Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.cer
File:                     14AF8D7325C9E34937575EE5488F2AD3A95F048B.cer (raw, json)
Hash identifier:          XNXxoMNJMlZ6/lflqGG+uNhG6p9H8g2Ju5CzeytrNTo=
Subject key identifier:   14:AF:8D:73:25:C9:E3:49:37:57:5E:E5:48:8F:2A:D3:A9:5F:04:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       462C9D5F741C5E5AC191AE5421C76B9F97E4CDC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 12:18:23 +0000
Certificate not after:    Tue 07 Jan 2025 12:23:23 +0000
Subordinate resources:    AS: 264386
                          IP: 45.6.240.0/22
                          IP: 131.108.172.0/22
                          IP: 168.197.80.0/22
                          IP: 2804:1db0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2c:9d:5f:74:1c:5e:5a:c1:91:ae:54:21:c7:6b:9f:97:e4:cd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 12:18:23 2024 GMT
            Not After : Jan  7 12:23:23 2025 GMT
        Subject: CN=14AF8D7325C9E34937575EE5488F2AD3A95F048B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:6c:a7:2f:f0:d5:f6:26:49:b9:b6:f2:ab:
                    27:36:a3:99:a1:80:a3:e3:86:a5:f5:9b:56:18:0b:
                    37:6f:06:94:6c:52:59:90:40:14:e5:95:57:69:8a:
                    88:53:db:a3:38:c8:46:1d:07:17:a6:77:50:f0:ca:
                    35:91:62:89:a7:64:02:ae:42:f6:f2:f0:8c:b1:ba:
                    0d:58:f1:0f:a9:d0:dd:7d:db:54:03:74:6f:64:40:
                    ee:1f:55:b3:8a:78:6c:0c:cc:b7:8e:60:8f:69:a9:
                    61:70:bd:49:00:b0:d4:ee:09:c1:33:5c:85:15:ad:
                    df:5e:59:43:6a:52:f8:cd:85:27:a3:21:70:04:3c:
                    1b:3c:b5:c4:c1:38:21:11:00:60:01:8d:3c:80:89:
                    53:70:6c:f9:5c:b4:23:4f:67:ba:c1:11:3e:da:66:
                    60:f4:cc:78:3e:7e:08:d9:eb:21:4d:1e:27:a8:b6:
                    ec:f0:f4:99:a3:f0:c3:b9:e2:c0:b8:30:8e:f7:c6:
                    dd:58:db:b3:6b:b0:ae:5e:26:1d:6a:77:af:0d:52:
                    8b:ff:04:29:ea:ac:f6:1e:ac:19:e6:15:0e:d0:76:
                    47:ed:cb:2e:28:96:40:fe:ed:44:58:17:51:4f:55:
                    f1:18:24:c8:b5:17:fa:2f:ab:49:bb:50:38:7d:70:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:AF:8D:73:25:C9:E3:49:37:57:5E:E5:48:8F:2A:D3:A9:5F:04:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.240.0/22
                  131.108.172.0/22
                  168.197.80.0/22
                IPv6:
                  2804:1db0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264386

    Signature Algorithm: sha256WithRSAEncryption
         4b:1f:e2:af:d8:3b:66:65:50:57:12:ff:b1:08:fd:d0:0e:61:
         99:b5:8f:e3:45:55:c4:53:4d:e3:9c:cc:53:3d:0c:b4:87:b9:
         cc:f7:02:ce:9f:ac:af:a7:60:57:44:67:fc:3a:9c:0a:a7:16:
         e7:e3:b6:61:68:f7:2b:19:74:dd:59:c9:71:88:ca:ce:c6:e7:
         26:fb:c0:45:d8:58:06:d5:6c:db:00:a8:32:f6:bf:fe:b1:26:
         16:55:ce:09:13:d6:e5:d3:dc:94:d3:0c:1f:bc:9e:0a:b1:4b:
         bf:24:f6:eb:05:83:ee:08:c1:a9:54:14:12:ba:71:f1:08:fa:
         af:0c:b1:2e:83:f7:71:c9:71:15:00:4a:05:1d:87:37:64:68:
         2a:8c:52:48:b3:72:8b:d2:4e:34:6d:18:58:63:3d:25:38:75:
         8c:58:10:a5:b2:c9:46:b9:79:95:76:e4:02:20:39:2b:24:a9:
         9f:74:b3:f3:b9:4c:a0:36:d3:2c:38:8e:c6:f1:02:2d:9d:49:
         60:a4:ae:ad:43:cf:da:25:49:64:29:8f:9c:69:2f:00:16:19:
         14:2c:d7:2d:f3:2b:22:25:71:5d:00:d7:70:21:f6:39:dd:db:
         a1:07:88:87:66:db:11:03:3a:19:34:27:5f:ea:13:55:21:23:
         b0:67:85:c5
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIURiydX3QcXlrBka5UIcdrn5fkzcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDkxMjE4MjNaFw0yNTAxMDcxMjIzMjNaMDMxMTAvBgNV
BAMTKDE0QUY4RDczMjVDOUUzNDkzNzU3NUVFNTQ4OEYyQUQzQTk1RjA0OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98mynL/DV9iZJubbyqyc2o5mh
gKPjhqX1m1YYCzdvBpRsUlmQQBTllVdpiohT26M4yEYdBxemd1DwyjWRYomnZAKu
Qvby8Iyxug1Y8Q+p0N1921QDdG9kQO4fVbOKeGwMzLeOYI9pqWFwvUkAsNTuCcEz
XIUVrd9eWUNqUvjNhSejIXAEPBs8tcTBOCERAGABjTyAiVNwbPlctCNPZ7rBET7a
ZmD0zHg+fgjZ6yFNHieotuzw9Jmj8MO54sC4MI73xt1Y27NrsK5eJh1qd68NUov/
BCnqrPYerBnmFQ7Qdkftyy4olkD+7URYF1FPVfEYJMi1F/ovq0m7UDh9cBMNAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUr41zJcnjSTdX
XuVIjyrTqV8EizAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EQzJIa3FSQnRaUVBGcW5Hck1Ga0RaTEI1MlUxd3lEazho
RHplQWVuTHpqYi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4
aER6ZUFlbkx6amIvMC8xNEFGOEQ3MzI1QzlFMzQ5Mzc1NzVFRTU0ODhGMkFEM0E5
NUYwNDhCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAItBvADBAKDbKwDBAKo
xVAwDQQCAAIwBwMFACgEHbAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAjCMA0G
CSqGSIb3DQEBCwUAA4IBAQBLH+Kv2DtmZVBXEv+xCP3QDmGZtY/jRVXEU03jnMxT
PQy0h7nM9wLOn6yvp2BXRGf8OpwKpxbn47ZhaPcrGXTdWclxiMrOxucm+8BF2FgG
1WzbAKgy9r/+sSYWVc4JE9bl09yU0wwfvJ4KsUu/JPbrBYPuCMGpVBQSunHxCPqv
DLEug/dxyXEVAEoFHYc3ZGgqjFJIs3KL0k40bRhYYz0lOHWMWBClsslGuXmVduQC
IDkrJKmfdLPzuUygNtMsOI7G8QItnUlgpK6tQ8/aJUlkKY+caS8AFhkULNct8ysi
JXFdANdwIfY53duhB4iHZtsRAzoZNCdf6hNVISOwZ4XF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org