Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1FED06F7D1405C340D123EC721C6A72F607A3D4.cer
File:                     A1FED06F7D1405C340D123EC721C6A72F607A3D4.cer (raw, json)
Hash identifier:          dIXYSlfwUt2e9TR9uqaw8+0FtECjC6ZUUqwmotgE61U=
Subject key identifier:   A1:FE:D0:6F:7D:14:05:C3:40:D1:23:EC:72:1C:6A:72:F6:07:A3:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67261599194BA0072CDCB6E8AD39F0FE16C90D29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/A1FED06F7D1405C340D123EC721C6A72F607A3D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 02:16:55 +0000
Certificate not after:    Wed 15 May 2024 02:21:55 +0000
Subordinate resources:    AS: 269658
                          IP: 45.191.16.0/23
                          IP: 2804:67e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:26:15:99:19:4b:a0:07:2c:dc:b6:e8:ad:39:f0:fe:16:c9:0d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 17 02:16:55 2023 GMT
            Not After : May 15 02:21:55 2024 GMT
        Subject: CN=A1FED06F7D1405C340D123EC721C6A72F607A3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:1f:df:16:fd:6d:d4:51:7b:7b:ae:4f:e4:
                    8a:f1:e1:6a:25:6d:fa:5c:b8:14:ba:45:c8:5b:75:
                    d8:8a:22:b3:ed:2f:a1:46:9e:d1:7c:ea:fc:0b:30:
                    2e:1d:a7:c4:fc:77:fc:f4:b0:86:44:78:e0:af:44:
                    96:24:c2:74:a7:44:58:89:83:53:d6:d8:e8:12:2a:
                    cb:61:aa:8e:67:34:62:cb:ba:cf:21:70:7b:d4:4a:
                    44:f9:c5:90:7f:8a:09:cf:62:4c:8e:f2:7f:9c:8a:
                    3d:a7:81:f6:62:7f:7a:c1:bd:fc:99:3f:a6:d3:4d:
                    11:59:73:7d:d6:20:35:2b:91:14:4d:08:63:79:55:
                    b4:fb:29:a4:35:52:82:92:32:ee:0b:13:32:cb:41:
                    43:b7:4f:55:3b:0e:1d:33:e7:be:76:5d:22:eb:bc:
                    3c:4e:74:67:3c:71:da:4f:42:45:46:cc:6f:ae:27:
                    94:36:c8:54:40:5b:e5:d7:32:32:fd:85:fb:52:2f:
                    35:86:cd:d5:70:14:ce:45:91:3e:db:8b:5b:f8:bd:
                    26:50:f4:b9:2f:a8:c8:f2:33:c2:81:37:9e:95:84:
                    0b:3a:c9:4a:ac:a8:97:28:8d:23:3a:0d:ad:01:16:
                    68:81:27:1f:7d:cd:f4:b1:4d:db:95:6a:22:77:59:
                    bc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:FE:D0:6F:7D:14:05:C3:40:D1:23:EC:72:1C:6A:72:F6:07:A3:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/A1FED06F7D1405C340D123EC721C6A72F607A3D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.16.0/23
                IPv6:
                  2804:67e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269658

    Signature Algorithm: sha256WithRSAEncryption
         48:6f:93:67:c5:37:50:91:46:3b:51:d2:91:6d:87:2c:a8:80:
         83:d6:a6:54:79:be:3e:74:14:f4:46:5f:b7:19:77:88:86:42:
         1a:1a:2a:1e:5e:4b:26:4e:5b:a6:81:9d:a9:31:1c:ea:0e:15:
         55:4f:6d:0f:1f:14:36:01:85:ec:06:16:4e:36:6a:3d:02:3f:
         2b:b0:53:38:2b:f5:9c:c3:97:ce:85:8e:6b:32:1a:8b:56:6a:
         cc:c1:06:3e:d4:c4:e8:d7:57:cb:62:82:b1:f8:f2:4f:84:aa:
         17:36:91:dd:b0:24:1d:ca:3e:44:ae:be:07:d6:60:cc:9d:f5:
         f0:3e:f9:f9:1c:d6:7e:b2:e9:8a:9d:9c:6a:bb:72:ad:5d:62:
         2b:96:f0:2b:59:30:02:4b:f9:34:ea:f1:57:de:a5:9f:4d:92:
         b4:17:ed:3b:d0:8c:93:23:42:25:33:76:4e:ed:e1:ff:99:bb:
         c1:d8:ad:21:ac:c7:a8:b4:ae:c4:5b:92:2c:bb:32:70:1a:9c:
         d3:21:33:04:d0:a5:51:19:82:a5:8c:f8:08:09:f4:87:44:5f:
         d8:66:5a:e2:c4:ad:17:2d:3e:0d:08:ea:8a:ca:7d:63:2a:75:
         7b:26:6f:ae:99:ac:0c:be:b2:cf:de:de:01:8b:60:e4:ec:5b:
         a6:72:e3:a2
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZyYVmRlLoAcs3LborTnw/hbJDSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTcwMjE2NTVaFw0yNDA1MTUwMjIxNTVaMDMxMTAvBgNV
BAMTKEExRkVEMDZGN0QxNDA1QzM0MEQxMjNFQzcyMUM2QTcyRjYwN0EzRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfB/fFv1t1FF7e65P5Irx4Wol
bfpcuBS6RchbddiKIrPtL6FGntF86vwLMC4dp8T8d/z0sIZEeOCvRJYkwnSnRFiJ
g1PW2OgSKsthqo5nNGLLus8hcHvUSkT5xZB/ignPYkyO8n+cij2ngfZif3rBvfyZ
P6bTTRFZc33WIDUrkRRNCGN5VbT7KaQ1UoKSMu4LEzLLQUO3T1U7Dh0z5752XSLr
vDxOdGc8cdpPQkVGzG+uJ5Q2yFRAW+XXMjL9hftSLzWGzdVwFM5FkT7bi1v4vSZQ
9LkvqMjyM8KBN56VhAs6yUqsqJcojSM6Da0BFmiBJx99zfSxTduVaiJ3WbwxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSh/tBvfRQFw0DR
I+xyHGpy9gej1DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HZzE1dFE0MU1oeU5xbUR3QU14RXRYTEs2TWZhTVBZZGRI
YndFMWFTemVVQi8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HZzE1dFE0MU1oeU5xbUR3QU14RXRYTEs2TWZhTVBZZGRI
YndFMWFTemVVQi8xL0ExRkVEMDZGN0QxNDA1QzM0MEQxMjNFQzcyMUM2QTcyRjYw
N0EzRDQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS2/EDANBAIAAjAHAwUA
KARn6DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHVowDQYJKoZIhvcNAQELBQAD
ggEBAEhvk2fFN1CRRjtR0pFthyyogIPWplR5vj50FPRGX7cZd4iGQhoaKh5eSyZO
W6aBnakxHOoOFVVPbQ8fFDYBhewGFk42aj0CPyuwUzgr9ZzDl86FjmsyGotWaszB
Bj7UxOjXV8tigrH48k+Eqhc2kd2wJB3KPkSuvgfWYMyd9fA++fkc1n6y6YqdnGq7
cq1dYiuW8CtZMAJL+TTq8VfepZ9NkrQX7TvQjJMjQiUzdk7t4f+Zu8HYrSGsx6i0
rsRbkiy7MnAanNMhMwTQpVEZgqWM+AgJ9IdEX9hmWuLErRctPg0I6orKfWMqdXsm
b66ZrAy+ss/e3gGLYOTsW6Zy46I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org