Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.cer
File:                     A25FBDEB2FC42754CA1D76897E6D66E147B856E4.cer (raw, json)
Hash identifier:          6TNhtTbBNo88MX8UK3k8r0dJ0MnmaKP+pF+se/T9sro=
Subject key identifier:   A2:5F:BD:EB:2F:C4:27:54:CA:1D:76:89:7E:6D:66:E1:47:B8:56:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42BE886C696996F021E305E23A68F60F11C7964D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 17:29:40 +0000
Certificate not after:    Wed 02 Apr 2025 17:34:40 +0000
Subordinate resources:    AS: 271169
                          IP: 179.48.196.0/22
                          IP: 2804:774c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:be:88:6c:69:69:96:f0:21:e3:05:e2:3a:68:f6:0f:11:c7:96:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 17:29:40 2024 GMT
            Not After : Apr  2 17:34:40 2025 GMT
        Subject: CN=A25FBDEB2FC42754CA1D76897E6D66E147B856E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:c8:cd:d3:a8:fa:18:43:8c:53:4a:30:59:
                    d6:d2:77:70:74:9c:c4:72:87:e7:80:f2:10:4d:3b:
                    bb:5e:c7:0d:db:9b:a0:d3:33:f6:4e:11:df:55:cf:
                    a3:2c:03:94:24:d7:d2:79:ff:7f:93:9e:b9:1f:d2:
                    a7:8c:dc:3f:9b:1e:98:ac:de:1d:43:97:27:62:51:
                    5c:0e:28:f2:cb:9b:74:65:91:99:5f:80:03:bc:13:
                    59:b4:5a:67:2f:f3:85:7d:c5:4f:f0:d8:39:72:9f:
                    9c:70:ed:0d:a4:2c:a4:fe:4b:11:f4:c8:97:6f:db:
                    c2:f7:c8:2c:ff:96:57:6d:c6:01:59:9a:dc:b0:46:
                    a1:bd:93:bf:b6:95:ba:89:6e:e7:1a:8b:76:4b:61:
                    a5:c8:9f:40:b8:27:98:ca:34:ff:19:2a:70:f7:f6:
                    2d:55:8f:45:89:51:b0:55:6c:49:46:8b:5f:ef:69:
                    a7:11:d2:f8:a4:a4:97:35:88:8d:15:6c:f8:06:9c:
                    4c:ef:80:7b:45:a3:f2:6d:53:a5:61:c8:1e:5e:f4:
                    26:dc:67:3f:0c:c3:d0:41:08:bf:7b:41:a9:d3:52:
                    99:67:23:75:04:f1:7a:bd:28:67:f1:9c:54:d3:39:
                    15:f5:02:bf:ed:43:ea:09:f9:57:44:7b:1d:2f:e9:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:5F:BD:EB:2F:C4:27:54:CA:1D:76:89:7E:6D:66:E1:47:B8:56:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.196.0/22
                IPv6:
                  2804:774c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271169

    Signature Algorithm: sha256WithRSAEncryption
         54:49:dd:38:ac:95:a2:d1:c7:e2:5c:f9:6b:ef:a3:c5:28:e3:
         d4:c5:d5:d7:a1:cd:2a:31:22:c5:1c:88:16:9c:9e:da:ed:f4:
         89:38:7e:28:bc:d6:ad:d8:82:d2:96:0e:17:e7:4a:47:74:92:
         22:7d:72:0c:31:e4:f7:e4:86:38:b3:69:c1:6d:d5:eb:b1:ef:
         f4:d4:35:31:04:71:ee:8e:46:8a:cf:59:98:d1:0e:d4:a8:cd:
         c3:19:89:7f:47:c9:f5:96:0a:e5:bd:e9:f3:15:d8:d3:17:45:
         00:dd:cc:29:c5:7f:e9:e3:a4:ec:10:bc:be:9c:c6:18:6f:74:
         f0:9f:54:70:f2:a2:96:e4:d9:ce:10:ad:07:7b:98:28:54:e1:
         4b:d7:02:17:16:3c:1d:40:b4:9e:6c:8a:b8:ea:c2:31:7c:47:
         c1:1f:8f:d6:aa:6f:a2:b1:c0:67:e3:03:9f:e3:84:a5:61:19:
         7b:99:fe:17:06:f5:62:b7:b1:6f:7f:95:b8:09:a2:e6:46:d1:
         17:92:5e:82:a4:4f:a8:a5:fc:f0:84:a1:c1:2e:c5:cb:aa:66:
         74:ce:01:6e:7a:19:62:40:2e:46:ea:b8:45:a7:a5:a5:61:12:
         1e:6f:92:11:14:1d:ef:b6:97:03:8c:e2:32:09:85:3d:c0:22:
         c1:ba:ad:f2
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQr6IbGlplvAh4wXiOmj2DxHHlk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDMxNzI5NDBaFw0yNTA0MDIxNzM0NDBaMDMxMTAvBgNV
BAMTKEEyNUZCREVCMkZDNDI3NTRDQTFENzY4OTdFNkQ2NkUxNDdCODU2RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3sjN06j6GEOMU0owWdbSd3B0
nMRyh+eA8hBNO7texw3bm6DTM/ZOEd9Vz6MsA5Qk19J5/3+Tnrkf0qeM3D+bHpis
3h1DlydiUVwOKPLLm3RlkZlfgAO8E1m0Wmcv84V9xU/w2Dlyn5xw7Q2kLKT+SxH0
yJdv28L3yCz/lldtxgFZmtywRqG9k7+2lbqJbucai3ZLYaXIn0C4J5jKNP8ZKnD3
9i1Vj0WJUbBVbElGi1/vaacR0vikpJc1iI0VbPgGnEzvgHtFo/JtU6VhyB5e9Cbc
Zz8Mw9BBCL97QanTUplnI3UE8Xq9KGfxnFTTORX1Ar/tQ+oJ+VdEex0v6Ww/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiX73rL8QnVMod
dol+bWbhR7hW5DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DeHBhaWdMWXoycUN2UGRlV1F5UERUaUsyZkZXMWFCOEY2
RUxaRHJRRTdtei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ3hwYWlnTFl6MnFDdlBkZVdReVBEVGlLMmZGVzFhQjhG
NkVMWkRyUUU3bXovMC9BMjVGQkRFQjJGQzQyNzU0Q0ExRDc2ODk3RTZENjZFMTQ3
Qjg1NkU0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzMMQwDQQCAAIwBwMF
ACgEd0wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCNBMA0GCSqGSIb3DQEBCwUA
A4IBAQBUSd04rJWi0cfiXPlr76PFKOPUxdXXoc0qMSLFHIgWnJ7a7fSJOH4ovNat
2ILSlg4X50pHdJIifXIMMeT35IY4s2nBbdXrse/01DUxBHHujkaKz1mY0Q7UqM3D
GYl/R8n1lgrlvenzFdjTF0UA3cwpxX/p46TsELy+nMYYb3Twn1Rw8qKW5NnOEK0H
e5goVOFL1wIXFjwdQLSebIq46sIxfEfBH4/Wqm+iscBn4wOf44SlYRl7mf4XBvVi
t7Fvf5W4CaLmRtEXkl6CpE+opfzwhKHBLsXLqmZ0zgFuehliQC5G6rhFp6WlYRIe
b5IRFB3vtpcDjOIyCYU9wCLBuq3y
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org