Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49.cer
File:                     ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49.cer (raw, json)
Hash identifier:          ed62P4WxnlCiLRFwyPAmROpMCeYJaZEvwAYEeN5bofA=
Subject key identifier:   AC:DB:B0:C3:55:1B:78:F0:7C:A1:DE:F5:48:CA:DA:00:A4:B0:7B:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A28E66BA200FF9E78652D35A8F06746CEB765B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 12:37:19 +0000
Certificate not after:    Mon 02 Dec 2024 12:42:19 +0000
Subordinate resources:    AS: 262620
                          IP: 177.86.16.0/21
                          IP: 2804:718::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:28:e6:6b:a2:00:ff:9e:78:65:2d:35:a8:f0:67:46:ce:b7:65:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 12:37:19 2023 GMT
            Not After : Dec  2 12:42:19 2024 GMT
        Subject: CN=ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:0d:23:4a:67:83:33:a2:5a:db:b4:a4:be:
                    a0:21:54:54:52:ce:83:d1:41:00:91:f4:d2:aa:d4:
                    4d:57:0a:4d:a2:f7:04:98:1e:d7:5e:9f:44:9a:ab:
                    8a:c1:d1:ed:b2:07:3d:a7:5c:0d:74:6b:85:f0:a0:
                    44:ec:06:d5:eb:3e:b0:09:57:67:6a:7c:05:18:ae:
                    55:50:bb:68:de:71:37:da:37:68:fb:b6:58:3a:9e:
                    85:b9:59:a9:39:a7:54:b9:fb:2f:a9:7b:8b:69:e1:
                    32:71:41:bf:ad:84:79:82:28:44:7d:b0:c8:74:9d:
                    9a:c1:52:66:e5:dd:9d:c9:36:85:8b:93:e7:cc:9c:
                    cc:1c:11:05:04:48:fb:1c:7f:07:d4:c5:d5:0f:20:
                    b5:78:e0:a6:7b:ee:9b:21:f1:e7:b8:c1:38:53:1e:
                    8c:03:44:5b:1d:02:b1:b0:2a:9f:cb:c6:a4:b0:da:
                    14:d9:6c:d1:4a:39:42:70:08:ab:98:55:cc:d8:29:
                    ad:75:06:1d:c1:62:e5:4b:9d:ad:b0:55:a1:d3:77:
                    6a:9d:1e:07:c0:4b:1e:d9:3c:c5:d6:df:01:89:be:
                    6a:c8:12:c4:bb:62:9a:c2:b3:9d:7f:e9:c9:c6:aa:
                    0b:9f:0f:d3:ce:90:4c:64:93:6c:f2:a6:f5:31:11:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:DB:B0:C3:55:1B:78:F0:7C:A1:DE:F5:48:CA:DA:00:A4:B0:7B:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.16.0/21
                IPv6:
                  2804:718::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262620

    Signature Algorithm: sha256WithRSAEncryption
         2c:a9:44:14:03:42:b3:07:ef:f0:37:be:96:a5:d0:3e:68:4d:
         ff:7f:91:0b:ad:a2:63:cc:99:31:f9:be:ff:6c:c9:1c:f8:5c:
         fa:84:ff:fa:5e:d5:7c:b5:09:38:d2:03:98:50:9a:69:e1:e1:
         7e:5e:89:95:ad:66:56:29:e7:99:f9:43:34:00:13:58:08:10:
         3a:a9:36:b9:00:b4:75:c2:d2:43:ed:bf:95:7a:31:bf:3b:ff:
         dd:62:b1:ed:94:a8:ae:85:43:d8:15:bc:ba:5e:30:f0:29:83:
         d2:c5:b2:ad:75:cf:55:63:e8:cf:55:dc:5f:65:77:79:97:04:
         b0:57:2c:ac:62:d1:4b:9b:85:bb:9a:26:de:af:4c:c2:e5:14:
         92:ec:44:9a:da:07:27:ee:a2:93:4f:b9:23:37:10:02:d0:91:
         e3:83:f0:06:32:65:70:27:e5:46:8a:5d:53:df:01:79:87:95:
         3a:4a:0d:b3:1e:99:38:df:bd:1a:5e:f8:26:02:8e:11:52:f2:
         c4:f1:40:22:95:4e:c3:d4:80:ec:a5:99:6b:55:1c:00:b8:e4:
         7c:68:74:70:78:f7:47:be:2c:98:3f:a7:58:63:ac:13:77:52:
         bc:fd:d8:91:05:cc:03:4c:1b:a7:1a:36:10:3d:b7:ac:aa:89:
         6e:3d:b3:0b
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUCijma6IA/554ZS01qPBnRs63ZbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDQxMjM3MTlaFw0yNDEyMDIxMjQyMTlaMDMxMTAvBgNV
BAMTKEFDREJCMEMzNTUxQjc4RjA3Q0ExREVGNTQ4Q0FEQTAwQTRCMDdCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCg0jSmeDM6Ja27SkvqAhVFRS
zoPRQQCR9NKq1E1XCk2i9wSYHtden0Saq4rB0e2yBz2nXA10a4XwoETsBtXrPrAJ
V2dqfAUYrlVQu2jecTfaN2j7tlg6noW5Wak5p1S5+y+pe4tp4TJxQb+thHmCKER9
sMh0nZrBUmbl3Z3JNoWLk+fMnMwcEQUESPscfwfUxdUPILV44KZ77psh8ee4wThT
HowDRFsdArGwKp/LxqSw2hTZbNFKOUJwCKuYVczYKa11Bh3BYuVLna2wVaHTd2qd
HgfASx7ZPMXW3wGJvmrIEsS7YprCs51/6cnGqgufD9POkExkk2zypvUxEbhlAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSs27DDVRt48Hyh
3vVIytoApLB7STAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84cHdpaVJaNGFmWU14d250QnZLTlNIRzhWU2FMclY1VjJQ
aXRmREdOMk1CUS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84cHdpaVJaNGFmWU14d250QnZLTlNIRzhWU2FMclY1VjJQ
aXRmREdOMk1CUS8wL0FDREJCMEMzNTUxQjc4RjA3Q0ExREVGNTQ4Q0FEQTAwQTRC
MDdCNDkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7FWEDANBAIAAjAHAwUA
KAQHGDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAdwwDQYJKoZIhvcNAQELBQAD
ggEBACypRBQDQrMH7/A3vpal0D5oTf9/kQutomPMmTH5vv9syRz4XPqE//pe1Xy1
CTjSA5hQmmnh4X5eiZWtZlYp55n5QzQAE1gIEDqpNrkAtHXC0kPtv5V6Mb87/91i
se2UqK6FQ9gVvLpeMPApg9LFsq11z1Vj6M9V3F9ld3mXBLBXLKxi0UubhbuaJt6v
TMLlFJLsRJraByfuopNPuSM3EALQkeOD8AYyZXAn5UaKXVPfAXmHlTpKDbMemTjf
vRpe+CYCjhFS8sTxQCKVTsPUgOylmWtVHAC45HxodHB490e+LJg/p1hjrBN3Urz9
2JEFzANMG6caNhA9t6yqiW49sws=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org