Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.cer
File:                     7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.cer (raw, json)
Hash identifier:          uxbQ3C80TOKfIpQ5RC6iVJDMj3Uj4qIOhyu6jxSNHCE=
Subject key identifier:   7A:AF:CF:B9:DE:74:62:BB:49:F0:74:8B:83:00:04:3D:3B:89:5D:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D189F4092E4FB683AEDCBF282E853D6EFAD2758
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 14:24:40 +0000
Certificate not after:    Mon 15 Jul 2024 14:29:40 +0000
Subordinate resources:    AS: 267662
                          IP: 45.224.164.0/22
                          IP: 2804:44f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:18:9f:40:92:e4:fb:68:3a:ed:cb:f2:82:e8:53:d6:ef:ad:27:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 17 14:24:40 2023 GMT
            Not After : Jul 15 14:29:40 2024 GMT
        Subject: CN=7AAFCFB9DE7462BB49F0748B8300043D3B895DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:46:a4:ca:d3:98:dc:7f:f5:ec:55:f5:d4:
                    50:83:7a:bd:07:0b:8d:c8:07:87:b4:7b:f8:1a:81:
                    73:43:f4:b8:5a:03:39:d7:ee:ef:f3:26:17:5f:f5:
                    82:b4:8c:89:dc:b7:1f:c2:0e:84:29:1a:db:cc:57:
                    6d:da:96:89:01:3e:b7:91:af:69:ad:89:68:5a:78:
                    ff:08:47:af:90:48:e7:66:6c:91:86:87:cc:b4:20:
                    a5:69:a7:52:e7:3b:61:ab:a1:83:2b:72:43:f8:bd:
                    a1:bb:84:85:75:f0:59:f4:26:e9:0a:af:b6:7d:b3:
                    94:5d:d1:39:e5:99:b2:02:43:d2:3b:46:ae:1d:3d:
                    1e:9d:45:11:09:ea:3c:0a:de:fc:5e:6d:28:21:59:
                    39:81:37:06:b9:97:8f:9d:68:23:2b:cf:e0:3b:8e:
                    bc:bb:70:f8:f6:3c:e3:c8:ac:85:9b:27:45:8e:8d:
                    5b:4c:8a:e7:01:b4:5d:57:39:56:69:15:2b:c4:94:
                    34:e8:85:db:10:c9:2d:27:6a:66:ea:e1:15:d5:19:
                    1d:86:8e:a7:b4:0a:e9:f8:64:16:1d:43:1a:82:91:
                    f0:b3:0c:0f:50:2b:c6:3e:e9:e0:fe:b7:f6:78:2c:
                    3d:e4:8e:89:28:0c:61:67:cf:61:80:d6:d7:18:2b:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:AF:CF:B9:DE:74:62:BB:49:F0:74:8B:83:00:04:3D:3B:89:5D:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.164.0/22
                IPv6:
                  2804:44f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267662

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:0e:ca:44:b4:5e:be:67:b7:e8:cb:79:06:e5:d2:66:7c:
         d9:a1:d0:01:e7:7b:b0:d4:f8:dd:cf:16:d1:b1:25:51:fd:a8:
         ba:36:7a:d8:e3:f0:c7:37:7b:a6:7e:5a:98:62:f8:a7:1d:29:
         77:56:88:35:8c:71:a6:0e:63:4e:09:b5:be:2b:43:80:bc:ac:
         1d:7d:cc:da:c7:36:d3:99:bf:16:67:95:b0:95:cc:80:be:99:
         4b:d0:c8:42:b0:83:6a:ee:d4:0e:66:38:44:9d:a0:49:ce:10:
         68:23:83:61:8d:00:6d:3b:4f:bb:46:41:ce:3a:80:32:f3:06:
         f4:6e:25:27:bb:5e:f1:5e:f9:e9:d5:20:9d:ca:b7:94:8b:76:
         6b:ce:39:54:a2:7f:95:7d:ef:7d:56:9b:82:7d:56:f4:91:33:
         b1:f9:74:a4:24:e1:cf:cb:c0:49:bd:7e:cd:e2:9f:bb:81:15:
         47:4b:38:cc:61:ad:20:59:a8:39:3d:65:04:62:55:02:5a:02:
         f1:b4:a3:5d:b9:b4:31:02:bd:66:ad:f6:45:78:ae:38:7e:5d:
         4c:90:ce:68:09:0c:15:fb:e2:47:d9:b9:b4:fb:3e:ae:b6:0b:
         29:7f:ff:5f:63:e6:9e:cb:a1:de:0e:35:be:a9:17:6b:5f:8a:
         45:4f:9f:72
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUDRifQJLk+2g67cvyguhT1u+tJ1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTcxNDI0NDBaFw0yNDA3MTUxNDI5NDBaMDMxMTAvBgNV
BAMTKDdBQUZDRkI5REU3NDYyQkI0OUYwNzQ4QjgzMDAwNDNEM0I4OTVEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNEakytOY3H/17FX11FCDer0H
C43IB4e0e/gagXND9LhaAznX7u/zJhdf9YK0jInctx/CDoQpGtvMV23alokBPreR
r2mtiWhaeP8IR6+QSOdmbJGGh8y0IKVpp1LnO2GroYMrckP4vaG7hIV18Fn0JukK
r7Z9s5Rd0TnlmbICQ9I7Rq4dPR6dRREJ6jwK3vxebSghWTmBNwa5l4+daCMrz+A7
jry7cPj2POPIrIWbJ0WOjVtMiucBtF1XOVZpFSvElDTohdsQyS0nambq4RXVGR2G
jqe0Cun4ZBYdQxqCkfCzDA9QK8Y+6eD+t/Z4LD3kjokoDGFnz2GA1tcYK/m/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6r8+53nRiu0nw
dIuDAAQ9O4ldyjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TVZnZUw5aGpqTU11YkJhMVdZVFRGWG9GNjNaeEJHSzQy
WVJTWGFuTFVvTS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNU1WZ2VMOWhqak1NdWJCYTFXWVRURlhvRjYzWnhCR0s0
MllSU1hhbkxVb00vMC83QUFGQ0ZCOURFNzQ2MkJCNDlGMDc0OEI4MzAwMDQzRDNC
ODk1RENBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt4KQwDQQCAAIwBwMF
ACgERPAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBWOMA0GCSqGSIb3DQEBCwUA
A4IBAQBHvw7KRLRevme36Mt5BuXSZnzZodAB53uw1PjdzxbRsSVR/ai6NnrY4/DH
N3umflqYYvinHSl3Vog1jHGmDmNOCbW+K0OAvKwdfczaxzbTmb8WZ5WwlcyAvplL
0MhCsINq7tQOZjhEnaBJzhBoI4NhjQBtO0+7RkHOOoAy8wb0biUnu17xXvnp1SCd
yreUi3ZrzjlUon+Vfe99VpuCfVb0kTOx+XSkJOHPy8BJvX7N4p+7gRVHSzjMYa0g
Wag5PWUEYlUCWgLxtKNdubQxAr1mrfZFeK44fl1MkM5oCQwV++JH2bm0+z6utgsp
f/9fY+aey6HeDjW+qRdrX4pFT59y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org