Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.cer
File:                     31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.cer (raw, json)
Hash identifier:          FSq9yH5MzOlh/04HIvucOdYstweCvvDfCFF+1mhNaos=
Subject key identifier:   31:AE:16:F2:8B:CA:EE:B3:D5:1A:3C:45:A3:18:CE:9A:75:FA:6E:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22698BECEB14AD48ABDE26180D859EB209B6F762
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 23:03:41 +0000
Certificate not after:    Tue 21 Jan 2025 23:08:41 +0000
Subordinate resources:    AS: 273664
                          IP: 45.179.252.0/23
                          IP: 2804:8a5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:69:8b:ec:eb:14:ad:48:ab:de:26:18:0d:85:9e:b2:09:b6:f7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 23:03:41 2024 GMT
            Not After : Jan 21 23:08:41 2025 GMT
        Subject: CN=31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:34:f5:0b:86:cc:32:a0:d9:71:8a:49:83:
                    30:61:e6:0f:5e:a7:48:18:5b:0a:98:50:2d:ae:2c:
                    a6:22:7a:ea:47:c8:e8:e2:bd:54:29:d4:e9:13:42:
                    23:c5:89:03:06:3c:29:81:88:59:e6:db:ed:ba:67:
                    91:36:b5:8c:37:30:06:a1:f8:2f:12:14:d3:04:d1:
                    18:8d:f0:1b:a2:94:41:7e:27:a3:50:cc:ae:2b:32:
                    9c:f5:ef:26:a3:ae:02:31:ce:34:a2:88:26:28:87:
                    4b:a7:27:5f:57:bb:7d:b2:f0:a6:d3:e5:3d:de:ce:
                    37:80:dd:e7:aa:a2:3a:35:17:8f:22:fd:dc:de:9e:
                    d5:30:82:67:38:34:c0:65:ff:4d:34:4b:13:fd:ce:
                    0d:bd:fc:15:98:7f:2e:9f:ad:a9:40:eb:7b:4c:68:
                    58:8a:f4:d4:e1:d1:19:4c:93:72:05:09:e0:10:53:
                    59:35:1f:88:69:fa:7f:ca:81:82:7f:ed:08:0e:97:
                    36:59:fd:31:99:60:d9:98:46:c9:3a:f8:45:64:36:
                    70:5e:72:8c:63:55:ab:70:5e:4a:e4:b3:3d:90:05:
                    31:fb:bc:81:5e:4e:01:0f:5f:1e:ba:b0:89:a5:c7:
                    52:9d:f2:51:1a:69:f0:1f:2d:b3:98:bf:af:1f:f3:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:AE:16:F2:8B:CA:EE:B3:D5:1A:3C:45:A3:18:CE:9A:75:FA:6E:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.252.0/23
                IPv6:
                  2804:8a5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273664

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:02:f7:c9:f6:61:9b:ce:ea:9c:c5:ef:71:d2:e8:2b:0d:
         5d:c5:1e:75:10:e8:c9:d3:de:b0:6b:18:09:6b:22:58:0d:77:
         67:da:e1:0e:c0:45:2a:ec:e6:62:cf:d0:80:14:2b:69:4e:6f:
         ed:d3:b8:8e:f8:f7:de:5b:af:50:8b:2c:83:60:27:f5:72:7b:
         23:56:94:62:b6:72:d4:32:c9:4e:33:af:87:d9:64:b2:37:d0:
         c7:44:6e:95:e4:38:9f:13:26:29:0d:2d:e1:29:29:33:55:3a:
         1a:93:51:59:39:8a:c9:9d:ab:83:4b:c1:79:be:fd:56:20:59:
         16:fa:90:b7:b0:51:a9:45:85:13:2a:8d:2e:9e:2a:dc:db:70:
         8b:2b:63:7b:27:05:25:02:d9:84:18:3e:c4:db:07:ee:15:f1:
         ad:b7:00:17:7b:93:f7:36:45:f5:6d:6b:d9:b7:e7:0a:fd:05:
         4d:09:74:71:70:a9:1f:3f:41:1a:8e:8b:93:4b:e3:46:bb:1b:
         ad:e0:2d:d3:5e:73:99:b8:ed:3c:fc:69:08:82:f2:d5:75:7e:
         8a:a8:72:60:7e:b9:33:65:50:02:4f:fc:1b:73:dd:f1:9e:c4:
         2f:32:29:ea:20:56:1c:e1:ba:c7:72:8d:2a:f5:9f:c7:96:c3:
         85:08:9c:b7
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUImmL7OsUrUir3iYYDYWesgm292IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjMyMzAzNDFaFw0yNTAxMjEyMzA4NDFaMDMxMTAvBgNV
BAMTKDMxQUUxNkYyOEJDQUVFQjNENTFBM0M0NUEzMThDRTlBNzVGQTZFNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0TT1C4bMMqDZcYpJgzBh5g9e
p0gYWwqYUC2uLKYieupHyOjivVQp1OkTQiPFiQMGPCmBiFnm2+26Z5E2tYw3MAah
+C8SFNME0RiN8BuilEF+J6NQzK4rMpz17yajrgIxzjSiiCYoh0unJ19Xu32y8KbT
5T3ezjeA3eeqojo1F48i/dzentUwgmc4NMBl/000SxP9zg29/BWYfy6fralA63tM
aFiK9NTh0RlMk3IFCeAQU1k1H4hp+n/KgYJ/7QgOlzZZ/TGZYNmYRsk6+EVkNnBe
coxjVatwXkrksz2QBTH7vIFeTgEPXx66sImlx1Kd8lEaafAfLbOYv68f88dfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxrhbyi8rus9Ua
PEWjGM6adfpuaTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85ZUxmeVh3MTE0Q2VBOTlXR1JocmFpOGUxRzQ3N0dXYUdQ
d045UmQ4UXNGci8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOWVMZnlYdzExNENlQTk5V0dSaHJhaThlMUc0NzdHV2FH
UHdOOVJkOFFzRnIvMC8zMUFFMTZGMjhCQ0FFRUIzRDUxQTNDNDVBMzE4Q0U5QTc1
RkE2RTY5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAEts/wwDQQCAAIwBwMF
ACgEilwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBC0AMA0GCSqGSIb3DQEBCwUA
A4IBAQBMvgL3yfZhm87qnMXvcdLoKw1dxR51EOjJ096waxgJayJYDXdn2uEOwEUq
7OZiz9CAFCtpTm/t07iO+PfeW69QiyyDYCf1cnsjVpRitnLUMslOM6+H2WSyN9DH
RG6V5DifEyYpDS3hKSkzVToak1FZOYrJnauDS8F5vv1WIFkW+pC3sFGpRYUTKo0u
nirc23CLK2N7JwUlAtmEGD7E2wfuFfGttwAXe5P3NkX1bWvZt+cK/QVNCXRxcKkf
P0EajouTS+NGuxut4C3TXnOZuO08/GkIgvLVdX6KqHJgfrkzZVACT/wbc93xnsQv
MinqIFYc4brHco0q9Z/HlsOFCJy3
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org