Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.cer
File:                     AE0A5A110B6FD898CCCEFC07C260A96ED656830E.cer (raw, json)
Hash identifier:          gcVaH6Y+rpZEbtjYg2Rt92o+vQcLLPPx749nAKbcKmE=
Subject key identifier:   AE:0A:5A:11:0B:6F:D8:98:CC:CE:FC:07:C2:60:A9:6E:D6:56:83:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4000E4B8CB12A0B46F55EF16B4202A6449CD47BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 15:24:10 +0000
Certificate not after:    Tue 11 Mar 2025 15:29:10 +0000
Subordinate resources:    AS: 267511
                          IP: 201.182.100.0/22
                          IP: 2804:4298::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:00:e4:b8:cb:12:a0:b4:6f:55:ef:16:b4:20:2a:64:49:cd:47:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 15:24:10 2024 GMT
            Not After : Mar 11 15:29:10 2025 GMT
        Subject: CN=AE0A5A110B6FD898CCCEFC07C260A96ED656830E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:b0:f8:5b:15:3f:e9:c1:51:da:fe:a5:56:
                    70:df:9e:92:e5:ac:4a:a4:0a:41:4c:4b:1d:4e:66:
                    f7:2b:f3:07:f5:b1:e3:71:d6:04:f2:3e:aa:4c:f9:
                    d1:cd:c5:1d:9b:35:87:d3:14:55:ad:a3:c7:32:57:
                    c0:5c:f6:b7:1c:0c:f3:06:1d:0a:00:c9:48:99:30:
                    45:9d:cb:03:bb:d4:72:8d:c0:b0:ee:bf:48:71:41:
                    10:fe:2d:e2:10:69:0e:f0:3e:ca:ce:4f:72:be:b8:
                    b8:49:f7:39:2c:cd:2d:33:71:54:42:c8:00:08:04:
                    79:26:56:3e:ec:c9:21:d8:94:82:46:d6:31:3a:17:
                    db:95:c1:68:6a:e4:81:a2:62:08:71:73:7e:d9:5d:
                    23:5e:b1:a3:10:51:bc:dc:22:f8:6d:b6:0f:c6:19:
                    03:99:0e:55:a0:df:58:92:d9:08:24:75:d7:41:e2:
                    93:05:7d:e5:3d:61:fc:72:47:58:7a:ff:81:d5:bd:
                    41:f2:c6:20:ba:3a:19:0a:fe:88:90:9b:4c:43:ab:
                    d5:67:48:66:ac:1b:30:43:b1:7b:46:8c:89:24:d6:
                    c7:0b:45:40:c0:d8:71:e9:1d:e1:31:64:e5:2f:bf:
                    8e:8a:30:1d:d5:88:20:13:ef:c1:6e:a7:a2:e8:4f:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:0A:5A:11:0B:6F:D8:98:CC:CE:FC:07:C2:60:A9:6E:D6:56:83:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.100.0/22
                IPv6:
                  2804:4298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267511

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:a4:80:df:95:5e:65:eb:85:22:b4:4a:35:d9:05:07:3f:
         9c:0c:99:cd:dd:fa:a8:3c:f5:a8:63:f3:38:24:f7:cd:6f:91:
         1f:19:e1:a1:a2:89:1a:da:c3:ad:fe:8c:f2:de:d7:46:d1:87:
         e4:98:90:e9:6d:93:6f:6c:0b:28:e8:e6:27:71:86:78:1c:25:
         38:75:8b:2d:9f:04:9b:aa:5a:b7:4a:76:cf:4a:b3:a4:58:01:
         63:38:52:f6:fe:a2:15:aa:c2:b5:d1:99:d5:fc:4c:da:66:f3:
         a9:4d:eb:fa:bb:14:7f:07:df:b6:dc:6f:5e:88:6d:13:9f:49:
         f8:b5:69:49:32:23:4a:52:a6:37:08:b9:76:67:8b:d1:55:58:
         1a:2e:0d:12:11:00:2c:6c:58:e4:fe:a1:e7:df:42:c1:b5:78:
         0c:f5:d1:e7:62:c5:53:ca:2a:6b:00:1a:d0:3f:61:ca:77:91:
         a8:9a:60:26:4c:a5:9b:17:61:00:14:1f:ad:63:67:44:80:d9:
         ef:fd:70:1c:25:84:08:69:b7:52:98:e7:4b:40:79:39:5d:02:
         f4:7c:30:fa:4e:ff:7d:5a:f9:19:46:4f:35:1f:97:63:f3:bb:
         2a:54:e1:df:45:72:03:6e:44:ef:67:0f:ef:ff:24:6d:cf:00:
         d3:13:d6:12
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUQADkuMsSoLRvVe8WtCAqZEnNR7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIxNTI0MTBaFw0yNTAzMTExNTI5MTBaMDMxMTAvBgNV
BAMTKEFFMEE1QTExMEI2RkQ4OThDQ0NFRkMwN0MyNjBBOTZFRDY1NjgzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9X7D4WxU/6cFR2v6lVnDfnpLl
rEqkCkFMSx1OZvcr8wf1seNx1gTyPqpM+dHNxR2bNYfTFFWto8cyV8Bc9rccDPMG
HQoAyUiZMEWdywO71HKNwLDuv0hxQRD+LeIQaQ7wPsrOT3K+uLhJ9zkszS0zcVRC
yAAIBHkmVj7sySHYlIJG1jE6F9uVwWhq5IGiYghxc37ZXSNesaMQUbzcIvhttg/G
GQOZDlWg31iS2QgkdddB4pMFfeU9YfxyR1h6/4HVvUHyxiC6OhkK/oiQm0xDq9Vn
SGasGzBDsXtGjIkk1scLRUDA2HHpHeExZOUvv46KMB3ViCAT78Fup6LoT/4ZAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuCloRC2/YmMzO
/AfCYKlu1laDDjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9rZFBMMUF1dkZKeEo4WG9Uelh1ekhZcG5mR1djOGdMbTVH
TGZ4YUxFNkRHLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9rZFBMMUF1dkZKeEo4WG9Uelh1ekhZcG5mR1djOGdMbTVH
TGZ4YUxFNkRHLzAvQUUwQTVBMTEwQjZGRDg5OENDQ0VGQzA3QzI2MEE5NkVENjU2
ODMwRS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCybZkMA0EAgACMAcDBQAo
BEKYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQU9zANBgkqhkiG9w0BAQsFAAOC
AQEApIakgN+VXmXrhSK0SjXZBQc/nAyZzd36qDz1qGPzOCT3zW+RHxnhoaKJGtrD
rf6M8t7XRtGH5JiQ6W2Tb2wLKOjmJ3GGeBwlOHWLLZ8Em6pat0p2z0qzpFgBYzhS
9v6iFarCtdGZ1fxM2mbzqU3r+rsUfwffttxvXohtE59J+LVpSTIjSlKmNwi5dmeL
0VVYGi4NEhEALGxY5P6h599CwbV4DPXR52LFU8oqawAa0D9hyneRqJpgJkylmxdh
ABQfrWNnRIDZ7/1wHCWECGm3UpjnS0B5OV0C9Hww+k7/fVr5GUZPNR+XY/O7KlTh
30VyA25E72cP7/8kbc8A0xPWEg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org