Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.cer
File:                     AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.cer (raw, json)
Hash identifier:          GYAgDvl7VrV/z+TSgUU3j2Q0khBDGp3mXNTUG/sS3v4=
Subject key identifier:   AE:8A:2A:FA:3C:A4:07:97:49:AD:E8:B9:D2:4D:AA:49:E2:0E:87:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5111853146B517570A27761ABFE1715D6EF9CE82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Jun 2022 02:40:40 +0000
Certificate not after:    Fri 23 Jun 2023 02:45:40 +0000
Subordinate resources:    AS: 266053
                          IP: 45.4.16.0/22
                          IP: 2804:39d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:11:85:31:46:b5:17:57:0a:27:76:1a:bf:e1:71:5d:6e:f9:ce:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 24 02:40:40 2022 GMT
            Not After : Jun 23 02:45:40 2023 GMT
        Subject: CN=AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:50:7b:80:1d:7f:35:3c:4c:6f:18:03:8a:dd:
                    5c:e4:21:44:78:1f:85:99:a3:e1:fe:ff:77:79:b0:
                    4b:45:0d:13:9b:cb:cc:0e:d3:73:b6:df:04:e0:e9:
                    b2:01:fa:d8:02:45:8e:5c:e6:2b:ef:2b:b4:79:2c:
                    9b:4b:19:5c:a4:71:a1:71:63:3e:f5:5d:bd:a4:94:
                    56:8e:02:02:50:82:54:e1:55:c0:bb:66:03:ca:30:
                    94:4a:28:73:de:07:a0:1d:68:e9:8b:f8:a9:60:f5:
                    28:f6:c9:75:58:ac:4a:54:4c:6d:00:71:30:bd:7d:
                    03:8d:c8:fd:4d:4b:29:fb:7a:d3:d4:9b:12:93:96:
                    28:f8:60:8d:89:7d:f3:6d:cd:98:77:a3:75:b9:a3:
                    11:e1:b8:8f:39:b3:fc:8b:96:ef:8c:a0:c1:98:a6:
                    d7:6a:ef:2d:e1:40:10:3c:a7:4d:d9:7a:bb:a3:6a:
                    fc:27:0f:08:a0:b9:f3:75:55:d5:b4:b1:7e:39:42:
                    13:03:02:dc:74:50:10:5f:1e:86:3f:a9:d5:49:5d:
                    23:df:7a:93:7a:c5:c1:78:19:75:19:fb:de:ee:74:
                    cf:d2:ef:ac:13:1c:d3:b8:24:2e:9b:b3:a5:16:47:
                    f9:a9:6c:79:05:9d:cc:66:b1:17:47:b7:ca:f4:ae:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:8A:2A:FA:3C:A4:07:97:49:AD:E8:B9:D2:4D:AA:49:E2:0E:87:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.16.0/22
                IPv6:
                  2804:39d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266053

    Signature Algorithm: sha256WithRSAEncryption
         77:40:a9:fd:83:2b:65:32:4c:04:cd:09:f2:e5:ea:b3:31:5f:
         73:f4:69:1e:13:cb:df:31:a3:94:5b:d2:f8:d1:ff:d9:61:6a:
         d6:1b:18:b4:59:13:e2:b9:b0:8a:a3:41:e3:85:b0:fb:c0:33:
         c8:ec:7c:a1:d4:21:7d:59:8d:35:b9:2f:c7:8f:73:24:d8:ab:
         f8:8f:b3:25:42:d7:e5:d8:76:68:ad:6d:a6:14:97:9f:fe:3a:
         06:bf:a0:87:6a:6a:ac:c5:18:ba:07:cd:c7:80:c8:58:af:4b:
         1e:dc:34:ca:9b:24:d1:06:b8:d7:48:45:d2:6a:00:9a:98:62:
         b9:7d:07:4a:71:7e:a6:e6:03:2f:b4:09:09:a0:a8:e0:c9:b2:
         c6:a1:b7:8a:4f:53:0f:41:41:b4:95:c2:cb:4d:39:bb:f1:07:
         c4:6c:b9:0b:8d:d3:6a:e5:56:86:f1:96:22:d0:90:32:30:67:
         2a:23:fd:99:52:09:ad:cb:1c:cc:bd:e0:07:17:41:f6:c2:5a:
         60:6f:4f:e7:0c:5b:2b:1e:79:e2:4c:91:f5:22:6f:58:38:37:
         ed:cb:84:af:ec:29:fa:b1:9a:25:10:28:b9:e0:c7:a8:9d:cf:
         07:20:f8:60:02:71:8a:6e:ec:99:56:e9:c3:6a:e3:e5:16:ae:
         9b:c1:32:c6
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUURGFMUa1F1cKJ3Yav+FxXW75zoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA2MjQwMjQwNDBaFw0yMzA2MjMwMjQ1NDBaMDMxMTAvBgNV
BAMTKEFFOEEyQUZBM0NBNDA3OTc0OUFERThCOUQyNERBQTQ5RTIwRTg3RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlUHuAHX81PExvGAOK3VzkIUR4
H4WZo+H+/3d5sEtFDROby8wO03O23wTg6bIB+tgCRY5c5ivvK7R5LJtLGVykcaFx
Yz71Xb2klFaOAgJQglThVcC7ZgPKMJRKKHPeB6AdaOmL+Klg9Sj2yXVYrEpUTG0A
cTC9fQONyP1NSyn7etPUmxKTlij4YI2JffNtzZh3o3W5oxHhuI85s/yLlu+MoMGY
ptdq7y3hQBA8p03ZerujavwnDwigufN1VdW0sX45QhMDAtx0UBBfHoY/qdVJXSPf
epN6xcF4GXUZ+97udM/S76wTHNO4JC6bs6UWR/mpbHkFncxmsRdHt8r0rimXAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuiir6PKQHl0mt
6LnSTapJ4g6H9TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZFNvYTEyVUduWXhQNnZUOTM1ZUxnOE10RnhuZWloRkM2
M3pkWkIya2c0cS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZFNvYTEyVUduWXhQNnZUOTM1ZUxnOE10RnhuZWloRkM2
M3pkWkIya2c0cS8wL0FFOEEyQUZBM0NBNDA3OTc0OUFERThCOUQyNERBQTQ5RTIw
RTg3RjUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0EEDANBAIAAjAHAwUA
KAQ51DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMED0UwDQYJKoZIhvcNAQELBQAD
ggEBAHdAqf2DK2UyTATNCfLl6rMxX3P0aR4Ty98xo5Rb0vjR/9lhatYbGLRZE+K5
sIqjQeOFsPvAM8jsfKHUIX1ZjTW5L8ePcyTYq/iPsyVC1+XYdmitbaYUl5/+Oga/
oIdqaqzFGLoHzceAyFivSx7cNMqbJNEGuNdIRdJqAJqYYrl9B0pxfqbmAy+0CQmg
qODJssaht4pPUw9BQbSVwstNObvxB8RsuQuN02rlVobxliLQkDIwZyoj/ZlSCa3L
HMy94AcXQfbCWmBvT+cMWyseeeJMkfUib1g4N+3LhK/sKfqxmiUQKLngx6idzwcg
+GACcYpu7JlW6cNq4+UWrpvBMsY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org