Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.cer
File:                     AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.cer (raw, json)
Hash identifier:          hzJuaG6RPCvglWm2RKsjMuxQu5NKdQGXnUbc746Dq7s=
Subject key identifier:   AF:40:40:9E:C7:88:6F:60:9C:B8:88:2B:A9:E7:7E:C9:DF:34:FC:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30F276403A3371266A6BDB44D29667DB7DAFB9A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 18:04:11 +0000
Certificate not after:    Mon 10 Feb 2025 18:09:11 +0000
Subordinate resources:    AS: 268556
                          IP: 45.163.172.0/22
                          IP: 2804:5300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f2:76:40:3a:33:71:26:6a:6b:db:44:d2:96:67:db:7d:af:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 18:04:11 2024 GMT
            Not After : Feb 10 18:09:11 2025 GMT
        Subject: CN=AF40409EC7886F609CB8882BA9E77EC9DF34FCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:96:fc:10:5b:13:55:7c:17:1f:85:2e:ee:
                    b7:c0:d3:f5:14:2f:8b:5d:e8:08:ff:3e:47:26:54:
                    24:2c:a8:d6:04:6e:66:f6:e4:00:b8:89:14:e6:60:
                    8e:eb:77:57:4e:0f:c4:c9:4d:89:e8:d2:25:17:cb:
                    24:30:7b:a1:45:ba:16:1c:58:67:1e:12:78:fc:39:
                    68:a7:b5:63:a8:b5:5a:0c:64:41:36:78:14:19:9e:
                    63:92:c4:5b:05:08:2e:a0:28:c4:85:b4:bb:96:59:
                    91:96:db:b3:ec:4a:72:e0:c8:03:e6:f9:af:75:9e:
                    bf:a2:98:da:51:52:0a:ab:a2:09:2a:68:fe:3a:86:
                    ba:dd:b7:91:e5:2c:96:07:37:b9:85:b2:ee:0d:3c:
                    a5:df:cf:d8:ef:2a:4f:8c:6e:9d:9b:5b:a6:0f:d2:
                    de:be:98:1d:63:c5:c7:2a:d1:48:52:c8:c5:ce:ab:
                    8f:da:da:22:2d:df:fc:99:a3:0f:fa:fa:d6:06:ae:
                    71:5d:63:c5:b2:45:0c:10:41:54:fd:3e:91:ce:c2:
                    85:47:ef:5d:a0:21:3a:a4:e1:ce:c6:b0:0b:56:ed:
                    d6:b4:57:7f:61:97:d7:29:ef:ba:f9:62:54:b4:f1:
                    cc:9d:b2:72:0e:2f:2c:8c:00:e7:44:34:e1:de:ab:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:40:40:9E:C7:88:6F:60:9C:B8:88:2B:A9:E7:7E:C9:DF:34:FC:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/22
                IPv6:
                  2804:5300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268556

    Signature Algorithm: sha256WithRSAEncryption
         83:f3:89:83:ee:58:ee:fa:43:9b:2d:b9:fa:e1:70:7a:86:02:
         40:68:52:fa:e8:48:a2:41:a5:8b:f4:b4:03:5f:8d:41:a1:75:
         dc:bc:8d:e1:b9:2b:14:a7:31:f9:1e:4e:cb:38:a2:ea:43:dc:
         8c:fe:9e:94:6c:90:c6:ee:f3:8b:77:dc:4e:dd:13:ff:f6:8d:
         c1:5c:c5:e5:c2:19:74:2f:c4:20:1b:e9:24:8b:0a:44:1b:4f:
         9a:37:79:3f:8e:c2:b0:83:d2:5f:78:b2:89:0e:98:e6:6b:09:
         6c:7d:af:b7:f5:94:73:57:78:1f:ac:fd:a5:9e:38:73:9b:01:
         7e:d5:83:df:3b:b7:c6:ef:54:c9:ee:71:f7:20:d8:63:1e:7c:
         28:de:db:35:8b:e2:52:31:d4:0f:1c:b3:f4:51:52:96:58:b7:
         66:d3:3b:d7:1e:d6:89:cf:bc:67:f8:3b:f2:b0:bd:07:e2:cf:
         80:e2:84:6e:fa:5c:4b:98:77:c0:a6:d6:15:00:f0:ff:a9:8c:
         cd:f2:6a:2d:2e:45:64:03:eb:32:65:18:c9:49:0f:14:87:fb:
         f8:b0:69:b1:4c:7a:f7:a2:c6:5c:31:3c:be:ec:e9:62:85:ac:
         3a:fb:df:71:bd:0f:4d:03:e4:c8:ee:a2:b2:c6:1a:e0:99:28:
         63:3c:f4:2b
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUMPJ2QDozcSZqa9tE0pZn232vuaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTIxODA0MTFaFw0yNTAyMTAxODA5MTFaMDMxMTAvBgNV
BAMTKEFGNDA0MDlFQzc4ODZGNjA5Q0I4ODgyQkE5RTc3RUM5REYzNEZDQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67Jb8EFsTVXwXH4Uu7rfA0/UU
L4td6Aj/PkcmVCQsqNYEbmb25AC4iRTmYI7rd1dOD8TJTYno0iUXyyQwe6FFuhYc
WGceEnj8OWintWOotVoMZEE2eBQZnmOSxFsFCC6gKMSFtLuWWZGW27PsSnLgyAPm
+a91nr+imNpRUgqrogkqaP46hrrdt5HlLJYHN7mFsu4NPKXfz9jvKk+Mbp2bW6YP
0t6+mB1jxccq0UhSyMXOq4/a2iIt3/yZow/6+tYGrnFdY8WyRQwQQVT9PpHOwoVH
712gITqk4c7GsAtW7da0V39hl9cp77r5YlS08cydsnIOLyyMAOdENOHeqyg3AgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvQECex4hvYJy4
iCup537J3zT8sTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5
bXdDM0N5TTNoLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5
bXdDM0N5TTNoLzAvQUY0MDQwOUVDNzg4NkY2MDlDQjg4ODJCQTlFNzdFQzlERjM0
RkNCMS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaOsMA0EAgACMAcDBQAo
BFMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQZDDANBgkqhkiG9w0BAQsFAAOC
AQEAg/OJg+5Y7vpDmy25+uFweoYCQGhS+uhIokGli/S0A1+NQaF13LyN4bkrFKcx
+R5Oyzii6kPcjP6elGyQxu7zi3fcTt0T//aNwVzF5cIZdC/EIBvpJIsKRBtPmjd5
P47CsIPSX3iyiQ6Y5msJbH2vt/WUc1d4H6z9pZ44c5sBftWD3zu3xu9Uye5x9yDY
Yx58KN7bNYviUjHUDxyz9FFSlli3ZtM71x7Wic+8Z/g78rC9B+LPgOKEbvpcS5h3
wKbWFQDw/6mMzfJqLS5FZAPrMmUYyUkPFIf7+LBpsUx696LGXDE8vuzpYoWsOvvf
cb0PTQPkyO6issYa4JkoYzz0Kw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org