDQQC
AAIwBwMFACgEL0QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAqxMA0GCSqGSIb3
DQEBCwUAA4IBAQA09pHpNLZ3KdP7kTkQjo54kso1ed/U2VWc/JeHxOyrCfcZm9iC
Y0K3640BflXv5b76Bvm5V9MJ+jGj1seSX7jpE8FlJ6fbyO/lsydg94htghHclnv4
u2ltJ2F/lF0/WmFJe0G7G+m43phFwPfl5jAzRw5aQuswDWDD7qVJcw2nt0ir6A6B
Wd0kQNOLLGiI0D8BEYEvlzelyZyhBea4x6QntqkALAXKcreKydlO4+JH3I6nH76O
abmWSSYDUa6u7hVtReD6GIYls9MZ30fnL0Pl9M8LMmSP4NvEmQENvEf4CKfygIMz
DaE8+GIh90esNn4SA/tUhqfUC1FOL3HIl31K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org