Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer
File:                     A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer (raw, json)
Hash identifier:          EbcvX3dEuTDjXUWKvdi3U6sNEp/J+V+lyEU6XzmE6w0=
Subject key identifier:   A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       345CC1D11E90F24814F2D771D4C06E3E4E2D658F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Mar 2023 21:08:47 +0000
Certificate not after:    Sat 23 Mar 2024 21:13:47 +0000
Subordinate resources:    AS: 263922
                          IP: 138.219.96.0/22
                          IP: 2804:27c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5c:c1:d1:1e:90:f2:48:14:f2:d7:71:d4:c0:6e:3e:4e:2d:65:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 21:08:47 2023 GMT
            Not After : Mar 23 21:13:47 2024 GMT
        Subject: CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:24:2f:2b:b3:8e:32:3c:c1:05:7e:89:8f:
                    76:8b:db:95:01:98:c6:82:33:d5:6e:07:8a:87:36:
                    9a:e0:4d:87:46:31:10:63:4b:53:b3:fa:78:10:d9:
                    4b:89:a9:a1:c3:73:33:d6:ce:3a:30:e8:ca:51:4c:
                    c6:ac:60:f5:46:ea:c1:d0:26:fb:01:4e:15:36:fd:
                    4e:e4:3e:5e:23:2d:e9:1d:68:54:ca:d5:a6:8d:c5:
                    08:2a:3d:09:1a:9f:3d:41:6d:fe:ce:2d:03:74:84:
                    bf:b6:b4:51:94:c1:0d:c2:44:ce:12:47:02:0d:14:
                    c0:4a:d4:9b:1c:8d:a7:db:74:0d:16:be:ba:ce:c2:
                    1c:6e:41:b3:ad:d8:eb:b8:31:a3:39:ea:70:93:3c:
                    17:e9:ef:8b:b4:e2:6b:54:c8:da:92:58:32:8d:0f:
                    88:07:25:71:d7:dc:da:ff:62:46:ab:d8:a9:87:53:
                    d1:86:e0:f1:dc:8e:51:77:4a:6c:45:e6:a0:c2:43:
                    50:72:60:f5:34:3b:7c:bd:10:20:11:b3:ec:fb:06:
                    bf:da:8d:29:03:33:2f:e4:72:a4:63:9c:44:c2:a1:
                    1b:c2:da:70:81:ec:ae:f8:f2:70:d9:cf:53:b3:57:
                    cf:78:93:89:6f:62:4a:11:25:2d:63:6e:95:da:64:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.96.0/22
                IPv6:
                  2804:27c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263922

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:52:e5:4a:58:c2:03:53:5b:de:40:03:5e:3d:58:07:1d:
         ce:f1:47:f1:06:6f:64:ef:da:18:d9:f9:7b:c9:20:17:28:73:
         82:78:58:7a:e0:51:04:80:7e:0d:3e:bb:54:7a:56:05:cf:14:
         f1:1f:f5:be:5b:f4:3b:0e:f3:10:af:71:f2:7c:cc:9d:7a:e4:
         07:f9:19:bc:4b:83:d6:fe:a0:2a:6b:e6:3f:d3:ce:37:67:a2:
         91:60:a7:10:02:1d:7f:b6:09:9c:b1:d7:03:d9:f6:a6:62:07:
         ac:29:bb:cb:5d:c3:6f:36:bf:8e:bf:a8:17:3d:9b:6e:dd:dd:
         65:0a:83:28:dc:82:4f:7a:b5:cb:db:76:f8:e3:fa:ec:70:13:
         d8:70:81:77:b1:68:4d:5a:03:05:67:5b:68:4d:b2:c3:31:6e:
         ee:6e:d8:ee:9d:a0:e5:29:43:82:18:79:d9:02:9c:55:5c:5d:
         39:69:b6:31:b9:f0:ac:08:38:1b:b6:6c:01:ae:a2:54:40:ab:
         6b:77:df:f1:61:0a:64:6c:e4:5b:be:3a:09:43:2e:3e:11:4b:
         86:85:ec:d4:1c:b6:ad:53:43:73:db:93:f9:a5:22:45:ce:f3:
         7e:1e:9f:12:49:b0:b1:09:6f:3d:81:f3:4b:89:ca:a7:ce:b7:
         ed:47:04:f1
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUNFzB0R6Q8kgU8tdx1MBuPk4tZY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjUyMTA4NDdaFw0yNDAzMjMyMTEzNDdaMDMxMTAvBgNV
BAMTKEE0MzBDNkYzNDk3Rjk1N0UzNkM3RUJGRjc4OEFEMUJCQzk4OTYzNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8CQvK7OOMjzBBX6Jj3aL25UB
mMaCM9VuB4qHNprgTYdGMRBjS1Oz+ngQ2UuJqaHDczPWzjow6MpRTMasYPVG6sHQ
JvsBThU2/U7kPl4jLekdaFTK1aaNxQgqPQkanz1Bbf7OLQN0hL+2tFGUwQ3CRM4S
RwINFMBK1JscjafbdA0WvrrOwhxuQbOt2Ou4MaM56nCTPBfp74u04mtUyNqSWDKN
D4gHJXHX3Nr/Ykar2KmHU9GG4PHcjlF3SmxF5qDCQ1ByYPU0O3y9ECARs+z7Br/a
jSkDMy/kcqRjnETCoRvC2nCB7K748nDZz1OzV894k4lvYkoRJS1jbpXaZPeDAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkMMbzSX+VfjbH
6/94itG7yYljcDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KQjl5dFlHWFdVTnZWYkR3dkFqdnNBc2cxVGEybldCeXhB
R2lXY1dYdlBWNi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KQjl5dFlHWFdVTnZWYkR3dkFqdnNBc2cxVGEybldCeXhB
R2lXY1dYdlBWNi8wL0E0MzBDNkYzNDk3Rjk1N0UzNkM3RUJGRjc4OEFEMUJCQzk4
OTYzNzAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAorbYDANBAIAAjAHAwUA
KAQnyDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBvIwDQYJKoZIhvcNAQELBQAD
ggEBAJrYUuVKWMIDU1veQANePVgHHc7xR/EGb2Tv2hjZ+XvJIBcoc4J4WHrgUQSA
fg0+u1R6VgXPFPEf9b5b9DsO8xCvcfJ8zJ165Af5GbxLg9b+oCpr5j/TzjdnopFg
pxACHX+2CZyx1wPZ9qZiB6wpu8tdw282v46/qBc9m27d3WUKgyjcgk96tcvbdvjj
+uxwE9hwgXexaE1aAwVnW2hNssMxbu5u2O6doOUpQ4IYedkCnFVcXTlptjG58KwI
OBu2bAGuolRAq2t33/FhCmRs5Fu+OglDLj4RS4aF7NQctq1TQ3Pbk/mlIkXO834e
nxJJsLEJbz2B80uJyqfOt+1HBPE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org