Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A033AE7F2D3B83456C2C388DC35AFD51B93EB4FC.cer
File:                     A033AE7F2D3B83456C2C388DC35AFD51B93EB4FC.cer (raw, json)
Hash identifier:          78ih8IBZr7e9Sw9MR4/PiucBHwqAgjAsHeJ7SRUOcjw=
Subject key identifier:   A0:33:AE:7F:2D:3B:83:45:6C:2C:38:8D:C3:5A:FD:51:B9:3E:B4:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E29AF56C20BC3B6C19A2A8B11670C42B6D7582A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/A033AE7F2D3B83456C2C388DC35AFD51B93EB4FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Mar 2023 12:41:31 +0000
Certificate not after:    Thu 28 Mar 2024 12:46:31 +0000
Subordinate resources:    AS: 268385
                          IP: 45.239.180.0/22
                          IP: 2804:5060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:29:af:56:c2:0b:c3:b6:c1:9a:2a:8b:11:67:0c:42:b6:d7:58:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 12:41:31 2023 GMT
            Not After : Mar 28 12:46:31 2024 GMT
        Subject: CN=A033AE7F2D3B83456C2C388DC35AFD51B93EB4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:b1:20:3b:1c:40:a1:65:b9:ca:a8:90:fd:
                    57:28:be:a4:68:31:06:d0:b9:9e:68:ec:0b:b8:84:
                    bd:b9:e5:ca:a3:25:5a:39:8a:7d:63:44:0e:c2:ee:
                    47:94:19:0f:28:2c:86:7f:1b:71:39:0c:29:08:31:
                    31:3f:dc:91:05:26:2e:60:55:91:c2:68:43:06:4d:
                    57:57:bb:f7:36:c5:da:8c:e9:69:bf:a2:5b:fe:1a:
                    90:c2:76:7a:3a:ea:d5:a2:9c:5d:9d:69:ac:1a:04:
                    31:d1:de:93:82:90:e2:69:c1:c0:c3:69:76:6b:e1:
                    d8:8f:14:3d:2c:6b:cf:6f:d9:b0:b6:25:2d:81:09:
                    75:d6:d0:ab:e4:80:f5:55:c4:e9:1a:51:9b:10:06:
                    76:f6:3c:bc:ce:88:b0:21:62:1a:f7:fc:18:70:53:
                    02:80:b2:3d:ab:33:33:db:a6:04:17:a3:21:cb:2b:
                    bb:1e:27:4e:cf:73:a2:ee:9e:29:44:c3:82:50:56:
                    02:92:f0:dc:34:01:5d:d2:12:a4:1a:f8:a0:35:9f:
                    6f:d5:80:ea:1c:2c:de:a2:56:ed:cd:84:55:31:60:
                    59:9a:4a:31:5f:1f:3f:c5:d3:71:4b:86:50:08:a6:
                    ba:d4:bb:a0:30:32:a1:26:91:42:1d:92:2a:75:e3:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:33:AE:7F:2D:3B:83:45:6C:2C:38:8D:C3:5A:FD:51:B9:3E:B4:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/A033AE7F2D3B83456C2C388DC35AFD51B93EB4FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.180.0/22
                IPv6:
                  2804:5060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268385

    Signature Algorithm: sha256WithRSAEncryption
         5b:0e:7e:1d:23:72:7c:ec:1f:20:e8:89:ec:98:b3:ed:6b:a2:
         37:86:a2:ac:ff:78:a8:53:12:25:4c:9b:7c:f4:6b:5d:f6:9a:
         30:15:7c:90:8c:df:5d:c6:ff:50:89:3a:33:e6:d7:30:c1:2d:
         0a:51:f3:bd:68:51:63:e6:ee:de:f8:62:82:9e:92:00:49:e5:
         97:7c:b4:b3:55:6e:08:7f:71:f0:83:cf:74:61:9a:ce:ad:95:
         45:3f:dd:16:f1:60:42:fc:ca:d4:ff:2d:62:6c:7f:a8:fd:da:
         1d:f5:a0:0d:39:99:25:3a:af:fa:b4:49:70:3d:2d:7f:90:5a:
         c7:f7:3e:a6:0b:34:1c:95:a2:19:75:ac:be:cf:95:cf:72:c7:
         ce:61:70:46:0f:dd:1c:27:18:4d:a7:3d:7c:62:8b:1e:07:bc:
         2a:6b:fb:9e:13:fe:02:14:cd:b4:61:09:17:45:e3:76:49:a8:
         81:52:e0:e3:72:51:47:e9:d8:73:c5:3f:fd:83:bf:20:34:e6:
         80:ff:62:cc:6d:0d:51:28:11:fa:ef:38:01:8f:31:4d:21:a1:
         7a:bb:66:da:6c:01:a0:d4:e8:fc:b2:58:93:1c:be:22:42:09:
         00:6c:26:01:5b:7b:7e:bc:fb:23:30:97:04:89:c4:a4:18:04:
         f2:15:2c:82
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPimvVsILw7bBmiqLEWcMQrbXWCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMzAxMjQxMzFaFw0yNDAzMjgxMjQ2MzFaMDMxMTAvBgNV
BAMTKEEwMzNBRTdGMkQzQjgzNDU2QzJDMzg4REMzNUFGRDUxQjkzRUI0RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGLEgOxxAoWW5yqiQ/VcovqRo
MQbQuZ5o7Au4hL255cqjJVo5in1jRA7C7keUGQ8oLIZ/G3E5DCkIMTE/3JEFJi5g
VZHCaEMGTVdXu/c2xdqM6Wm/olv+GpDCdno66tWinF2daawaBDHR3pOCkOJpwcDD
aXZr4diPFD0sa89v2bC2JS2BCXXW0KvkgPVVxOkaUZsQBnb2PLzOiLAhYhr3/Bhw
UwKAsj2rMzPbpgQXoyHLK7seJ07Pc6LunilEw4JQVgKS8Nw0AV3SEqQa+KA1n2/V
gOocLN6iVu3NhFUxYFmaSjFfHz/F03FLhlAIprrUu6AwMqEmkUIdkip1468jAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgM65/LTuDRWws
OI3DWv1RuT60/DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CVHE2MUZ0WHJ5RDdWcnA3M2dyV3NpbTlaTVVRWGQ0ajYx
Nkx1VEUyY2pWbi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CVHE2MUZ0WHJ5RDdWcnA3M2dyV3NpbTlaTVVRWGQ0ajYx
Nkx1VEUyY2pWbi8wL0EwMzNBRTdGMkQzQjgzNDU2QzJDMzg4REMzNUFGRDUxQjkz
RUI0RkMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3vtDANBAIAAjAHAwUA
KARQYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGGEwDQYJKoZIhvcNAQELBQAD
ggEBAFsOfh0jcnzsHyDoieyYs+1rojeGoqz/eKhTEiVMm3z0a132mjAVfJCM313G
/1CJOjPm1zDBLQpR871oUWPm7t74YoKekgBJ5Zd8tLNVbgh/cfCDz3Rhms6tlUU/
3RbxYEL8ytT/LWJsf6j92h31oA05mSU6r/q0SXA9LX+QWsf3PqYLNByVohl1rL7P
lc9yx85hcEYP3RwnGE2nPXxiix4HvCpr+54T/gIUzbRhCRdF43ZJqIFS4ONyUUfp
2HPFP/2DvyA05oD/YsxtDVEoEfrvOAGPMU0hoXq7ZtpsAaDU6PyyWJMcviJCCQBs
JgFbe368+yMwlwSJxKQYBPIVLII=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org