Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577.cer
File:                     F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577.cer (raw, json)
Hash identifier:          G6B1iLJFsA1UiY4ueGkGN4nljVx5W/BYS/IwFwAvbqA=
Subject key identifier:   F6:D4:E2:27:9E:7B:BC:B2:D6:C1:43:AA:A6:D4:BD:35:42:60:45:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F377749A1AA5E57ACF49BCFE23DACC486F8C5A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 18:26:49 +0000
Certificate not after:    Thu 02 May 2024 18:31:49 +0000
Subordinate resources:    AS: 28184
                          IP: 189.89.64.0/20
                          IP: 2804:15bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:37:77:49:a1:aa:5e:57:ac:f4:9b:cf:e2:3d:ac:c4:86:f8:c5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  4 18:26:49 2023 GMT
            Not After : May  2 18:31:49 2024 GMT
        Subject: CN=F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:ca:a9:ef:dc:2a:11:41:19:9b:0a:bd:f4:
                    aa:7e:41:26:5e:d5:c6:f0:e4:3e:ce:17:b7:75:46:
                    79:70:c2:3d:10:0c:75:b5:6f:24:e2:f6:ea:d2:23:
                    4e:2b:a5:27:06:1b:c2:bb:00:92:47:48:f9:91:bc:
                    88:61:4f:ce:23:4e:04:41:5b:88:81:45:b4:ac:15:
                    ef:cb:ce:6a:d9:5c:55:ef:b8:df:b4:02:f0:72:11:
                    cd:aa:e3:10:86:27:5b:38:37:2b:83:d0:cc:ee:7c:
                    2b:d7:ca:88:6b:e8:9a:79:05:a6:69:b5:16:90:0e:
                    f0:08:33:d0:92:a5:12:9d:65:06:63:f6:fd:47:ff:
                    5a:f2:43:d3:75:ca:51:5f:27:94:72:82:0d:bb:7b:
                    fe:9e:c6:ed:d0:e5:16:26:4f:60:67:cb:11:60:ab:
                    88:80:15:75:1d:31:f3:e9:fb:89:d2:e9:e6:6e:be:
                    3a:e3:92:ea:63:8c:38:35:ae:9a:4f:0d:d2:59:56:
                    57:cb:a3:4f:f6:a4:99:56:84:91:7b:7e:37:e0:66:
                    d1:1a:89:38:d3:d6:cb:58:76:e4:80:29:7b:70:46:
                    e2:c1:28:01:cd:47:d7:10:34:a3:16:7e:e6:1c:63:
                    1b:e4:31:0c:69:47:4d:75:f5:22:dc:03:45:92:06:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:D4:E2:27:9E:7B:BC:B2:D6:C1:43:AA:A6:D4:BD:35:42:60:45:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/20
                IPv6:
                  2804:15bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28184

    Signature Algorithm: sha256WithRSAEncryption
         50:44:64:e3:ca:3d:e2:c3:8c:a3:25:88:f1:d1:4e:f2:5b:f2:
         5f:13:f7:cd:72:c8:8d:96:cc:6f:22:c9:7b:3f:83:57:e8:dd:
         b5:ee:36:bf:8d:cc:71:5d:3f:ab:cf:dd:3b:d3:c6:12:5a:3f:
         97:14:8f:2d:76:5b:74:1f:a5:da:4c:bd:6b:7a:aa:ef:cd:d4:
         f4:a5:6c:6f:01:82:7a:d9:5a:b9:a0:8c:91:24:1a:bd:a0:fa:
         c4:0e:95:70:49:9f:58:9a:5f:be:37:e4:98:4c:26:e1:6b:3b:
         66:40:a0:be:cf:6e:50:52:2c:ad:2d:ae:d2:02:6b:6d:3b:30:
         50:50:63:25:9a:35:77:9c:8c:c8:4f:f6:13:4f:26:c4:8f:74:
         41:b4:ce:e3:17:88:22:12:e3:e7:04:73:21:09:2d:7c:cc:5a:
         68:2b:fe:20:9b:9b:9e:4a:37:e3:62:21:c9:46:85:d6:0c:eb:
         d4:34:1b:35:59:04:e9:96:3c:5f:87:b9:a2:17:09:75:0d:a6:
         b9:3c:e1:4d:5d:ff:cd:3a:3d:80:ee:4f:7f:99:68:43:27:df:
         fc:ee:0d:e0:20:b5:28:f4:ff:89:6e:5d:a2:1c:21:a0:28:cb:
         ba:3c:05:26:cc:fa:4c:54:29:db:07:ae:e2:8b:9f:3f:b3:c7:
         0f:ba:54:3b
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIULzd3SaGqXles9JvP4j2sxIb4xaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MDQxODI2NDlaFw0yNDA1MDIxODMxNDlaMDMxMTAvBgNV
BAMTKEY2RDRFMjI3OUU3QkJDQjJENkMxNDNBQUE2RDRCRDM1NDI2MDQ1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIsqp79wqEUEZmwq99Kp+QSZe
1cbw5D7OF7d1Rnlwwj0QDHW1byTi9urSI04rpScGG8K7AJJHSPmRvIhhT84jTgRB
W4iBRbSsFe/LzmrZXFXvuN+0AvByEc2q4xCGJ1s4NyuD0MzufCvXyohr6Jp5BaZp
tRaQDvAIM9CSpRKdZQZj9v1H/1ryQ9N1ylFfJ5Rygg27e/6exu3Q5RYmT2BnyxFg
q4iAFXUdMfPp+4nS6eZuvjrjkupjjDg1rppPDdJZVlfLo0/2pJlWhJF7fjfgZtEa
iTjT1stYduSAKXtwRuLBKAHNR9cQNKMWfuYcYxvkMQxpR0119SLcA0WSBllNAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT21OInnnu8stbB
Q6qm1L01QmBFdzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BS3VWaDYyc2VobkdybjRlZ3dGVlFQVlZrdGptb2R0UHc1
cXBQS1ZrUkt6ZS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BS3VWaDYyc2VobkdybjRlZ3dGVlFQVlZrdGptb2R0UHc1
cXBQS1ZrUkt6ZS8wL0Y2RDRFMjI3OUU3QkJDQjJENkMxNDNBQUE2RDRCRDM1NDI2
MDQ1NzcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBL1ZQDANBAIAAjAHAwUA
KAQVvDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuGDANBgkqhkiG9w0BAQsFAAOC
AQEAUERk48o94sOMoyWI8dFO8lvyXxP3zXLIjZbMbyLJez+DV+jdte42v43McV0/
q8/dO9PGElo/lxSPLXZbdB+l2ky9a3qq783U9KVsbwGCetlauaCMkSQavaD6xA6V
cEmfWJpfvjfkmEwm4Ws7ZkCgvs9uUFIsrS2u0gJrbTswUFBjJZo1d5yMyE/2E08m
xI90QbTO4xeIIhLj5wRzIQktfMxaaCv+IJubnko342IhyUaF1gzr1DQbNVkE6ZY8
X4e5ohcJdQ2muTzhTV3/zTo9gO5Pf5loQyff/O4N4CC1KPT/iW5dohwhoCjLujwF
Jsz6TFQp2weu4oufP7PHD7pUOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org