Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5AFA41A8592D32A94E9304A1B0987851355DDD12.cer
File:                     5AFA41A8592D32A94E9304A1B0987851355DDD12.cer (raw, json)
Hash identifier:          2wkD79WxEdA5Mqsf3qV5nuVu2V6io0vrGZaLgHHDwos=
Subject key identifier:   5A:FA:41:A8:59:2D:32:A9:4E:93:04:A1:B0:98:78:51:35:5D:DD:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BA0E29EDA609713980FEFF9B7A6EEADDB33A2F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/5AFA41A8592D32A94E9304A1B0987851355DDD12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 May 2022 19:25:21 +0000
Certificate not after:    Mon 15 May 2023 19:30:21 +0000
Subordinate resources:    AS: 268348
                          IP: 45.239.0.0/22
                          IP: 2804:4fc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a0:e2:9e:da:60:97:13:98:0f:ef:f9:b7:a6:ee:ad:db:33:a2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 19:25:21 2022 GMT
            Not After : May 15 19:30:21 2023 GMT
        Subject: CN=5AFA41A8592D32A94E9304A1B0987851355DDD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:d6:58:f4:e9:9f:0d:57:44:0d:8a:f7:1a:
                    b7:59:4c:28:bd:ce:2a:0f:0f:41:41:67:5d:8a:a9:
                    b5:5a:92:fb:b5:e1:0a:11:6d:0c:bc:69:5a:c2:de:
                    be:67:51:d1:6f:18:76:aa:62:02:9a:6a:9d:09:48:
                    ca:e8:a9:39:c3:ba:8d:ba:41:7b:9d:51:8d:7c:03:
                    6f:11:3a:51:91:e8:f6:36:e1:1f:30:e0:e5:a7:e4:
                    5c:1c:57:1a:41:94:dd:b3:b8:43:3e:6e:69:64:a4:
                    af:65:1f:c7:a4:8b:b3:02:72:82:5c:a4:bf:9b:3b:
                    94:1c:de:11:06:02:d7:52:01:d4:40:87:91:f8:dd:
                    12:c9:1c:16:09:26:64:ff:8a:1a:66:ef:ac:df:3d:
                    49:00:ec:68:90:0e:2a:29:ef:83:e4:08:09:37:6e:
                    3b:90:f6:1a:bb:2e:17:ae:06:1c:ef:50:b3:ed:29:
                    a2:a2:d2:41:a6:bc:74:43:46:01:83:ad:00:e8:ff:
                    58:9e:0a:d7:45:a9:48:87:e5:c6:3b:b8:a6:78:ae:
                    68:28:48:57:4b:33:08:18:5a:5c:42:7d:61:8c:d5:
                    d2:89:35:eb:23:04:6a:48:d9:36:98:04:39:fb:7d:
                    9d:49:a4:e4:3c:d9:d4:cf:bf:f8:04:36:19:3a:a5:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:FA:41:A8:59:2D:32:A9:4E:93:04:A1:B0:98:78:51:35:5D:DD:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/5AFA41A8592D32A94E9304A1B0987851355DDD12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.0.0/22
                IPv6:
                  2804:4fc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268348

    Signature Algorithm: sha256WithRSAEncryption
         78:6c:b8:0b:b4:16:2e:30:04:8e:5b:da:41:d5:78:da:77:58:
         04:cf:a0:45:cc:5e:7a:80:6b:a3:f5:86:84:20:c0:a6:a1:16:
         0b:ca:e1:1e:aa:66:3d:cd:0d:d4:74:7a:5b:fc:3b:94:78:24:
         84:4a:a9:b9:2e:63:0b:c2:85:cd:8a:d5:b2:7b:4d:17:4a:3b:
         9c:38:fd:bc:66:cc:79:c0:78:34:eb:3a:64:7c:27:d9:31:f3:
         39:82:65:5b:6a:66:b1:9d:ef:b4:7e:21:1a:0b:89:3f:06:31:
         2d:2c:ae:eb:87:87:fd:66:73:40:8f:9e:12:08:85:9f:08:09:
         cc:1f:46:0f:f1:f0:2d:6b:d6:00:bb:e8:3b:ab:5d:74:62:fd:
         69:fa:7b:13:ca:cd:b0:65:ba:ea:6f:98:3d:46:62:83:d2:d0:
         49:b1:81:41:d3:2e:80:03:9d:ac:31:ad:1a:21:37:01:bb:91:
         1b:c5:2f:72:aa:ed:e2:43:23:7e:54:77:b8:af:b7:7a:82:67:
         1b:d6:56:27:3e:97:5e:5b:77:8c:bb:c5:75:36:8d:d0:3d:47:
         cd:80:08:f2:b8:88:1a:57:ee:b2:e4:b0:3a:32:a8:b9:78:5b:
         c4:00:bf:04:39:59:3d:76:14:d1:fb:4c:22:87:07:7b:f4:44:
         cc:25:a8:de
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUO6DintpglxOYD+/5t6burdszovcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA1MTYxOTI1MjFaFw0yMzA1MTUxOTMwMjFaMDMxMTAvBgNV
BAMTKDVBRkE0MUE4NTkyRDMyQTk0RTkzMDRBMUIwOTg3ODUxMzU1REREMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5NZY9OmfDVdEDYr3GrdZTCi9
zioPD0FBZ12KqbVakvu14QoRbQy8aVrC3r5nUdFvGHaqYgKaap0JSMroqTnDuo26
QXudUY18A28ROlGR6PY24R8w4OWn5FwcVxpBlN2zuEM+bmlkpK9lH8eki7MCcoJc
pL+bO5Qc3hEGAtdSAdRAh5H43RLJHBYJJmT/ihpm76zfPUkA7GiQDiop74PkCAk3
bjuQ9hq7LheuBhzvULPtKaKi0kGmvHRDRgGDrQDo/1ieCtdFqUiH5cY7uKZ4rmgo
SFdLMwgYWlxCfWGM1dKJNesjBGpI2TaYBDn7fZ1JpOQ82dTPv/gENhk6pdQNAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRa+kGoWS0yqU6T
BKGwmHhRNV3dEjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85U1dxU1lZQXNGa3NOcGNyaGdERHQ1bzljMmlZOGpvZTVp
R1R1cDdDTVV4VC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85U1dxU1lZQXNGa3NOcGNyaGdERHQ1bzljMmlZOGpvZTVp
R1R1cDdDTVV4VC8wLzVBRkE0MUE4NTkyRDMyQTk0RTkzMDRBMUIwOTg3ODUxMzU1
REREMTIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3vADANBAIAAjAHAwUA
KARPxDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGDwwDQYJKoZIhvcNAQELBQAD
ggEBAHhsuAu0Fi4wBI5b2kHVeNp3WATPoEXMXnqAa6P1hoQgwKahFgvK4R6qZj3N
DdR0elv8O5R4JIRKqbkuYwvChc2K1bJ7TRdKO5w4/bxmzHnAeDTrOmR8J9kx8zmC
ZVtqZrGd77R+IRoLiT8GMS0sruuHh/1mc0CPnhIIhZ8ICcwfRg/x8C1r1gC76Dur
XXRi/Wn6exPKzbBluupvmD1GYoPS0EmxgUHTLoADnawxrRohNwG7kRvFL3Kq7eJD
I35Ud7ivt3qCZxvWVic+l15bd4y7xXU2jdA9R82ACPK4iBpX7rLksDoyqLl4W8QA
vwQ5WT12FNH7TCKHB3v0RMwlqN4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org