Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.cer
File:                     0F73309BD187659C71CCBDC81E84964AD6C5AEEA.cer (raw, json)
Hash identifier:          uVSnjfE8QZmNTQh5N0rbCj7FuGFFZfqJToVcu5vi+20=
Subject key identifier:   0F:73:30:9B:D1:87:65:9C:71:CC:BD:C8:1E:84:96:4A:D6:C5:AE:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FAA366719CEABC376D61F89F4BDCAA0DB380E47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 19:18:45 +0000
Certificate not after:    Mon 07 Apr 2025 19:23:45 +0000
Subordinate resources:    AS: 61882
                          IP: 131.0.48.0/22
                          IP: 2804:1abc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:36:67:19:ce:ab:c3:76:d6:1f:89:f4:bd:ca:a0:db:38:0e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 19:18:45 2024 GMT
            Not After : Apr  7 19:23:45 2025 GMT
        Subject: CN=0F73309BD187659C71CCBDC81E84964AD6C5AEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:60:e6:75:d9:c4:23:f1:ad:9e:4c:86:64:1c:
                    a8:58:34:51:c5:36:19:d8:57:6a:46:e2:78:7b:dd:
                    15:78:10:f2:0a:42:cf:c7:da:6b:2a:de:26:a7:80:
                    3f:2b:e1:01:9c:14:b6:f2:07:55:ec:79:97:27:c0:
                    3d:17:73:08:7a:40:4e:73:3e:43:45:8d:99:70:2d:
                    20:af:46:e9:cd:27:ff:1e:54:3b:ce:fe:8a:7f:d6:
                    e7:97:b8:58:a6:dc:e5:a0:8c:a4:32:81:3e:b6:4d:
                    f1:c0:db:5c:b6:cc:7a:10:27:d8:ba:48:8a:f9:20:
                    f8:84:e6:46:db:6b:74:78:34:2e:aa:87:8e:bd:77:
                    5e:b3:c6:4f:5b:9c:be:f2:40:c6:44:e9:17:49:f3:
                    35:bd:28:48:ee:cc:a0:91:6b:8c:3b:8a:e8:58:4a:
                    76:34:da:fd:b0:48:b6:3f:0a:f9:1c:e4:2c:fb:f1:
                    1d:52:ec:e7:a6:64:1c:3c:5d:d9:70:a6:04:32:9a:
                    21:1f:84:0d:c7:6a:db:c6:e3:ee:d2:92:20:93:2a:
                    7c:cc:ef:e3:bc:70:c2:c2:db:7b:b7:22:bc:cd:b8:
                    40:da:69:55:d8:43:84:80:a3:79:ef:02:bc:18:bb:
                    58:ed:c6:56:86:4e:0f:f5:d2:02:92:ad:1e:d9:3a:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:73:30:9B:D1:87:65:9C:71:CC:BD:C8:1E:84:96:4A:D6:C5:AE:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.48.0/22
                IPv6:
                  2804:1abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61882

    Signature Algorithm: sha256WithRSAEncryption
         07:a6:c1:0a:9a:ce:d5:5e:51:07:ba:1f:cc:3f:d7:4f:4d:51:
         1f:73:a2:bc:28:b3:ba:64:ba:e7:8f:9d:ac:4e:91:9c:8a:30:
         94:34:24:a8:39:45:55:31:04:76:4f:9d:e3:d2:7a:ac:68:e0:
         f8:e3:5f:43:af:b2:2a:9e:24:d1:09:85:c6:50:cd:88:1f:5e:
         28:65:2d:6d:e1:9f:c3:e6:19:e1:bb:1d:ec:9b:61:2b:5a:09:
         ad:25:40:7b:5c:43:4a:12:89:a7:67:2a:0a:b6:25:5f:f1:5f:
         5e:c6:de:fd:69:75:ed:85:5a:12:11:d9:84:d5:82:5e:fc:ca:
         18:64:e3:7a:9b:8f:3e:01:d4:85:5e:86:aa:97:56:d1:53:b6:
         c9:16:27:52:c7:ca:d0:5d:70:d8:00:de:f7:3e:03:c4:bd:b8:
         b2:0d:aa:32:d2:35:76:26:1c:22:f9:7a:51:11:ad:5d:02:ce:
         7a:5d:7f:4f:64:a8:ec:80:ed:05:3c:fb:ad:03:3f:1e:39:54:
         26:39:b6:9a:14:e8:6b:df:b2:c2:d7:4b:ea:16:a9:63:a0:55:
         90:4a:4b:d7:df:2c:ff:5c:b5:10:fa:0a:37:9d:a0:74:11:94:
         d7:89:81:99:a6:4d:89:5d:02:cb:2b:bd:4b:6e:1d:3f:8f:31:
         1d:0e:fc:0c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUL6o2ZxnOq8N21h+J9L3KoNs4DkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDgxOTE4NDVaFw0yNTA0MDcxOTIzNDVaMDMxMTAvBgNV
BAMTKDBGNzMzMDlCRDE4NzY1OUM3MUNDQkRDODFFODQ5NjRBRDZDNUFFRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgYOZ12cQj8a2eTIZkHKhYNFHF
NhnYV2pG4nh73RV4EPIKQs/H2msq3iangD8r4QGcFLbyB1XseZcnwD0Xcwh6QE5z
PkNFjZlwLSCvRunNJ/8eVDvO/op/1ueXuFim3OWgjKQygT62TfHA21y2zHoQJ9i6
SIr5IPiE5kbba3R4NC6qh469d16zxk9bnL7yQMZE6RdJ8zW9KEjuzKCRa4w7iuhY
SnY02v2wSLY/Cvkc5Cz78R1S7OemZBw8XdlwpgQymiEfhA3HatvG4+7SkiCTKnzM
7+O8cMLC23u3IrzNuEDaaVXYQ4SAo3nvArwYu1jtxlaGTg/10gKSrR7ZOuY1AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPczCb0YdlnHHM
vcgehJZK1sWu6jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CelRIcEVZYTR5UmkxZlJOcUx6Q1RMb0ZDVG80NGVRd1hT
cllNUEtBdjR1RC8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQnpUSHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdY
U3JZTVBLQXY0dUQvMS8wRjczMzA5QkQxODc2NTlDNzFDQ0JEQzgxRTg0OTY0QUQ2
QzVBRUVBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKDADAwDQQCAAIwBwMF
ACgEGrwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPG6MA0GCSqGSIb3DQEBCwUA
A4IBAQAHpsEKms7VXlEHuh/MP9dPTVEfc6K8KLO6ZLrnj52sTpGcijCUNCSoOUVV
MQR2T53j0nqsaOD4419Dr7IqniTRCYXGUM2IH14oZS1t4Z/D5hnhux3sm2ErWgmt
JUB7XENKEomnZyoKtiVf8V9ext79aXXthVoSEdmE1YJe/MoYZON6m48+AdSFXoaq
l1bRU7bJFidSx8rQXXDYAN73PgPEvbiyDaoy0jV2Jhwi+XpREa1dAs56XX9PZKjs
gO0FPPutAz8eOVQmObaaFOhr37LC10vqFqljoFWQSkvX3yz/XLUQ+go3naB0EZTX
iYGZpk2JXQLLK71Lbh0/jzEdDvwM
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org