Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer
File:                     A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer (raw, json)
Hash identifier:          ojxy5eRLS5aG/CTlmnWH1Rm7t9BcMBccAe6njHDlGHg=
Subject key identifier:   A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       052337E1530E00F02E104B02AF4DB226D9244B83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Sep 2022 19:46:05 +0000
Certificate not after:    Sun 17 Sep 2023 19:51:05 +0000
Subordinate resources:    AS: 266999
                          IP: 45.226.244.0/22
                          IP: 2804:4698::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:23:37:e1:53:0e:00:f0:2e:10:4b:02:af:4d:b2:26:d9:24:4b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 19:46:05 2022 GMT
            Not After : Sep 17 19:51:05 2023 GMT
        Subject: CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:a1:28:6b:8b:d3:22:4f:50:25:88:9e:83:
                    6d:fb:86:f9:90:ac:9c:44:75:ad:59:2e:e6:a0:ad:
                    1b:b0:59:ff:7a:b2:95:73:ee:1b:2e:22:b1:a6:53:
                    c3:47:ad:ad:9c:8d:d8:6a:44:f1:79:07:0b:b5:b3:
                    14:71:44:c1:00:58:72:3b:aa:97:2f:d1:7b:06:c9:
                    5a:fb:9a:06:0e:11:05:5b:cf:ba:ff:65:22:f8:7b:
                    3a:28:c7:29:d9:26:61:ee:09:db:85:fb:1f:a8:ba:
                    da:41:63:e7:55:5b:5d:9f:bc:01:2f:77:3b:3a:2b:
                    61:5a:75:da:ba:72:56:85:c6:f3:79:af:f7:de:29:
                    47:49:4e:b8:96:c3:f1:1c:f0:f5:78:8e:d3:07:dc:
                    5d:79:72:8e:3e:27:3a:86:37:84:71:ec:ea:cb:40:
                    90:9c:86:81:d8:0c:49:b3:da:3a:67:01:56:c3:d6:
                    4e:91:64:46:54:61:6a:24:48:5a:71:ab:94:c6:fb:
                    be:73:07:9e:42:a8:76:0d:48:76:5c:4c:91:7b:38:
                    ec:b7:47:e6:e9:de:35:68:d0:62:40:23:b9:bd:6d:
                    39:c5:ea:db:b3:c6:e4:b6:1c:7c:eb:c2:4c:0e:10:
                    85:b0:30:f8:e9:5f:89:1b:a1:7d:95:e4:81:a5:ca:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.244.0/22
                IPv6:
                  2804:4698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266999

    Signature Algorithm: sha256WithRSAEncryption
         59:43:b1:ba:d3:e7:32:26:30:31:cf:a1:f1:bb:94:12:3e:c7:
         af:31:f6:47:c0:13:83:b1:bd:29:14:7a:79:84:0f:1e:6b:2d:
         5c:6a:1f:19:2e:26:7f:71:26:b9:0f:2d:5f:30:40:a1:e0:50:
         9f:13:21:bc:c2:dd:5c:a2:e5:8f:4d:8b:10:a2:97:ca:bb:8f:
         e4:79:47:c7:37:59:c6:49:05:ea:a3:7b:c0:86:d1:04:91:02:
         f5:62:48:5c:ba:82:a9:4d:7a:c0:7f:aa:ad:0b:00:00:cd:cb:
         bc:24:9f:30:96:1a:8e:68:b1:cc:56:e3:4c:55:b2:70:09:d6:
         20:55:7a:d9:b6:69:4c:d1:f7:c3:d0:29:cf:9a:33:a4:a5:bb:
         ad:c1:2c:3b:01:68:e8:cb:55:a0:e4:7c:08:e8:44:7b:1a:b7:
         8e:d9:e2:a1:cd:6b:13:c6:22:da:ae:2c:92:f7:0c:b5:a2:4e:
         2a:b7:49:81:22:52:e5:b5:f5:d7:36:7b:b6:38:b6:d4:1a:55:
         5c:73:72:05:77:a0:99:35:ad:2a:da:66:e0:cf:f9:d3:fc:33:
         6c:23:27:bf:ee:b6:b6:9a:f7:cf:cf:3f:1b:17:e6:91:9a:ff:
         99:82:46:d0:af:18:32:5b:b4:09:fd:35:4a:92:78:c4:c3:1b:
         c7:7d:ff:b5
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUBSM34VMOAPAuEEsCr02yJtkkS4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MTgxOTQ2MDVaFw0yMzA5MTcxOTUxMDVaMDMxMTAvBgNV
BAMTKEE1QjhBMDQwMUEzQkQ0ODNEQUM3ODFBRkYyRTUzRDdFMUJFQzZCNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpqEoa4vTIk9QJYieg237hvmQ
rJxEda1ZLuagrRuwWf96spVz7hsuIrGmU8NHra2cjdhqRPF5Bwu1sxRxRMEAWHI7
qpcv0XsGyVr7mgYOEQVbz7r/ZSL4ezooxynZJmHuCduF+x+outpBY+dVW12fvAEv
dzs6K2Faddq6claFxvN5r/feKUdJTriWw/Ec8PV4jtMH3F15co4+JzqGN4Rx7OrL
QJCchoHYDEmz2jpnAVbD1k6RZEZUYWokSFpxq5TG+75zB55CqHYNSHZcTJF7OOy3
R+bp3jVo0GJAI7m9bTnF6tuzxuS2HHzrwkwOEIWwMPjpX4kboX2V5IGlytqZAgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSluKBAGjvUg9rH
ga/y5T1+G+xrTTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9OS0o4dlBWUWRaVjZzN1Q5c252NVB5ZXN4aFVhVVNIYWE0
dE1CY05DZ3FGLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL05LSjh2UFZRZFpWNnM3VDlzbnY1UHllc3hoVWFVU0hhYTR0
TUJjTkNncUYvMC9BNUI4QTA0MDFBM0JENDgzREFDNzgxQUZGMkU1M0Q3RTFCRUM2
QjRELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt4vQwDQQCAAIwBwMFACgE
RpgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBL3MA0GCSqGSIb3DQEBCwUAA4IB
AQBZQ7G60+cyJjAxz6Hxu5QSPsevMfZHwBODsb0pFHp5hA8eay1cah8ZLiZ/cSa5
Dy1fMECh4FCfEyG8wt1couWPTYsQopfKu4/keUfHN1nGSQXqo3vAhtEEkQL1Ykhc
uoKpTXrAf6qtCwAAzcu8JJ8wlhqOaLHMVuNMVbJwCdYgVXrZtmlM0ffD0CnPmjOk
pbutwSw7AWjoy1Wg5HwI6ER7GreO2eKhzWsTxiLariyS9wy1ok4qt0mBIlLltfXX
Nnu2OLbUGlVcc3IFd6CZNa0q2mbgz/nT/DNsIye/7ra2mvfPzz8bF+aRmv+ZgkbQ
rxgyW7QJ/TVKknjEwxvHff+1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org