Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5AF75AA32562E3BC2A9B6CB4EC28C14CEB04E702.cer
File:                     5AF75AA32562E3BC2A9B6CB4EC28C14CEB04E702.cer (raw, json)
Hash identifier:          QvNeoxAMbD0G8u9pKNHHMlDbXIel8LfkkWKoq8YQUPE=
Subject key identifier:   5A:F7:5A:A3:25:62:E3:BC:2A:9B:6C:B4:EC:28:C1:4C:EB:04:E7:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E176EDB8299B8A048E952E72015EFC0D24B23A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/5AF75AA32562E3BC2A9B6CB4EC28C14CEB04E702.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Feb 2023 14:46:03 +0000
Certificate not after:    Wed 07 Feb 2024 14:51:03 +0000
Subordinate resources:    AS: 270751
                          IP: 177.12.220.0/22
                          IP: 2804:70d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:6e:db:82:99:b8:a0:48:e9:52:e7:20:15:ef:c0:d2:4b:23:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 14:46:03 2023 GMT
            Not After : Feb  7 14:51:03 2024 GMT
        Subject: CN=5AF75AA32562E3BC2A9B6CB4EC28C14CEB04E702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:a1:25:47:46:da:3a:6b:e1:e0:76:da:87:
                    7a:eb:c8:37:54:39:b7:2c:14:fe:4d:4f:81:08:0d:
                    5d:6e:3f:07:20:62:41:56:2c:4d:6b:ce:29:c9:49:
                    b8:26:ac:23:d6:6b:46:fb:e7:d4:f2:12:55:eb:25:
                    f9:0c:74:b2:b9:bc:e6:f6:e3:d6:fe:86:8a:f4:01:
                    f4:e8:7c:6a:d1:67:34:81:c5:a0:f5:e7:ad:38:1f:
                    fb:82:15:1a:d3:dd:1f:fb:e9:0f:3d:94:dc:f4:9e:
                    f7:47:6d:12:fd:82:99:7f:a5:b1:b4:4d:32:e9:5d:
                    25:89:5c:f2:d2:28:39:b1:62:c8:c1:a7:9f:9f:94:
                    f3:1c:95:16:e7:a6:6d:67:c2:e3:72:bb:2a:94:90:
                    55:be:91:98:6e:d0:f8:c4:23:6f:dc:44:b4:fe:df:
                    8c:77:b8:a2:9b:52:fe:99:d0:d4:34:76:f4:68:d4:
                    f3:82:cb:2d:83:d6:8c:35:26:e5:33:5e:a3:cf:67:
                    84:8c:6e:0a:f7:e9:01:7b:11:42:b4:14:11:44:2c:
                    60:9b:da:9e:88:c8:3d:75:17:87:93:98:03:80:e4:
                    b7:eb:28:c7:5e:d0:af:18:52:d8:71:48:6d:31:40:
                    52:52:4d:3f:8a:82:7d:9b:0c:7b:62:88:44:29:6f:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:F7:5A:A3:25:62:E3:BC:2A:9B:6C:B4:EC:28:C1:4C:EB:04:E7:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/5AF75AA32562E3BC2A9B6CB4EC28C14CEB04E702.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.220.0/22
                IPv6:
                  2804:70d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270751

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:d7:58:27:59:f9:92:fa:fb:cc:36:81:8d:08:d4:4b:6a:
         22:00:17:56:6b:31:77:a3:8f:ea:7c:10:94:94:c7:68:f2:a9:
         12:d6:bc:a1:c8:78:27:00:40:fc:97:48:9f:f0:68:a8:70:37:
         18:df:5a:88:13:99:95:3d:61:de:1d:f6:c2:2f:39:d6:02:c9:
         07:b9:ce:48:e6:78:c6:e9:aa:e7:ba:63:1d:d4:25:1b:44:9f:
         51:bc:ce:34:0f:b2:e5:ce:a0:41:44:04:d9:f3:73:11:60:d7:
         9a:9b:6d:c5:54:89:7a:7d:5a:7e:3b:0f:c7:e0:cd:7b:bc:dc:
         8b:20:03:6f:70:88:4d:6f:13:57:0b:33:08:6c:4d:bb:0f:ed:
         04:72:ea:d8:f0:ae:f2:bb:68:3e:e9:f9:ea:5c:ce:78:1d:06:
         85:a4:27:41:e3:55:24:09:57:f4:3e:31:20:47:23:e9:ae:b1:
         ae:ee:05:3e:da:cc:af:c8:d8:ab:c4:18:1e:06:34:22:75:5a:
         1e:50:6d:4d:de:76:46:af:7e:55:88:bd:74:1c:c0:f9:49:0c:
         53:75:2e:23:5a:aa:cd:0c:69:2b:fe:dd:b7:4b:41:9c:d3:b1:
         8c:2d:f6:7d:97:9a:b7:24:31:57:5f:c1:5f:b7:1f:a7:a5:6b:
         36:53:f6:e9
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUDhdu24KZuKBI6VLnIBXvwNJLI6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMDgxNDQ2MDNaFw0yNDAyMDcxNDUxMDNaMDMxMTAvBgNV
BAMTKDVBRjc1QUEzMjU2MkUzQkMyQTlCNkNCNEVDMjhDMTRDRUIwNEU3MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qKElR0baOmvh4Hbah3rryDdU
ObcsFP5NT4EIDV1uPwcgYkFWLE1rzinJSbgmrCPWa0b759TyElXrJfkMdLK5vOb2
49b+hor0AfTofGrRZzSBxaD15604H/uCFRrT3R/76Q89lNz0nvdHbRL9gpl/pbG0
TTLpXSWJXPLSKDmxYsjBp5+flPMclRbnpm1nwuNyuyqUkFW+kZhu0PjEI2/cRLT+
34x3uKKbUv6Z0NQ0dvRo1POCyy2D1ow1JuUzXqPPZ4SMbgr36QF7EUK0FBFELGCb
2p6IyD11F4eTmAOA5LfrKMde0K8YUthxSG0xQFJSTT+Kgn2bDHtiiEQpb3B1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRa91qjJWLjvCqb
bLTsKMFM6wTnAjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CUm5EWUJRNkVwdWRITERtMXgyMjZ1aW5zVDlwbzU0eHpI
ZkN5ajRHM0x0ai8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CUm5EWUJRNkVwdWRITERtMXgyMjZ1aW5zVDlwbzU0eHpI
ZkN5ajRHM0x0ai8wLzVBRjc1QUEzMjU2MkUzQkMyQTlCNkNCNEVDMjhDMTRDRUIw
NEU3MDIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArEM3DANBAIAAjAHAwUA
KARw1DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIZ8wDQYJKoZIhvcNAQELBQAD
ggEBAKIx11gnWfmS+vvMNoGNCNRLaiIAF1ZrMXejj+p8EJSUx2jyqRLWvKHIeCcA
QPyXSJ/waKhwNxjfWogTmZU9Yd4d9sIvOdYCyQe5zkjmeMbpque6Yx3UJRtEn1G8
zjQPsuXOoEFEBNnzcxFg15qbbcVUiXp9Wn47D8fgzXu83IsgA29wiE1vE1cLMwhs
TbsP7QRy6tjwrvK7aD7p+epczngdBoWkJ0HjVSQJV/Q+MSBHI+musa7uBT7azK/I
2KvEGB4GNCJ1Wh5QbU3edkavflWIvXQcwPlJDFN1LiNaqs0MaSv+3bdLQZzTsYwt
9n2XmrckMVdfwV+3H6elazZT9uk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org