Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.cer
File:                     0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.cer (raw, json)
Hash identifier:          RHABk2es6Xoe67MICMUeRYoUhK6JOzBSCuYQM7H4NkA=
Subject key identifier:   0A:D8:AD:7E:0E:AB:2B:26:A5:84:20:EA:22:0F:FC:81:3E:E6:A7:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63C56B317F5CB3C5A8C92200A223DB7A18690C9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 19:07:04 +0000
Certificate not after:    Wed 29 May 2024 19:12:04 +0000
Subordinate resources:    AS: 61660
                          IP: 131.108.44.0/22
                          IP: 138.185.100.0/22
                          IP: 2804:1c88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c5:6b:31:7f:5c:b3:c5:a8:c9:22:00:a2:23:db:7a:18:69:0c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 19:07:04 2023 GMT
            Not After : May 29 19:12:04 2024 GMT
        Subject: CN=0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:e3:5a:01:b8:08:7e:14:ca:34:cc:74:35:
                    92:ac:f4:ce:d0:57:6c:c4:f3:99:38:48:6f:70:e6:
                    85:35:f1:aa:67:fe:b5:ad:8b:7f:9d:75:94:77:f7:
                    a1:00:96:1c:d3:5b:65:68:ea:81:52:0a:b4:cb:2c:
                    1c:92:06:06:de:2e:11:08:ff:12:85:be:17:39:6e:
                    be:c7:57:f4:ad:ba:fa:2f:3f:09:c7:58:c6:0a:e6:
                    c4:fe:62:39:c7:57:d3:23:4e:6c:22:bc:1f:bf:77:
                    9d:1b:24:ff:95:6b:c3:a3:9a:c0:51:4b:5b:e7:7c:
                    1e:68:89:ef:1b:99:03:8f:e6:a1:41:43:37:08:fd:
                    1e:b1:5b:71:fb:11:6c:73:b9:10:d7:bf:ad:94:e0:
                    18:2d:78:e3:96:72:69:3f:2c:65:65:ed:f3:1f:61:
                    59:c5:88:ed:66:bf:13:02:8f:6a:3c:ad:00:29:80:
                    8d:29:98:57:f0:fa:64:db:c4:d3:45:30:4a:15:69:
                    fa:19:bc:9a:a3:81:5a:65:bf:bd:57:72:06:26:bd:
                    fb:2b:4f:71:85:4d:44:c9:5b:e2:cc:2b:b8:a4:b6:
                    8b:b2:96:a2:a1:69:a6:31:1b:57:ef:52:c1:c5:e7:
                    cd:11:f4:42:00:80:47:b4:97:0d:40:76:be:7f:62:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:D8:AD:7E:0E:AB:2B:26:A5:84:20:EA:22:0F:FC:81:3E:E6:A7:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.44.0/22
                  138.185.100.0/22
                IPv6:
                  2804:1c88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61660

    Signature Algorithm: sha256WithRSAEncryption
         86:83:97:05:13:5a:0b:d4:68:bb:eb:79:26:79:96:56:bf:fd:
         da:5f:30:38:99:02:45:f5:dc:8d:13:c5:7b:c3:cc:5e:13:d0:
         8f:04:f1:14:72:b2:94:b3:83:e1:7e:70:34:d5:df:35:a8:9c:
         18:bb:6d:86:44:e0:eb:96:5e:93:43:ee:d0:82:9a:2e:00:c6:
         05:7f:4a:5c:07:6b:bc:f7:d7:2a:85:a4:d5:c1:ed:d7:89:64:
         78:38:fe:e3:83:f4:92:bb:82:16:f6:24:49:3a:f2:72:01:92:
         fe:ea:ef:23:aa:b4:79:b6:d5:67:18:51:73:c7:54:ce:69:cc:
         c9:6c:cb:a8:88:7f:71:86:93:48:f9:cc:fa:83:94:dc:8d:68:
         c3:ba:a7:0b:56:6f:46:94:53:a0:9e:a0:26:66:be:8f:b1:1b:
         47:e0:e1:dc:c7:b4:ce:a9:90:bc:e9:47:d9:93:0e:d8:23:ff:
         46:d5:8a:b0:f3:dd:e1:2f:35:4a:33:94:a8:7e:36:5f:c6:b2:
         34:c7:79:c2:46:98:7a:dd:19:97:e4:65:43:12:ce:3b:f5:50:
         77:54:41:21:0f:80:cd:c5:96:08:5f:bc:50:b7:13:6b:6f:f4:
         34:54:5c:94:06:0f:11:96:e7:80:f6:b2:8f:43:09:c8:fb:23:
         93:9f:90:aa
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUY8VrMX9cs8WoySIAoiPbehhpDJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MzExOTA3MDRaFw0yNDA1MjkxOTEyMDRaMDMxMTAvBgNV
BAMTKDBBRDhBRDdFMEVBQjJCMjZBNTg0MjBFQTIyMEZGQzgxM0VFNkE3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QONaAbgIfhTKNMx0NZKs9M7Q
V2zE85k4SG9w5oU18apn/rWti3+ddZR396EAlhzTW2Vo6oFSCrTLLBySBgbeLhEI
/xKFvhc5br7HV/StuvovPwnHWMYK5sT+YjnHV9MjTmwivB+/d50bJP+Va8OjmsBR
S1vnfB5oie8bmQOP5qFBQzcI/R6xW3H7EWxzuRDXv62U4BgteOOWcmk/LGVl7fMf
YVnFiO1mvxMCj2o8rQApgI0pmFfw+mTbxNNFMEoVafoZvJqjgVplv71XcgYmvfsr
T3GFTUTJW+LMK7iktouylqKhaaYxG1fvUsHF580R9EIAgEe0lw1Adr5/YnJtAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQK2K1+DqsrJqWE
IOoiD/yBPuan/DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83R1dHYkhRbjhHcWZra0ZSSmZkQ2hYaEpSZzRQYUozNURM
Rkt3aWt0b1pSbi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83R1dHYkhRbjhHcWZra0ZSSmZkQ2hYaEpSZzRQYUozNURM
Rkt3aWt0b1pSbi8wLzBBRDhBRDdFMEVBQjJCMjZBNTg0MjBFQTIyMEZGQzgxM0VF
NkE3RkMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoNsLAMEAoq5ZDANBAIA
AjAHAwUAKAQciDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8NwwDQYJKoZIhvcN
AQELBQADggEBAIaDlwUTWgvUaLvreSZ5lla//dpfMDiZAkX13I0TxXvDzF4T0I8E
8RRyspSzg+F+cDTV3zWonBi7bYZE4OuWXpND7tCCmi4AxgV/SlwHa7z31yqFpNXB
7deJZHg4/uOD9JK7ghb2JEk68nIBkv7q7yOqtHm21WcYUXPHVM5pzMlsy6iIf3GG
k0j5zPqDlNyNaMO6pwtWb0aUU6CeoCZmvo+xG0fg4dzHtM6pkLzpR9mTDtgj/0bV
irDz3eEvNUozlKh+Nl/GsjTHecJGmHrdGZfkZUMSzjv1UHdUQSEPgM3FlghfvFC3
E2tv9DRUXJQGDxGW54D2so9DCcj7I5OfkKo=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org