Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AC9DE8C5936D0D5C0F9FDCED4758011ABF14AE18.cer
File:                     AC9DE8C5936D0D5C0F9FDCED4758011ABF14AE18.cer (raw, json)
Hash identifier:          x4BaMhX7S04j5v6dGh9558qEmQ8bNJpukh46QC2GGBs=
Subject key identifier:   AC:9D:E8:C5:93:6D:0D:5C:0F:9F:DC:ED:47:58:01:1A:BF:14:AE:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12A35E75F089E70C4A6172732D8DC976D6171DD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/AC9DE8C5936D0D5C0F9FDCED4758011ABF14AE18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 01 Oct 2023 02:28:46 +0000
Certificate not after:    Sun 29 Sep 2024 02:33:46 +0000
Subordinate resources:    AS: 267218
                          IP: 45.231.196.0/22
                          IP: 2804:4a18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a3:5e:75:f0:89:e7:0c:4a:61:72:73:2d:8d:c9:76:d6:17:1d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  1 02:28:46 2023 GMT
            Not After : Sep 29 02:33:46 2024 GMT
        Subject: CN=AC9DE8C5936D0D5C0F9FDCED4758011ABF14AE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:8d:71:ee:5b:9b:70:99:7d:b7:27:8b:7e:
                    50:ef:d0:00:66:ec:a9:91:0d:88:ff:0e:d3:e3:5f:
                    00:01:ad:db:a2:b7:69:8b:89:49:3a:60:db:f8:47:
                    ab:f1:31:8e:7e:23:53:97:19:cf:08:95:30:cf:f5:
                    db:30:7d:77:1c:38:2d:a0:2a:65:aa:75:f6:c9:75:
                    1e:7a:32:96:ee:c2:81:e7:52:dc:c3:a8:ef:53:c5:
                    8b:1c:d9:07:be:8d:fd:8d:61:1e:63:31:4f:b0:2c:
                    f8:9c:2d:30:17:a1:01:96:15:d6:4c:5a:b1:ef:f8:
                    19:59:1b:c9:1a:4d:42:bc:ce:3e:c9:29:cc:76:d0:
                    c3:eb:be:a5:50:2e:07:79:84:8e:fb:5b:15:3e:46:
                    06:49:58:98:4e:0b:0e:41:1d:a9:15:57:83:f7:e4:
                    41:5a:f0:4f:e4:38:20:35:71:dc:9f:af:0c:e5:e1:
                    ff:30:f8:bd:65:b8:ab:d2:09:24:2f:55:52:5d:b7:
                    5e:c7:76:1e:b5:ef:e9:29:b3:56:af:9b:71:c2:4c:
                    26:b1:a4:06:e9:c2:39:b9:ac:ab:93:e8:a4:6f:7a:
                    25:1f:b5:22:3b:ed:62:39:07:14:b5:00:7e:93:db:
                    24:38:3a:87:32:c8:da:23:b7:21:95:bd:7e:49:fb:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:9D:E8:C5:93:6D:0D:5C:0F:9F:DC:ED:47:58:01:1A:BF:14:AE:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/AC9DE8C5936D0D5C0F9FDCED4758011ABF14AE18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/22
                IPv6:
                  2804:4a18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267218

    Signature Algorithm: sha256WithRSAEncryption
         ad:73:a6:10:f7:fc:90:de:d6:6d:23:44:01:41:3d:1a:53:cb:
         50:2d:22:06:8d:34:15:6a:6c:10:61:bc:df:62:f8:6f:a4:b3:
         89:a0:cc:d3:83:7c:40:1e:97:32:d4:0c:54:c9:ce:32:4b:9e:
         90:58:dd:27:6e:31:eb:9a:18:ca:0c:74:ac:12:54:85:32:87:
         58:50:99:d4:b1:9e:e7:a4:45:d1:bc:0c:06:70:6b:10:c2:88:
         66:0a:9a:97:db:d2:81:e5:94:30:a0:8d:3e:50:4a:30:72:95:
         0c:51:ff:c2:8b:bc:75:cf:ac:c5:e7:fe:82:93:f1:45:21:be:
         fd:27:30:ab:6f:6c:dc:66:80:de:34:67:7d:ab:86:74:94:d9:
         db:eb:68:44:24:88:f7:5a:72:57:ab:ae:6f:69:af:b0:e5:65:
         6c:a8:95:51:d1:7e:31:b3:ba:68:66:a7:9f:79:9b:e6:52:da:
         58:75:5e:0d:69:52:a7:69:af:00:58:d0:b0:51:97:47:5d:33:
         9f:c3:74:f1:87:eb:fa:f5:73:e6:d9:1c:d1:61:e3:f2:14:42:
         71:a7:9e:fe:b9:44:c2:0e:30:d2:6a:b2:ef:47:b2:96:d0:a3:
         9e:d5:2c:36:90:da:95:a2:60:e1:55:10:c3:2b:09:f5:56:9b:
         58:98:24:51
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUEqNedfCJ5wxKYXJzLY3JdtYXHdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMDEwMjI4NDZaFw0yNDA5MjkwMjMzNDZaMDMxMTAvBgNV
BAMTKEFDOURFOEM1OTM2RDBENUMwRjlGRENFRDQ3NTgwMTFBQkYxNEFFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmf41x7lubcJl9tyeLflDv0ABm
7KmRDYj/DtPjXwABrduit2mLiUk6YNv4R6vxMY5+I1OXGc8IlTDP9dswfXccOC2g
KmWqdfbJdR56MpbuwoHnUtzDqO9TxYsc2Qe+jf2NYR5jMU+wLPicLTAXoQGWFdZM
WrHv+BlZG8kaTUK8zj7JKcx20MPrvqVQLgd5hI77WxU+RgZJWJhOCw5BHakVV4P3
5EFa8E/kOCA1cdyfrwzl4f8w+L1luKvSCSQvVVJdt17Hdh617+kps1avm3HCTCax
pAbpwjm5rKuT6KRveiUftSI77WI5BxS1AH6T2yQ4OocyyNojtyGVvX5J++j5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsnejFk20NXA+f
3O1HWAEavxSuGDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81eTVMUjFUUXFNUGRLTUZhNGdxTUx0eFp6VFpZOWF2U3RR
RGFxekxSTGRWMS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNXk1TFIxVFFxTVBkS01GYTRncU1MdHhaelRaWTlhdlN0
UURhcXpMUkxkVjEvMC9BQzlERThDNTkzNkQwRDVDMEY5RkRDRUQ0NzU4MDExQUJG
MTRBRTE4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt58QwDQQCAAIwBwMF
ACgEShgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBPSMA0GCSqGSIb3DQEBCwUA
A4IBAQCtc6YQ9/yQ3tZtI0QBQT0aU8tQLSIGjTQVamwQYbzfYvhvpLOJoMzTg3xA
Hpcy1AxUyc4yS56QWN0nbjHrmhjKDHSsElSFModYUJnUsZ7npEXRvAwGcGsQwohm
CpqX29KB5ZQwoI0+UEowcpUMUf/Ci7x1z6zF5/6Ck/FFIb79JzCrb2zcZoDeNGd9
q4Z0lNnb62hEJIj3WnJXq65vaa+w5WVsqJVR0X4xs7poZqefeZvmUtpYdV4NaVKn
aa8AWNCwUZdHXTOfw3Txh+v69XPm2RzRYePyFEJxp57+uUTCDjDSarLvR7KW0KOe
1Sw2kNqVomDhVRDDKwn1VptYmCRR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org