Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer
File:                     A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer (raw, json)
Hash identifier:          SSJUSApfoRZleRxJuFkBOiLuv/q+QUhd12b6oRvNty4=
Subject key identifier:   A2:8C:39:40:8C:13:CA:9D:E2:7B:AE:FC:F4:DD:6F:B6:6B:0B:E7:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1366FBC5D72A462339745193138D49EEC7D6EB81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Dec 2023 19:03:52 +0000
Certificate not after:    Fri 20 Dec 2024 19:08:52 +0000
Subordinate resources:    AS: 262803
                          IP: 186.250.16.0/21
                          IP: 2804:250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:66:fb:c5:d7:2a:46:23:39:74:51:93:13:8d:49:ee:c7:d6:eb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 22 19:03:52 2023 GMT
            Not After : Dec 20 19:08:52 2024 GMT
        Subject: CN=A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:32:74:0f:f5:9e:25:27:f3:15:9c:e4:bb:
                    ed:40:82:15:92:ba:c5:b6:d5:64:28:ab:0c:a4:7b:
                    66:c1:72:a4:e7:15:2a:fc:a4:a4:3e:6e:09:7e:e9:
                    a0:c5:1a:40:bb:dc:ff:b1:70:d2:99:08:71:ed:a3:
                    32:c4:58:76:6d:2f:e9:58:c9:69:be:eb:8c:96:58:
                    40:e5:82:c8:ad:9e:cc:36:68:39:02:ef:a6:fa:12:
                    88:73:62:09:69:31:0e:5f:aa:5e:54:7e:5a:a3:d3:
                    c8:05:ad:2f:66:31:b7:d4:13:bf:ab:08:f1:0f:d9:
                    56:8e:6e:6b:1b:8c:a1:a7:a8:bc:61:75:49:0a:26:
                    52:9f:ec:ab:4a:b5:58:fa:aa:dd:97:51:e5:56:af:
                    47:2a:8b:94:d7:1b:d7:07:2e:ea:ab:a5:d1:01:33:
                    bb:5c:05:c4:3d:a8:fd:a1:71:d3:f0:af:c1:99:42:
                    59:93:d9:2a:12:c9:bc:5a:df:77:f6:28:23:45:4e:
                    78:02:a2:b3:c4:92:4b:4c:5f:27:7d:1f:62:16:aa:
                    8c:6f:de:63:52:41:18:a7:15:b0:b2:54:4a:df:fa:
                    67:11:ad:f4:63:26:b6:36:e6:cb:95:7a:f8:ee:09:
                    c0:1b:98:66:34:05:be:4d:6d:ed:7b:68:b1:90:ea:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:8C:39:40:8C:13:CA:9D:E2:7B:AE:FC:F4:DD:6F:B6:6B:0B:E7:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.16.0/21
                IPv6:
                  2804:250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262803

    Signature Algorithm: sha256WithRSAEncryption
         55:96:e8:a9:ba:0e:65:23:6c:2c:ad:ab:c7:05:e5:be:5d:07:
         d2:39:1e:be:1f:5d:98:80:22:53:c6:4d:ae:ef:81:29:db:84:
         d5:0a:41:72:cb:09:2a:02:94:ac:3f:af:5d:22:04:7e:43:e1:
         f1:24:2c:6b:5c:d0:f3:d6:ed:a2:89:07:17:96:fc:4f:24:3e:
         64:9f:46:e6:8c:54:51:eb:db:36:21:d1:af:ba:ab:db:0c:b6:
         c3:b6:6f:3d:85:a0:da:51:78:8c:80:fd:47:95:b0:24:cb:08:
         02:79:41:69:fa:a0:55:d3:98:01:6d:85:b8:33:4e:13:6a:1d:
         6f:89:a6:fd:fa:7d:e2:0d:bf:25:30:28:20:c0:32:49:73:4c:
         d1:ae:d7:3a:37:c1:cb:0b:2a:8b:78:f2:28:f7:03:71:3e:6d:
         49:d4:c8:b5:d5:84:0a:1f:f6:58:03:24:96:dc:5f:75:d6:5e:
         52:7c:bc:b5:2c:86:4d:96:0a:c3:28:a4:ab:fe:10:f6:66:b8:
         fb:62:3e:80:ad:ca:cb:65:74:b1:b4:c5:3a:cf:80:7f:46:f6:
         6f:e3:97:61:ba:f0:bd:45:cd:f9:c7:a2:2e:2e:c6:18:0a:98:
         e0:b3:f4:7c:55:a6:43:b8:e4:9e:d0:64:2c:b8:67:a0:da:20:
         8a:09:70:c9
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUE2b7xdcqRiM5dFGTE41J7sfW64EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjIxOTAzNTJaFw0yNDEyMjAxOTA4NTJaMDMxMTAvBgNV
BAMTKEEyOEMzOTQwOEMxM0NBOURFMjdCQUVGQ0Y0REQ2RkI2NkIwQkU3MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdzJ0D/WeJSfzFZzku+1AghWS
usW21WQoqwyke2bBcqTnFSr8pKQ+bgl+6aDFGkC73P+xcNKZCHHtozLEWHZtL+lY
yWm+64yWWEDlgsitnsw2aDkC76b6EohzYglpMQ5fql5Uflqj08gFrS9mMbfUE7+r
CPEP2VaObmsbjKGnqLxhdUkKJlKf7KtKtVj6qt2XUeVWr0cqi5TXG9cHLuqrpdEB
M7tcBcQ9qP2hcdPwr8GZQlmT2SoSybxa33f2KCNFTngCorPEkktMXyd9H2IWqoxv
3mNSQRinFbCyVErf+mcRrfRjJrY25suVevjuCcAbmGY0Bb5Nbe17aLGQ6jt5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSijDlAjBPKneJ7
rvz03W+2awvnKzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zYWRha2dQZGdtRTdOOExadEVqQk5waGZtc3FpcGpnZXVT
bjFkTnNHUGpQSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1
U24xZE5zR1BqUEovMC9BMjhDMzk0MDhDMTNDQTlERTI3QkFFRkNGNERENkZCNjZC
MEJFNzJCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAO6+hAwDQQCAAIwBwMF
ACgEAlAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAKTMA0GCSqGSIb3DQEBCwUA
A4IBAQBVluipug5lI2wsravHBeW+XQfSOR6+H12YgCJTxk2u74Ep24TVCkFyywkq
ApSsP69dIgR+Q+HxJCxrXNDz1u2iiQcXlvxPJD5kn0bmjFRR69s2IdGvuqvbDLbD
tm89haDaUXiMgP1HlbAkywgCeUFp+qBV05gBbYW4M04Tah1viab9+n3iDb8lMCgg
wDJJc0zRrtc6N8HLCyqLePIo9wNxPm1J1Mi11YQKH/ZYAySW3F911l5SfLy1LIZN
lgrDKKSr/hD2Zrj7Yj6ArcrLZXSxtMU6z4B/RvZv45dhuvC9Rc35x6IuLsYYCpjg
s/R8VaZDuOSe0GQsuGeg2iCKCXDJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org