Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A17DFCF905EFFA314D1E9E9C69A7CEDA17828E81.cer
File:                     A17DFCF905EFFA314D1E9E9C69A7CEDA17828E81.cer (raw, json)
Hash identifier:          eONMvjlXTVqhwXU2lMhi4jKAtlT7Wx3Hws4iKe/NBjc=
Subject key identifier:   A1:7D:FC:F9:05:EF:FA:31:4D:1E:9E:9C:69:A7:CE:DA:17:82:8E:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       268493F89446A5E502F8ECED6928B60AF93CBDE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/A17DFCF905EFFA314D1E9E9C69A7CEDA17828E81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Mar 2023 20:29:00 +0000
Certificate not after:    Sat 16 Mar 2024 20:34:00 +0000
Subordinate resources:    AS: 272573
                          IP: 2804:8558::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:84:93:f8:94:46:a5:e5:02:f8:ec:ed:69:28:b6:0a:f9:3c:bd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 20:29:00 2023 GMT
            Not After : Mar 16 20:34:00 2024 GMT
        Subject: CN=A17DFCF905EFFA314D1E9E9C69A7CEDA17828E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:57:69:7a:44:e0:b2:e6:1d:8f:35:90:77:
                    f9:63:4f:d6:1a:04:28:f9:61:26:99:5a:91:09:84:
                    4c:8c:67:9a:b4:1f:ae:d7:6b:58:ba:ac:8c:91:12:
                    64:60:f0:34:15:6b:0a:a7:c9:c4:bb:95:ef:25:7d:
                    a3:75:e5:fa:77:be:4f:1e:13:3d:3e:03:f1:ea:9e:
                    10:f7:93:b1:ef:11:41:e3:f0:6d:61:58:0b:ba:c1:
                    05:e2:47:87:5a:47:69:62:38:59:5f:3e:e8:46:75:
                    b3:1f:a9:af:fe:bc:99:1b:45:a6:aa:d9:28:56:52:
                    fb:ab:c9:32:1f:62:e7:d4:b7:8b:29:cf:6c:bd:77:
                    1d:51:d8:a8:da:8e:3b:93:2b:38:aa:67:be:05:fa:
                    7b:09:88:a5:1c:de:57:cd:cb:ea:cd:44:af:bd:9e:
                    2a:62:2f:89:f6:c9:0b:80:c3:c0:fc:4b:0b:60:51:
                    22:d9:a5:2c:27:e9:0c:72:ec:af:ea:f1:a1:58:c1:
                    a0:2d:d9:6b:33:d5:ba:e0:5b:31:d4:1b:61:68:ef:
                    4a:7f:10:9e:17:32:7b:8d:e8:56:ce:b0:32:88:0f:
                    32:58:b8:a3:d6:4d:f0:b3:db:53:1d:59:82:a1:27:
                    31:0e:0f:2c:6d:89:87:90:d5:87:7e:ea:08:a8:8b:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:7D:FC:F9:05:EF:FA:31:4D:1E:9E:9C:69:A7:CE:DA:17:82:8E:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/A17DFCF905EFFA314D1E9E9C69A7CEDA17828E81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8558::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272573

    Signature Algorithm: sha256WithRSAEncryption
         b4:20:cd:19:76:9a:cd:38:2b:86:d5:8b:3a:c4:d7:6a:67:15:
         39:e7:c1:fc:1a:31:99:e1:3b:d2:d7:21:7c:38:bf:c3:c8:d8:
         cf:72:43:1b:ee:91:06:cd:46:7b:1d:34:8c:70:ad:b8:6f:2d:
         19:17:80:21:c0:6c:56:8d:66:8c:16:65:24:1c:00:a9:50:51:
         8d:a9:5c:79:c4:20:da:29:b1:71:82:33:88:cc:fe:a7:bf:b3:
         53:0f:ea:c2:76:03:57:5a:30:57:51:7f:ad:69:07:29:16:bc:
         17:ca:31:b8:78:3f:7a:3b:6c:9c:76:47:7b:d8:5a:42:c9:26:
         31:90:e8:21:3b:39:de:00:51:d9:28:32:23:1f:ef:e3:ba:46:
         2c:1e:f7:b4:09:b5:09:32:60:91:0a:25:49:6f:b0:d6:99:1b:
         f8:4f:e6:65:06:2c:f5:e7:78:35:47:33:5d:13:cc:a8:a6:a1:
         62:77:e0:3e:2e:8a:bb:fe:1c:2c:07:c7:08:e8:2a:1f:65:9c:
         ee:63:94:cb:6c:42:08:37:ef:8f:c7:a6:c3:6f:e4:5e:ca:c1:
         14:f2:2f:a2:b9:50:47:47:c3:19:b0:23:ae:31:a3:6f:3a:c7:
         60:1b:e1:cd:d9:dc:ea:5e:9a:d8:b2:ee:15:c2:48:fd:bf:71:
         46:32:94:1d
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUJoST+JRGpeUC+OztaSi2Cvk8veMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMTgyMDI5MDBaFw0yNDAzMTYyMDM0MDBaMDMxMTAvBgNV
BAMTKEExN0RGQ0Y5MDVFRkZBMzE0RDFFOUU5QzY5QTdDRURBMTc4MjhFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9FdpekTgsuYdjzWQd/ljT9Ya
BCj5YSaZWpEJhEyMZ5q0H67Xa1i6rIyREmRg8DQVawqnycS7le8lfaN15fp3vk8e
Ez0+A/HqnhD3k7HvEUHj8G1hWAu6wQXiR4daR2liOFlfPuhGdbMfqa/+vJkbRaaq
2ShWUvuryTIfYufUt4spz2y9dx1R2KjajjuTKziqZ74F+nsJiKUc3lfNy+rNRK+9
nipiL4n2yQuAw8D8SwtgUSLZpSwn6Qxy7K/q8aFYwaAt2Wsz1brgWzHUG2Fo70p/
EJ4XMnuN6FbOsDKIDzJYuKPWTfCz21MdWYKhJzEODyxtiYeQ1Yd+6gioi/PpAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShffz5Be/6MU0e
npxpp87aF4KOgTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84UG5TdjE3dG91NGZLVVlLSlhrYkJNNFZlRDZ2Q2tjVjJ1
dXdzMm54Zkoxcy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84UG5TdjE3dG91NGZLVVlLSlhrYkJNNFZlRDZ2Q2tjVjJ1
dXdzMm54Zkoxcy8wL0ExN0RGQ0Y5MDVFRkZBMzE0RDFFOUU5QzY5QTdDRURBMTc4
MjhFODEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEhVgwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCi9MA0GCSqGSIb3DQEBCwUAA4IBAQC0IM0ZdprNOCuG
1Ys6xNdqZxU558H8GjGZ4TvS1yF8OL/DyNjPckMb7pEGzUZ7HTSMcK24by0ZF4Ah
wGxWjWaMFmUkHACpUFGNqVx5xCDaKbFxgjOIzP6nv7NTD+rCdgNXWjBXUX+taQcp
FrwXyjG4eD96O2ycdkd72FpCySYxkOghOzneAFHZKDIjH+/jukYsHve0CbUJMmCR
CiVJb7DWmRv4T+ZlBiz153g1RzNdE8yopqFid+A+Loq7/hwsB8cI6CofZZzuY5TL
bEIIN++Px6bDb+ReysEU8i+iuVBHR8MZsCOuMaNvOsdgG+HN2dzqXprYsu4Vwkj9
v3FGMpQd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org