Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.cer
File:                     AA9C922523E2807EB8815AAA762240EEC9AE442D.cer (raw, json)
Hash identifier:          g8f1fDuYcN6xukgbXxjNg5BZEJ+6+8QKlYWHo1aOdHs=
Subject key identifier:   AA:9C:92:25:23:E2:80:7E:B8:81:5A:AA:76:22:40:EE:C9:AE:44:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54641E5536A0A209228DBB50DF837A6CBB85A398
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Mar 2024 20:29:06 +0000
Certificate not after:    Sat 22 Mar 2025 20:34:06 +0000
Subordinate resources:    AS: 270984
                          IP: 131.221.140.0/22
                          IP: 2804:747c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:64:1e:55:36:a0:a2:09:22:8d:bb:50:df:83:7a:6c:bb:85:a3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 23 20:29:06 2024 GMT
            Not After : Mar 22 20:34:06 2025 GMT
        Subject: CN=AA9C922523E2807EB8815AAA762240EEC9AE442D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:5d:b9:8d:e2:72:88:5e:00:bf:80:f3:26:
                    03:e2:96:23:92:b3:b5:79:6b:c6:81:6a:33:db:10:
                    03:33:8a:27:a7:ef:d6:05:8e:78:49:92:45:f3:4f:
                    32:3e:70:a8:4e:95:04:18:cc:e9:dc:84:d5:5b:0f:
                    73:df:71:f8:c4:ea:87:46:5e:47:b1:68:6a:d0:43:
                    0b:be:31:fd:27:2b:46:2e:49:e9:d8:9e:da:25:3c:
                    93:2c:6a:22:da:ff:d7:9e:4a:94:51:21:7f:7c:64:
                    2b:5d:6c:1e:1e:82:10:7c:a6:a2:f0:6c:fd:bf:6e:
                    a5:83:80:bd:4b:b8:a0:b6:bf:d1:c1:2e:8a:e4:83:
                    45:4f:1e:e7:c4:80:81:9f:bb:73:bb:a4:78:78:98:
                    94:2b:1c:8c:12:f6:9e:ba:11:4d:ff:44:77:85:95:
                    1e:79:cd:4f:e6:9e:f4:6b:99:1a:94:ed:91:ab:6e:
                    5a:d8:6e:cd:67:1f:06:fa:9a:f2:8b:bb:6a:c7:13:
                    e8:79:ee:c5:c9:65:ce:74:79:9b:56:af:3d:68:35:
                    73:a8:54:b6:e2:6d:55:11:21:3d:99:c5:be:d8:a6:
                    2c:aa:d9:34:45:24:f8:f2:40:41:93:d8:b5:a3:b1:
                    24:23:be:32:cc:d8:00:61:b5:ee:73:ad:ae:ca:fe:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:9C:92:25:23:E2:80:7E:B8:81:5A:AA:76:22:40:EE:C9:AE:44:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.140.0/22
                IPv6:
                  2804:747c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270984

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:bd:90:d8:1e:f6:1a:a6:12:74:85:de:29:3a:65:87:32:
         38:8a:86:87:da:37:a4:f0:03:34:83:da:bb:c8:7a:0e:f2:f7:
         17:e9:41:b9:ba:04:66:e9:d9:3c:55:b5:08:d9:1c:3d:f6:04:
         1c:ee:20:2a:35:4e:48:19:be:2d:62:96:dd:1d:1e:f8:af:a7:
         dd:2e:fb:6d:39:1f:e7:4a:1c:68:a4:15:a2:ab:0b:d4:f3:42:
         f0:13:24:50:a5:14:02:73:d1:f0:c4:ba:4c:00:32:2a:ac:6d:
         94:29:82:5a:33:c7:fd:51:28:79:c3:c8:d8:ca:d3:06:84:e4:
         6b:18:2c:77:d1:81:84:d6:0e:70:70:07:f1:86:f4:e2:fa:10:
         6e:99:bd:0f:b8:e4:75:34:1e:39:92:97:a6:da:3f:0c:a4:f0:
         dd:a7:fc:db:07:37:d7:9c:b3:cf:83:42:b0:bb:e0:b0:89:fb:
         f1:54:fd:10:8e:59:3f:d9:27:89:d7:d3:5f:91:fc:ca:93:90:
         d1:3c:4b:d2:c0:cb:f7:ab:de:b6:92:19:56:31:2c:3c:e3:0f:
         1e:31:5f:5a:1b:93:84:14:15:08:86:b8:ac:00:2a:08:ba:0c:
         60:15:68:ef:9f:77:a9:5a:cc:6f:05:19:6e:87:49:e3:b0:2c:
         04:40:6a:fb
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUVGQeVTagogkijbtQ34N6bLuFo5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjMyMDI5MDZaFw0yNTAzMjIyMDM0MDZaMDMxMTAvBgNV
BAMTKEFBOUM5MjI1MjNFMjgwN0VCODgxNUFBQTc2MjI0MEVFQzlBRTQ0MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd1F25jeJyiF4Av4DzJgPiliOS
s7V5a8aBajPbEAMziien79YFjnhJkkXzTzI+cKhOlQQYzOnchNVbD3PfcfjE6odG
XkexaGrQQwu+Mf0nK0YuSenYntolPJMsaiLa/9eeSpRRIX98ZCtdbB4eghB8pqLw
bP2/bqWDgL1LuKC2v9HBLorkg0VPHufEgIGfu3O7pHh4mJQrHIwS9p66EU3/RHeF
lR55zU/mnvRrmRqU7ZGrblrYbs1nHwb6mvKLu2rHE+h57sXJZc50eZtWrz1oNXOo
VLbibVURIT2Zxb7Ypiyq2TRFJPjyQEGT2LWjsSQjvjLM2ABhte5zra7K/ltHAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqnJIlI+KAfriB
Wqp2IkDuya5ELTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IanVHUnRCZHFaTFY4UGRqMXdMY3BTemhBVXRkSjJqbUFU
VTZaNXNTSEZDby8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSGp1R1J0QmRxWkxWOFBkajF3TGNwU3poQVV0ZEoyam1B
VFU2WjVzU0hGQ28vMC9BQTlDOTIyNTIzRTI4MDdFQjg4MTVBQUE3NjIyNDBFRUM5
QUU0NDJELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKD3YwwDQQCAAIwBwMF
ACgEdHwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCKIMA0GCSqGSIb3DQEBCwUA
A4IBAQBI9r2Q2B72GqYSdIXeKTplhzI4ioaH2jek8AM0g9q7yHoO8vcX6UG5ugRm
6dk8VbUI2Rw99gQc7iAqNU5IGb4tYpbdHR74r6fdLvttOR/nShxopBWiqwvU80Lw
EyRQpRQCc9HwxLpMADIqrG2UKYJaM8f9USh5w8jYytMGhORrGCx30YGE1g5wcAfx
hvTi+hBumb0PuOR1NB45kpem2j8MpPDdp/zbBzfXnLPPg0Kwu+CwifvxVP0Qjlk/
2SeJ19NfkfzKk5DRPEvSwMv3q962khlWMSw84w8eMV9aG5OEFBUIhrisACoIugxg
FWjvn3epWsxvBRluh0njsCwEQGr7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org