Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.cer
File:                     A0DAA7DCDF8B78237BED95AF00752072151F0F73.cer (raw, json)
Hash identifier:          So9nG9sYLE1pa7XxqsDVGmnxxPOjFtjjTbUpzB6ovjY=
Subject key identifier:   A0:DA:A7:DC:DF:8B:78:23:7B:ED:95:AF:00:75:20:72:15:1F:0F:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08BDB153B0B0422C3873216D2FB5E1A7603A60D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Oct 2023 05:48:52 +0000
Certificate not after:    Thu 10 Oct 2024 05:53:52 +0000
Subordinate resources:    AS: 265409
                          IP: 168.194.212.0/22
                          IP: 2804:33a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bd:b1:53:b0:b0:42:2c:38:73:21:6d:2f:b5:e1:a7:60:3a:60:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 12 05:48:52 2023 GMT
            Not After : Oct 10 05:53:52 2024 GMT
        Subject: CN=A0DAA7DCDF8B78237BED95AF00752072151F0F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:4b:1d:a0:ad:eb:3f:19:52:d9:63:84:b1:
                    25:c7:d2:df:bb:cd:18:43:55:44:2a:41:28:c6:b4:
                    2f:ec:95:8d:9a:fe:72:c4:98:11:7e:ef:0d:8a:18:
                    db:36:ff:4e:b8:d3:f9:f0:ab:d2:1a:24:c6:b8:a8:
                    40:f6:24:4c:4e:99:4c:4d:78:79:40:66:dc:37:6f:
                    61:12:26:9b:ea:61:5f:ee:82:27:12:e2:32:14:b7:
                    6b:1a:7d:02:2b:52:4c:33:f6:d4:ca:fa:03:de:4a:
                    f3:2c:55:64:52:7a:56:73:6e:45:9e:33:a9:8c:d1:
                    0a:83:eb:48:d9:f7:91:a5:06:e7:b3:3c:3b:38:54:
                    10:d4:30:5d:05:6c:58:90:22:49:63:40:c8:65:dd:
                    a1:80:82:d1:df:86:8c:6b:21:b5:ad:7f:ba:d6:72:
                    da:45:04:98:a7:2f:d8:e4:51:79:91:86:63:36:10:
                    a5:0d:2d:3b:7e:2b:aa:9c:1d:e5:9a:70:62:98:ec:
                    a0:d7:ec:1a:fd:6d:81:3c:cc:b3:d6:53:bd:0b:8d:
                    24:92:10:6a:bf:7d:0b:67:04:b1:1e:19:d2:b4:ae:
                    06:37:1b:b9:a0:6e:41:65:18:57:6d:5b:d5:62:b7:
                    fc:35:b1:20:94:36:01:10:27:b1:6c:4b:fd:73:56:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:DA:A7:DC:DF:8B:78:23:7B:ED:95:AF:00:75:20:72:15:1F:0F:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.212.0/22
                IPv6:
                  2804:33a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265409

    Signature Algorithm: sha256WithRSAEncryption
         55:30:86:9d:44:48:26:ec:e7:c4:7f:17:7f:87:95:87:ed:a5:
         16:c7:3f:d2:e9:73:ae:27:d8:da:bb:44:e8:44:69:31:06:23:
         13:fb:e0:62:9f:fe:9c:5a:7c:58:9b:94:08:5c:97:fc:94:11:
         36:bb:93:43:19:a5:bb:d3:42:9e:6d:57:72:43:a2:6c:6b:c0:
         7a:72:54:11:36:58:85:3e:d3:85:6b:c0:76:43:1e:b9:4f:3c:
         1f:07:fc:24:29:c1:c0:03:bb:d8:e4:e5:5d:4b:48:ff:06:f0:
         72:53:4d:01:6e:ca:5f:fb:60:2f:68:cd:f1:7f:09:58:8c:a3:
         3e:9f:0e:3e:6b:2b:7d:43:71:d4:89:e7:e1:9c:6f:d2:50:9a:
         fd:9e:10:04:ba:60:9d:27:c5:21:fd:11:1b:0a:fe:f8:03:0f:
         e8:7f:f3:98:21:34:d3:15:21:58:25:52:fd:b8:76:ec:72:d6:
         89:46:f5:85:d3:73:a0:49:13:dc:ef:fc:22:8b:bc:1a:a0:9c:
         06:22:67:ac:52:e7:d1:0d:8c:67:9d:8d:d7:77:40:bd:01:df:
         b4:36:63:2b:6a:72:08:41:7a:af:5f:80:37:c5:b7:0a:f7:3f:
         74:f9:09:15:81:eb:16:f1:9a:08:89:22:33:dc:4c:07:d8:ca:
         1a:81:ab:a3
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUCL2xU7CwQiw4cyFtL7Xhp2A6YNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTIwNTQ4NTJaFw0yNDEwMTAwNTUzNTJaMDMxMTAvBgNV
BAMTKEEwREFBN0RDREY4Qjc4MjM3QkVEOTVBRjAwNzUyMDcyMTUxRjBGNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnksdoK3rPxlS2WOEsSXH0t+7
zRhDVUQqQSjGtC/slY2a/nLEmBF+7w2KGNs2/0640/nwq9IaJMa4qED2JExOmUxN
eHlAZtw3b2ESJpvqYV/ugicS4jIUt2safQIrUkwz9tTK+gPeSvMsVWRSelZzbkWe
M6mM0QqD60jZ95GlBuezPDs4VBDUMF0FbFiQIkljQMhl3aGAgtHfhoxrIbWtf7rW
ctpFBJinL9jkUXmRhmM2EKUNLTt+K6qcHeWacGKY7KDX7Br9bYE8zLPWU70LjSSS
EGq/fQtnBLEeGdK0rgY3G7mgbkFlGFdtW9Vit/w1sSCUNgEQJ7FsS/1zVixdAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSg2qfc34t4I3vt
la8AdSByFR8PczAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FQ21IWFFEeERSam9hc2VKVGR4OUxZV0pNaG53TXBXWmJW
aEg4ZWliQ0hmdi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRUNtSFhRRHhEUmpvYXNlSlRkeDlMWVdKTWhud01wV1pi
VmhIOGVpYkNIZnYvMC9BMERBQTdEQ0RGOEI3ODIzN0JFRDk1QUYwMDc1MjA3MjE1
MUYwRjczLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKowtQwDQQCAAIwBwMF
ACgEM6QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAzBMA0GCSqGSIb3DQEBCwUA
A4IBAQBVMIadREgm7OfEfxd/h5WH7aUWxz/S6XOuJ9jau0ToRGkxBiMT++Bin/6c
WnxYm5QIXJf8lBE2u5NDGaW700KebVdyQ6Jsa8B6clQRNliFPtOFa8B2Qx65Tzwf
B/wkKcHAA7vY5OVdS0j/BvByU00Bbspf+2AvaM3xfwlYjKM+nw4+ayt9Q3HUiefh
nG/SUJr9nhAEumCdJ8Uh/REbCv74Aw/of/OYITTTFSFYJVL9uHbsctaJRvWF03Og
SRPc7/wii7waoJwGImesUufRDYxnnY3Xd0C9Ad+0NmMranIIQXqvX4A3xbcK9z90
+QkVgesW8ZoIiSIz3EwH2Moagauj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org