Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.cer
File:                     A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.cer (raw, json)
Hash identifier:          wf2OgtkI4hNV1/eO4KS+iy09c0Xaw+rCOMRhilmsii8=
Subject key identifier:   A1:72:A3:8C:FC:F4:2B:A2:8C:2A:28:82:DD:DE:F4:EB:80:06:FE:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6304CA9BA2F22389AF73FC01F955A63966EFAF5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 13:52:11 +0000
Certificate not after:    Fri 22 Nov 2024 13:57:11 +0000
Subordinate resources:    AS: 52584
                          IP: 170.254.252.0/22
                          IP: 177.86.244.0/22
                          IP: 2804:d04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:04:ca:9b:a2:f2:23:89:af:73:fc:01:f9:55:a6:39:66:ef:af:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 13:52:11 2023 GMT
            Not After : Nov 22 13:57:11 2024 GMT
        Subject: CN=A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:d7:61:88:b1:db:6d:08:58:01:46:6a:11:
                    cc:dc:33:d5:70:16:3d:7c:2d:52:9a:d6:0f:6b:ee:
                    23:78:b0:8c:b0:c8:99:83:d0:d7:22:9d:f9:1e:7b:
                    16:d2:36:df:58:cf:a5:71:7a:55:e8:4c:64:8d:47:
                    e2:c6:b9:bb:9f:c8:3b:ae:c5:6c:37:4a:55:99:11:
                    0d:09:12:7b:7a:86:ca:f2:41:97:84:da:22:c1:f8:
                    12:3c:8e:da:82:70:28:d0:a4:79:b2:08:fa:3c:03:
                    15:88:db:9b:34:aa:af:38:a0:6d:6a:41:30:80:65:
                    43:80:56:f0:fe:6a:07:6c:4e:d5:03:1d:39:4b:c3:
                    53:b2:27:5a:ee:60:89:30:07:63:2a:00:45:69:90:
                    b1:83:cd:ab:90:15:8a:01:83:db:b0:58:7a:22:22:
                    a4:01:9b:cb:bb:35:7a:2f:75:6d:f4:05:3c:63:11:
                    c0:b2:f6:3a:10:78:89:e6:36:78:94:90:c6:f6:09:
                    56:ca:fb:df:97:0a:83:33:15:eb:4b:9c:78:01:39:
                    dc:0b:e5:e6:9d:99:9c:4c:1b:ee:e5:ac:0a:c6:2d:
                    34:6f:d1:c7:76:12:63:50:9f:59:8a:52:d3:05:2c:
                    25:d0:0c:3c:ff:bc:73:92:d5:0a:6c:9f:6a:ce:68:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:72:A3:8C:FC:F4:2B:A2:8C:2A:28:82:DD:DE:F4:EB:80:06:FE:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.252.0/22
                  177.86.244.0/22
                IPv6:
                  2804:d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52584

    Signature Algorithm: sha256WithRSAEncryption
         60:35:02:57:d2:f4:1d:e3:53:3c:b7:b4:e5:65:c0:e5:df:c6:
         1f:dc:50:95:ae:16:43:72:98:32:8d:d5:72:aa:86:f5:b3:1c:
         c3:51:bb:dd:32:97:f6:93:b2:fc:e5:fc:24:73:99:87:c6:74:
         0b:be:8e:5b:95:59:f2:d8:f3:c7:b9:11:44:09:2a:a9:22:8c:
         7c:1e:24:c6:7d:c8:63:dd:aa:11:26:1b:03:b0:8c:05:a0:db:
         78:0d:6d:c3:6c:cb:57:02:0c:bc:bf:0e:54:dc:d2:1a:79:85:
         ca:01:b7:1e:26:ab:54:32:82:5f:ea:b9:66:fe:41:71:4a:87:
         4c:3a:5d:7c:ed:20:10:a3:73:73:be:02:52:7e:6b:d2:2f:1e:
         be:a6:31:28:b5:1b:11:8a:2c:51:c8:18:e7:b5:ee:d0:a9:89:
         fd:07:2f:e7:04:eb:f4:fb:ef:90:ea:53:b6:c1:cc:b1:31:f4:
         9b:68:d2:83:c9:77:09:f5:51:89:3c:ac:fc:20:85:4e:3c:c3:
         a7:ce:9c:68:e5:bb:2f:5f:b4:9b:e9:95:8a:25:57:b4:80:de:
         fc:80:77:6a:06:b4:f0:0b:3f:d1:01:4c:50:84:d3:e7:ce:a5:
         51:24:e4:11:a7:a9:9c:bb:3c:6a:23:e2:82:4b:58:9c:ae:4f:
         4f:9a:a9:4b
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUYwTKm6LyI4mvc/wB+VWmOWbvr14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjQxMzUyMTFaFw0yNDExMjIxMzU3MTFaMDMxMTAvBgNV
BAMTKEExNzJBMzhDRkNGNDJCQTI4QzJBMjg4MkREREVGNEVCODAwNkZFRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzddhiLHbbQhYAUZqEczcM9Vw
Fj18LVKa1g9r7iN4sIywyJmD0NcinfkeexbSNt9Yz6VxelXoTGSNR+LGubufyDuu
xWw3SlWZEQ0JEnt6hsryQZeE2iLB+BI8jtqCcCjQpHmyCPo8AxWI25s0qq84oG1q
QTCAZUOAVvD+agdsTtUDHTlLw1OyJ1ruYIkwB2MqAEVpkLGDzauQFYoBg9uwWHoi
IqQBm8u7NXovdW30BTxjEcCy9joQeInmNniUkMb2CVbK+9+XCoMzFetLnHgBOdwL
5eadmZxMG+7lrArGLTRv0cd2EmNQn1mKUtMFLCXQDDz/vHOS1Qpsn2rOaDU5AgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShcqOM/PQroowq
KILd3vTrgAb+5zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ib0dVaVJVYkhxWDZRZ05mVDZnNENHTGE0c1lrOEhYRnVZ
Z3FQaUo2YkRnZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSG9HVWlSVWJIcVg2UWdOZlQ2ZzRDR0xhNHNZazhIWEZ1
WWdxUGlKNmJEZ2YvMC9BMTcyQTM4Q0ZDRjQyQkEyOEMyQTI4ODJERERFRjRFQjgw
MDZGRUU3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKq/vwDBAKxVvQwDQQC
AAIwBwMFACgEDQQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM1oMA0GCSqGSIb3
DQEBCwUAA4IBAQBgNQJX0vQd41M8t7TlZcDl38Yf3FCVrhZDcpgyjdVyqob1sxzD
UbvdMpf2k7L85fwkc5mHxnQLvo5blVny2PPHuRFECSqpIox8HiTGfchj3aoRJhsD
sIwFoNt4DW3DbMtXAgy8vw5U3NIaeYXKAbceJqtUMoJf6rlm/kFxSodMOl187SAQ
o3NzvgJSfmvSLx6+pjEotRsRiixRyBjnte7QqYn9By/nBOv0+++Q6lO2wcyxMfSb
aNKDyXcJ9VGJPKz8IIVOPMOnzpxo5bsvX7Sb6ZWKJVe0gN78gHdqBrTwCz/RAUxQ
hNPnzqVRJOQRp6mcuzxqI+KCS1icrk9PmqlL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org