Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.cer
File:                     A8125301CCFFF14B6F273F5B4F08F9000BA221C3.cer (raw, json)
Hash identifier:          uANB3Qb6QmCfQn1t5dc28f3Uh6AXRPWjzxDdKGH3CGg=
Subject key identifier:   A8:12:53:01:CC:FF:F1:4B:6F:27:3F:5B:4F:08:F9:00:0B:A2:21:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       250D08305E5CDA806CD5880183006005FAF083C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Aug 2023 20:15:59 +0000
Certificate not after:    Wed 07 Aug 2024 20:20:59 +0000
Subordinate resources:    AS: 264125
                          IP: 138.94.44.0/22
                          IP: 2804:22d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0d:08:30:5e:5c:da:80:6c:d5:88:01:83:00:60:05:fa:f0:83:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  9 20:15:59 2023 GMT
            Not After : Aug  7 20:20:59 2024 GMT
        Subject: CN=A8125301CCFFF14B6F273F5B4F08F9000BA221C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:65:a5:6b:21:c6:ed:cd:d0:78:f9:50:38:6a:
                    ba:aa:82:bd:a6:88:ad:e7:76:96:42:a3:3b:aa:96:
                    c6:b3:da:6b:32:7c:b6:ec:0a:59:58:3c:51:7f:93:
                    c3:f9:e4:a8:46:a9:64:74:9f:5e:08:6d:e1:de:7d:
                    42:aa:fd:94:71:9c:f3:f3:84:5f:65:29:30:a5:1b:
                    f1:63:1e:dd:3f:ea:7d:8b:bc:b2:6a:f8:be:03:e3:
                    59:b4:bc:84:9e:2b:00:1e:c6:04:08:99:ce:22:28:
                    c9:99:2b:03:4d:15:b2:71:2a:41:f7:34:33:ae:e7:
                    5d:4e:54:06:a9:9a:bd:45:1a:bf:c1:61:2c:ae:4a:
                    f3:9a:b4:81:e5:07:f6:31:99:3c:c8:20:7b:6e:44:
                    d1:f7:2c:9c:d4:4e:68:be:69:82:ba:76:c9:73:47:
                    d6:7e:87:35:cb:2a:24:c1:4f:1d:f2:d9:ad:fe:63:
                    d9:f5:15:8d:32:42:9a:6a:b2:62:4e:88:c2:43:20:
                    4b:d8:d2:a4:88:4a:f7:d8:0f:db:b9:10:c7:e4:98:
                    02:30:ca:08:71:6b:b0:ba:53:f9:b8:5a:d0:78:b5:
                    29:2a:3e:75:c5:85:9c:4d:4c:75:69:80:f7:fb:18:
                    f7:0a:fc:ef:04:7b:10:c6:9a:23:32:59:68:34:43:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:12:53:01:CC:FF:F1:4B:6F:27:3F:5B:4F:08:F9:00:0B:A2:21:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.44.0/22
                IPv6:
                  2804:22d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264125

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:41:59:dd:90:b2:c5:d0:4e:26:be:4d:54:4a:a3:65:a0:
         fc:22:55:fc:bb:21:d6:a6:22:2d:c3:44:e0:ac:2f:2c:f8:44:
         cd:c6:b0:b6:0d:b5:98:47:eb:75:28:eb:61:ae:2c:a8:ca:31:
         ab:52:84:e6:ef:7f:1f:85:89:82:81:09:d6:e3:31:42:8d:3c:
         69:d2:83:67:47:36:27:10:05:b3:fe:6d:bb:a5:aa:19:c9:11:
         38:91:f2:ac:79:0c:11:61:78:b5:f4:62:ac:cb:33:ce:a8:d4:
         e8:67:b0:55:89:8b:d5:29:30:ad:9e:0b:51:ce:ed:85:38:4d:
         96:dd:a4:86:94:d7:32:f2:72:61:1f:12:d1:9a:db:79:3a:63:
         8e:18:de:41:93:2a:af:3b:41:e4:56:75:21:f5:91:f1:1b:86:
         f5:fa:d0:82:ca:af:93:5f:14:04:d7:6e:2b:48:43:d3:56:1b:
         17:91:c3:0c:bf:cb:89:44:be:eb:a7:29:01:b0:2f:da:e4:73:
         85:da:ed:23:c6:ff:34:94:32:53:66:41:33:96:d1:a0:bc:0e:
         25:de:e3:c2:42:03:e0:a6:0b:3f:8c:42:08:e6:9f:a0:c4:a6:
         c8:69:fc:c2:bb:ba:48:06:b3:c3:68:a3:8b:a7:d0:1e:3f:61:
         37:2e:fd:5c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJQ0IMF5c2oBs1YgBgwBgBfrwg8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MDkyMDE1NTlaFw0yNDA4MDcyMDIwNTlaMDMxMTAvBgNV
BAMTKEE4MTI1MzAxQ0NGRkYxNEI2RjI3M0Y1QjRGMDhGOTAwMEJBMjIxQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoZaVrIcbtzdB4+VA4arqqgr2m
iK3ndpZCozuqlsaz2msyfLbsCllYPFF/k8P55KhGqWR0n14IbeHefUKq/ZRxnPPz
hF9lKTClG/FjHt0/6n2LvLJq+L4D41m0vISeKwAexgQImc4iKMmZKwNNFbJxKkH3
NDOu511OVAapmr1FGr/BYSyuSvOatIHlB/YxmTzIIHtuRNH3LJzUTmi+aYK6dslz
R9Z+hzXLKiTBTx3y2a3+Y9n1FY0yQppqsmJOiMJDIEvY0qSISvfYD9u5EMfkmAIw
yghxa7C6U/m4WtB4tSkqPnXFhZxNTHVpgPf7GPcK/O8EexDGmiMyWWg0Q6kTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoElMBzP/xS28n
P1tPCPkAC6IhwzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82c1RHMjFvSG9kTFFxdXJWMWg2V2hoTnVKb1lDdVJrTEFL
dnFOUW1tZkdnRS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNnNURzIxb0hvZExRcXVyVjFoNldoaE51Sm9ZQ3VSa0xB
S3ZxTlFtbWZHZ0UvMC9BODEyNTMwMUNDRkZGMTRCNkYyNzNGNUI0RjA4RjkwMDBC
QTIyMUMzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKXiwwDQQCAAIwBwMF
ACgEItQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAe9MA0GCSqGSIb3DQEBCwUA
A4IBAQCCqkFZ3ZCyxdBOJr5NVEqjZaD8IlX8uyHWpiItw0TgrC8s+ETNxrC2DbWY
R+t1KOthriyoyjGrUoTm738fhYmCgQnW4zFCjTxp0oNnRzYnEAWz/m27paoZyRE4
kfKseQwRYXi19GKsyzPOqNToZ7BViYvVKTCtngtRzu2FOE2W3aSGlNcy8nJhHxLR
mtt5OmOOGN5BkyqvO0HkVnUh9ZHxG4b1+tCCyq+TXxQE124rSEPTVhsXkcMMv8uJ
RL7rpykBsC/a5HOF2u0jxv80lDJTZkEzltGgvA4l3uPCQgPgpgs/jEII5p+gxKbI
afzCu7pIBrPDaKOLp9AeP2E3Lv1c
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org