Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer
File:                     75AFE6C31884960EEC2F047B34E904416ED711ED.cer (raw, json)
Hash identifier:          nVooXIOY50T47WyS0JaerWgeikDKzVMUuY222RxS4nY=
Subject key identifier:   75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F79AD57FB1ABBDC7852778B7F09CE11E3293713
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 18:52:11 +0000
Certificate not after:    Wed 19 Mar 2025 18:57:11 +0000
Subordinate resources:    AS: 263989
                          IP: 138.255.224.0/22
                          IP: 2804:28f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:79:ad:57:fb:1a:bb:dc:78:52:77:8b:7f:09:ce:11:e3:29:37:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 18:52:11 2024 GMT
            Not After : Mar 19 18:57:11 2025 GMT
        Subject: CN=75AFE6C31884960EEC2F047B34E904416ED711ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:86:08:c1:87:44:a0:de:fa:5d:d3:51:43:
                    1e:63:b6:54:87:7c:db:ae:a4:7d:98:c5:42:01:56:
                    f2:6b:f9:ff:e6:37:58:37:dc:0b:64:38:78:ae:dc:
                    53:c2:82:27:0a:9b:cc:d4:ee:2f:0a:9e:01:43:50:
                    a2:a7:12:08:04:13:54:d2:36:98:0d:3b:a9:e0:66:
                    5b:d9:59:9d:be:3d:b7:74:bc:51:d9:a7:da:e3:d5:
                    9c:cb:38:46:60:d4:52:ab:f7:29:df:40:02:21:46:
                    60:f2:aa:2b:95:d2:4d:09:e1:25:26:d1:f1:1d:79:
                    64:7b:ed:8e:2b:0d:a5:9a:17:63:37:63:74:eb:f0:
                    0a:24:bc:7d:2f:d1:09:1b:13:2f:84:f4:97:61:4c:
                    79:c9:ea:df:b6:4a:2f:fd:e9:a6:29:3e:11:05:c1:
                    c8:19:78:2e:bd:08:e6:e0:15:d3:ae:35:58:e3:01:
                    49:9e:84:52:de:6a:ff:d4:f6:42:72:d1:a3:e0:da:
                    1b:cc:8d:9e:65:5c:79:e8:cb:22:f9:a3:9d:59:27:
                    42:99:2b:77:d1:ff:eb:06:cd:bf:d7:d3:56:3c:59:
                    c8:8c:68:0f:d2:38:a6:b2:62:37:33:01:87:47:62:
                    2a:f7:2e:e9:7a:c2:e2:96:a1:30:bc:ef:cd:ba:bd:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.224.0/22
                IPv6:
                  2804:28f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263989

    Signature Algorithm: sha256WithRSAEncryption
         ac:19:c9:95:ee:2d:4b:51:cb:bf:fc:cb:e5:97:da:eb:a7:09:
         b2:4d:25:79:27:cc:b2:ef:b9:da:b4:b1:63:87:2a:c6:68:e5:
         2f:ee:fe:2e:9b:a1:f5:8e:80:17:92:86:fc:1f:1f:94:af:23:
         18:49:b0:0c:94:30:f1:76:05:96:94:52:6b:d6:a2:59:2f:d7:
         49:df:e9:11:ad:bd:91:e2:eb:e0:ae:c6:71:4f:3f:8d:b5:bc:
         42:a7:be:f7:1d:0e:5a:21:2c:da:20:d1:94:1a:1c:bb:a7:28:
         45:cb:54:2d:cc:58:bd:c5:9e:66:4b:ec:99:74:92:f6:26:bd:
         8a:ff:c8:70:40:8d:b7:13:aa:04:98:e3:79:c1:35:61:fc:18:
         4a:01:3f:ab:f4:c6:f6:71:ff:44:f3:6a:3b:8f:6d:de:76:8a:
         e6:b3:ba:59:4e:47:db:81:c6:09:a2:e5:75:40:d8:1a:7d:ed:
         df:e4:3e:95:96:7b:72:15:5d:c1:cc:8d:4b:e3:7f:96:6d:9e:
         ca:ca:1a:ca:a5:87:f0:c5:58:fc:c8:cc:8a:d3:ad:2b:bf:ba:
         42:2d:2c:81:e7:a0:6f:fb:14:cd:46:dd:88:33:85:36:a3:66:
         74:f3:46:db:bd:a9:29:72:46:de:b9:1f:50:53:8b:be:df:5a:
         4e:79:cf:3a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUL3mtV/sau9x4UneLfwnOEeMpNxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjAxODUyMTFaFw0yNTAzMTkxODU3MTFaMDMxMTAvBgNV
BAMTKDc1QUZFNkMzMTg4NDk2MEVFQzJGMDQ3QjM0RTkwNDQxNkVENzExRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM54YIwYdEoN76XdNRQx5jtlSH
fNuupH2YxUIBVvJr+f/mN1g33AtkOHiu3FPCgicKm8zU7i8KngFDUKKnEggEE1TS
NpgNO6ngZlvZWZ2+Pbd0vFHZp9rj1ZzLOEZg1FKr9ynfQAIhRmDyqiuV0k0J4SUm
0fEdeWR77Y4rDaWaF2M3Y3Tr8AokvH0v0QkbEy+E9JdhTHnJ6t+2Si/96aYpPhEF
wcgZeC69CObgFdOuNVjjAUmehFLeav/U9kJy0aPg2hvMjZ5lXHnoyyL5o51ZJ0KZ
K3fR/+sGzb/X01Y8WciMaA/SOKayYjczAYdHYir3Lul6wuKWoTC87826vdjfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR1r+bDGISWDuwv
BHs06QRBbtcR7TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zNnpqSmk5N3h2R1hZRUoyV3NBcnRnOE53dE11NzJyUlNE
Z2thUnZBUlI4by8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMzZ6akppOTd4dkdYWUVKMldzQXJ0ZzhOd3RNdTcyclJT
RGdrYVJ2QVJSOG8vMC83NUFGRTZDMzE4ODQ5NjBFRUMyRjA0N0IzNEU5MDQ0MTZF
RDcxMUVELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKK/+AwDQQCAAIwBwMF
ACgEKPQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAc1MA0GCSqGSIb3DQEBCwUA
A4IBAQCsGcmV7i1LUcu//Mvll9rrpwmyTSV5J8yy77natLFjhyrGaOUv7v4um6H1
joAXkob8Hx+UryMYSbAMlDDxdgWWlFJr1qJZL9dJ3+kRrb2R4uvgrsZxTz+NtbxC
p773HQ5aISzaINGUGhy7pyhFy1QtzFi9xZ5mS+yZdJL2Jr2K/8hwQI23E6oEmON5
wTVh/BhKAT+r9Mb2cf9E82o7j23edorms7pZTkfbgcYJouV1QNgafe3f5D6Vlnty
FV3BzI1L43+WbZ7KyhrKpYfwxVj8yMyK060rv7pCLSyB56Bv+xTNRt2IM4U2o2Z0
80bbvakpckbeuR9QU4u+31pOec86
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org