Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.cer
File:                     AFFA27A4EF543D92435C4D23302EF84CB77463B8.cer (raw, json)
Hash identifier:          uu7Hgz/IA9EUES4noSnjCMCsJOflcXEYLErAE//o9rc=
Subject key identifier:   AF:FA:27:A4:EF:54:3D:92:43:5C:4D:23:30:2E:F8:4C:B7:74:63:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49F86F543755557223F516EFCF90D0B442B11085
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 15:00:06 +0000
Certificate not after:    Thu 13 Feb 2025 15:05:06 +0000
Subordinate resources:    AS: 273683
                          IP: 45.238.48.0/22
                          IP: 2804:8aa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f8:6f:54:37:55:55:72:23:f5:16:ef:cf:90:d0:b4:42:b1:10:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 15:00:06 2024 GMT
            Not After : Feb 13 15:05:06 2025 GMT
        Subject: CN=AFFA27A4EF543D92435C4D23302EF84CB77463B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:67:ad:37:70:c4:44:e0:ac:88:2c:be:0f:01:
                    69:39:01:a5:fc:3a:6a:8d:b4:4f:95:65:d9:fa:ed:
                    87:5d:af:61:ed:ed:bd:40:b0:82:f2:fd:4c:5c:4b:
                    14:41:2c:eb:f5:27:8d:e1:1e:a7:9e:29:39:fa:67:
                    2a:99:31:f1:cb:f7:7f:77:15:e3:c3:3d:02:9c:ef:
                    bd:01:b5:56:da:ba:36:9d:99:f3:06:f9:28:ee:0a:
                    ea:e0:b5:4c:b4:c9:12:82:dd:3a:7c:99:46:9d:c6:
                    39:99:4b:aa:e7:ee:d6:c1:d2:7d:1f:19:35:42:e8:
                    b5:3d:eb:db:ac:17:e8:66:9d:6d:db:22:af:b8:1e:
                    d2:80:f0:f1:da:6f:34:b3:7e:a8:42:47:88:98:7b:
                    f8:12:37:08:30:9d:c9:4f:83:38:b1:c6:af:be:be:
                    55:c5:4a:1b:e3:57:67:44:42:2b:6a:4c:97:96:ec:
                    52:a6:4d:c9:14:ef:df:4f:7f:35:26:00:54:98:37:
                    72:5b:69:88:90:af:cf:b0:a2:60:be:4e:f0:89:53:
                    a4:09:99:d9:b9:74:6e:01:52:ef:a5:fe:dd:c6:ff:
                    ad:ce:37:1c:75:3a:a1:bf:65:2b:37:94:e0:98:4d:
                    1a:e0:45:70:09:3e:06:48:70:51:b3:5e:6e:28:f3:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:FA:27:A4:EF:54:3D:92:43:5C:4D:23:30:2E:F8:4C:B7:74:63:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.48.0/22
                IPv6:
                  2804:8aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273683

    Signature Algorithm: sha256WithRSAEncryption
         4b:bf:38:b3:f1:6a:0d:6d:ea:9b:37:11:19:0c:0d:89:57:d9:
         02:e6:e6:11:3f:7b:18:39:8f:53:3f:01:80:9b:b5:d2:d8:4f:
         1b:f7:1c:70:f1:fa:31:e5:90:b4:50:b9:66:37:36:ae:a7:5d:
         55:b5:29:40:1b:12:ee:bc:e3:8a:74:2a:58:f3:35:84:72:c2:
         53:d1:37:79:4f:c0:82:fa:cf:76:0f:bd:1b:97:de:84:94:82:
         e7:24:f4:ea:2b:3a:38:13:37:fb:e6:ee:72:2c:20:ca:a3:1d:
         09:32:fa:e6:cf:c2:b0:d2:44:96:52:00:64:bb:15:56:91:17:
         61:01:0a:24:61:51:57:c3:5c:d9:04:cc:1c:d0:ba:11:66:ed:
         ff:1b:8b:1c:7a:f6:31:de:df:4f:8c:f8:d6:45:8d:3c:d9:e5:
         ca:af:2c:9e:e0:d4:c6:3e:be:66:a1:7d:02:d0:63:3e:64:83:
         b1:e7:55:e0:33:1d:cf:ea:56:9e:8e:a7:bb:07:ac:51:ea:fd:
         8c:05:82:b0:1e:e1:de:1f:c8:33:fa:31:70:1a:8d:d6:b9:80:
         17:7c:01:3e:9e:11:d5:5f:1e:8a:5f:69:94:62:8d:ee:e3:55:
         27:2a:00:1a:48:42:51:bb:9b:33:5a:67:cb:59:c4:85:03:94:
         b6:f9:34:35
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUSfhvVDdVVXIj9Rbvz5DQtEKxEIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxNTAwMDZaFw0yNTAyMTMxNTA1MDZaMDMxMTAvBgNV
BAMTKEFGRkEyN0E0RUY1NDNEOTI0MzVDNEQyMzMwMkVGODRDQjc3NDYzQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZ603cMRE4KyILL4PAWk5AaX8
OmqNtE+VZdn67Yddr2Ht7b1AsILy/UxcSxRBLOv1J43hHqeeKTn6ZyqZMfHL9393
FePDPQKc770BtVbaujadmfMG+SjuCurgtUy0yRKC3Tp8mUadxjmZS6rn7tbB0n0f
GTVC6LU969usF+hmnW3bIq+4HtKA8PHabzSzfqhCR4iYe/gSNwgwnclPgzixxq++
vlXFShvjV2dEQitqTJeW7FKmTckU799PfzUmAFSYN3JbaYiQr8+womC+TvCJU6QJ
mdm5dG4BUu+l/t3G/63ONxx1OqG/ZSs3lOCYTRrgRXAJPgZIcFGzXm4o8yrdAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSv+iek71Q9kkNc
TSMwLvhMt3RjuDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBk
RG9vbUpRTm5VLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBk
RG9vbUpRTm5VLzAvQUZGQTI3QTRFRjU0M0Q5MjQzNUM0RDIzMzAyRUY4NENCNzc0
NjNCOC5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe4wMA0EAgACMAcDBQAo
BIqkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQtEzANBgkqhkiG9w0BAQsFAAOC
AQEAS784s/FqDW3qmzcRGQwNiVfZAubmET97GDmPUz8BgJu10thPG/cccPH6MeWQ
tFC5Zjc2rqddVbUpQBsS7rzjinQqWPM1hHLCU9E3eU/AgvrPdg+9G5fehJSC5yT0
6is6OBM3++buciwgyqMdCTL65s/CsNJEllIAZLsVVpEXYQEKJGFRV8Nc2QTMHNC6
EWbt/xuLHHr2Md7fT4z41kWNPNnlyq8snuDUxj6+ZqF9AtBjPmSDsedV4DMdz+pW
no6nuwesUer9jAWCsB7h3h/IM/oxcBqN1rmAF3wBPp4R1V8eil9plGKN7uNVJyoA
GkhCUbubM1pny1nEhQOUtvk0NQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org