Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer
File:                     7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer (raw, json)
Hash identifier:          inY/4qFUX+6WXXLDe3qjb5NbN6AGQ1zPBX7H/dXXlRQ=
Subject key identifier:   7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3642B6147F73D365215BB7DDA946E3F4AD70CB24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 18:40:07 +0000
Certificate not after:    Fri 25 Oct 2024 18:45:07 +0000
Subordinate resources:    AS: 271008
                          IP: 170.254.120.0/22
                          IP: 2804:74dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:42:b6:14:7f:73:d3:65:21:5b:b7:dd:a9:46:e3:f4:ad:70:cb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 18:40:07 2023 GMT
            Not After : Oct 25 18:45:07 2024 GMT
        Subject: CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:90:40:c1:ee:53:74:d7:d6:c5:a9:56:48:
                    34:fa:b9:25:b7:62:8c:62:7f:a2:76:98:5f:47:86:
                    e1:0d:b2:56:3f:bb:81:1d:0b:43:9f:8e:aa:9f:4a:
                    aa:40:a5:a1:62:06:54:2b:f5:7c:e3:a7:06:ce:51:
                    74:e5:09:25:3b:00:f4:ad:aa:e4:45:6d:fc:31:60:
                    07:be:43:ba:02:35:0e:d2:40:65:98:9f:0f:2d:13:
                    4a:18:60:b7:9e:1c:d9:a2:6d:f4:52:31:f0:bf:e3:
                    f4:ee:c7:dc:c7:85:cf:3a:8e:c8:f0:5a:66:c0:78:
                    43:f7:9d:6f:26:14:6e:fe:26:2e:3f:e6:fc:4a:84:
                    64:ec:0d:28:75:72:de:ff:67:9a:ec:3d:4d:78:fb:
                    fe:c8:15:72:04:5e:e9:54:bf:f2:93:67:a4:73:e0:
                    45:10:7c:a4:25:a7:2b:34:63:cc:4b:e4:9f:c9:4b:
                    7f:8a:3e:95:20:cf:47:91:8f:1f:fd:d9:2f:8d:49:
                    22:2f:85:52:68:aa:2b:41:68:d0:27:21:8d:ae:4b:
                    a2:e3:9f:30:50:45:1a:5f:83:11:72:b5:a9:f2:e7:
                    1c:35:cf:89:ae:28:20:c0:ad:fe:85:56:e6:cd:93:
                    6e:4d:e9:bc:c7:eb:21:e0:2e:f6:5c:87:14:7a:b7:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.120.0/22
                IPv6:
                  2804:74dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271008

    Signature Algorithm: sha256WithRSAEncryption
         8c:1b:cb:8a:44:39:c9:2d:1a:61:74:a8:bd:42:97:b6:38:d5:
         56:d0:db:d0:1c:80:20:b3:2d:69:28:f2:47:f8:78:7d:64:39:
         52:83:ed:de:24:af:12:02:fb:01:7f:ab:ab:d3:2c:23:fa:38:
         21:e3:b7:12:64:48:69:26:f5:c4:1d:e3:9c:06:99:1e:ff:8e:
         9b:89:fa:c5:67:ff:56:20:3a:77:7b:6e:81:7c:e9:96:7f:65:
         ff:f5:d5:53:18:ff:09:e0:f8:e4:6e:2a:d1:26:dc:25:6b:1e:
         54:0d:d9:82:1a:d5:49:ce:ca:ed:ca:31:91:63:55:39:2e:ba:
         c8:91:11:c9:47:6f:5b:5e:01:29:82:42:e2:7a:d3:9c:1f:66:
         f0:bb:e2:59:fa:83:fa:28:d9:b2:01:51:1c:0b:07:ba:2c:f7:
         77:f2:77:d2:db:bf:61:e1:88:99:ff:af:d1:10:d8:26:82:b2:
         cb:89:e8:0f:bf:d2:0e:97:db:6b:bb:2d:d1:60:d7:5b:f6:9c:
         9a:16:fc:31:98:83:aa:09:ac:2a:2c:11:ec:34:10:19:93:c7:
         48:07:cd:f9:01:69:5a:bd:53:03:8d:8a:d0:45:12:e9:4d:ef:
         c8:00:2a:0c:3a:8b:54:4a:56:2c:6b:05:16:a1:f1:5b:1d:5a:
         11:b1:01:46
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNkK2FH9z02UhW7fdqUbj9K1wyyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjcxODQwMDdaFw0yNDEwMjUxODQ1MDdaMDMxMTAvBgNV
BAMTKDdBRkU0NjlGRkYwRkM2MEMwRTVFODgyNEUwOTVERTM1OTg1QzdDRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUa5BAwe5TdNfWxalWSDT6uSW3
Yoxif6J2mF9HhuENslY/u4EdC0OfjqqfSqpApaFiBlQr9XzjpwbOUXTlCSU7APSt
quRFbfwxYAe+Q7oCNQ7SQGWYnw8tE0oYYLeeHNmibfRSMfC/4/Tux9zHhc86jsjw
WmbAeEP3nW8mFG7+Ji4/5vxKhGTsDSh1ct7/Z5rsPU14+/7IFXIEXulUv/KTZ6Rz
4EUQfKQlpys0Y8xL5J/JS3+KPpUgz0eRjx/92S+NSSIvhVJoqitBaNAnIY2uS6Lj
nzBQRRpfgxFytany5xw1z4muKCDArf6FVubNk25N6bzH6yHgLvZchxR6t7djAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6/kaf/w/GDA5e
iCTgld41mFx80DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HOXJFUWhWamlzSzhRMjdyMTN6WkpLMzJzWFE0Q1JGQlBW
UzhLTmhaQmlXQi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRzlyRVFoVmppc0s4UTI3cjEzelpKSzMyc1hRNENSRkJQ
VlM4S05oWkJpV0IvMC83QUZFNDY5RkZGMEZDNjBDMEU1RTg4MjRFMDk1REUzNTk4
NUM3Q0QwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKq/ngwDQQCAAIwBwMF
ACgEdNwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCKgMA0GCSqGSIb3DQEBCwUA
A4IBAQCMG8uKRDnJLRphdKi9Qpe2ONVW0NvQHIAgsy1pKPJH+Hh9ZDlSg+3eJK8S
AvsBf6ur0ywj+jgh47cSZEhpJvXEHeOcBpke/46bifrFZ/9WIDp3e26BfOmWf2X/
9dVTGP8J4PjkbirRJtwlax5UDdmCGtVJzsrtyjGRY1U5LrrIkRHJR29bXgEpgkLi
etOcH2bwu+JZ+oP6KNmyAVEcCwe6LPd38nfS279h4YiZ/6/RENgmgrLLiegPv9IO
l9truy3RYNdb9pyaFvwxmIOqCawqLBHsNBAZk8dIB835AWlavVMDjYrQRRLpTe/I
ACoMOotUSlYsawUWofFbHVoRsQFG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org