Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.cer
File:                     2A3395C823AA389CE6DCA952BCF1B97769252F8F.cer (raw, json)
Hash identifier:          /hJXYdETcHPrnruO9f6coxEivB0U9hWT4TFDSMVp3JA=
Subject key identifier:   2A:33:95:C8:23:AA:38:9C:E6:DC:A9:52:BC:F1:B9:77:69:25:2F:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E1DF62077568DBDF0F2A55192A28AD270BAA747
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Feb 2023 18:39:56 +0000
Certificate not after:    Fri 16 Feb 2024 18:44:56 +0000
Subordinate resources:    AS: 270595
                          IP: 177.152.108.0/22
                          IP: 2804:6e68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:f6:20:77:56:8d:bd:f0:f2:a5:51:92:a2:8a:d2:70:ba:a7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 17 18:39:56 2023 GMT
            Not After : Feb 16 18:44:56 2024 GMT
        Subject: CN=2A3395C823AA389CE6DCA952BCF1B97769252F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:85:0c:68:96:7c:14:3f:a0:0f:8f:be:92:
                    cb:36:d3:82:77:ac:6e:59:95:27:96:03:56:eb:22:
                    78:d7:8c:ec:dc:11:37:90:a7:c0:73:ac:b0:72:a2:
                    ff:ad:4b:cc:dd:63:6b:80:3e:3a:40:a5:ba:4f:cd:
                    43:af:04:67:0b:94:25:54:17:63:11:93:e6:d7:4d:
                    14:8c:ef:17:a0:04:dc:44:f4:79:ea:e5:0c:93:27:
                    21:c7:49:db:6f:c5:23:7c:c2:20:81:9d:0c:c1:ea:
                    3c:19:34:84:09:fe:f0:49:ec:d4:12:e8:26:4b:99:
                    d8:c2:8e:81:24:99:bc:01:a4:43:59:2b:6f:2a:20:
                    3a:b6:f7:e9:36:57:ea:89:d1:de:a4:77:71:38:6f:
                    c6:0e:3c:73:d8:98:62:b6:be:a3:83:1c:30:d8:a3:
                    0b:c7:a4:07:ea:23:e8:84:c4:f1:6f:7c:7c:f8:ff:
                    c4:cf:b7:a8:29:55:d5:f7:c5:4d:08:7f:64:2e:e2:
                    f3:7f:dd:61:e6:11:6e:c8:e6:fa:ac:31:25:f0:2d:
                    88:dc:b3:20:64:6d:5f:46:88:01:d9:f7:18:60:d2:
                    82:fa:14:1c:7d:bc:a2:88:3a:71:8b:86:d2:9e:39:
                    3b:1d:0a:b5:0e:82:a6:2f:23:da:63:78:67:03:93:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:33:95:C8:23:AA:38:9C:E6:DC:A9:52:BC:F1:B9:77:69:25:2F:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.108.0/22
                IPv6:
                  2804:6e68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270595

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:1a:de:97:88:b7:b6:b0:f3:cd:e7:ae:94:6a:b9:09:e2:
         41:ad:16:8e:ba:db:18:49:28:b0:0f:db:51:68:64:91:06:48:
         30:51:78:50:59:b8:a4:17:c4:9a:73:42:54:36:5b:3f:34:ad:
         ef:4c:e0:cc:8b:3c:59:87:2c:8b:11:e6:b2:90:63:b2:24:a1:
         04:c9:a7:35:27:af:e8:46:78:41:a7:fe:ac:67:be:f4:ae:85:
         9d:d5:f2:5e:10:d2:7a:86:b2:7c:13:af:f7:9c:b8:31:ae:50:
         4d:4e:f1:ed:ed:ab:9e:11:8b:47:40:64:4a:a3:50:f0:96:de:
         a1:0c:55:e0:7d:f0:03:65:ac:f1:06:39:e0:f3:96:d5:82:a9:
         4b:6c:fe:75:e9:20:39:46:c8:c5:64:af:27:e5:ef:d6:ac:3b:
         fc:35:7d:f2:77:c2:3e:32:bf:8a:b1:71:98:2e:37:35:6f:3e:
         50:76:e9:78:d5:c8:f0:9e:d3:95:fb:66:9a:ff:4e:12:a9:d8:
         51:cc:2f:be:0f:02:3c:98:cb:68:2e:90:e2:50:7d:5f:6a:aa:
         00:26:36:76:d2:d1:61:f0:5c:76:b1:1d:15:4e:85:5a:0d:a3:
         14:c8:d9:08:df:e4:7d:a5:77:cd:de:3f:bc:25:30:3a:0c:5d:
         24:56:6e:b1
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUTh32IHdWjb3w8qVRkqKK0nC6p0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMTcxODM5NTZaFw0yNDAyMTYxODQ0NTZaMDMxMTAvBgNV
BAMTKDJBMzM5NUM4MjNBQTM4OUNFNkRDQTk1MkJDRjFCOTc3NjkyNTJGOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaIUMaJZ8FD+gD4++kss204J3
rG5ZlSeWA1brInjXjOzcETeQp8BzrLByov+tS8zdY2uAPjpApbpPzUOvBGcLlCVU
F2MRk+bXTRSM7xegBNxE9Hnq5QyTJyHHSdtvxSN8wiCBnQzB6jwZNIQJ/vBJ7NQS
6CZLmdjCjoEkmbwBpENZK28qIDq29+k2V+qJ0d6kd3E4b8YOPHPYmGK2vqODHDDY
owvHpAfqI+iExPFvfHz4/8TPt6gpVdX3xU0If2Qu4vN/3WHmEW7I5vqsMSXwLYjc
syBkbV9GiAHZ9xhg0oL6FBx9vKKIOnGLhtKeOTsdCrUOgqYvI9pjeGcDk5sbAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqM5XII6o4nObc
qVK88bl3aSUvjzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EaFkzWUNEWDM3eDl2TFRHU000eG04cFNxbkY1Z1VaNTh3
dTVRSEpDcVJUOC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EaFkzWUNEWDM3eDl2TFRHU000eG04cFNxbkY1Z1VaNTh3
dTVRSEpDcVJUOC8wLzJBMzM5NUM4MjNBQTM4OUNFNkRDQTk1MkJDRjFCOTc3Njky
NTJGOEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArGYbDANBAIAAjAHAwUA
KARuaDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIQMwDQYJKoZIhvcNAQELBQAD
ggEBAFp1Gt6XiLe2sPPN566UarkJ4kGtFo662xhJKLAP21FoZJEGSDBReFBZuKQX
xJpzQlQ2Wz80re9M4MyLPFmHLIsR5rKQY7IkoQTJpzUnr+hGeEGn/qxnvvSuhZ3V
8l4Q0nqGsnwTr/ecuDGuUE1O8e3tq54Ri0dAZEqjUPCW3qEMVeB98ANlrPEGOeDz
ltWCqUts/nXpIDlGyMVkryfl79asO/w1ffJ3wj4yv4qxcZguNzVvPlB26XjVyPCe
05X7Zpr/ThKp2FHML74PAjyYy2gukOJQfV9qqgAmNnbS0WHwXHaxHRVOhVoNoxTI
2Qjf5H2ld83eP7wlMDoMXSRWbrE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org