Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ACAD0C9240D74201720DEFB6CDF4F05B4747B429.cer
File:                     ACAD0C9240D74201720DEFB6CDF4F05B4747B429.cer (raw, json)
Hash identifier:          AHPaFq9TfgtEK9ic31avKyrjnCs/ymREVvpey2pc8pY=
Subject key identifier:   AC:AD:0C:92:40:D7:42:01:72:0D:EF:B6:CD:F4:F0:5B:47:47:B4:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2382A4D6C942188A2C9F2165E3D1D55A6D88F436
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/ACAD0C9240D74201720DEFB6CDF4F05B4747B429.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 18:08:31 +0000
Certificate not after:    Tue 23 Jul 2024 18:13:31 +0000
Subordinate resources:    AS: 262368
                          IP: 177.128.96.0/21
                          IP: 2804:85c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:82:a4:d6:c9:42:18:8a:2c:9f:21:65:e3:d1:d5:5a:6d:88:f4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 18:08:31 2023 GMT
            Not After : Jul 23 18:13:31 2024 GMT
        Subject: CN=ACAD0C9240D74201720DEFB6CDF4F05B4747B429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:95:c6:82:ed:c0:af:ce:3b:5f:1e:57:12:
                    3a:f9:57:cc:ed:ed:b1:cb:73:c6:4b:58:4d:67:82:
                    be:fc:1c:37:12:be:c1:82:8f:6a:5c:58:08:9f:10:
                    71:98:1d:61:24:fe:3f:a9:4c:e8:3b:93:fc:cf:98:
                    59:e2:e7:89:f7:25:f4:f5:95:98:cc:1a:0a:51:63:
                    a2:5b:51:3f:e2:d8:1c:65:a1:69:43:54:54:30:d7:
                    39:7d:2b:bb:54:05:40:5d:92:b8:5f:52:86:07:c3:
                    31:31:8d:13:78:4a:e2:0b:0b:69:04:2c:08:e1:cf:
                    ad:1c:4e:e6:34:35:43:48:eb:8f:39:6b:a3:6d:41:
                    00:08:e5:db:4e:f2:28:05:9f:82:e3:1f:a5:79:9b:
                    c2:a4:aa:76:27:87:8e:d5:aa:db:f5:83:cb:f8:cb:
                    28:fb:d7:6f:31:e3:d6:f7:f3:dd:88:1b:9c:e1:ae:
                    92:14:4f:82:e0:f8:85:6a:19:b6:43:07:53:17:2a:
                    5c:46:87:7e:bc:19:45:e9:d7:6d:62:91:87:91:bd:
                    ac:02:78:ef:f5:75:e6:5e:fe:b8:12:5c:5c:50:21:
                    1a:46:c9:17:70:10:1e:f3:22:04:b6:cf:00:31:5e:
                    cc:74:dc:a6:51:59:04:2f:75:d7:05:16:63:ba:8b:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:AD:0C:92:40:D7:42:01:72:0D:EF:B6:CD:F4:F0:5B:47:47:B4:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/ACAD0C9240D74201720DEFB6CDF4F05B4747B429.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.96.0/21
                IPv6:
                  2804:85c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262368

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:88:9a:57:07:ab:cf:2f:e9:82:39:0e:18:a0:c1:56:9a:
         f9:01:1e:40:8b:6c:fb:a8:e5:14:8a:55:5e:02:e4:88:26:27:
         83:5b:33:23:66:43:d3:14:44:63:dd:a9:8d:93:46:1c:ac:b8:
         4f:b7:b9:90:92:d5:91:cd:da:97:f8:3e:8e:b5:e2:f7:66:21:
         e4:25:b3:db:e9:d1:20:83:03:77:f7:96:e9:ee:6b:99:0a:a4:
         1b:c4:bb:e6:fa:ac:af:47:8f:ec:a0:28:46:ab:f6:f7:41:1a:
         fe:41:34:63:9b:78:0a:79:ba:bf:7d:b7:3f:4d:64:cc:4e:31:
         a8:33:89:4a:48:ef:2d:7c:1c:83:55:23:fd:90:3a:c1:8e:8e:
         8a:12:b3:6e:65:0c:c0:78:90:fa:2c:37:a8:bc:37:90:17:33:
         c6:71:8c:3e:fd:bb:28:cf:9d:0f:73:1f:12:b6:9b:33:f0:ad:
         6a:46:24:78:3f:ed:f0:42:d6:6d:65:5e:cf:39:72:7e:fb:92:
         99:05:a0:05:fd:a8:dc:af:e9:84:7a:ab:32:0e:ac:67:e7:c0:
         f4:48:71:93:5a:9a:2d:bc:23:90:ce:24:46:6d:b7:c7:98:bf:
         25:14:7b:3e:2c:35:ed:25:36:2e:d2:fd:11:83:c8:b5:56:f0:
         a3:92:14:62
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUI4Kk1slCGIosnyFl49HVWm2I9DYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjUxODA4MzFaFw0yNDA3MjMxODEzMzFaMDMxMTAvBgNV
BAMTKEFDQUQwQzkyNDBENzQyMDE3MjBERUZCNkNERjRGMDVCNDc0N0I0MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/JXGgu3Ar847Xx5XEjr5V8zt
7bHLc8ZLWE1ngr78HDcSvsGCj2pcWAifEHGYHWEk/j+pTOg7k/zPmFni54n3JfT1
lZjMGgpRY6JbUT/i2BxloWlDVFQw1zl9K7tUBUBdkrhfUoYHwzExjRN4SuILC2kE
LAjhz60cTuY0NUNI6485a6NtQQAI5dtO8igFn4LjH6V5m8KkqnYnh47Vqtv1g8v4
yyj7128x49b3892IG5zhrpIUT4Lg+IVqGbZDB1MXKlxGh368GUXp121ikYeRvawC
eO/1deZe/rgSXFxQIRpGyRdwEB7zIgS2zwAxXsx03KZRWQQvddcFFmO6iwUDAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsrQySQNdCAXIN
77bN9PBbR0e0KTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IRUZIVUJ5eUVpb2ZiaThmeFp2TUdTbzJQNFNINnVFWjJu
Z1NVeHNWNXgxcS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSEVGSFVCeXlFaW9mYmk4Znhadk1HU28yUDRTSDZ1RVoy
bmdTVXhzVjV4MXEvMC9BQ0FEMEM5MjQwRDc0MjAxNzIwREVGQjZDREY0RjA1QjQ3
NDdCNDI5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxgGAwDQQCAAIwBwMF
ACgECFwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBADgMA0GCSqGSIb3DQEBCwUA
A4IBAQA/EIiaVwerzy/pgjkOGKDBVpr5AR5Ai2z7qOUUilVeAuSIJieDWzMjZkPT
FERj3amNk0YcrLhPt7mQktWRzdqX+D6OteL3ZiHkJbPb6dEggwN395bp7muZCqQb
xLvm+qyvR4/soChGq/b3QRr+QTRjm3gKebq/fbc/TWTMTjGoM4lKSO8tfByDVSP9
kDrBjo6KErNuZQzAeJD6LDeovDeQFzPGcYw+/bsoz50Pcx8Stpsz8K1qRiR4P+3w
QtZtZV7POXJ++5KZBaAF/ajcr+mEeqsyDqxn58D0SHGTWpotvCOQziRGbbfHmL8l
FHs+LDXtJTYu0v0Rg8i1VvCjkhRi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org