Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.cer
File:                     AD0F2A1345790C4B061672E4A6491483609A7BCB.cer (raw, json)
Hash identifier:          X8k1pS7BoydUze+SAAGEiHjNhWHVJL3ddwzSMCpZkWQ=
Subject key identifier:   AD:0F:2A:13:45:79:0C:4B:06:16:72:E4:A6:49:14:83:60:9A:7B:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D8E98BBAC03ADDE0A7113C1A759AD0C1A9099F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 14:46:49 +0000
Certificate not after:    Thu 27 Jun 2024 14:51:49 +0000
Subordinate resources:    AS: 264539
                          IP: 138.0.24.0/22
                          IP: 2804:2128::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:98:bb:ac:03:ad:de:0a:71:13:c1:a7:59:ad:0c:1a:90:99:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 14:46:49 2023 GMT
            Not After : Jun 27 14:51:49 2024 GMT
        Subject: CN=AD0F2A1345790C4B061672E4A6491483609A7BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:74:cf:4c:2f:48:2f:93:28:e9:d3:e8:53:
                    41:f3:a8:27:eb:88:57:65:1b:41:24:fc:65:a0:e7:
                    c2:bf:be:64:08:80:5a:96:b9:a5:24:9e:88:7f:f2:
                    9f:ef:fc:28:9e:db:5e:4e:9b:5c:ae:48:70:b7:27:
                    12:27:9c:e7:04:ad:be:c6:dc:63:65:98:66:46:09:
                    cd:f0:b8:78:c1:74:56:8d:f5:2d:bf:0c:16:ca:83:
                    f0:ea:e1:53:ff:d7:99:d3:ee:56:ae:b6:12:cb:45:
                    b0:09:47:d6:6e:af:12:07:43:ef:ea:0f:d7:34:03:
                    b7:a7:46:14:e3:dd:62:26:04:78:ba:70:87:41:69:
                    30:5d:f3:1a:2d:41:cb:16:19:cc:34:8d:5e:cc:b5:
                    c6:f2:8c:74:27:73:b1:02:ed:43:4b:43:67:b4:99:
                    61:df:27:cc:68:08:90:25:84:93:5c:d4:96:d5:9a:
                    87:1f:60:91:26:36:54:a4:44:c9:c9:2a:66:23:17:
                    68:71:7d:9b:18:a1:ac:37:e9:41:e2:cb:2f:81:90:
                    54:6d:19:97:a5:a9:71:3f:f1:e1:b7:ef:ac:7e:56:
                    17:60:d3:ca:62:da:91:59:82:19:a2:59:37:33:90:
                    cb:cb:1a:03:d5:bc:34:8b:78:c0:fe:24:1f:87:bb:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:0F:2A:13:45:79:0C:4B:06:16:72:E4:A6:49:14:83:60:9A:7B:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/22
                IPv6:
                  2804:2128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264539

    Signature Algorithm: sha256WithRSAEncryption
         54:cb:9e:8b:44:82:37:16:a6:df:81:ca:40:f6:53:58:0a:de:
         2c:bd:fc:48:7e:5b:3a:87:24:7f:f2:c6:66:7f:04:85:0c:a0:
         d5:60:b3:c2:af:69:fc:f2:8e:8e:25:7c:0c:ac:be:dc:09:5e:
         75:fc:d4:61:7b:8d:de:4d:f1:55:49:ec:cd:fe:44:51:31:05:
         fa:b7:b0:7b:88:a2:e3:5a:dc:a6:dc:0b:b4:e5:4b:66:3b:3d:
         0e:de:d6:8b:be:76:c6:05:f4:96:96:b0:cb:6e:63:5f:58:de:
         d3:b4:f5:70:2b:a4:bb:49:01:0b:3a:57:5c:09:ca:e8:7e:1a:
         bc:ea:8d:7d:32:d4:3f:3f:d4:ef:8a:54:cf:30:be:7a:c5:91:
         05:0b:19:eb:cf:b1:36:db:e8:cd:73:57:85:42:87:9f:df:20:
         18:e3:cf:ec:5b:d3:54:32:69:b9:cc:dd:09:fb:11:19:9a:a8:
         84:24:27:ea:e7:d8:b5:59:ba:5f:25:83:99:81:66:96:21:a0:
         a9:06:99:14:cc:14:63:4b:c8:00:c8:a0:e5:d2:19:31:bd:ac:
         d7:b5:aa:21:f4:ce:76:c8:dd:01:ce:ae:97:b7:23:60:37:38:
         fb:77:1d:92:5c:4b:93:a4:4d:6a:70:6d:45:ce:67:14:fb:34:
         5e:aa:e1:31
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXY6Yu6wDrd4KcRPBp1mtDBqQmfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjkxNDQ2NDlaFw0yNDA2MjcxNDUxNDlaMDMxMTAvBgNV
BAMTKEFEMEYyQTEzNDU3OTBDNEIwNjE2NzJFNEE2NDkxNDgzNjA5QTdCQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEA3TPTC9IL5Mo6dPoU0HzqCfr
iFdlG0Ek/GWg58K/vmQIgFqWuaUknoh/8p/v/Cie215Om1yuSHC3JxInnOcErb7G
3GNlmGZGCc3wuHjBdFaN9S2/DBbKg/Dq4VP/15nT7lauthLLRbAJR9ZurxIHQ+/q
D9c0A7enRhTj3WImBHi6cIdBaTBd8xotQcsWGcw0jV7MtcbyjHQnc7EC7UNLQ2e0
mWHfJ8xoCJAlhJNc1JbVmocfYJEmNlSkRMnJKmYjF2hxfZsYoaw36UHiyy+BkFRt
GZelqXE/8eG376x+Vhdg08pi2pFZghmiWTczkMvLGgPVvDSLeMD+JB+Hu0gNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStDyoTRXkMSwYW
cuSmSRSDYJp7yzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BeVZUcnBWNGRwcm1GS0VYdXBhTE5qeEhkOXpEQjNzSFBS
MjJnRTRRbXBlaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXlWVHJwVjRkcHJtRktFWHVwYUxOanhIZDl6REIzc0hQ
UjIyZ0U0UW1wZWgvMC9BRDBGMkExMzQ1NzkwQzRCMDYxNjcyRTRBNjQ5MTQ4MzYw
OUE3QkNCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKABgwDQQCAAIwBwMF
ACgEISgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAlbMA0GCSqGSIb3DQEBCwUA
A4IBAQBUy56LRII3FqbfgcpA9lNYCt4svfxIfls6hyR/8sZmfwSFDKDVYLPCr2n8
8o6OJXwMrL7cCV51/NRhe43eTfFVSezN/kRRMQX6t7B7iKLjWtym3Au05UtmOz0O
3taLvnbGBfSWlrDLbmNfWN7TtPVwK6S7SQELOldcCcrofhq86o19MtQ/P9TvilTP
ML56xZEFCxnrz7E22+jNc1eFQoef3yAY48/sW9NUMmm5zN0J+xEZmqiEJCfq59i1
WbpfJYOZgWaWIaCpBpkUzBRjS8gAyKDl0hkxvazXtaoh9M52yN0Bzq6XtyNgNzj7
dx2SXEuTpE1qcG1FzmcU+zRequEx
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org