Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF09E970726EC817A0DBDD43D7C859051FE47BB4.cer
File:                     AF09E970726EC817A0DBDD43D7C859051FE47BB4.cer (raw, json)
Hash identifier:          hYznBRyBQzPYBrm7bO+wob2a4y6Dlqd7X1KLN4v+Ik4=
Subject key identifier:   AF:09:E9:70:72:6E:C8:17:A0:DB:DD:43:D7:C8:59:05:1F:E4:7B:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58D232FC034F5B8C386E3EBFAD1319D326FF7C80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/AF09E970726EC817A0DBDD43D7C859051FE47BB4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 17:52:16 +0000
Certificate not after:    Tue 03 Dec 2024 17:57:16 +0000
Subordinate resources:    AS: 266375
                          IP: 170.80.52.0/22
                          IP: 2804:36d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d2:32:fc:03:4f:5b:8c:38:6e:3e:bf:ad:13:19:d3:26:ff:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 17:52:16 2023 GMT
            Not After : Dec  3 17:57:16 2024 GMT
        Subject: CN=AF09E970726EC817A0DBDD43D7C859051FE47BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:dd:e6:6f:7a:28:75:d6:52:22:e4:31:6a:
                    7a:f8:57:d8:e7:b8:e2:f6:c4:75:50:eb:8b:1a:9b:
                    64:44:6f:04:c1:da:e3:3a:9a:41:b4:47:98:51:57:
                    a7:7a:a1:30:b1:64:e4:e6:3b:67:02:fe:21:a9:b9:
                    ca:c3:15:7c:d9:c1:43:0b:97:24:2f:e2:8b:08:d6:
                    69:29:fd:72:b8:70:e5:c3:1d:49:4d:32:29:6e:06:
                    ed:12:72:2a:89:07:76:3f:7d:54:ad:3e:d9:29:a8:
                    e1:78:c4:65:ca:e7:1e:ab:21:1f:b5:61:2d:82:e3:
                    e5:99:dc:af:e0:e3:81:98:70:3b:07:ba:57:15:e9:
                    80:9e:5b:99:4d:bd:93:c8:08:96:d0:5a:b8:e1:25:
                    64:bb:ce:48:2b:85:e5:73:14:09:99:e7:05:d4:c7:
                    dd:b6:72:1a:0f:79:1e:e1:a0:cb:c5:3a:31:13:c5:
                    3e:7a:80:1e:de:58:9e:e2:e0:34:6a:76:93:de:a6:
                    ef:ee:2c:bc:ba:0c:da:51:a9:57:cd:a1:40:c4:9e:
                    f1:e0:c8:0c:0f:9a:96:80:13:05:bc:1c:29:db:d4:
                    2f:b2:2d:29:98:25:d6:a6:cb:a6:d4:01:07:02:e1:
                    b9:c1:83:da:3c:53:b1:97:62:9f:9c:2f:a7:9f:b4:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:09:E9:70:72:6E:C8:17:A0:DB:DD:43:D7:C8:59:05:1F:E4:7B:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/AF09E970726EC817A0DBDD43D7C859051FE47BB4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/22
                IPv6:
                  2804:36d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266375

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:38:d0:b4:6c:45:08:09:c8:51:7a:63:37:bd:e3:9d:8d:
         9f:6c:1c:8e:e4:79:43:67:85:58:6a:d3:64:06:c8:82:77:ad:
         91:c2:52:65:51:8d:ab:95:10:1f:42:9b:d2:53:b0:8e:d4:d6:
         b7:9b:84:8d:ad:74:f1:b9:05:e6:39:41:63:f1:b6:c9:ae:ce:
         05:00:5e:f6:77:ad:f9:04:18:18:a8:65:1a:39:34:09:3a:42:
         30:84:e0:06:35:fb:6f:c3:c5:72:3d:bc:10:94:6e:c0:24:bc:
         af:ff:10:0d:c9:e8:f5:3a:58:df:99:80:96:2c:cd:1f:c5:92:
         62:ab:6d:41:d8:fe:5f:28:60:2a:15:f2:9c:6b:1a:c2:fd:fc:
         7b:cd:1c:ef:48:ca:ba:0e:f2:33:19:9b:ff:16:bf:a8:98:87:
         4c:d8:73:0f:d6:11:dd:f6:16:bb:8a:cf:3e:a0:5d:49:64:37:
         1f:da:e5:da:94:be:30:26:b9:c8:c1:48:dd:43:8f:31:9e:89:
         00:46:93:d1:28:a0:06:ef:59:c1:e1:39:d0:a3:52:90:94:5c:
         cb:84:e7:af:6f:13:d8:0c:8d:1b:90:a6:83:b3:b5:57:87:17:
         a1:39:e4:70:e3:d2:99:a3:d0:71:64:18:c5:fb:f7:f4:4a:9e:
         20:45:76:de
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUWNIy/ANPW4w4bj6/rRMZ0yb/fIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDUxNzUyMTZaFw0yNDEyMDMxNzU3MTZaMDMxMTAvBgNV
BAMTKEFGMDlFOTcwNzI2RUM4MTdBMERCREQ0M0Q3Qzg1OTA1MUZFNDdCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ld3mb3ooddZSIuQxanr4V9jn
uOL2xHVQ64sam2REbwTB2uM6mkG0R5hRV6d6oTCxZOTmO2cC/iGpucrDFXzZwUML
lyQv4osI1mkp/XK4cOXDHUlNMiluBu0SciqJB3Y/fVStPtkpqOF4xGXK5x6rIR+1
YS2C4+WZ3K/g44GYcDsHulcV6YCeW5lNvZPICJbQWrjhJWS7zkgrheVzFAmZ5wXU
x922choPeR7hoMvFOjETxT56gB7eWJ7i4DRqdpPepu/uLLy6DNpRqVfNoUDEnvHg
yAwPmpaAEwW8HCnb1C+yLSmYJdamy6bUAQcC4bnBg9o8U7GXYp+cL6eftB1NAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvCelwcm7IF6Db
3UPXyFkFH+R7tDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GNThWb3IyZVNRMWYxOFlHYXFoaW1OZGp5WW9IblFLeUt2
OFdqeW42OEY3Ni8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRjU4Vm9yMmVTUTFmMThZR2FxaGltTmRqeVlvSG5RS3lL
djhXanluNjhGNzYvMC9BRjA5RTk3MDcyNkVDODE3QTBEQkRENDNEN0M4NTkwNTFG
RTQ3QkI0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqUDQwDQQCAAIwBwMF
ACgENtQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBCHMA0GCSqGSIb3DQEBCwUA
A4IBAQCLsjjQtGxFCAnIUXpjN73jnY2fbByO5HlDZ4VYatNkBsiCd62RwlJlUY2r
lRAfQpvSU7CO1Na3m4SNrXTxuQXmOUFj8bbJrs4FAF72d635BBgYqGUaOTQJOkIw
hOAGNftvw8VyPbwQlG7AJLyv/xANyej1OljfmYCWLM0fxZJiq21B2P5fKGAqFfKc
axrC/fx7zRzvSMq6DvIzGZv/Fr+omIdM2HMP1hHd9ha7is8+oF1JZDcf2uXalL4w
JrnIwUjdQ48xnokARpPRKKAG71nB4TnQo1KQlFzLhOevbxPYDI0bkKaDs7VXhxeh
OeRw49KZo9BxZBjF+/f0Sp4gRXbe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org