Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AB898C031FC983A1E041C95BD7168FC65BC5C128.cer
File:                     AB898C031FC983A1E041C95BD7168FC65BC5C128.cer (raw, json)
Hash identifier:          tdAzb8Wh7AgKIK5J6G5cQAZl7JnqYdrmFvF3GAxexYw=
Subject key identifier:   AB:89:8C:03:1F:C9:83:A1:E0:41:C9:5B:D7:16:8F:C6:5B:C5:C1:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28D80ADE2F6C7BF7CD54B509F25B92386FDC5AA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/AB898C031FC983A1E041C95BD7168FC65BC5C128.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 13:33:34 +0000
Certificate not after:    Sun 27 Oct 2024 13:38:34 +0000
Subordinate resources:    AS: 272717
                          IP: 167.250.124.0/23
                          IP: 2804:8790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d8:0a:de:2f:6c:7b:f7:cd:54:b5:09:f2:5b:92:38:6f:dc:5a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 29 13:33:34 2023 GMT
            Not After : Oct 27 13:38:34 2024 GMT
        Subject: CN=AB898C031FC983A1E041C95BD7168FC65BC5C128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:58:cb:c7:df:cc:a1:e7:9c:4f:42:cc:2c:
                    2d:6c:4c:84:a1:51:cc:e5:43:92:91:05:f1:bb:48:
                    4a:46:57:3e:38:e4:72:6e:24:8a:6d:9d:66:00:ab:
                    fe:af:9f:50:a7:43:b4:94:c2:fa:08:34:02:ef:6a:
                    fb:a0:5d:6f:a6:cd:2b:da:f2:90:08:19:57:4f:f6:
                    73:d3:cc:61:94:1f:53:2d:5e:b7:b3:33:61:33:b6:
                    3d:01:29:5e:05:70:25:de:3e:11:42:7c:51:fa:50:
                    9e:92:a2:63:da:a2:29:25:bb:3d:da:33:2a:1a:6e:
                    6d:ae:ff:4e:cd:28:4d:e2:d2:89:b7:b6:9d:e7:3f:
                    5d:20:fa:31:f6:a0:a4:6a:d1:5e:56:2e:f0:01:51:
                    7d:6a:bf:07:12:74:e4:00:73:22:d6:71:b6:80:9d:
                    65:d9:c8:e3:ab:88:41:2b:87:e3:cf:d7:50:43:00:
                    c9:c8:1c:c6:b0:76:bf:9f:cd:30:06:06:5a:94:5e:
                    20:11:f1:25:10:77:aa:35:92:43:05:bc:6f:cc:ac:
                    f4:bd:b5:41:c2:ff:b7:05:8b:0e:85:ff:ee:89:a4:
                    c0:ed:eb:7b:27:28:3e:45:9a:3d:31:cd:3b:ee:35:
                    78:64:9b:64:0d:4c:0f:a5:a8:7d:3e:4e:a1:4f:6d:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:89:8C:03:1F:C9:83:A1:E0:41:C9:5B:D7:16:8F:C6:5B:C5:C1:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/AB898C031FC983A1E041C95BD7168FC65BC5C128.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.124.0/23
                IPv6:
                  2804:8790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272717

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:5f:a7:2b:b1:42:88:97:87:54:b6:4e:a8:46:56:3b:38:
         4c:59:80:32:b5:ef:21:b7:18:26:30:e4:00:e0:f6:5f:35:fe:
         ba:5b:a6:46:9b:59:cb:2f:6f:31:35:e0:fe:1d:fe:f5:ac:b5:
         17:e3:2d:d1:ec:a3:8b:98:b7:6c:fd:3d:28:a6:fd:a3:cd:84:
         fa:81:8e:38:81:d9:31:84:ce:87:1d:4c:75:27:a9:64:39:af:
         af:17:76:3c:ff:c7:12:9b:92:55:03:bc:c5:bc:ee:f2:3d:ad:
         07:fd:e2:b1:b9:ab:f4:eb:f6:e9:ba:ba:6c:c0:57:1f:ac:1a:
         df:15:9e:e2:a5:0b:45:90:12:4c:62:73:d0:fd:9f:e6:20:8e:
         81:f3:c8:63:e2:b6:1c:72:9d:d7:c1:f9:6e:db:e6:ef:71:c8:
         e3:4c:34:85:dd:9a:b9:e5:1f:fe:59:46:86:dc:84:95:ce:95:
         32:48:00:64:8a:4e:41:a3:c3:cb:ea:50:b9:f8:00:12:3d:39:
         8d:0f:c4:ad:d0:4c:f0:94:88:51:27:7d:b5:dd:7e:a3:75:41:
         cf:b3:d4:21:8f:c9:28:6d:a6:2e:5a:e2:a1:85:f8:37:c8:51:
         35:4a:f2:1b:a8:48:d2:7c:17:ca:4d:27:bf:d7:58:0f:4f:65:
         ae:3a:cf:68
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUKNgK3i9se/fNVLUJ8luSOG/cWqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjkxMzMzMzRaFw0yNDEwMjcxMzM4MzRaMDMxMTAvBgNV
BAMTKEFCODk4QzAzMUZDOTgzQTFFMDQxQzk1QkQ3MTY4RkM2NUJDNUMxMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc01jLx9/MoeecT0LMLC1sTISh
UczlQ5KRBfG7SEpGVz445HJuJIptnWYAq/6vn1CnQ7SUwvoINALvavugXW+mzSva
8pAIGVdP9nPTzGGUH1MtXrezM2Eztj0BKV4FcCXePhFCfFH6UJ6SomPaoikluz3a
Myoabm2u/07NKE3i0om3tp3nP10g+jH2oKRq0V5WLvABUX1qvwcSdOQAcyLWcbaA
nWXZyOOriEErh+PP11BDAMnIHMawdr+fzTAGBlqUXiAR8SUQd6o1kkMFvG/MrPS9
tUHC/7cFiw6F/+6JpMDt63snKD5Fmj0xzTvuNXhkm2QNTA+lqH0+TqFPbTfFAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSriYwDH8mDoeBB
yVvXFo/GW8XBKDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85ZHVIZXRIakdMakplc3FrYmdVTXJ5Vk1TTEt4Q3pOejNy
cGhxYjhQbVVLQS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOWR1SGV0SGpHTGpKZXNxa2JnVU1yeVZNU0xLeEN6Tnoz
cnBocWI4UG1VS0EvMC9BQjg5OEMwMzFGQzk4M0ExRTA0MUM5NUJENzE2OEZDNjVC
QzVDMTI4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAGn+nwwDQQCAAIwBwMF
ACgEh5AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBClNMA0GCSqGSIb3DQEBCwUA
A4IBAQCk+F+nK7FCiJeHVLZOqEZWOzhMWYAyte8htxgmMOQA4PZfNf66W6ZGm1nL
L28xNeD+Hf71rLUX4y3R7KOLmLds/T0opv2jzYT6gY44gdkxhM6HHUx1J6lkOa+v
F3Y8/8cSm5JVA7zFvO7yPa0H/eKxuav06/bpurpswFcfrBrfFZ7ipQtFkBJMYnPQ
/Z/mII6B88hj4rYccp3Xwflu2+bvccjjTDSF3Zq55R/+WUaG3ISVzpUySABkik5B
o8PL6lC5+AASPTmND8St0EzwlIhRJ3213X6jdUHPs9Qhj8kobaYuWuKhhfg3yFE1
SvIbqEjSfBfKTSe/11gPT2WuOs9o
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org