Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.cer
File:                     AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.cer (raw, json)
Hash identifier:          n681X7kjGH1lph3/burwcu08auQLt01eiYShqHFwjsM=
Subject key identifier:   AF:E9:B7:AA:D4:2F:01:9C:0F:2C:D5:A5:71:4D:CA:AF:7C:33:9A:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1924610E0CE794BB425CC3CDAC6B0CD7B0F69CDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 17:02:50 +0000
Certificate not after:    Wed 04 Dec 2024 17:07:50 +0000
Subordinate resources:    AS: 262490
                          IP: 177.66.80.0/21
                          IP: 2804:514::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:24:61:0e:0c:e7:94:bb:42:5c:c3:cd:ac:6b:0c:d7:b0:f6:9c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 17:02:50 2023 GMT
            Not After : Dec  4 17:07:50 2024 GMT
        Subject: CN=AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:17:2a:8a:ad:e3:b3:17:89:8d:ed:12:cc:
                    50:04:28:5f:5f:e9:60:8a:f1:47:d7:f4:25:43:50:
                    b1:bb:0b:49:a4:21:cb:31:36:ea:10:ee:3d:dc:05:
                    57:45:55:53:a4:d5:f7:d8:ce:b6:d8:ca:e7:e2:ee:
                    db:2b:5f:c9:c6:11:fc:7b:7d:c4:b2:e3:67:2e:39:
                    09:3e:9f:3d:24:a4:7e:fd:d2:f8:5f:d6:59:4c:a3:
                    0d:3a:7a:2b:5c:cb:9d:1c:00:83:38:ea:40:f9:8c:
                    de:9b:b5:93:57:05:dc:aa:49:6f:bb:49:b2:fe:cd:
                    5b:6e:5c:df:66:5e:93:a3:a1:a7:df:3d:49:6b:69:
                    ff:c3:cf:d9:7d:83:e5:56:54:2e:64:a7:36:f6:b3:
                    45:81:5f:26:ac:03:87:43:c1:b1:6d:63:c5:82:fb:
                    86:13:d4:87:ff:2e:ac:ac:a5:5d:d5:e0:48:6b:93:
                    4e:58:7b:01:91:2d:ba:f7:63:c3:c1:8e:89:57:aa:
                    26:7e:77:c6:f5:8a:bb:bb:a2:9f:b2:72:99:f0:e6:
                    17:d1:88:47:d3:a0:1c:cc:c0:49:cf:7b:e5:6d:1d:
                    ab:d5:1a:9d:35:74:c1:7c:01:14:9b:97:31:8c:32:
                    a7:b0:85:62:c9:dd:8a:38:7d:19:b1:48:fa:ea:3e:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:E9:B7:AA:D4:2F:01:9C:0F:2C:D5:A5:71:4D:CA:AF:7C:33:9A:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.80.0/21
                IPv6:
                  2804:514::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262490

    Signature Algorithm: sha256WithRSAEncryption
         1c:5b:00:5a:8a:6b:a4:ae:02:ee:11:f8:c3:34:ef:58:ef:0e:
         9b:e8:ea:64:87:63:8f:7b:95:e7:e8:8f:41:3b:6d:b1:85:de:
         31:2a:af:cd:18:d0:ba:69:59:d4:fa:80:38:e0:2f:57:23:3b:
         d4:a0:74:96:bc:88:74:29:60:fc:19:e2:ad:13:d6:00:0f:73:
         15:ed:52:fe:ed:56:bf:10:f5:f0:d4:32:96:27:15:77:4e:31:
         8d:e6:26:be:13:12:fd:d9:e9:b4:52:ae:7b:dd:06:74:d0:90:
         65:53:b3:bf:9b:2c:c2:9a:4f:4d:fc:0f:c8:e7:30:ab:28:59:
         4f:16:e8:9a:78:6a:42:d0:64:12:4a:9c:a3:88:83:e7:44:a3:
         09:35:38:5e:7d:2a:b9:84:fb:c1:a6:de:7e:29:f1:63:ea:be:
         3d:45:46:11:f7:60:cf:40:62:fc:45:d2:8f:33:4f:fe:ed:e0:
         f9:f8:c6:5a:96:ea:50:fc:fb:79:c2:46:30:d3:7c:bf:60:d1:
         49:dd:bd:ce:3f:a6:23:85:41:90:17:7d:58:f0:4a:4c:9e:cd:
         ef:1c:00:ff:5a:ea:06:b2:d0:4e:51:c4:92:44:a8:20:26:e8:
         a2:d4:6c:14:2c:93:61:eb:a0:bd:ff:8b:61:4b:be:9b:e7:b2:
         be:8e:76:98
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUGSRhDgznlLtCXMPNrGsM17D2nNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDYxNzAyNTBaFw0yNDEyMDQxNzA3NTBaMDMxMTAvBgNV
BAMTKEFGRTlCN0FBRDQyRjAxOUMwRjJDRDVBNTcxNERDQUFGN0MzMzlBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ihcqiq3jsxeJje0SzFAEKF9f
6WCK8UfX9CVDULG7C0mkIcsxNuoQ7j3cBVdFVVOk1ffYzrbYyufi7tsrX8nGEfx7
fcSy42cuOQk+nz0kpH790vhf1llMow06eitcy50cAIM46kD5jN6btZNXBdyqSW+7
SbL+zVtuXN9mXpOjoaffPUlraf/Dz9l9g+VWVC5kpzb2s0WBXyasA4dDwbFtY8WC
+4YT1If/LqyspV3V4Ehrk05YewGRLbr3Y8PBjolXqiZ+d8b1iru7op+ycpnw5hfR
iEfToBzMwEnPe+VtHavVGp01dMF8ARSblzGMMqewhWLJ3Yo4fRmxSPrqPksXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSv6beq1C8BnA8s
1aVxTcqvfDOaBDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENkFibTdtcXR1ckRWUlloNUtpOGthTHM5VVg5NVh5anJm
bVNvY3k3S0pFNy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDZBYm03bXF0dXJEVlJZaDVLaThrYUxzOVVYOTVYeWpy
Zm1Tb2N5N0tKRTcvMC9BRkU5QjdBQUQ0MkYwMTlDMEYyQ0Q1QTU3MTREQ0FBRjdD
MzM5QTA0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxQlAwDQQCAAIwBwMF
ACgEBRQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAFaMA0GCSqGSIb3DQEBCwUA
A4IBAQAcWwBaimukrgLuEfjDNO9Y7w6b6Opkh2OPe5Xn6I9BO22xhd4xKq/NGNC6
aVnU+oA44C9XIzvUoHSWvIh0KWD8GeKtE9YAD3MV7VL+7Va/EPXw1DKWJxV3TjGN
5ia+ExL92em0Uq573QZ00JBlU7O/myzCmk9N/A/I5zCrKFlPFuiaeGpC0GQSSpyj
iIPnRKMJNThefSq5hPvBpt5+KfFj6r49RUYR92DPQGL8RdKPM0/+7eD5+MZalupQ
/Pt5wkYw03y/YNFJ3b3OP6YjhUGQF31Y8EpMns3vHAD/WuoGstBOUcSSRKggJuii
1GwULJNh66C9/4thS76b57K+jnaY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org