Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2AEF273F72959913CE8FA207C275A637A737498D.cer
File:                     2AEF273F72959913CE8FA207C275A637A737498D.cer (raw, json)
Hash identifier:          kh3u4HXFphZQGv4oSJt/fHP6UuYfdcXrzeiMUmitPwc=
Subject key identifier:   2A:EF:27:3F:72:95:99:13:CE:8F:A2:07:C2:75:A6:37:A7:37:49:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23B295BA2C2B85B436FECD341B63349890CA6B4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/2AEF273F72959913CE8FA207C275A637A737498D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Apr 2023 20:29:02 +0000
Certificate not after:    Tue 23 Apr 2024 20:34:02 +0000
Subordinate resources:    AS: 270811
                          IP: 200.219.20.0/22
                          IP: 2804:71c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:95:ba:2c:2b:85:b4:36:fe:cd:34:1b:63:34:98:90:ca:6b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 25 20:29:02 2023 GMT
            Not After : Apr 23 20:34:02 2024 GMT
        Subject: CN=2AEF273F72959913CE8FA207C275A637A737498D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:fb:e3:d9:d1:28:96:f0:d6:3b:5a:12:4f:
                    9a:f2:1b:d9:10:ac:54:19:f5:6d:0a:4a:a7:23:6e:
                    fd:1b:e8:75:75:4a:87:74:d2:9d:ec:60:e4:aa:9c:
                    1a:4e:fa:34:11:41:d6:73:0f:b8:4e:e4:36:ad:c8:
                    27:1f:16:ce:57:49:13:e5:71:74:7c:42:e8:1f:eb:
                    97:81:8e:a5:26:77:81:78:7a:da:15:93:99:0e:aa:
                    96:02:c8:94:28:69:8a:11:a1:ee:41:07:96:f0:85:
                    dd:68:77:37:1c:f0:f4:ae:44:9b:02:7e:5d:29:d5:
                    74:61:8e:a3:84:41:e5:65:a6:26:f7:39:ce:e8:31:
                    80:0a:7d:da:a7:12:fe:de:2c:b8:dc:d6:6a:e3:ab:
                    df:37:95:6b:41:90:54:eb:11:12:03:4c:2e:7d:bb:
                    90:f6:2f:a5:32:c4:cd:25:a5:4d:03:5d:05:eb:53:
                    d1:a8:88:2a:6a:e2:88:44:14:f4:aa:45:f2:c4:37:
                    28:1e:dc:4f:ab:ae:eb:79:9f:b7:4d:81:3a:cd:6d:
                    92:c5:6b:1f:9c:fc:03:d2:3f:42:da:39:f8:ed:27:
                    83:dc:05:c8:79:06:e8:91:55:72:46:1d:61:c4:0f:
                    0f:5b:58:25:12:a7:b3:5b:e2:36:39:1d:67:f3:73:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:EF:27:3F:72:95:99:13:CE:8F:A2:07:C2:75:A6:37:A7:37:49:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/2AEF273F72959913CE8FA207C275A637A737498D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/22
                IPv6:
                  2804:71c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270811

    Signature Algorithm: sha256WithRSAEncryption
         76:cf:85:bb:4f:3d:0e:92:58:a4:9b:36:6f:f5:3b:81:e9:84:
         df:41:cc:6a:b3:09:dd:12:9e:96:ba:9b:34:a2:80:23:2d:04:
         8f:8f:1c:5b:30:32:dc:5c:ae:91:d6:21:f6:1d:91:f1:27:7f:
         3d:12:dc:fc:d7:c9:df:5b:9e:d9:78:00:bf:5b:43:cf:e0:47:
         30:99:ad:64:2e:c7:d5:0f:5d:93:75:80:0c:dc:97:4e:98:99:
         35:9e:a4:cb:0f:7f:f7:9f:53:88:22:1b:b1:3a:43:86:27:cf:
         87:f9:e1:64:ea:f1:5b:a2:58:8b:5f:56:06:55:24:82:8d:bf:
         e5:e5:48:91:7b:da:2a:60:f0:df:82:11:9f:08:a1:6e:f3:5b:
         f7:a7:5b:e2:75:9d:21:d5:4b:c3:f3:64:ff:3e:43:76:8c:3f:
         bc:f8:c2:fb:31:83:ed:a7:d0:a4:02:c0:1e:c1:86:a1:08:a1:
         03:f2:fc:16:fe:ce:c1:96:dd:37:ca:61:38:59:a9:40:24:48:
         ba:aa:2d:b9:ad:6c:79:13:3e:98:d8:be:74:53:1e:59:a9:30:
         86:cb:1c:38:25:1c:13:17:84:3e:1c:64:c3:3e:1c:37:06:7c:
         98:a4:67:ee:92:a5:c6:d1:8c:7a:3b:3d:63:e4:1d:a9:76:13:
         aa:83:dc:85
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUI7KVuiwrhbQ2/s00G2M0mJDKa0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MjUyMDI5MDJaFw0yNDA0MjMyMDM0MDJaMDMxMTAvBgNV
BAMTKDJBRUYyNzNGNzI5NTk5MTNDRThGQTIwN0MyNzVBNjM3QTczNzQ5OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQvvj2dEolvDWO1oST5ryG9kQ
rFQZ9W0KSqcjbv0b6HV1Sod00p3sYOSqnBpO+jQRQdZzD7hO5DatyCcfFs5XSRPl
cXR8Qugf65eBjqUmd4F4etoVk5kOqpYCyJQoaYoRoe5BB5bwhd1odzcc8PSuRJsC
fl0p1XRhjqOEQeVlpib3Oc7oMYAKfdqnEv7eLLjc1mrjq983lWtBkFTrERIDTC59
u5D2L6UyxM0lpU0DXQXrU9GoiCpq4ohEFPSqRfLENyge3E+rrut5n7dNgTrNbZLF
ax+c/APSP0LaOfjtJ4PcBch5BuiRVXJGHWHEDw9bWCUSp7Nb4jY5HWfzc6R5AgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQq7yc/cpWZE86P
ogfCdaY3pzdJjTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9jVG5BcWJxTEpUVVlSNUpXanh0SzVnaFVIZ0hxNkJYdDVv
ckJrRVBBZHI2LzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL2NUbkFxYnFMSlRVWVI1SldqeHRLNWdoVUhnSHE2Qlh0NW9y
QmtFUEFkcjYvMC8yQUVGMjczRjcyOTU5OTEzQ0U4RkEyMDdDMjc1QTYzN0E3Mzc0
OThELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALI2xQwDQQCAAIwBwMFACgE
ccgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCHbMA0GCSqGSIb3DQEBCwUAA4IB
AQB2z4W7Tz0OklikmzZv9TuB6YTfQcxqswndEp6Wups0ooAjLQSPjxxbMDLcXK6R
1iH2HZHxJ389Etz818nfW57ZeAC/W0PP4Ecwma1kLsfVD12TdYAM3JdOmJk1nqTL
D3/3n1OIIhuxOkOGJ8+H+eFk6vFboliLX1YGVSSCjb/l5UiRe9oqYPDfghGfCKFu
81v3p1vidZ0h1UvD82T/PkN2jD+8+ML7MYPtp9CkAsAewYahCKED8vwW/s7Blt03
ymE4WalAJEi6qi25rWx5Ez6Y2L50Ux5ZqTCGyxw4JRwTF4Q+HGTDPhw3BnyYpGfu
kqXG0Yx6Oz1j5B2pdhOqg9yF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org