Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer
File:                     F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer (raw, json)
Hash identifier:          El7YKr4DZveD7xPBvt/gDZLGoRNFT3sY1hSJyG55sDs=
Subject key identifier:   F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32F4881C99710D1505AFBA902FF04FDE692A5425
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 18:35:09 +0000
Certificate not after:    Tue 01 Apr 2025 18:40:09 +0000
Subordinate resources:    AS: 268254
                          IP: 45.236.156.0/22
                          IP: 2804:4e54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f4:88:1c:99:71:0d:15:05:af:ba:90:2f:f0:4f:de:69:2a:54:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 18:35:09 2024 GMT
            Not After : Apr  1 18:40:09 2025 GMT
        Subject: CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:1f:66:40:26:ca:02:fa:3c:8a:86:f3:ef:
                    56:55:b1:f9:27:32:f5:2b:05:f0:1c:d9:55:6a:fb:
                    09:85:de:ca:ec:6f:d3:ce:ce:7e:e5:d9:28:1b:88:
                    cc:80:29:75:97:14:0e:17:50:f0:33:11:2e:cb:06:
                    99:b6:78:4b:b4:e5:0d:87:1b:54:8b:bf:75:e5:e4:
                    36:fc:b4:cc:5d:2a:d4:3f:73:7e:bc:2a:e2:c6:da:
                    e9:68:39:6d:05:26:7b:b7:26:4e:80:4e:be:b9:7c:
                    e4:a1:0f:05:78:43:fd:08:0f:41:eb:6a:9e:84:94:
                    46:b2:fb:01:78:79:04:f0:be:a5:96:c7:69:5b:19:
                    c6:43:01:4d:30:df:b0:f7:18:74:ee:19:26:7f:4c:
                    71:30:2f:a4:ca:78:39:42:bd:98:75:24:06:77:a8:
                    c4:87:79:64:99:b6:5d:f4:a0:63:f6:d7:2e:08:fb:
                    c2:84:e8:2e:87:0d:14:4e:c5:92:3f:ec:c6:00:cf:
                    6a:e6:56:b7:e0:7a:59:17:45:f6:c8:fc:74:e9:ff:
                    73:90:d3:4f:98:ac:6e:33:ac:b9:37:81:cc:b1:64:
                    fd:7e:6f:ca:8e:db:d8:e0:75:6f:d3:ff:fd:df:da:
                    a0:f9:62:1b:ca:c4:88:d0:5e:c9:af:bb:c3:b7:3e:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.156.0/22
                IPv6:
                  2804:4e54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268254

    Signature Algorithm: sha256WithRSAEncryption
         93:7a:03:d2:02:bf:9d:c9:03:15:ce:c2:71:f8:30:13:ee:f2:
         5d:88:3a:b3:a1:17:db:1a:83:6d:16:f1:45:9a:1c:e0:be:5d:
         0c:c6:dc:bd:b9:f4:03:53:35:24:41:4b:76:22:e2:2e:65:7f:
         be:be:b6:44:77:f3:42:a3:5a:4c:f5:42:b9:41:d1:49:a6:73:
         3c:d8:e9:05:3c:3e:ae:c3:2e:8c:0d:03:f0:62:59:b6:88:80:
         e8:85:97:e4:ab:3b:cd:48:c8:af:f1:51:11:7f:71:37:08:85:
         7a:3e:97:fe:ca:ed:8e:49:4c:70:47:63:58:58:8b:79:4a:15:
         68:a0:2a:90:7b:4a:24:c4:2f:5b:14:86:b0:4a:3c:56:b3:1f:
         aa:cf:ee:31:81:03:3a:b3:3c:57:6c:da:da:45:ea:e8:fe:ed:
         7e:31:c1:c7:b1:27:61:c4:70:3c:71:ec:e4:7d:a9:3b:a6:06:
         e4:a7:6f:ed:66:ae:69:1b:0f:4d:17:e4:59:c0:ed:75:1e:90:
         70:6c:e9:99:5f:21:98:6a:57:e7:b9:8d:15:8f:05:c8:6e:de:
         4a:e0:ca:ae:53:72:d6:b4:2b:97:f9:47:e0:13:07:49:1a:02:
         c4:34:a1:28:a8:b2:cb:85:de:22:2d:dd:18:48:0b:aa:92:67:
         02:e8:7e:ea
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUMvSIHJlxDRUFr7qQL/BP3mkqVCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDIxODM1MDlaFw0yNTA0MDExODQwMDlaMDMxMTAvBgNV
BAMTKEY4MzFBQ0VEQ0I2NDFDQTY3MzFGRkUxQzhCNERDQzg5NUU1N0ZEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5x9mQCbKAvo8iobz71ZVsfkn
MvUrBfAc2VVq+wmF3srsb9POzn7l2SgbiMyAKXWXFA4XUPAzES7LBpm2eEu05Q2H
G1SLv3Xl5Db8tMxdKtQ/c368KuLG2uloOW0FJnu3Jk6ATr65fOShDwV4Q/0ID0Hr
ap6ElEay+wF4eQTwvqWWx2lbGcZDAU0w37D3GHTuGSZ/THEwL6TKeDlCvZh1JAZ3
qMSHeWSZtl30oGP21y4I+8KE6C6HDRROxZI/7MYAz2rmVrfgelkXRfbI/HTp/3OQ
00+YrG4zrLk3gcyxZP1+b8qO29jgdW/T//3f2qD5YhvKxIjQXsmvu8O3PiNzAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4Mazty2QcpnMf
/hyLTcyJXlf9qTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BM2h0ekN6UlB6TG5ZRjdxOXl4N0FkQlkzWUdOb2NRRHdo
ejdEV1laMlBRQi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BM2h0ekN6UlB6TG5ZRjdxOXl4N0FkQlkzWUdOb2NRRHdo
ejdEV1laMlBRQi8wL0Y4MzFBQ0VEQ0I2NDFDQTY3MzFGRkUxQzhCNERDQzg5NUU1
N0ZEQTkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3snDANBAIAAjAHAwUA
KAROVDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF94wDQYJKoZIhvcNAQELBQAD
ggEBAJN6A9ICv53JAxXOwnH4MBPu8l2IOrOhF9sag20W8UWaHOC+XQzG3L259ANT
NSRBS3Yi4i5lf76+tkR380KjWkz1QrlB0UmmczzY6QU8Pq7DLowNA/BiWbaIgOiF
l+SrO81IyK/xURF/cTcIhXo+l/7K7Y5JTHBHY1hYi3lKFWigKpB7SiTEL1sUhrBK
PFazH6rP7jGBAzqzPFds2tpF6uj+7X4xwcexJ2HEcDxx7OR9qTumBuSnb+1mrmkb
D00X5FnA7XUekHBs6ZlfIZhqV+e5jRWPBchu3krgyq5Tcta0K5f5R+ATB0kaAsQ0
oSiossuF3iIt3RhIC6qSZwLofuo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org