Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A85AA496A7D8A1E16AF857577A48FE6FF5A94587.cer
File:                     A85AA496A7D8A1E16AF857577A48FE6FF5A94587.cer (raw, json)
Hash identifier:          s2cXM55kHg0QjYrVjbpyWwNTV/dwnHGyiToM2po8Gm8=
Subject key identifier:   A8:5A:A4:96:A7:D8:A1:E1:6A:F8:57:57:7A:48:FE:6F:F5:A9:45:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       272E9F357FE5DE95F58A5E2D943E3162A46EFD8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0/A85AA496A7D8A1E16AF857577A48FE6FF5A94587.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Sep 2022 19:39:24 +0000
Certificate not after:    Tue 19 Sep 2023 19:44:24 +0000
Subordinate resources:    AS: 266498
                          IP: 170.244.72.0/22
                          IP: 2804:38bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2e:9f:35:7f:e5:de:95:f5:8a:5e:2d:94:3e:31:62:a4:6e:fd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 19:39:24 2022 GMT
            Not After : Sep 19 19:44:24 2023 GMT
        Subject: CN=A85AA496A7D8A1E16AF857577A48FE6FF5A94587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:a1:bf:be:b9:9a:ac:10:15:e9:cb:c7:31:
                    22:41:8b:9c:d9:5d:7b:1c:17:d3:13:43:39:36:17:
                    d3:e6:08:c5:0a:fb:e9:24:6d:4e:47:53:63:86:80:
                    4e:21:fb:10:cb:0c:bf:cd:2f:19:60:c2:72:9b:c4:
                    c2:27:80:7e:dd:b1:b9:fe:dd:b9:45:88:df:89:c8:
                    97:32:b0:0f:d6:41:65:05:34:2e:0e:ce:b4:b4:15:
                    a8:55:6a:77:7a:67:d6:a0:24:4d:14:39:90:09:f6:
                    bb:ef:d5:36:20:3e:7f:00:13:5b:14:17:f8:bd:8f:
                    89:a4:ac:93:50:a4:b0:d2:08:d2:14:62:0e:b6:08:
                    da:64:41:b2:bb:f6:96:c2:28:1e:1d:48:97:e3:db:
                    ea:ec:2e:e4:3a:c0:b3:7f:11:87:0f:4f:77:e1:65:
                    9d:da:cc:5b:d3:51:91:c3:5c:23:2a:1e:3f:fc:68:
                    c2:f8:8d:1b:5b:1d:e5:e1:c6:20:11:0b:94:52:5c:
                    3c:a8:4b:c6:c1:70:67:e5:14:f2:f1:be:4a:91:25:
                    a9:1a:f7:a8:db:30:e2:ee:8d:52:84:e3:04:42:25:
                    9a:5b:23:a2:5c:0a:a0:93:5d:3b:fc:ef:1e:d0:36:
                    a3:ad:f6:b9:4e:70:71:ee:8a:9e:25:9a:dc:79:3c:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:5A:A4:96:A7:D8:A1:E1:6A:F8:57:57:7A:48:FE:6F:F5:A9:45:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0/A85AA496A7D8A1E16AF857577A48FE6FF5A94587.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/22
                IPv6:
                  2804:38bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266498

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:cb:47:af:fd:ce:d1:53:29:88:86:86:66:4f:1f:5d:7e:
         74:03:09:85:f1:91:ae:52:fc:2a:47:2b:c2:db:85:e6:a9:77:
         05:a0:94:86:e6:4c:42:f6:4d:f5:1d:95:ac:e6:a8:e3:f0:60:
         62:ef:a7:c4:f1:33:fc:7a:08:b2:52:34:0d:0f:13:da:51:3c:
         29:ba:64:bd:74:cb:82:1f:60:74:f5:c9:10:0a:32:ae:42:68:
         ba:19:4f:5d:71:91:04:15:5e:4f:70:f6:b7:e8:04:8d:6b:a6:
         04:3f:d6:9f:c1:4c:3c:3a:e0:39:07:11:bf:c9:19:20:47:2f:
         5c:d3:73:5a:6a:f1:7b:be:ad:27:74:e5:c1:bc:ec:d2:a1:5d:
         35:1d:83:e6:eb:9e:ca:f6:92:34:e0:d0:34:a6:55:e9:93:f0:
         25:36:c1:18:5c:bc:5c:8c:7f:96:80:1b:ca:eb:13:a2:e1:57:
         c1:d5:f7:e9:28:93:36:3a:79:17:0b:2d:34:6e:2d:e3:c8:7d:
         4a:d2:2c:19:06:4e:3d:97:0c:be:98:e3:e7:f1:30:68:7e:47:
         b4:4f:fd:b3:74:b5:8b:80:b7:ef:f0:19:4a:c7:5a:94:22:b8:
         01:ba:58:20:10:a0:ca:58:a9:b3:36:35:c2:f8:fa:9b:fc:4c:
         d7:44:e8:aa
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUJy6fNX/l3pX1il4tlD4xYqRu/Y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MjAxOTM5MjRaFw0yMzA5MTkxOTQ0MjRaMDMxMTAvBgNV
BAMTKEE4NUFBNDk2QTdEOEExRTE2QUY4NTc1NzdBNDhGRTZGRjVBOTQ1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2naG/vrmarBAV6cvHMSJBi5zZ
XXscF9MTQzk2F9PmCMUK++kkbU5HU2OGgE4h+xDLDL/NLxlgwnKbxMIngH7dsbn+
3blFiN+JyJcysA/WQWUFNC4OzrS0FahVand6Z9agJE0UOZAJ9rvv1TYgPn8AE1sU
F/i9j4mkrJNQpLDSCNIUYg62CNpkQbK79pbCKB4dSJfj2+rsLuQ6wLN/EYcPT3fh
ZZ3azFvTUZHDXCMqHj/8aML4jRtbHeXhxiARC5RSXDyoS8bBcGflFPLxvkqRJaka
96jbMOLujVKE4wRCJZpbI6JcCqCTXTv87x7QNqOt9rlOcHHuip4lmtx5PIXrAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoWqSWp9ih4Wr4
V1d6SP5v9alFhzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaEZXbnBuNmdlNEpoSGZXbndrcVppRnplYzRwNVVLN3Jm
cEd6dlpIS0x3Uy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaEZXbnBuNmdlNEpoSGZXbndrcVppRnplYzRwNVVLN3Jm
cEd6dlpIS0x3Uy8wL0E4NUFBNDk2QTdEOEExRTE2QUY4NTc1NzdBNDhGRTZGRjVB
OTQ1ODcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr0SDANBAIAAjAHAwUA
KAQ4vDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEQIwDQYJKoZIhvcNAQELBQAD
ggEBAAzdy0ev/c7RUymIhoZmTx9dfnQDCYXxka5S/CpHK8LbheapdwWglIbmTEL2
TfUdlazmqOPwYGLvp8TxM/x6CLJSNA0PE9pRPCm6ZL10y4IfYHT1yRAKMq5CaLoZ
T11xkQQVXk9w9rfoBI1rpgQ/1p/BTDw64DkHEb/JGSBHL1zTc1pq8Xu+rSd05cG8
7NKhXTUdg+brnsr2kjTg0DSmVemT8CU2wRhcvFyMf5aAG8rrE6LhV8HV9+kokzY6
eRcLLTRuLePIfUrSLBkGTj2XDL6Y4+fxMGh+R7RP/bN0tYuAt+/wGUrHWpQiuAG6
WCAQoMpYqbM2NcL4+pv8TNdE6Ko=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org