Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.cer
File:                     AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.cer (raw, json)
Hash identifier:          SrnixjWby4wGOmxG6vnlo327BBL6veJH0L3/skruGBY=
Subject key identifier:   AC:88:BA:0A:CE:3A:7A:A9:D9:2C:6B:11:C7:7C:BB:3E:C4:4D:5C:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54C58ADC2E81D576942F842F61E49DC9F22B5310
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:03 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:03 +0000
Subordinate resources:    AS: 262311
                          IP: 177.124.0.0/21
                          IP: 2804:d08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c5:8a:dc:2e:81:d5:76:94:2f:84:2f:61:e4:9d:c9:f2:2b:53:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:03 2023 GMT
            Not After : Sep 16 17:53:03 2024 GMT
        Subject: CN=AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:a8:19:94:b4:39:76:ad:45:ea:ba:de:b6:
                    5f:ff:34:d1:30:02:55:66:6e:85:b3:fc:b9:7f:ce:
                    33:f4:63:08:79:bd:0f:c8:c2:1c:56:95:b3:09:50:
                    da:3f:26:62:10:db:5b:2b:da:fe:81:4f:30:43:12:
                    78:c1:b1:0d:51:d4:a4:b7:ff:55:98:14:57:fa:0f:
                    7e:ea:59:e9:59:30:c3:4a:d9:37:98:0f:ce:07:bf:
                    e4:f8:6b:fa:f2:98:6f:b9:00:14:db:05:8f:6e:d1:
                    e6:93:8c:4f:81:87:2b:cc:c2:ef:5b:5e:0f:bc:49:
                    ac:d5:71:13:03:5c:2b:d3:00:45:7f:4c:10:ca:0d:
                    2e:46:16:42:d7:70:3e:71:43:59:e8:21:31:a9:73:
                    8c:fa:3c:04:98:3b:9e:35:4e:56:15:44:99:55:d0:
                    2f:87:84:22:89:13:cf:b9:33:78:2a:72:4e:9e:26:
                    78:a5:3d:64:e2:14:9a:2e:06:c4:a0:ea:15:e0:52:
                    55:4e:8d:b5:2f:b5:be:e9:bd:ab:de:d5:bc:a9:4a:
                    29:db:7c:c3:8b:86:e2:d7:29:e7:b7:9c:5b:68:fa:
                    2f:a0:3c:1e:88:18:92:89:f3:bc:da:54:07:e3:cf:
                    aa:bc:40:7b:09:6e:25:76:6b:c1:26:69:2b:d8:56:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:88:BA:0A:CE:3A:7A:A9:D9:2C:6B:11:C7:7C:BB:3E:C4:4D:5C:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.0.0/21
                IPv6:
                  2804:d08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262311

    Signature Algorithm: sha256WithRSAEncryption
         32:d3:7e:dd:50:7b:5c:97:97:8a:70:a5:03:fb:a0:08:24:15:
         58:ba:4f:30:8a:41:e4:20:e6:b3:3f:59:c0:04:a8:24:be:6e:
         a1:35:51:74:a9:5f:83:ff:f3:16:c7:87:ca:35:e4:b7:43:07:
         1f:c6:38:01:e3:62:83:cb:83:5d:42:df:7f:af:06:c5:f6:74:
         5e:39:74:92:63:46:a6:20:0a:00:03:c6:d4:f0:e5:ba:8c:49:
         ae:c8:db:93:6a:b5:34:68:81:7a:b6:bf:6b:02:fb:6f:79:87:
         4f:cc:85:58:8d:dd:05:ae:ad:3e:2b:c9:f2:b5:50:f3:01:37:
         49:b2:39:68:cd:5e:0b:76:07:65:42:b5:24:64:d3:aa:97:b3:
         af:11:7b:79:cb:6a:92:be:af:33:6b:45:42:3c:02:11:15:67:
         e3:a2:61:fc:09:29:ef:57:b9:36:28:98:8d:b0:a6:f5:44:fd:
         58:a1:53:0c:f0:67:c1:70:70:c8:42:50:61:64:00:6e:1a:30:
         97:1d:2a:78:2d:c5:93:34:e2:96:06:01:9d:85:5f:2c:76:95:
         66:a5:84:e1:94:fa:1e:bb:43:0a:c8:78:bd:94:ce:95:b1:c1:
         ac:21:38:fb:84:1f:06:06:7e:bd:00:54:11:26:67:b1:c7:27:
         b0:be:df:e0
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUVMWK3C6B1XaUL4QvYeSdyfIrUxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTgxNzQ4MDNaFw0yNDA5MTYxNzUzMDNaMDMxMTAvBgNV
BAMTKEFDODhCQTBBQ0UzQTdBQTlEOTJDNkIxMUM3N0NCQjNFQzQ0RDVDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQagZlLQ5dq1F6rretl//NNEw
AlVmboWz/Ll/zjP0Ywh5vQ/IwhxWlbMJUNo/JmIQ21sr2v6BTzBDEnjBsQ1R1KS3
/1WYFFf6D37qWelZMMNK2TeYD84Hv+T4a/rymG+5ABTbBY9u0eaTjE+BhyvMwu9b
Xg+8SazVcRMDXCvTAEV/TBDKDS5GFkLXcD5xQ1noITGpc4z6PASYO541TlYVRJlV
0C+HhCKJE8+5M3gqck6eJnilPWTiFJouBsSg6hXgUlVOjbUvtb7pvave1bypSinb
fMOLhuLXKee3nFto+i+gPB6IGJKJ87zaVAfjz6q8QHsJbiV2a8EmaSvYVgw/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsiLoKzjp6qdks
axHHfLs+xE1cQDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80U3ZNczRIeWtMb2tRUm9vUkZTYnNuemM4dlRUOUJGWG5q
Nk16RGpBYTlyby8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNFN2TXM0SHlrTG9rUVJvb1JGU2JzbnpjOHZUVDlCRlhu
ajZNekRqQWE5cm8vMC9BQzg4QkEwQUNFM0E3QUE5RDkyQzZCMTFDNzdDQkIzRUM0
NEQ1QzQwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxfAAwDQQCAAIwBwMF
ACgEDQgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBACnMA0GCSqGSIb3DQEBCwUA
A4IBAQAy037dUHtcl5eKcKUD+6AIJBVYuk8wikHkIOazP1nABKgkvm6hNVF0qV+D
//MWx4fKNeS3QwcfxjgB42KDy4NdQt9/rwbF9nReOXSSY0amIAoAA8bU8OW6jEmu
yNuTarU0aIF6tr9rAvtveYdPzIVYjd0Frq0+K8nytVDzATdJsjlozV4LdgdlQrUk
ZNOql7OvEXt5y2qSvq8za0VCPAIRFWfjomH8CSnvV7k2KJiNsKb1RP1YoVMM8GfB
cHDIQlBhZABuGjCXHSp4LcWTNOKWBgGdhV8sdpVmpYThlPoeu0MKyHi9lM6VscGs
ITj7hB8GBn69AFQRJmexxyewvt/g
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org