Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.cer
File:                     9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.cer (raw, json)
Hash identifier:          PHTzTp5bgiXlaCnIHjA7KIijLxmCl1SpSzZnJc3+9l8=
Subject key identifier:   9A:F4:CE:ED:37:1E:AA:FF:F9:2E:8E:45:A5:53:7E:65:10:B1:EF:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15514369BDEDCFE2F66950D890E0F814B75B2882
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Jul 2022 07:37:39 +0000
Certificate not after:    Fri 21 Jul 2023 07:42:39 +0000
Subordinate resources:    AS: 263665
                          IP: 45.165.20.0/22
                          IP: 45.227.188.0/22
                          IP: 131.161.108.0/22
                          IP: 131.255.156.0/22
                          IP: 138.255.172.0/22
                          IP: 168.196.20.0/22
                          IP: 170.150.112.0/22
                          IP: 170.150.204.0/22
                          IP: 191.241.32.0/21
                          IP: 2804:1134::/32
                          IP: 2804:343c::/32
                          IP: 2804:47c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:43:69:bd:ed:cf:e2:f6:69:50:d8:90:e0:f8:14:b7:5b:28:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 07:37:39 2022 GMT
            Not After : Jul 21 07:42:39 2023 GMT
        Subject: CN=9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:df:92:14:be:5d:c1:f8:51:9b:76:f2:11:
                    e6:9a:da:81:af:a0:c1:61:7c:34:13:cc:82:31:11:
                    c8:03:ad:9e:00:18:23:ec:a6:81:5b:8c:8d:af:07:
                    a5:fd:32:54:9d:14:de:06:49:ca:68:2c:0c:6f:2b:
                    47:fe:bb:34:2e:6a:ee:37:8d:61:9c:c1:3c:4b:65:
                    04:b9:ea:7a:8b:a7:77:98:b9:f6:7a:cc:28:25:8b:
                    cc:ba:1e:61:8b:a1:38:9a:73:78:3f:30:23:3f:b2:
                    d5:db:41:86:3c:a7:8f:e3:70:a9:1e:7c:d5:46:0d:
                    14:93:a9:3e:aa:b9:ee:a1:85:1a:9d:aa:e0:a3:94:
                    04:e1:f7:90:de:98:c3:b4:9b:1d:a0:ea:6f:c6:26:
                    dc:c0:4e:e1:b6:82:8d:a9:b9:5b:89:80:c1:ab:3d:
                    75:96:35:40:00:30:73:cf:0d:12:39:b3:9b:af:98:
                    43:8a:ac:5f:1d:06:65:f3:f3:74:e1:e6:f3:95:fe:
                    ec:d9:d2:5f:54:8c:e8:99:e6:20:db:27:ae:4c:13:
                    ba:c0:a5:9b:3b:07:5c:0d:b5:3e:1c:c3:d1:95:78:
                    bf:3d:4d:d2:d9:c2:98:60:f3:3c:6c:e8:47:52:df:
                    36:6a:ec:23:86:9a:71:52:24:e7:57:59:43:1b:0b:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:F4:CE:ED:37:1E:AA:FF:F9:2E:8E:45:A5:53:7E:65:10:B1:EF:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22
                  45.227.188.0/22
                  131.161.108.0/22
                  131.255.156.0/22
                  138.255.172.0/22
                  168.196.20.0/22
                  170.150.112.0/22
                  170.150.204.0/22
                  191.241.32.0/21
                IPv6:
                  2804:1134::/32
                  2804:343c::/32
                  2804:47c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263665

    Signature Algorithm: sha256WithRSAEncryption
         2d:d6:d8:bb:d1:f0:b8:4f:e8:29:c4:aa:d3:ab:b3:3b:d4:ef:
         df:06:b2:dc:12:fa:e8:c1:79:73:8f:07:ca:ca:0a:c5:c5:41:
         8d:a6:bd:e3:f6:66:f8:46:4d:02:e2:91:67:79:93:7f:bb:60:
         5e:10:9d:cf:3e:71:ce:ec:4b:f4:c8:72:70:9a:20:24:94:4d:
         1a:9b:c6:84:c7:3f:af:2a:13:0e:92:42:4b:75:60:f4:ec:d0:
         95:99:fc:52:7c:13:90:f2:fa:69:0e:68:23:92:42:a5:7d:78:
         c4:20:ec:fe:af:e9:73:d7:c6:4a:be:ec:71:82:89:17:97:6e:
         79:1f:4b:b3:86:94:88:7e:aa:ab:0f:71:9f:c1:73:9a:43:e6:
         cb:8b:46:8d:26:f2:4b:e1:4a:3d:e5:65:82:97:65:5e:1a:26:
         f5:c0:55:aa:06:2f:44:e9:c1:c3:eb:3b:da:1e:de:66:86:e6:
         f1:28:c8:41:26:cc:c7:7c:17:d1:84:d8:a0:15:ec:4a:75:9f:
         29:7a:7e:a0:4b:b0:16:02:6f:5b:ab:93:24:71:52:f9:3a:75:
         6a:16:4e:75:c0:b9:77:2e:a0:e1:cd:16:90:12:b4:00:b5:7e:
         c9:d8:45:58:4e:bc:da:f6:6c:a2:9a:4f:21:f6:b2:48:78:2a:
         59:3a:d5:18
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUFVFDab3tz+L2aVDYkOD4FLdbKIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MjIwNzM3MzlaFw0yMzA3MjEwNzQyMzlaMDMxMTAvBgNV
BAMTKDlBRjRDRUVEMzcxRUFBRkZGOTJFOEU0NUE1NTM3RTY1MTBCMUVGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18t+SFL5dwfhRm3byEeaa2oGv
oMFhfDQTzIIxEcgDrZ4AGCPspoFbjI2vB6X9MlSdFN4GScpoLAxvK0f+uzQuau43
jWGcwTxLZQS56nqLp3eYufZ6zCgli8y6HmGLoTiac3g/MCM/stXbQYY8p4/jcKke
fNVGDRSTqT6que6hhRqdquCjlATh95DemMO0mx2g6m/GJtzATuG2go2puVuJgMGr
PXWWNUAAMHPPDRI5s5uvmEOKrF8dBmXz83Th5vOV/uzZ0l9UjOiZ5iDbJ65ME7rA
pZs7B1wNtT4cw9GVeL89TdLZwphg8zxs6EdS3zZq7COGmnFSJOdXWUMbC3YDAgMB
AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSa9M7tNx6q//ku
jkWlU35lELHvajAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85TTdaUUxVenlOS3YzeVNFM0ZDTkpDS3Vtd0tOQ3RjelNU
WXBGN0g4TWdyZi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85TTdaUUxVenlOS3YzeVNFM0ZDTkpDS3Vtd0tOQ3RjelNU
WXBGN0g4TWdyZi8wLzlBRjRDRUVEMzcxRUFBRkZGOTJFOEU0NUE1NTM3RTY1MTBC
MUVGNkEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBsBggrBgEFBQcBBwEB/wRdMFswPAQCAAEwNgMEAi2lFAMEAi3jvAMEAoOh
bAMEAoP/nAMEAor/rAMEAqjEFAMEAqqWcAMEAqqWzAMEA7/xIDAbBAIAAjAVAwUA
KAQRNAMFACgENDwDBQAoBEfAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQF8TAN
BgkqhkiG9w0BAQsFAAOCAQEALdbYu9HwuE/oKcSq06uzO9Tv3way3BL66MF5c48H
ysoKxcVBjaa94/Zm+EZNAuKRZ3mTf7tgXhCdzz5xzuxL9MhycJogJJRNGpvGhMc/
ryoTDpJCS3Vg9OzQlZn8UnwTkPL6aQ5oI5JCpX14xCDs/q/pc9fGSr7scYKJF5du
eR9Ls4aUiH6qqw9xn8FzmkPmy4tGjSbyS+FKPeVlgpdlXhom9cBVqgYvROnBw+s7
2h7eZobm8SjIQSbMx3wX0YTYoBXsSnWfKXp+oEuwFgJvW6uTJHFS+Tp1ahZOdcC5
dy6g4c0WkBK0ALV+ydhFWE682vZsoppPIfaySHgqWTrVGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org