Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/04A4100FD2BF02E33D66610A5D009BDF13991621.cer
File:                     04A4100FD2BF02E33D66610A5D009BDF13991621.cer (raw, json)
Hash identifier:          Cdj1UeKeGxj+r02TiR70GJCfT6tMdAsmAHrLcrc2cws=
Subject key identifier:   04:A4:10:0F:D2:BF:02:E3:3D:66:61:0A:5D:00:9B:DF:13:99:16:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       416075D7EE725E35BDED2648AD3C726473D0033F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/04A4100FD2BF02E33D66610A5D009BDF13991621.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 14:41:12 +0000
Certificate not after:    Wed 18 Dec 2024 14:46:12 +0000
Subordinate resources:    AS: 272460
                          IP: 2804:8188::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:60:75:d7:ee:72:5e:35:bd:ed:26:48:ad:3c:72:64:73:d0:03:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 14:41:12 2023 GMT
            Not After : Dec 18 14:46:12 2024 GMT
        Subject: CN=04A4100FD2BF02E33D66610A5D009BDF13991621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:a3:c1:af:d9:c7:0d:13:4f:dd:91:4e:a8:
                    eb:7b:cd:c1:f4:17:c4:75:07:8d:c3:ca:ab:c8:53:
                    c6:ec:95:bc:ec:0d:04:12:5d:47:e8:d7:15:56:ef:
                    86:b2:5d:99:50:bb:9f:92:8f:7f:ec:77:a7:9a:36:
                    a6:6e:e0:5b:53:c1:a0:fe:fd:c3:5e:04:4a:58:f8:
                    52:ee:9f:9f:89:3d:eb:42:f0:eb:57:ab:42:61:f1:
                    65:fc:06:eb:35:31:d0:fc:26:17:d3:2d:c3:40:1b:
                    c1:85:9e:c6:f5:ca:8f:0a:bd:0d:56:92:0c:24:f4:
                    45:36:28:b5:02:46:0f:71:00:2f:ed:07:99:32:d9:
                    71:55:80:8a:e5:b7:41:5a:30:75:e9:5d:a6:20:ab:
                    b3:7e:6e:13:32:47:a7:6a:b7:f7:65:8e:49:4e:61:
                    42:98:1c:fc:e0:3f:3b:e5:e1:e1:b6:c4:d0:4a:72:
                    3d:5e:cf:f3:eb:41:0f:d6:c4:02:dc:bf:8d:a6:ac:
                    a3:ae:e1:0e:11:28:30:01:f5:00:0f:25:b6:3f:2d:
                    65:e4:36:63:56:2b:46:de:63:0f:05:1b:f3:7b:a0:
                    27:9e:e8:fb:9d:dd:00:3f:41:a9:95:53:32:70:73:
                    e0:53:51:78:5d:14:91:2f:8d:de:95:e6:d4:72:c8:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:A4:10:0F:D2:BF:02:E3:3D:66:61:0A:5D:00:9B:DF:13:99:16:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/04A4100FD2BF02E33D66610A5D009BDF13991621.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272460

    Signature Algorithm: sha256WithRSAEncryption
         96:c8:29:a3:fa:63:bd:0c:a1:72:a3:f9:fb:62:f4:50:74:d4:
         ec:bb:b6:9b:14:3d:90:98:a9:b8:84:c8:c2:0d:60:bc:bc:02:
         f5:12:9e:d3:71:79:02:e0:3a:8d:6a:50:57:d9:c5:96:2e:d8:
         be:34:b4:45:47:d4:e5:df:84:6d:ec:d4:0a:f0:87:b3:2a:96:
         3d:68:e8:d6:29:32:a4:77:d0:23:c0:c3:01:65:60:aa:7f:ab:
         da:09:0c:44:71:35:70:fd:34:9d:d9:43:69:42:d0:a0:6b:94:
         28:3f:b9:99:05:04:1e:91:e3:60:35:90:03:4c:cc:0f:5c:b9:
         d3:8e:a2:cf:fe:72:f8:53:5b:e8:c6:05:62:10:31:1b:d2:00:
         8c:5b:ce:ef:4c:be:aa:24:0d:db:00:d5:ce:91:df:7a:ef:a1:
         a9:e9:1f:f5:42:80:3c:47:3c:5f:17:33:09:38:16:65:aa:2b:
         46:21:06:68:63:f2:25:0c:f3:28:aa:b3:c1:61:50:43:42:a8:
         36:e6:25:8f:73:7c:0f:4c:f0:88:1a:30:a4:f6:12:5a:db:b8:
         08:43:a1:10:b8:68:79:d3:49:c8:f3:14:8a:e0:6a:3f:42:b8:
         0a:ae:22:49:fe:19:30:3d:e3:6e:3f:45:27:99:8a:f8:52:cf:
         50:bf:bd:82
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUQWB11+5yXjW97SZIrTxyZHPQAz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjAxNDQxMTJaFw0yNDEyMTgxNDQ2MTJaMDMxMTAvBgNV
BAMTKDA0QTQxMDBGRDJCRjAyRTMzRDY2NjEwQTVEMDA5QkRGMTM5OTE2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEaPBr9nHDRNP3ZFOqOt7zcH0
F8R1B43DyqvIU8bslbzsDQQSXUfo1xVW74ayXZlQu5+Sj3/sd6eaNqZu4FtTwaD+
/cNeBEpY+FLun5+JPetC8OtXq0Jh8WX8Bus1MdD8JhfTLcNAG8GFnsb1yo8KvQ1W
kgwk9EU2KLUCRg9xAC/tB5ky2XFVgIrlt0FaMHXpXaYgq7N+bhMyR6dqt/dljklO
YUKYHPzgPzvl4eG2xNBKcj1ez/PrQQ/WxALcv42mrKOu4Q4RKDAB9QAPJbY/LWXk
NmNWK0beYw8FG/N7oCee6Pud3QA/QamVUzJwc+BTUXhdFJEvjd6V5tRyyEqDAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEpBAP0r8C4z1m
YQpdAJvfE5kWITAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83dlVCcVlQdncxREdKMUw5Tm5xcFpkSjhqOTZtREZuaFFC
ZmN6bTNXM0hjUS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83dlVCcVlQdncxREdKMUw5Tm5xcFpkSjhqOTZtREZuaFFC
ZmN6bTNXM0hjUS8wLzA0QTQxMDBGRDJCRjAyRTMzRDY2NjEwQTVEMDA5QkRGMTM5
OTE2MjEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEgYgwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBChMMA0GCSqGSIb3DQEBCwUAA4IBAQCWyCmj+mO9DKFy
o/n7YvRQdNTsu7abFD2QmKm4hMjCDWC8vAL1Ep7TcXkC4DqNalBX2cWWLti+NLRF
R9Tl34Rt7NQK8IezKpY9aOjWKTKkd9AjwMMBZWCqf6vaCQxEcTVw/TSd2UNpQtCg
a5QoP7mZBQQekeNgNZADTMwPXLnTjqLP/nL4U1voxgViEDEb0gCMW87vTL6qJA3b
ANXOkd9676Gp6R/1QoA8RzxfFzMJOBZlqitGIQZoY/IlDPMoqrPBYVBDQqg25iWP
c3wPTPCIGjCk9hJa27gIQ6EQuGh500nI8xSK4Go/QrgKriJJ/hkwPeNuP0UnmYr4
Us9Qv72C
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:46:04 2025 by rpki-client