Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.cer
File:                     A257B01974D35AFB5E96E170F25E9F0AE4726A04.cer (raw, json)
Hash identifier:          RDN10PuqWj3lXdRvS+hN51uM2tsyZppjNXGQRsOZSPY=
Subject key identifier:   A2:57:B0:19:74:D3:5A:FB:5E:96:E1:70:F2:5E:9F:0A:E4:72:6A:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0968484B6CFA3DD813F73847308925D8ED56EB49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 12:34:18 +0000
Certificate not after:    Tue 11 Mar 2025 12:39:18 +0000
Subordinate resources:    AS: 264340
                          IP: 138.185.56.0/22
                          IP: 2804:2650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:68:48:4b:6c:fa:3d:d8:13:f7:38:47:30:89:25:d8:ed:56:eb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 12:34:18 2024 GMT
            Not After : Mar 11 12:39:18 2025 GMT
        Subject: CN=A257B01974D35AFB5E96E170F25E9F0AE4726A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:43:36:e8:90:27:66:34:fb:45:bd:3a:86:97:
                    99:88:d7:41:fc:8f:e0:75:c1:9b:c4:d0:ff:aa:e6:
                    e3:ca:11:91:0a:28:ae:11:34:c7:0b:38:11:00:e9:
                    48:4b:34:27:f0:88:1d:13:05:d7:df:b6:e6:78:35:
                    0f:e6:9a:c7:c3:8d:e1:b5:b2:f0:3e:79:08:12:fb:
                    9a:6d:a9:99:cb:c5:1f:82:dd:4a:df:7d:35:77:3a:
                    d3:2d:4f:db:f9:e3:52:56:eb:80:8f:ac:17:27:d9:
                    94:0d:6a:d0:e2:e0:04:43:dc:49:30:14:53:7e:18:
                    c3:ee:af:20:f3:4c:41:5f:66:0e:67:1f:1f:02:00:
                    b3:bb:c7:e0:3b:1a:13:af:3f:ab:76:6f:4d:73:a4:
                    24:8b:13:2e:1b:99:eb:8c:95:cc:57:7d:b2:f3:c3:
                    ff:fb:c5:62:db:dc:cd:82:38:c5:e8:58:ec:23:57:
                    46:3e:1b:7b:88:78:a2:32:ab:33:87:d9:9c:e6:59:
                    f2:8d:e0:31:d2:f0:dc:50:6d:a8:c4:ab:cd:c8:18:
                    c1:71:86:27:6b:b8:0e:7e:f5:aa:38:68:ef:03:cd:
                    9d:3d:6c:a7:06:63:ae:4f:f2:c7:cf:d7:10:ed:d4:
                    4f:7b:f9:13:fb:30:16:3e:fd:b5:fa:42:b2:b5:82:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:57:B0:19:74:D3:5A:FB:5E:96:E1:70:F2:5E:9F:0A:E4:72:6A:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.56.0/22
                IPv6:
                  2804:2650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264340

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:5d:c1:43:e9:0d:ef:cf:c6:92:10:d4:8e:47:f3:95:1e:
         dc:f4:05:d0:6b:4e:74:fd:df:aa:ef:56:32:c9:17:a1:f2:25:
         1e:6c:a8:9d:6e:09:d5:c1:da:75:07:18:56:c1:70:db:30:22:
         6d:a2:bb:2c:c3:1c:57:21:29:3a:a5:22:c6:f5:37:90:5d:7e:
         ed:09:e2:ce:8e:af:df:44:2a:8f:ee:7c:60:ac:49:4a:fb:e5:
         88:8a:13:3a:5d:e9:6c:92:4d:41:75:8f:45:56:5d:8b:1f:67:
         12:5a:cd:b4:14:9f:3c:72:28:00:3c:eb:e9:bc:da:92:78:2d:
         2a:60:2f:3f:cd:64:82:a8:38:68:bd:0f:df:d5:81:a8:49:66:
         e7:ea:42:85:65:6c:f0:1e:73:d2:87:ec:89:80:34:e1:85:56:
         fe:39:24:0c:ea:57:fa:fc:60:1c:17:bd:46:fc:9e:80:bb:58:
         8b:08:b5:a4:98:95:8b:7c:1f:38:4c:2d:31:01:9a:cd:0a:f8:
         85:f4:43:73:2b:7f:63:ee:be:f8:11:7e:5c:65:cb:a6:62:6e:
         a2:8e:2f:32:f0:06:f5:2e:3e:b5:14:cc:4c:0e:39:9b:90:a9:
         34:f8:fd:f8:f5:4a:bf:00:99:d7:84:7d:d9:26:93:d6:1e:1f:
         df:5d:d5:00
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUCWhIS2z6PdgT9zhHMIkl2O1W60kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIxMjM0MThaFw0yNTAzMTExMjM5MThaMDMxMTAvBgNV
BAMTKEEyNTdCMDE5NzREMzVBRkI1RTk2RTE3MEYyNUU5RjBBRTQ3MjZBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQzbokCdmNPtFvTqGl5mI10H8
j+B1wZvE0P+q5uPKEZEKKK4RNMcLOBEA6UhLNCfwiB0TBdfftuZ4NQ/mmsfDjeG1
svA+eQgS+5ptqZnLxR+C3UrffTV3OtMtT9v541JW64CPrBcn2ZQNatDi4ARD3Ekw
FFN+GMPuryDzTEFfZg5nHx8CALO7x+A7GhOvP6t2b01zpCSLEy4bmeuMlcxXfbLz
w//7xWLb3M2COMXoWOwjV0Y+G3uIeKIyqzOH2ZzmWfKN4DHS8NxQbajEq83IGMFx
hidruA5+9ao4aO8DzZ09bKcGY65P8sfP1xDt1E97+RP7MBY+/bX6QrK1ggUbAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiV7AZdNNa+16W
4XDyXp8K5HJqBDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ySlpROG5yQzhSSFNBRGdaQ2dkM3JmckNQenVteHlmeVZS
VEVKaDFXV3dXZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMkpaUThuckM4UkhTQURnWkNnZDNyZnJDUHp1bXh5ZnlW
UlRFSmgxV1d3V2YvMC9BMjU3QjAxOTc0RDM1QUZCNUU5NkUxNzBGMjVFOUYwQUU0
NzI2QTA0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKuTgwDQQCAAIwBwMF
ACgEJlAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAiUMA0GCSqGSIb3DQEBCwUA
A4IBAQA0xV3BQ+kN78/GkhDUjkfzlR7c9AXQa050/d+q71YyyReh8iUebKidbgnV
wdp1BxhWwXDbMCJtorsswxxXISk6pSLG9TeQXX7tCeLOjq/fRCqP7nxgrElK++WI
ihM6Xelskk1BdY9FVl2LH2cSWs20FJ88cigAPOvpvNqSeC0qYC8/zWSCqDhovQ/f
1YGoSWbn6kKFZWzwHnPSh+yJgDThhVb+OSQM6lf6/GAcF71G/J6Au1iLCLWkmJWL
fB84TC0xAZrNCviF9ENzK39j7r74EX5cZcumYm6iji8y8Ab1Lj61FMxMDjmbkKk0
+P349Uq/AJnXhH3ZJpPWHh/fXdUA
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org