Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer
File:                     AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer (raw, json)
Hash identifier:          mGcc7e9ZPJLdUXx5JSAIFVsrLbfXfHNDqKN1fOFoPeI=
Subject key identifier:   AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AEB04C3D860E6370E3E8F79C2A814E56B53FFF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.mft
caRepository:             rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 21 May 2022 21:35:39 +0000
Certificate not after:    Sat 20 May 2023 21:40:39 +0000
Subordinate resources:    AS: 268647
                          IP: 45.164.240.0/22
                          IP: 2804:5464::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:eb:04:c3:d8:60:e6:37:0e:3e:8f:79:c2:a8:14:e5:6b:53:ff:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 21 21:35:39 2022 GMT
            Not After : May 20 21:40:39 2023 GMT
        Subject: CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:78:24:3c:e8:50:bf:dd:ef:ef:af:ef:0e:
                    50:ad:c1:b2:47:bd:9b:99:5d:53:47:d4:b3:08:e1:
                    65:27:14:83:36:a6:ae:5a:80:a3:f7:93:91:85:bd:
                    2d:4b:53:42:d2:79:be:65:4f:42:53:ba:ea:9a:8f:
                    39:87:53:14:0a:92:52:5d:70:0e:fb:bf:ea:92:1f:
                    d5:e4:78:96:9d:76:0a:49:8a:8f:6e:65:b2:d7:4a:
                    9d:c8:80:fb:b0:c1:0a:11:b8:8d:7c:23:e5:57:f9:
                    7c:c4:3d:9d:f8:89:1d:5c:3a:65:50:d2:23:ff:c3:
                    b0:04:91:02:9f:0b:e9:dc:f3:9e:0e:4d:d7:96:2c:
                    68:fa:03:4f:e2:24:80:4d:c0:6c:04:93:2e:1b:c6:
                    ab:b8:94:fd:f4:52:ca:f9:16:de:49:5c:03:56:88:
                    bd:a8:50:09:ca:da:ad:3b:eb:2c:4e:07:85:45:eb:
                    66:d8:98:ee:fb:98:7c:2c:f9:db:0d:4b:bb:8b:29:
                    8b:3f:85:df:00:a7:07:29:be:00:31:68:d2:6b:ad:
                    48:1e:9c:de:e8:04:67:6d:5b:77:1e:be:4d:ae:d9:
                    36:6e:af:04:19:de:76:10:5c:b8:f0:bd:c1:c0:94:
                    15:65:89:f2:48:a9:ad:1d:b0:a3:7b:06:cb:fb:1c:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.240.0/22
                IPv6:
                  2804:5464::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268647

    Signature Algorithm: sha256WithRSAEncryption
         b5:a8:a0:b7:e4:32:9e:82:c2:81:11:51:16:5a:f9:68:a9:f7:
         01:a7:d7:42:aa:e0:5d:45:d7:18:5c:24:42:8b:28:da:94:b7:
         19:18:34:ef:8e:07:35:93:d4:b9:95:92:1e:b1:db:ad:22:8f:
         41:95:94:9a:04:bb:eb:ec:84:59:2e:dc:b8:fb:be:ab:23:15:
         b2:dd:65:96:4c:43:ed:4b:a5:ca:d4:8f:79:a5:d5:65:5f:46:
         c7:a2:84:dc:71:f5:1e:21:79:8f:d2:8d:96:42:eb:c7:63:b7:
         cb:15:94:c8:91:96:ce:9c:45:5f:1c:3f:e6:0a:72:24:d8:36:
         c9:e9:e3:e8:7a:22:5f:33:b0:22:b8:49:28:ec:a4:22:17:99:
         68:f6:d1:67:de:aa:7c:cf:a3:e7:dd:62:38:65:63:29:8a:85:
         9d:2c:32:a8:f3:7f:64:3d:95:e5:56:2e:b6:d6:0e:22:4f:43:
         29:dd:15:2a:2a:27:bc:fe:e1:e2:3f:5c:9c:88:47:65:62:d4:
         85:80:89:13:61:be:c3:32:33:3e:e0:f2:00:6a:11:22:5c:54:
         01:18:b3:51:13:4f:fc:21:80:fb:b4:52:ea:99:db:ec:1a:fc:
         69:31:9a:ab:52:66:d9:87:70:da:0d:e2:50:ce:97:2e:22:97:
         88:3c:50:db
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUCusEw9hg5jcOPo95wqgU5WtT//YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA1MjEyMTM1MzlaFw0yMzA1MjAyMTQwMzlaMDMxMTAvBgNV
BAMTKEFGQTA1RDQ0RjIwNUUxQTY4MEQzQTlGOEM4QjdGN0Q5N0FBNkYwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMHgkPOhQv93v76/vDlCtwbJH
vZuZXVNH1LMI4WUnFIM2pq5agKP3k5GFvS1LU0LSeb5lT0JTuuqajzmHUxQKklJd
cA77v+qSH9XkeJaddgpJio9uZbLXSp3IgPuwwQoRuI18I+VX+XzEPZ34iR1cOmVQ
0iP/w7AEkQKfC+nc854OTdeWLGj6A0/iJIBNwGwEky4bxqu4lP30Usr5Ft5JXANW
iL2oUAnK2q076yxOB4VF62bYmO77mHws+dsNS7uLKYs/hd8ApwcpvgAxaNJrrUge
nN7oBGdtW3cevk2u2TZurwQZ3nYQXLjwvcHAlBVlifJIqa0dsKN7Bsv7HAqHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvoF1E8gXhpoDT
qfjIt/fZeqbwdTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82OEI3UnpNMUhnRGRUU0RLSmJHaW1wVHJudFl5U3M3Z1hB
NTg5M0FGYWpnby8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82OEI3UnpNMUhnRGRUU0RLSmJHaW1wVHJudFl5U3M3Z1hB
NTg5M0FGYWpnby8wL0FGQTA1RDQ0RjIwNUUxQTY4MEQzQTlGOEM4QjdGN0Q5N0FB
NkYwNzUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2k8DANBAIAAjAHAwUA
KARUZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGWcwDQYJKoZIhvcNAQELBQAD
ggEBALWooLfkMp6CwoERURZa+Wip9wGn10Kq4F1F1xhcJEKLKNqUtxkYNO+OBzWT
1LmVkh6x260ij0GVlJoEu+vshFku3Lj7vqsjFbLdZZZMQ+1LpcrUj3ml1WVfRsei
hNxx9R4heY/SjZZC68djt8sVlMiRls6cRV8cP+YKciTYNsnp4+h6Il8zsCK4SSjs
pCIXmWj20WfeqnzPo+fdYjhlYymKhZ0sMqjzf2Q9leVWLrbWDiJPQyndFSoqJ7z+
4eI/XJyIR2Vi1IWAiRNhvsMyMz7g8gBqESJcVAEYs1ETT/whgPu0UuqZ2+wa/Gkx
mqtSZtmHcNoN4lDOly4il4g8UNs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org