Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
File:                     ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer (raw, json)
Hash identifier:          9+OyVmtH6ft5kkwq0ofi+FkzwidXHJt/HSp3rhZohe8=
Subject key identifier:   AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       542496479B7D5723E4D34AE10972D1EEF0A607A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 23:32:02 +0000
Certificate not after:    Tue 03 Sep 2024 23:37:02 +0000
Subordinate resources:    AS: 28270
                          IP: 131.196.76.0/22
                          IP: 131.221.68.0/22
                          IP: 138.117.124.0/22
                          IP: 138.121.220.0/22
                          IP: 138.122.236.0/22
                          IP: 143.255.112.0/22
                          IP: 160.238.220.0/22
                          IP: 168.121.52.0/22
                          IP: 168.227.44.0/22
                          IP: 168.228.128.0/22
                          IP: 168.232.116.0/22
                          IP: 170.0.204.0/22
                          IP: 170.245.100.0/22
                          IP: 170.247.52.0/22
                          IP: 177.66.64.0/21
                          IP: 177.67.0.0/21
                          IP: 177.70.128.0/20
                          IP: 177.75.192.0/19
                          IP: 177.87.144.0/21
                          IP: 177.130.192.0/19
                          IP: 179.191.128.0/19
                          IP: 186.219.144.0/20
                          IP: 186.233.72.0/21
                          IP: 187.18.128.0/17
                          IP: 187.108.96.0/20
                          IP: 187.110.208.0/20
                          IP: 189.45.64.0/18
                          IP: 189.50.144.0/20
                          IP: 191.6.80.0/21
                          IP: 200.94.240.0/22
                          IP: 201.149.120.0/22
                          IP: 2804:880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:24:96:47:9b:7d:57:23:e4:d3:4a:e1:09:72:d1:ee:f0:a6:07:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 23:32:02 2023 GMT
            Not After : Sep  3 23:37:02 2024 GMT
        Subject: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:91:86:1b:8b:ed:08:a9:90:13:df:7b:87:
                    75:5b:e8:8f:a2:f4:71:b4:2c:9c:b9:99:80:05:2e:
                    69:fd:1e:67:06:80:b1:67:c6:a9:e9:45:05:48:68:
                    3b:8a:c8:36:5b:d2:48:6e:a2:aa:92:05:df:f7:07:
                    e0:77:8c:bd:77:67:14:02:c2:db:c4:d0:9b:e7:7d:
                    42:44:d0:44:8f:51:d6:a4:20:cd:b9:b1:45:c4:d0:
                    56:0d:a4:58:60:a5:2d:a0:c3:54:08:20:75:63:9a:
                    ca:9b:c8:bf:43:eb:86:12:da:52:db:14:03:e7:9f:
                    c2:c3:6a:31:09:3f:b0:75:5a:22:34:41:7f:99:bb:
                    3f:9a:0c:e1:5b:b2:9f:09:5e:16:83:12:4f:95:d3:
                    96:36:81:30:81:94:fb:62:79:6b:f1:e6:9b:a8:96:
                    e6:91:e9:d6:0f:5c:04:d2:63:81:3c:1a:38:a8:d3:
                    89:9f:4f:c9:8b:21:23:a9:13:cc:6c:74:21:95:55:
                    c2:19:1e:00:9c:91:6e:cf:f2:b8:db:ea:33:d0:b2:
                    55:4c:a9:cb:47:8c:07:d2:d8:e8:6a:2c:cb:87:d5:
                    ac:39:68:ec:42:42:9d:0e:b8:01:b8:d7:e8:9f:c2:
                    54:27:5a:16:a0:1c:c4:a2:3f:89:7d:64:44:ab:92:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22
                  131.221.68.0/22
                  138.117.124.0/22
                  138.121.220.0/22
                  138.122.236.0/22
                  143.255.112.0/22
                  160.238.220.0/22
                  168.121.52.0/22
                  168.227.44.0/22
                  168.228.128.0/22
                  168.232.116.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  170.247.52.0/22
                  177.66.64.0/21
                  177.67.0.0/21
                  177.70.128.0/20
                  177.75.192.0/19
                  177.87.144.0/21
                  177.130.192.0/19
                  179.191.128.0/19
                  186.219.144.0/20
                  186.233.72.0/21
                  187.18.128.0/17
                  187.108.96.0/20
                  187.110.208.0/20
                  189.45.64.0/18
                  189.50.144.0/20
                  191.6.80.0/21
                  200.94.240.0/22
                  201.149.120.0/22
                IPv6:
                  2804:880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28270

    Signature Algorithm: sha256WithRSAEncryption
         b2:a9:83:dd:ae:7c:5a:58:05:77:17:e4:ce:f6:88:8b:41:30:
         81:bd:5e:3f:67:58:8a:a6:bc:4d:25:ec:00:41:bb:9f:f7:36:
         c6:9e:fe:a0:27:6f:95:2b:b4:b4:73:00:6f:c6:7d:0a:5c:f7:
         06:55:e8:38:3c:d9:91:80:00:c0:e1:0f:2c:9d:46:26:ee:da:
         0c:db:b0:41:18:bb:46:38:32:42:9f:39:d7:90:7d:3e:a7:6b:
         fd:be:8f:6b:41:09:8f:95:7f:5e:21:ca:a2:9c:85:bc:52:96:
         8e:f7:6f:74:d9:88:7a:6e:48:22:d1:5f:d9:3b:2f:1f:4d:b5:
         0d:bc:a4:6b:cb:0f:6f:85:2f:d4:fa:da:b9:a7:74:74:93:40:
         15:7b:32:d4:8c:01:81:da:dc:0c:61:e9:3e:91:20:96:9a:77:
         d7:8b:01:2c:6d:4b:ce:ba:54:6a:73:49:0d:db:12:fc:d6:3f:
         2a:1f:8b:c6:03:5d:4c:05:02:35:9c:9f:72:80:e3:f0:ae:e2:
         74:05:f1:e0:90:77:5d:0b:bf:33:04:26:b7:30:11:8b:9c:a5:
         3f:7e:ab:20:49:3c:dd:cb:d6:99:e1:65:52:05:81:48:21:7c:
         3e:d5:42:1e:24:43:4b:ea:9e:d5:ab:af:ad:f1:10:cd:e2:83:
         dc:46:0b:f0
-----BEGIN CERTIFICATE-----
MIIGyTCCBbGgAwIBAgIUVCSWR5t9VyPk00rhCXLR7vCmB6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDUyMzMyMDJaFw0yNDA5MDMyMzM3MDJaMDMxMTAvBgNV
BAMTKEFEQUM4QjUzMDUxNzhGRTdGRjhGQUYzRDhDQkEyNkE1RTYyNjMyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/JGGG4vtCKmQE997h3Vb6I+i
9HG0LJy5mYAFLmn9HmcGgLFnxqnpRQVIaDuKyDZb0khuoqqSBd/3B+B3jL13ZxQC
wtvE0JvnfUJE0ESPUdakIM25sUXE0FYNpFhgpS2gw1QIIHVjmsqbyL9D64YS2lLb
FAPnn8LDajEJP7B1WiI0QX+Zuz+aDOFbsp8JXhaDEk+V05Y2gTCBlPtieWvx5puo
luaR6dYPXATSY4E8Gjio04mfT8mLISOpE8xsdCGVVcIZHgCckW7P8rjb6jPQslVM
qctHjAfS2OhqLMuH1aw5aOxCQp0OuAG41+ifwlQnWhagHMSiP4l9ZESrknhDAgMB
AAGjggPTMIIDzzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStrItTBReP5/+P
rz2Muial5iYy7jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zWjluRVFWY0dzVkc3c1JDVGtZMlp2dm1ESGhvRTVaZ2Jq
REtGcU1GdDdERi8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1Wmdi
akRLRnFNRnQ3REYvMS9BREFDOEI1MzA1MTc4RkU3RkY4RkFGM0Q4Q0JBMjZBNUU2
MjYzMkVFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwgeYGCCsGAQUFBwEHAQH/BIHWMIHTMIHBBAIAATCBugMEAoPETAMEAoPd
RAMEAop1fAMEAop53AMEAop67AMEAo//cAMEAqDu3AMEAqh5NAMEAqjjLAMEAqjk
gAMEAqjodAMEAqoAzAMEAqr1ZAMEAqr3NAMEA7FCQAMEA7FDAAMEBLFGgAMEBbFL
wAMEA7FXkAMEBbGCwAMEBbO/gAMEBLrbkAMEA7rpSAMEB7sSgAMEBLtsYAMEBLtu
0AMEBr0tQAMEBL0ykAMEA78GUAMEAshe8AMEAsmVeDANBAIAAjAHAwUAKAQIgDAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJubjANBgkqhkiG9w0BAQsFAAOCAQEAsqmD
3a58WlgFdxfkzvaIi0Ewgb1eP2dYiqa8TSXsAEG7n/c2xp7+oCdvlSu0tHMAb8Z9
Clz3BlXoODzZkYAAwOEPLJ1GJu7aDNuwQRi7RjgyQp8515B9Pqdr/b6Pa0EJj5V/
XiHKopyFvFKWjvdvdNmIem5IItFf2TsvH021Dbyka8sPb4Uv1Prauad0dJNAFXsy
1IwBgdrcDGHpPpEglpp314sBLG1LzrpUanNJDdsS/NY/Kh+LxgNdTAUCNZyfcoDj
8K7idAXx4JB3XQu/MwQmtzARi5ylP36rIEk83cvWmeFlUgWBSCF8PtVCHiRDS+qe
1auvrfEQzeKD3EYL8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org