Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.cer
File:                     AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.cer (raw, json)
Hash identifier:          B9z7w5kla5/4+K/7t6alN0EbOODXzUtUJBnWP6XkRYw=
Subject key identifier:   AF:84:07:2B:D8:A0:EA:33:CE:6C:51:66:5E:E9:7B:32:66:4F:9C:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       069F59E3ECAD00CE2BA4918422C4D7D854490D21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Aug 2022 18:15:14 +0000
Certificate not after:    Sat 05 Aug 2023 18:20:14 +0000
Subordinate resources:    AS: 268925
                          IP: 45.176.4.0/22
                          IP: 2804:5cb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9f:59:e3:ec:ad:00:ce:2b:a4:91:84:22:c4:d7:d8:54:49:0d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  6 18:15:14 2022 GMT
            Not After : Aug  5 18:20:14 2023 GMT
        Subject: CN=AF84072BD8A0EA33CE6C51665EE97B32664F9CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:ea:b5:9e:f0:9b:07:2f:8c:ba:3d:db:70:
                    39:57:6d:41:4c:a9:59:94:db:42:f1:7b:16:af:f3:
                    60:fb:19:88:bd:30:b8:01:32:28:54:23:72:b3:57:
                    6b:1c:8d:57:3f:42:f2:27:ca:95:25:de:66:b6:7d:
                    f3:38:70:e9:ba:58:86:1a:7b:ea:80:67:a6:d6:a0:
                    80:b4:96:88:98:b0:3a:18:7d:04:58:c6:e2:b3:fc:
                    13:87:95:97:30:32:36:b9:62:b8:8d:1a:7e:bc:34:
                    53:cd:ac:51:50:29:81:af:71:0e:84:34:9f:02:3e:
                    fe:4b:f1:85:4f:2c:c9:df:af:8a:07:6f:47:24:1f:
                    f3:70:9b:dc:91:71:7d:85:c3:ca:82:e3:32:cf:37:
                    e9:4e:db:e7:38:3f:2f:eb:34:b3:ab:f9:8f:9c:6c:
                    18:5d:a0:86:56:89:8c:6e:e5:35:ce:00:e5:45:07:
                    c8:19:0b:95:c8:64:e3:9c:e1:9c:b5:28:3e:85:61:
                    e2:95:34:4f:6e:53:56:9f:e5:6a:63:e1:60:3a:22:
                    f5:c2:d2:e0:32:4d:50:fa:4e:d4:53:30:ee:ea:df:
                    fc:26:75:9a:be:e2:ec:86:a6:cb:f7:b5:60:b5:35:
                    94:00:4e:2e:df:2d:d4:d5:9a:1c:16:5a:4c:c7:75:
                    0e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:84:07:2B:D8:A0:EA:33:CE:6C:51:66:5E:E9:7B:32:66:4F:9C:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22
                IPv6:
                  2804:5cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268925

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:cc:22:95:a2:5c:e5:de:04:82:96:57:c1:41:34:ae:70:
         55:39:5a:f4:4c:14:6f:83:59:5e:80:af:2a:48:1d:14:a5:b7:
         df:4d:c8:4f:f5:90:72:a0:c6:38:4e:3e:ba:8f:d7:05:90:31:
         55:c1:14:cc:0d:c6:00:8a:aa:d5:04:06:1e:68:75:c5:0c:cc:
         00:22:73:6d:8f:ea:0d:37:b4:83:d1:9e:16:9e:24:09:5b:94:
         5c:2a:78:e0:16:29:cd:9b:3d:9c:c5:a3:9b:5a:59:5d:9a:99:
         cd:fb:90:d3:f7:04:b4:d1:0e:24:ea:4e:49:0b:76:67:25:69:
         a5:41:8e:ae:f9:40:62:c3:b4:ca:b0:f8:9d:6b:1d:61:4e:00:
         d0:a0:08:0b:6a:c1:8a:9f:e6:41:26:8b:2f:27:77:48:66:9f:
         5c:c7:81:ad:79:e0:74:03:0a:8a:ef:0e:4f:be:8a:89:fd:e4:
         25:e2:a3:51:38:81:8e:1c:61:8f:ed:c9:b5:8b:b2:93:cd:12:
         d8:7d:ce:3c:12:4b:24:80:05:53:c1:7d:4f:a8:99:f9:b0:a0:
         53:49:6f:51:43:4a:8b:4d:af:d4:ba:4f:e3:8c:e7:d1:bc:5f:
         64:bc:7f:da:e1:80:7c:a7:52:16:97:56:f3:b9:e8:22:8d:2b:
         06:76:3a:32
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBp9Z4+ytAM4rpJGEIsTX2FRJDSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MDYxODE1MTRaFw0yMzA4MDUxODIwMTRaMDMxMTAvBgNV
BAMTKEFGODQwNzJCRDhBMEVBMzNDRTZDNTE2NjVFRTk3QjMyNjY0RjlDQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYE+q1nvCbBy+Muj3bcDlXbUFM
qVmU20Lxexav82D7GYi9MLgBMihUI3KzV2scjVc/QvInypUl3ma2ffM4cOm6WIYa
e+qAZ6bWoIC0loiYsDoYfQRYxuKz/BOHlZcwMja5YriNGn68NFPNrFFQKYGvcQ6E
NJ8CPv5L8YVPLMnfr4oHb0ckH/Nwm9yRcX2Fw8qC4zLPN+lO2+c4Py/rNLOr+Y+c
bBhdoIZWiYxu5TXOAOVFB8gZC5XIZOOc4Zy1KD6FYeKVNE9uU1af5Wpj4WA6IvXC
0uAyTVD6TtRTMO7q3/wmdZq+4uyGpsv3tWC1NZQATi7fLdTVmhwWWkzHdQ4PAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvhAcr2KDqM85s
UWZe6XsyZk+cpjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83WXVwTEFweUU4cDFqYUJhTVJWc1RXcXBvVGdRSnRjNFVT
VFdoNlZlbWVLdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRV
U1RXaDZWZW1lS3QvMC9BRjg0MDcyQkQ4QTBFQTMzQ0U2QzUxNjY1RUU5N0IzMjY2
NEY5Q0E2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItsAQwDQQCAAIwBwMF
ACgEXLQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBp9MA0GCSqGSIb3DQEBCwUA
A4IBAQCbXcwilaJc5d4EgpZXwUE0rnBVOVr0TBRvg1legK8qSB0UpbffTchP9ZBy
oMY4Tj66j9cFkDFVwRTMDcYAiqrVBAYeaHXFDMwAInNtj+oNN7SD0Z4WniQJW5Rc
KnjgFinNmz2cxaObWlldmpnN+5DT9wS00Q4k6k5JC3ZnJWmlQY6u+UBiw7TKsPid
ax1hTgDQoAgLasGKn+ZBJosvJ3dIZp9cx4GteeB0AwqK7w5PvoqJ/eQl4qNROIGO
HGGP7cm1i7KTzRLYfc48EkskgAVTwX1PqJn5sKBTSW9RQ0qLTa/Uuk/jjOfRvF9k
vH/a4YB8p1IWl1bzuegijSsGdjoy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org