Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2AF5DBB52863A396DAB5831CD8ABE5C386E49D1D.cer
File:                     2AF5DBB52863A396DAB5831CD8ABE5C386E49D1D.cer (raw, json)
Hash identifier:          FdLVnIeyoyJ9V9KKxRpczwhveKm5DIIJUwBrhZtZUXQ=
Subject key identifier:   2A:F5:DB:B5:28:63:A3:96:DA:B5:83:1C:D8:AB:E5:C3:86:E4:9D:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       768D6A2D912C80EF2EA8C0E4A4CA951B8CE8EAA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/2AF5DBB52863A396DAB5831CD8ABE5C386E49D1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Dec 2022 17:34:39 +0000
Certificate not after:    Wed 27 Dec 2023 17:39:39 +0000
Subordinate resources:    AS: 268482
                          IP: 45.239.244.0/22
                          IP: 2804:51e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8d:6a:2d:91:2c:80:ef:2e:a8:c0:e4:a4:ca:95:1b:8c:e8:ea:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 17:34:39 2022 GMT
            Not After : Dec 27 17:39:39 2023 GMT
        Subject: CN=2AF5DBB52863A396DAB5831CD8ABE5C386E49D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:1e:38:2a:a2:36:cf:d7:5f:e7:96:8d:25:
                    e6:4b:0d:52:fb:57:b6:1c:19:08:b9:72:14:d4:5f:
                    f8:09:35:47:aa:ac:32:29:83:65:c1:a2:f2:81:ea:
                    09:49:1a:2a:53:b8:05:79:3d:f6:51:3a:4b:30:bd:
                    27:93:3b:8b:96:88:dc:d2:86:cb:97:e3:d7:c7:25:
                    60:ee:ef:c4:c3:1b:af:d8:e8:e6:3d:42:03:0b:ae:
                    b0:38:7a:8f:04:6e:3f:97:75:62:93:c9:60:83:81:
                    3d:ea:39:63:17:fa:e4:35:82:0a:94:30:79:00:9b:
                    3a:c7:fe:b2:b3:a3:a1:4c:13:b0:d2:8d:5c:e5:ac:
                    e3:55:72:b7:66:b3:bc:29:5b:39:a0:f7:9c:16:a5:
                    dc:2e:7c:16:4f:9c:8e:c1:05:58:d5:a0:31:e3:aa:
                    c2:b5:79:87:ae:2f:75:76:cf:4e:f2:2b:3c:fa:7c:
                    32:f3:69:13:0d:65:05:a9:ef:9b:8f:a9:fe:fa:b6:
                    fa:de:44:bb:00:81:7d:dd:b1:98:09:09:e8:26:d9:
                    bb:68:e0:c8:a2:a4:e8:65:1f:7c:c4:d0:ee:7e:d0:
                    1a:a5:ee:fc:a2:94:f1:ca:2e:4b:e5:96:93:8a:6d:
                    80:08:b0:0d:f6:f2:7a:7b:cd:67:1b:21:d9:aa:61:
                    cb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:F5:DB:B5:28:63:A3:96:DA:B5:83:1C:D8:AB:E5:C3:86:E4:9D:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/2AF5DBB52863A396DAB5831CD8ABE5C386E49D1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.244.0/22
                IPv6:
                  2804:51e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268482

    Signature Algorithm: sha256WithRSAEncryption
         1f:95:89:01:15:35:38:39:1c:d0:fb:d3:0c:24:e8:d7:76:4b:
         33:56:28:bd:db:cf:7a:be:9d:1d:b7:83:f8:35:9c:63:c1:c9:
         d8:b6:68:09:4c:7f:cf:dc:b9:29:19:75:b8:f7:6f:e2:68:05:
         e1:c8:bf:b3:85:c3:b5:dc:b8:b8:1a:e8:08:68:86:58:e2:b5:
         2f:32:40:3a:d5:28:19:9b:99:21:cc:a1:82:18:e0:2c:9c:ea:
         95:30:89:88:cc:16:07:88:93:03:1d:e5:3e:42:61:95:50:39:
         58:bb:12:0f:5b:77:de:cc:5b:8a:5d:e5:97:92:b8:1b:bd:65:
         8c:8a:83:14:fa:7f:ae:c1:2f:62:16:63:a8:d9:52:16:d1:75:
         41:6c:52:b8:95:36:c2:75:de:83:50:a6:50:27:9a:43:0d:25:
         a7:03:5c:9e:ed:b8:69:48:cb:e6:9b:23:26:81:b7:ae:b0:ef:
         2b:20:c8:cf:c4:20:08:bc:8c:88:ef:6c:31:f0:dc:66:df:86:
         81:55:1b:26:8e:04:e4:f0:47:37:06:e6:e5:74:2e:5a:98:2a:
         89:fd:fc:e7:b0:a7:b8:ee:03:17:6a:4a:cc:3c:f2:6a:12:4e:
         35:63:fb:f6:7c:e7:69:9f:b1:6e:e6:67:63:38:f0:cf:27:97:
         32:3e:bc:f8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUdo1qLZEsgO8uqMDkpMqVG4zo6qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMjgxNzM0MzlaFw0yMzEyMjcxNzM5MzlaMDMxMTAvBgNV
BAMTKDJBRjVEQkI1Mjg2M0EzOTZEQUI1ODMxQ0Q4QUJFNUMzODZFNDlEMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYnB44KqI2z9df55aNJeZLDVL7
V7YcGQi5chTUX/gJNUeqrDIpg2XBovKB6glJGipTuAV5PfZROkswvSeTO4uWiNzS
hsuX49fHJWDu78TDG6/Y6OY9QgMLrrA4eo8Ebj+XdWKTyWCDgT3qOWMX+uQ1ggqU
MHkAmzrH/rKzo6FME7DSjVzlrONVcrdms7wpWzmg95wWpdwufBZPnI7BBVjVoDHj
qsK1eYeuL3V2z07yKzz6fDLzaRMNZQWp75uPqf76tvreRLsAgX3dsZgJCegm2bto
4MiipOhlH3zE0O5+0Bql7vyilPHKLkvllpOKbYAIsA328np7zWcbIdmqYcthAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQq9du1KGOjltq1
gxzYq+XDhuSdHTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BTE1pWjJyRDNxdU1OenBVSm15ZXlDaE5yZVZjMldYQ0dk
eVhjOHB5OTEyWS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BTE1pWjJyRDNxdU1OenBVSm15ZXlDaE5yZVZjMldYQ0dk
eVhjOHB5OTEyWS8wLzJBRjVEQkI1Mjg2M0EzOTZEQUI1ODMxQ0Q4QUJFNUMzODZF
NDlEMUQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3v9DANBAIAAjAHAwUA
KARR4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGMIwDQYJKoZIhvcNAQELBQAD
ggEBAB+ViQEVNTg5HND70wwk6Nd2SzNWKL3bz3q+nR23g/g1nGPBydi2aAlMf8/c
uSkZdbj3b+JoBeHIv7OFw7XcuLga6AhohljitS8yQDrVKBmbmSHMoYIY4Cyc6pUw
iYjMFgeIkwMd5T5CYZVQOVi7Eg9bd97MW4pd5ZeSuBu9ZYyKgxT6f67BL2IWY6jZ
UhbRdUFsUriVNsJ13oNQplAnmkMNJacDXJ7tuGlIy+abIyaBt66w7ysgyM/EIAi8
jIjvbDHw3GbfhoFVGyaOBOTwRzcG5uV0LlqYKon9/Oewp7juAxdqSsw88moSTjVj
+/Z852mfsW7mZ2M48M8nlzI+vPg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org