Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
File:                     ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer (raw, json)
Hash identifier:          lSx2eYzjA31d7+hFQjfW/N3oeDaxGOZJIZOLMX3U9OE=
Subject key identifier:   AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       442A65AC0E14867A7631EE3165E5DEA13D4E3740
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 13:38:43 +0000
Certificate not after:    Thu 13 Feb 2025 13:43:43 +0000
Subordinate resources:    AS: 52807
                          IP: 138.36.28.0/22
                          IP: 167.250.12.0/22
                          IP: 170.79.24.0/22
                          IP: 177.53.40.0/21
                          IP: 2804:2198::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2a:65:ac:0e:14:86:7a:76:31:ee:31:65:e5:de:a1:3d:4e:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 13:38:43 2024 GMT
            Not After : Feb 13 13:43:43 2025 GMT
        Subject: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:75:bd:ca:95:4c:5f:1f:da:d4:ac:01:69:
                    09:2e:ba:51:5f:1d:0f:f3:f2:ae:69:88:a9:31:5d:
                    2b:9f:36:3f:f9:d0:46:ac:ec:df:db:c1:e5:b6:0f:
                    9a:5e:48:80:f2:d3:5d:da:21:e8:75:7c:b1:21:3f:
                    04:d3:f3:8b:5a:fa:a0:2a:3d:cb:85:8c:4d:ac:ed:
                    2c:77:a0:05:e0:19:27:18:2d:99:85:ae:48:64:f0:
                    7d:db:30:4b:1e:1e:bd:c4:75:ae:f0:9f:28:cb:b1:
                    83:d1:a0:f3:f9:12:9f:c3:d0:0c:a3:b0:29:4e:02:
                    3d:14:d2:ea:50:ae:4f:f2:47:d4:a3:bb:91:17:e7:
                    29:71:fa:f4:4a:ac:ed:8f:9d:af:28:dd:94:56:dd:
                    d4:98:ec:e0:d7:eb:f6:59:05:c5:76:be:08:9f:69:
                    9a:e4:5a:1d:7d:e3:6f:94:3c:d2:c8:61:bf:7b:01:
                    82:ce:80:fe:ab:5f:26:3b:0e:6b:a0:e2:7c:0e:bb:
                    17:21:f6:2f:86:31:ef:fb:b9:32:6a:4d:81:9d:87:
                    50:89:9f:dc:76:9e:71:ee:98:d2:53:2a:62:64:16:
                    88:62:98:81:45:83:37:57:40:5a:a8:1f:0f:51:3e:
                    37:31:b0:cc:55:67:6c:2d:aa:40:75:b1:69:bd:f1:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.28.0/22
                  167.250.12.0/22
                  170.79.24.0/22
                  177.53.40.0/21
                IPv6:
                  2804:2198::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52807

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:5c:cb:71:41:5c:31:53:04:1a:16:b4:00:2e:f7:a6:2e:
         96:57:96:22:6c:6c:4c:b9:e9:ca:19:59:fd:a5:73:17:c1:48:
         aa:3e:e5:b0:3b:59:b6:8d:1a:97:22:41:2e:7a:33:9a:41:a8:
         54:64:aa:59:7b:0a:df:56:4e:e3:15:05:b8:b3:95:38:f1:18:
         14:d2:3e:c5:99:03:8a:51:f2:35:4e:7a:86:17:9c:d2:3e:f4:
         97:08:0f:29:6a:bf:c6:0c:68:3d:68:07:bb:75:97:e0:cf:51:
         2e:8c:21:ef:bb:b5:ea:98:b0:63:e4:cf:0c:df:50:59:7b:42:
         9f:d9:d7:aa:b4:82:0a:40:f2:7e:6a:c4:75:1e:54:16:11:bf:
         cf:7d:4c:2e:74:df:cb:00:9e:9a:eb:f1:a8:43:5c:4e:7f:93:
         70:47:56:4f:27:6f:f5:b6:e5:dd:91:15:a8:bc:18:26:b4:91:
         6d:14:22:75:08:65:c3:29:d6:30:d5:e3:a5:c8:7b:cb:a4:c3:
         50:b9:ba:af:6a:13:a5:d4:f5:8f:15:f2:0d:bc:35:0b:dc:f9:
         f9:71:5e:79:e4:ce:91:6e:23:4d:8a:7c:07:a4:2e:97:3a:83:
         b3:6e:24:13:a9:b1:97:e7:50:93:62:80:34:23:26:3a:31:04:
         a7:ad:15:34
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIURCplrA4Uhnp2Me4xZeXeoT1ON0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxMzM4NDNaFw0yNTAyMTMxMzQzNDNaMDMxMTAvBgNV
BAMTKEFDRUNDQ0E2QThGNTY4NEIwMDRGNUU1M0FFNjgwQTMxNEI4RDc0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTnW9ypVMXx/a1KwBaQkuulFf
HQ/z8q5piKkxXSufNj/50Eas7N/bweW2D5peSIDy013aIeh1fLEhPwTT84ta+qAq
PcuFjE2s7Sx3oAXgGScYLZmFrkhk8H3bMEseHr3Eda7wnyjLsYPRoPP5Ep/D0Ayj
sClOAj0U0upQrk/yR9Sju5EX5ylx+vRKrO2Pna8o3ZRW3dSY7ODX6/ZZBcV2vgif
aZrkWh1942+UPNLIYb97AYLOgP6rXyY7Dmug4nwOuxch9i+GMe/7uTJqTYGdh1CJ
n9x2nnHumNJTKmJkFohimIFFgzdXQFqoHw9RPjcxsMxVZ2wtqkB1sWm98SFNAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSs7MymqPVoSwBP
XlOuaAoxS410vzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80ZEFxMW1qc2JRQ1R0N3M1ekpBRGZpWjRiVXZVUXB4cWhX
Zm5aVlJYYk53Mi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNGRBcTFtanNiUUNUdDdzNXpKQURmaVo0YlV2VVFweHFo
V2ZuWlZSWGJOdzIvMC9BQ0VDQ0NBNkE4RjU2ODRCMDA0RjVFNTNBRTY4MEEzMTRC
OEQ3NEJGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKKJBwDBAKn+gwDBAKq
TxgDBAOxNSgwDQQCAAIwBwMFACgEIZgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AM5HMA0GCSqGSIb3DQEBCwUAA4IBAQBouVzLcUFcMVMEGha0AC73pi6WV5YibGxM
uenKGVn9pXMXwUiqPuWwO1m2jRqXIkEuejOaQahUZKpZewrfVk7jFQW4s5U48RgU
0j7FmQOKUfI1TnqGF5zSPvSXCA8par/GDGg9aAe7dZfgz1EujCHvu7XqmLBj5M8M
31BZe0Kf2deqtIIKQPJ+asR1HlQWEb/PfUwudN/LAJ6a6/GoQ1xOf5NwR1ZPJ2/1
tuXdkRWovBgmtJFtFCJ1CGXDKdYw1eOlyHvLpMNQubqvahOl1PWPFfINvDUL3Pn5
cV555M6RbiNNinwHpC6XOoOzbiQTqbGX51CTYoA0IyY6MQSnrRU0
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org