Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FD498029BCE26073F3E355B9D561769EF0BCABB.cer
File:                     0FD498029BCE26073F3E355B9D561769EF0BCABB.cer (raw, json)
Hash identifier:          QCfqZTQp85r7kPqL/rYzcIZJkS/NXPkzBLGBBYf0i08=
Subject key identifier:   0F:D4:98:02:9B:CE:26:07:3F:3E:35:5B:9D:56:17:69:EF:0B:CA:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04054AAA963E54174B35BE508108A5E7C8D7EE72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/0FD498029BCE26073F3E355B9D561769EF0BCABB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Dec 2023 15:12:43 +0000
Certificate not after:    Fri 27 Dec 2024 15:17:43 +0000
Subordinate resources:    AS: 265277
                          IP: 168.90.4.0/22
                          IP: 2804:2d5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:05:4a:aa:96:3e:54:17:4b:35:be:50:81:08:a5:e7:c8:d7:ee:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 15:12:43 2023 GMT
            Not After : Dec 27 15:17:43 2024 GMT
        Subject: CN=0FD498029BCE26073F3E355B9D561769EF0BCABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:d4:f1:74:91:be:1c:4b:e6:e0:d8:83:6d:
                    85:f5:22:0c:77:09:85:40:7e:48:cf:57:bc:fe:da:
                    4d:09:0a:f9:11:bd:71:ea:ce:23:03:4f:65:fd:4a:
                    35:f1:bc:cc:fe:0d:4e:a7:84:1e:82:bf:fc:98:bb:
                    fb:e4:e6:16:01:c8:1d:f3:2c:d9:b0:9a:19:40:b7:
                    9b:34:a7:2b:c9:7b:28:e7:d1:de:aa:94:25:68:92:
                    14:ce:88:5c:1a:0b:f2:9f:d4:0d:95:1a:b5:fd:03:
                    4f:39:8a:23:6b:36:a3:26:2e:dd:74:56:cc:1f:8b:
                    08:86:b1:ba:73:05:58:02:b0:df:e6:4a:44:c4:97:
                    5d:a0:34:f5:07:08:f8:bd:bb:65:36:99:8f:62:59:
                    b1:81:01:7d:b2:f1:cc:f6:ac:07:db:3e:82:34:a7:
                    11:ac:ba:38:66:ad:9e:5e:95:24:a6:80:7c:ed:d3:
                    9f:e7:84:66:53:54:0b:0a:36:88:60:59:a4:82:22:
                    a4:d7:59:df:72:34:5a:26:65:d6:ea:a8:41:f0:7d:
                    84:f4:ec:1f:a5:2f:51:bd:95:35:8c:7e:9c:c4:03:
                    dd:6e:23:39:76:3b:8b:72:3b:9a:51:1a:a2:9b:3e:
                    16:cb:b2:0e:87:82:15:91:04:e6:d0:48:c6:6e:ad:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:D4:98:02:9B:CE:26:07:3F:3E:35:5B:9D:56:17:69:EF:0B:CA:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/0FD498029BCE26073F3E355B9D561769EF0BCABB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.4.0/22
                IPv6:
                  2804:2d5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265277

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:5c:e8:11:7a:cd:2e:05:50:d0:f4:7d:f9:e0:b7:86:3a:
         cb:d9:be:82:c0:e8:00:71:4f:4c:3e:6d:cc:f4:f4:bc:9c:67:
         e9:72:2b:a4:56:28:ef:16:22:95:a6:7b:8c:e0:97:cb:ef:1c:
         af:ac:e2:6b:df:c1:ed:12:1c:b7:c5:1c:ea:7e:98:c3:54:4a:
         34:c8:21:ca:79:4c:49:18:23:25:b2:cf:bc:d0:d1:c0:a6:a9:
         6b:e9:33:bb:ad:08:d5:75:a4:00:43:91:b7:c3:c2:f1:9c:63:
         78:37:fb:f3:ef:cb:9d:ff:1f:71:7a:ec:6e:6d:a2:f7:b6:14:
         a2:ed:b3:33:a2:f0:f5:56:f1:4e:e1:65:7d:6c:92:b1:bc:d2:
         9e:9f:a4:73:85:a1:36:3b:dd:5b:cb:43:32:b6:04:77:0d:52:
         b5:b6:7d:66:19:5d:ab:17:bb:bf:ee:9c:82:f9:aa:86:3f:6f:
         87:ea:8f:d6:d6:55:db:07:56:f8:55:f6:98:c2:24:8b:71:7b:
         24:c2:35:42:1a:28:49:bc:98:0c:df:9c:90:9c:73:b2:57:71:
         34:aa:61:c5:30:f4:ae:b1:9f:fa:3a:56:55:e7:5b:93:2b:e9:
         f2:f5:f2:f0:a5:f1:f5:4d:a9:cc:bc:9b:54:58:65:1f:c5:78:
         3b:6d:1d:18
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBAVKqpY+VBdLNb5QgQil58jX7nIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjkxNTEyNDNaFw0yNDEyMjcxNTE3NDNaMDMxMTAvBgNV
BAMTKDBGRDQ5ODAyOUJDRTI2MDczRjNFMzU1QjlENTYxNzY5RUYwQkNBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStdTxdJG+HEvm4NiDbYX1Igx3
CYVAfkjPV7z+2k0JCvkRvXHqziMDT2X9SjXxvMz+DU6nhB6Cv/yYu/vk5hYByB3z
LNmwmhlAt5s0pyvJeyjn0d6qlCVokhTOiFwaC/Kf1A2VGrX9A085iiNrNqMmLt10
VswfiwiGsbpzBVgCsN/mSkTEl12gNPUHCPi9u2U2mY9iWbGBAX2y8cz2rAfbPoI0
pxGsujhmrZ5elSSmgHzt05/nhGZTVAsKNohgWaSCIqTXWd9yNFomZdbqqEHwfYT0
7B+lL1G9lTWMfpzEA91uIzl2O4tyO5pRGqKbPhbLsg6HghWRBObQSMZurVxfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQP1JgCm84mBz8+
NVudVhdp7wvKuzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdUIyRlhlcDNiUW5iNktFUXZHRnQxWk1oOFdqV3hNQUhr
VndlWnVYSjRCQy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXVCMkZYZXAzYlFuYjZLRVF2R0Z0MVpNaDhXald4TUFI
a1Z3ZVp1WEo0QkMvMC8wRkQ0OTgwMjlCQ0UyNjA3M0YzRTM1NUI5RDU2MTc2OUVG
MEJDQUJCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKoWgQwDQQCAAIwBwMF
ACgELVwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAw9MA0GCSqGSIb3DQEBCwUA
A4IBAQCJe1zoEXrNLgVQ0PR9+eC3hjrL2b6CwOgAcU9MPm3M9PS8nGfpciukVijv
FiKVpnuM4JfL7xyvrOJr38HtEhy3xRzqfpjDVEo0yCHKeUxJGCMlss+80NHApqlr
6TO7rQjVdaQAQ5G3w8LxnGN4N/vz78ud/x9xeuxubaL3thSi7bMzovD1VvFO4WV9
bJKxvNKen6RzhaE2O91by0MytgR3DVK1tn1mGV2rF7u/7pyC+aqGP2+H6o/W1lXb
B1b4VfaYwiSLcXskwjVCGihJvJgM35yQnHOyV3E0qmHFMPSusZ/6OlZV51uTK+ny
9fLwpfH1TanMvJtUWGUfxXg7bR0Y
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org