Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A15E6A73F5EB2D160967EE7FBA45B9EF6D54D85B.cer
File:                     A15E6A73F5EB2D160967EE7FBA45B9EF6D54D85B.cer (raw, json)
Hash identifier:          JtQ8heU5JydnakCP0QBWqNemaOO9zADEoHOL6gjvL7w=
Subject key identifier:   A1:5E:6A:73:F5:EB:2D:16:09:67:EE:7F:BA:45:B9:EF:6D:54:D8:5B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3267E00ADC841FFDC2FE022926BBD49506A295A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/A15E6A73F5EB2D160967EE7FBA45B9EF6D54D85B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 17:39:54 +0000
Certificate not after:    Tue 29 Oct 2024 17:44:54 +0000
Subordinate resources:    AS: 270375
                          IP: 190.89.156.0/22
                          IP: 2804:6b10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:67:e0:0a:dc:84:1f:fd:c2:fe:02:29:26:bb:d4:95:06:a2:95:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 31 17:39:54 2023 GMT
            Not After : Oct 29 17:44:54 2024 GMT
        Subject: CN=A15E6A73F5EB2D160967EE7FBA45B9EF6D54D85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:a7:ef:fa:82:5e:47:e3:2e:30:58:38:b4:
                    54:62:21:f5:59:c3:db:7b:49:a3:1c:52:b6:8b:0c:
                    11:24:21:f6:b8:ae:73:41:68:4f:5d:88:ff:cf:7e:
                    ce:a5:c6:ab:df:61:1c:31:75:fe:28:b5:b0:41:d6:
                    8f:53:b5:74:1f:d7:39:01:9b:cc:87:77:19:91:c7:
                    65:54:e0:d8:0f:20:77:4c:fe:8b:b4:96:f2:08:11:
                    c0:d6:70:f6:de:2d:15:3a:05:e0:fe:ca:4c:bf:8a:
                    70:9e:bb:d8:4e:45:8c:7f:c4:80:d1:f5:63:30:fc:
                    28:e7:ef:83:9d:9d:3e:eb:98:11:54:0b:86:bb:e1:
                    42:b0:c0:d0:10:7b:cd:d8:05:62:3e:da:53:d3:47:
                    f8:c7:3e:d9:2a:21:01:27:34:7f:da:32:aa:a2:9f:
                    6f:be:00:4b:9b:dd:80:c8:b4:7c:24:c4:c0:db:f1:
                    e0:e8:8e:52:ce:7d:a0:39:07:0f:54:69:b6:99:3c:
                    40:11:8e:85:fa:8a:e2:73:6d:31:6f:10:61:ee:54:
                    53:5a:1c:52:c2:fe:14:ed:b1:f6:d6:9d:26:98:7c:
                    bd:2d:bd:d3:d6:31:cd:ed:17:04:4d:47:6a:ca:bb:
                    34:86:64:51:a2:3a:89:1e:8b:eb:1b:7d:24:a0:f1:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:5E:6A:73:F5:EB:2D:16:09:67:EE:7F:BA:45:B9:EF:6D:54:D8:5B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/A15E6A73F5EB2D160967EE7FBA45B9EF6D54D85B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/22
                IPv6:
                  2804:6b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270375

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:26:b7:6e:b2:2c:40:f6:fb:98:17:1c:0b:a1:19:e3:46:
         4c:b3:e9:32:de:0c:81:9a:6a:b0:01:24:68:88:99:b5:eb:79:
         06:9a:f7:0e:e0:55:6d:ea:4e:14:d9:0a:41:da:6d:90:7e:fd:
         8d:db:4c:1e:1e:f3:82:93:90:49:9f:e1:ff:ad:76:79:28:ef:
         8b:13:4b:cd:6e:28:b0:ae:e6:d2:0d:2e:40:17:0d:f8:a4:25:
         35:88:3d:c0:d9:c0:cc:77:54:0e:fa:4c:d3:41:a3:ae:a3:fb:
         5b:53:fd:08:83:71:bf:ab:7f:16:25:60:2d:6c:9e:cd:51:04:
         75:54:d3:04:12:db:24:b5:a8:d8:76:67:e6:16:a3:a9:35:28:
         95:79:99:fb:88:db:f9:13:e3:69:2e:3f:65:7e:f1:e0:8e:58:
         4b:a9:0b:7c:bb:f5:c3:f3:85:6f:58:60:73:40:70:aa:96:27:
         ff:5a:b0:6a:6b:f0:db:af:2f:bf:f5:d5:e3:a5:f8:8b:91:9c:
         85:0c:f1:f2:aa:9a:a7:ed:aa:67:c0:99:5f:e9:00:71:8c:45:
         d8:ab:75:8a:9d:ba:03:ad:22:35:d0:f6:89:91:da:c1:b4:47:
         b4:1d:70:a6:4b:37:e0:3e:23:47:01:88:26:4b:d4:7c:e0:a4:
         e8:68:d9:4c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUMmfgCtyEH/3C/gIpJrvUlQailaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMzExNzM5NTRaFw0yNDEwMjkxNzQ0NTRaMDMxMTAvBgNV
BAMTKEExNUU2QTczRjVFQjJEMTYwOTY3RUU3RkJBNDVCOUVGNkQ1NEQ4NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyKfv+oJeR+MuMFg4tFRiIfVZ
w9t7SaMcUraLDBEkIfa4rnNBaE9diP/Pfs6lxqvfYRwxdf4otbBB1o9TtXQf1zkB
m8yHdxmRx2VU4NgPIHdM/ou0lvIIEcDWcPbeLRU6BeD+yky/inCeu9hORYx/xIDR
9WMw/Cjn74OdnT7rmBFUC4a74UKwwNAQe83YBWI+2lPTR/jHPtkqIQEnNH/aMqqi
n2++AEub3YDItHwkxMDb8eDojlLOfaA5Bw9UabaZPEARjoX6iuJzbTFvEGHuVFNa
HFLC/hTtsfbWnSaYfL0tvdPWMc3tFwRNR2rKuzSGZFGiOokei+sbfSSg8WXRAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShXmpz9estFgln
7n+6RbnvbVTYWzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdHdXOEM0MkZZTnR3V0ZwaHU3YXdEMXBTNXg0WmVMbmtE
QW1HWXB3SlhxQi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXR3VzhDNDJGWU50d1dGcGh1N2F3RDFwUzV4NFplTG5r
REFtR1lwd0pYcUIvMC9BMTVFNkE3M0Y1RUIyRDE2MDk2N0VFN0ZCQTQ1QjlFRjZE
NTREODVCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+WZwwDQQCAAIwBwMF
ACgEaxAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCAnMA0GCSqGSIb3DQEBCwUA
A4IBAQB7mSa3brIsQPb7mBccC6EZ40ZMs+ky3gyBmmqwASRoiJm163kGmvcO4FVt
6k4U2QpB2m2Qfv2N20weHvOCk5BJn+H/rXZ5KO+LE0vNbiiwrubSDS5AFw34pCU1
iD3A2cDMd1QO+kzTQaOuo/tbU/0Ig3G/q38WJWAtbJ7NUQR1VNMEEtsktajYdmfm
FqOpNSiVeZn7iNv5E+NpLj9lfvHgjlhLqQt8u/XD84VvWGBzQHCqlif/WrBqa/Db
ry+/9dXjpfiLkZyFDPHyqpqn7apnwJlf6QBxjEXYq3WKnboDrSI10PaJkdrBtEe0
HXCmSzfgPiNHAYgmS9R84KToaNlM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org