Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0AB95DFEBF3813EBB0D6EFCEDD54B09D6A038B0.cer
File:                     A0AB95DFEBF3813EBB0D6EFCEDD54B09D6A038B0.cer (raw, json)
Hash identifier:          BQ+275RHf1wGZGeZfyJxlQTeKMAUAXRhFdrs2To/A1Q=
Subject key identifier:   A0:AB:95:DF:EB:F3:81:3E:BB:0D:6E:FC:ED:D5:4B:09:D6:A0:38:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FEFAAF1BFA5EDB0E721C5E25EF5CFC10F28A1EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/A0AB95DFEBF3813EBB0D6EFCEDD54B09D6A038B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 21:03:52 +0000
Certificate not after:    Tue 21 May 2024 21:08:52 +0000
Subordinate resources:    AS: 52927
                          IP: 177.185.32.0/21
                          IP: 2804:adc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ef:aa:f1:bf:a5:ed:b0:e7:21:c5:e2:5e:f5:cf:c1:0f:28:a1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 21:03:52 2023 GMT
            Not After : May 21 21:08:52 2024 GMT
        Subject: CN=A0AB95DFEBF3813EBB0D6EFCEDD54B09D6A038B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:cf:ff:59:9c:03:78:7f:13:33:86:34:b5:
                    db:e0:82:3d:02:94:cf:9b:f2:64:61:76:9f:d8:88:
                    8b:55:b8:bd:ea:b8:0b:1c:09:4c:f7:f7:cb:b4:02:
                    fa:85:e3:47:c9:a6:c4:f7:98:11:37:46:12:dd:08:
                    d9:ea:c9:7c:98:89:14:4a:48:e2:ce:a6:7e:55:13:
                    9c:bd:0e:ff:b7:e1:64:88:4b:fa:01:ae:98:88:a6:
                    aa:19:23:06:e8:4f:08:cb:d3:e1:41:1f:fb:d2:c9:
                    b5:0e:e4:0b:32:fd:9d:82:ec:27:62:cd:89:eb:e6:
                    c9:20:23:35:fd:4b:42:89:09:ca:5f:c9:63:80:56:
                    f8:79:69:73:e0:88:15:19:b9:e9:2d:74:ec:33:25:
                    3a:d5:d8:9c:84:48:8d:0e:9c:bf:89:43:20:cb:b1:
                    f2:87:a0:6f:2a:75:66:a2:f3:32:b7:0e:ac:55:e4:
                    0d:ca:7d:4f:d4:22:20:10:4c:5d:63:2a:55:99:2c:
                    72:e1:11:1c:99:b4:83:71:28:c2:22:49:ae:3f:1c:
                    be:40:76:07:fb:b6:58:7b:18:84:d7:a9:54:c8:29:
                    f4:35:5f:ce:c5:f7:89:0f:db:db:3b:b0:da:52:33:
                    93:fa:a4:ee:60:8f:cf:3b:73:f6:6d:fa:f6:21:ac:
                    ca:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:AB:95:DF:EB:F3:81:3E:BB:0D:6E:FC:ED:D5:4B:09:D6:A0:38:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/A0AB95DFEBF3813EBB0D6EFCEDD54B09D6A038B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.32.0/21
                IPv6:
                  2804:adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52927

    Signature Algorithm: sha256WithRSAEncryption
         a0:bc:93:78:a5:9a:8f:8a:10:8b:2b:26:d5:35:ea:6e:ce:b2:
         8c:0f:68:0a:25:2b:73:d3:b5:6b:24:23:b1:3f:68:8b:aa:3d:
         46:38:0a:3f:7a:1b:24:ca:6c:43:b5:71:d1:3d:d6:d9:a7:ed:
         ff:76:cb:bc:39:cf:a6:52:86:73:65:03:cf:db:6a:a4:c2:08:
         4c:9d:38:c4:26:e5:be:ce:fa:70:c7:d2:85:59:d0:4f:7f:23:
         b7:bb:92:12:ac:a5:19:56:03:86:64:0d:48:82:da:a8:28:79:
         c6:92:5d:bb:06:1c:08:a3:55:ae:3a:02:1b:79:d0:77:4e:ce:
         10:ab:f5:73:2b:a3:28:80:2b:5b:e9:33:03:29:1e:61:d8:b1:
         2e:32:47:7b:44:3e:ee:8b:1f:c5:fd:54:66:cc:84:71:4d:a3:
         50:36:35:63:69:08:2b:0d:55:9f:42:22:3e:5b:cd:00:85:3d:
         43:46:ac:58:0d:44:a5:f6:35:e0:ab:c1:03:0e:b5:fb:6b:ac:
         78:af:bc:08:bd:6d:df:28:ed:ab:e3:7e:c9:62:64:51:a1:83:
         f2:46:7a:16:ed:50:d2:f3:8f:f8:da:42:9d:a9:dc:51:84:76:
         ca:2c:66:60:90:90:17:93:a6:f5:ec:be:f2:f5:95:b7:8a:06:
         fb:c2:01:3c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUD++q8b+l7bDnIcXiXvXPwQ8ooeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjMyMTAzNTJaFw0yNDA1MjEyMTA4NTJaMDMxMTAvBgNV
BAMTKEEwQUI5NURGRUJGMzgxM0VCQjBENkVGQ0VERDU0QjA5RDZBMDM4QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmc//WZwDeH8TM4Y0tdvggj0C
lM+b8mRhdp/YiItVuL3quAscCUz398u0AvqF40fJpsT3mBE3RhLdCNnqyXyYiRRK
SOLOpn5VE5y9Dv+34WSIS/oBrpiIpqoZIwboTwjL0+FBH/vSybUO5Asy/Z2C7Cdi
zYnr5skgIzX9S0KJCcpfyWOAVvh5aXPgiBUZuektdOwzJTrV2JyESI0OnL+JQyDL
sfKHoG8qdWai8zK3DqxV5A3KfU/UIiAQTF1jKlWZLHLhERyZtINxKMIiSa4/HL5A
dgf7tlh7GITXqVTIKfQ1X87F94kP29s7sNpSM5P6pO5gj887c/Zt+vYhrMpzAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgq5Xf6/OBPrsN
bvzt1UsJ1qA4sDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IaWNjcjk4b0xLQldNb3FxUGpTbnRBeVZwUEJkWnBteEt5
NmlwOGl5ZW11VS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSGljY3I5OG9MS0JXTW9xcVBqU250QXlWcFBCZFpwbXhL
eTZpcDhpeWVtdVUvMC9BMEFCOTVERkVCRjM4MTNFQkIwRDZFRkNFREQ1NEIwOUQ2
QTAzOEIwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxuSAwDQQCAAIwBwMF
ACgECtwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM6/MA0GCSqGSIb3DQEBCwUA
A4IBAQCgvJN4pZqPihCLKybVNepuzrKMD2gKJStz07VrJCOxP2iLqj1GOAo/ehsk
ymxDtXHRPdbZp+3/dsu8Oc+mUoZzZQPP22qkwghMnTjEJuW+zvpwx9KFWdBPfyO3
u5ISrKUZVgOGZA1IgtqoKHnGkl27BhwIo1WuOgIbedB3Ts4Qq/VzK6MogCtb6TMD
KR5h2LEuMkd7RD7uix/F/VRmzIRxTaNQNjVjaQgrDVWfQiI+W80AhT1DRqxYDUSl
9jXgq8EDDrX7a6x4r7wIvW3fKO2r437JYmRRoYPyRnoW7VDS84/42kKdqdxRhHbK
LGZgkJAXk6b17L7y9ZW3igb7wgE8
-----END CERTIFICATE-----
Generated at Fri Jun 6 15:30:17 2025 by rpki-client