Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AEABCFD4E6EFB09C6835888CEF4C03DD36673789.cer
File:                     AEABCFD4E6EFB09C6835888CEF4C03DD36673789.cer (raw, json)
Hash identifier:          1MeJwd6GU81GjmvuLjggD79KCKlMzgQGnaZrwy4E8B8=
Subject key identifier:   AE:AB:CF:D4:E6:EF:B0:9C:68:35:88:8C:EF:4C:03:DD:36:67:37:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DE77F98279238A7C3DB3C51D0F062221DE3F4A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/AEABCFD4E6EFB09C6835888CEF4C03DD36673789.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 12:22:42 +0000
Certificate not after:    Sat 29 Jun 2024 12:27:42 +0000
Subordinate resources:    AS: 271627
                          IP: 45.178.80.0/22
                          IP: 2804:7e7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:7f:98:27:92:38:a7:c3:db:3c:51:d0:f0:62:22:1d:e3:f4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 12:22:42 2023 GMT
            Not After : Jun 29 12:27:42 2024 GMT
        Subject: CN=AEABCFD4E6EFB09C6835888CEF4C03DD36673789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:71:a7:b3:f7:b2:e9:28:4e:a4:b5:95:3a:
                    ab:16:35:dd:49:ce:58:a2:17:c8:3e:0d:db:26:c2:
                    d5:ea:c8:10:62:9d:f6:3c:ba:9a:c5:bf:ad:a4:a3:
                    f1:13:cb:e3:4b:4b:24:b0:66:e1:35:ef:18:15:2d:
                    08:4b:cf:67:86:e1:49:87:aa:97:19:74:f4:89:b4:
                    5b:f9:e7:b1:90:74:9e:78:c9:de:1d:9e:d0:01:ba:
                    2e:f8:44:df:85:85:5b:31:9b:29:88:65:81:ff:5d:
                    c0:64:57:ff:51:2b:a3:bf:a9:91:c2:01:83:9a:67:
                    df:02:90:73:a7:3e:87:c1:66:cd:ee:1b:3d:a6:87:
                    68:e9:b0:52:e5:1c:7c:1b:fb:c4:2f:00:d8:ab:30:
                    a6:a5:0b:c6:8f:04:0b:b0:66:63:f3:82:95:b1:cc:
                    7b:3c:11:1c:8d:0b:a9:5a:f1:80:d7:54:ac:5b:c3:
                    9d:d6:6e:cf:03:03:89:1c:1e:33:ad:04:6a:07:9d:
                    6e:80:ca:92:ad:74:f4:36:81:73:27:40:2e:6c:6e:
                    a5:b2:81:bb:06:d7:cd:62:eb:84:76:89:69:2c:d0:
                    d0:51:1b:7f:ff:65:67:3e:c0:c9:b7:49:50:30:1c:
                    55:a7:35:de:e8:60:89:4c:60:41:f8:37:de:18:c9:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:AB:CF:D4:E6:EF:B0:9C:68:35:88:8C:EF:4C:03:DD:36:67:37:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/AEABCFD4E6EFB09C6835888CEF4C03DD36673789.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.80.0/22
                IPv6:
                  2804:7e7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271627

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:fc:f5:77:f0:20:a3:ea:d7:2f:6f:d9:5d:74:4e:56:7c:
         2d:43:c3:64:91:e0:73:4b:13:04:a2:c3:bc:8d:62:d8:8f:be:
         70:ab:c5:7a:02:4d:8f:a1:92:2c:99:e6:5f:ad:9a:e8:8a:31:
         f0:ad:50:0e:7e:fc:af:24:7d:98:46:d8:01:8f:0c:d2:c9:c7:
         f0:b3:ee:55:7d:95:0a:29:f6:77:3d:c3:60:55:56:1e:16:af:
         77:4e:71:51:1c:82:33:6f:58:0d:9d:94:d9:c3:78:bd:dc:2f:
         0e:cb:11:6c:b9:42:30:a7:8a:51:90:2b:78:6a:ea:3a:e3:97:
         30:61:7f:af:27:67:f0:7b:d0:a3:15:9f:9e:46:8d:11:79:b6:
         ed:21:f2:58:cc:98:e0:46:71:bc:60:99:bd:45:21:ff:95:a4:
         43:63:f5:b5:c1:53:f1:24:40:df:4e:0c:ae:38:5a:91:53:72:
         4e:cd:82:5a:8a:97:b5:fa:84:6e:ef:5f:e3:ca:8d:a4:c8:d7:
         03:8b:0d:28:b5:24:81:de:10:e4:fa:76:90:d5:45:f5:84:fc:
         f9:ec:51:15:56:b9:a1:0e:38:2a:31:8f:30:1c:ff:ba:4b:f6:
         a2:1b:df:49:21:36:c6:00:00:21:d9:d0:10:41:fb:77:b1:ad:
         2e:ef:96:24
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUTed/mCeSOKfD2zxR0PBiIh3j9KEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDExMjIyNDJaFw0yNDA2MjkxMjI3NDJaMDMxMTAvBgNV
BAMTKEFFQUJDRkQ0RTZFRkIwOUM2ODM1ODg4Q0VGNEMwM0REMzY2NzM3ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxHGns/ey6ShOpLWVOqsWNd1J
zliiF8g+DdsmwtXqyBBinfY8uprFv62ko/ETy+NLSySwZuE17xgVLQhLz2eG4UmH
qpcZdPSJtFv557GQdJ54yd4dntABui74RN+FhVsxmymIZYH/XcBkV/9RK6O/qZHC
AYOaZ98CkHOnPofBZs3uGz2mh2jpsFLlHHwb+8QvANirMKalC8aPBAuwZmPzgpWx
zHs8ERyNC6la8YDXVKxbw53Wbs8DA4kcHjOtBGoHnW6AypKtdPQ2gXMnQC5sbqWy
gbsG181i64R2iWks0NBRG3//ZWc+wMm3SVAwHFWnNd7oYIlMYEH4N94YySynAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuq8/U5u+wnGg1
iIzvTAPdNmc3iTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HRzN0U1c5UG5GbXc4SEZWWmFhc1NZOUplcm5IYm9uZjY1
RGplcTdvQTRwRy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HRzN0U1c5UG5GbXc4SEZWWmFhc1NZOUplcm5IYm9uZjY1
RGplcTdvQTRwRy8wL0FFQUJDRkQ0RTZFRkIwOUM2ODM1ODg4Q0VGNEMwM0REMzY2
NzM3ODkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2yUDANBAIAAjAHAwUA
KAR+fDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJQswDQYJKoZIhvcNAQELBQAD
ggEBAGuM/PV38CCj6tcvb9lddE5WfC1Dw2SR4HNLEwSiw7yNYtiPvnCrxXoCTY+h
kiyZ5l+tmuiKMfCtUA5+/K8kfZhG2AGPDNLJx/Cz7lV9lQop9nc9w2BVVh4Wr3dO
cVEcgjNvWA2dlNnDeL3cLw7LEWy5QjCnilGQK3hq6jrjlzBhf68nZ/B70KMVn55G
jRF5tu0h8ljMmOBGcbxgmb1FIf+VpENj9bXBU/EkQN9ODK44WpFTck7NglqKl7X6
hG7vX+PKjaTI1wOLDSi1JIHeEOT6dpDVRfWE/PnsURVWuaEOOCoxjzAc/7pL9qIb
30khNsYAACHZ0BBB+3exrS7vliQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org