Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer
File:                     0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer (raw, json)
Hash identifier:          i4QDIdjYETICNavmkBWjo0J3VetGwBA7LLHZTFaviig=
Subject key identifier:   0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A60BE80C7E301D7AF90BB0E78950AA6760FB726
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jan 2024 15:03:41 +0000
Certificate not after:    Wed 08 Jan 2025 15:08:41 +0000
Subordinate resources:    AS: 269187
                          IP: 45.181.140.0/22
                          IP: 2804:60bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:60:be:80:c7:e3:01:d7:af:90:bb:0e:78:95:0a:a6:76:0f:b7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 15:03:41 2024 GMT
            Not After : Jan  8 15:08:41 2025 GMT
        Subject: CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:36:36:39:c8:ed:43:36:df:5c:81:b1:12:
                    aa:ff:c5:54:6e:e2:d5:6b:66:b0:83:21:e9:68:8f:
                    01:d9:d7:eb:cc:c2:36:f4:6e:18:c4:a9:25:65:7d:
                    87:36:d2:2f:a4:1b:70:99:2b:58:c9:53:ad:b8:f6:
                    2e:95:f9:d0:0f:b5:74:02:34:b5:70:8a:f8:ff:74:
                    04:19:a8:c2:f1:57:2e:9e:06:ef:d1:65:58:77:5d:
                    38:db:27:fd:cf:2b:65:65:78:f7:b0:22:84:57:10:
                    72:9e:d9:07:6a:61:e9:33:1f:e7:f7:3d:e6:9f:60:
                    dd:2f:48:45:13:fd:ff:42:f1:ff:ba:30:e6:84:5d:
                    21:02:dd:0c:fe:f5:55:45:ae:34:cf:be:dc:74:13:
                    26:0c:87:07:54:2e:ca:7e:29:8f:94:dc:ef:77:ae:
                    c5:39:15:10:4c:4a:5c:87:62:36:94:82:16:15:fa:
                    3e:8c:90:50:a3:15:50:7e:21:fa:13:27:de:93:8a:
                    ae:8b:24:2d:f9:f7:f1:f9:cb:98:ea:eb:5a:fe:47:
                    82:d0:03:9b:ce:2c:db:b8:af:e3:2d:15:57:fd:43:
                    91:79:7e:b0:c7:75:f6:44:b7:c1:20:a5:8a:45:d6:
                    85:72:e8:71:e9:43:62:8a:f8:b2:d1:ca:fe:10:32:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.140.0/22
                IPv6:
                  2804:60bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269187

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:1a:c7:ec:02:b7:3e:d9:5b:05:dc:11:47:d2:72:0f:9f:
         12:3b:f4:c3:b3:50:07:4b:02:27:cb:19:9d:94:f4:04:5e:1f:
         30:1e:09:a4:4e:fb:f0:76:02:d0:2b:aa:e5:2b:d7:2f:73:bf:
         36:99:df:80:ec:d3:be:f9:71:dc:40:7c:13:8f:2e:07:21:bf:
         21:64:31:0e:e7:1d:6b:75:63:2a:c8:7b:f4:4d:6e:65:68:1a:
         44:8b:90:2c:52:56:f0:7f:58:7d:94:e8:7c:cb:0d:41:14:e0:
         0d:46:8f:4c:52:53:0d:c6:a9:76:bf:ee:05:4d:e3:69:ba:bf:
         1b:b8:f0:7c:6e:68:b8:85:e6:5f:8e:93:5a:c9:54:39:7a:df:
         61:33:e4:e8:9f:98:0f:0d:b6:c6:41:37:11:8d:36:72:07:47:
         12:b8:d9:ae:77:bf:ba:2b:80:bc:00:f8:e0:b8:2a:b1:df:8d:
         e0:c4:c4:98:fe:b1:bd:2f:5f:45:8b:06:18:ef:1d:55:7d:06:
         ee:e9:0d:a1:53:58:1b:a2:f1:81:c8:1c:fe:60:3c:2c:27:91:
         e5:9d:7a:ca:b9:44:d7:c5:d1:f1:f9:80:6f:82:fe:2c:2e:ec:
         7f:f8:8f:b2:6f:5f:aa:72:a4:96:b6:cb:d0:5b:e7:2d:b8:64:
         e4:db:a4:48
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUKmC+gMfjAdevkLsOeJUKpnYPtyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTAxNTAzNDFaFw0yNTAxMDgxNTA4NDFaMDMxMTAvBgNV
BAMTKDBGREI3MkI2N0ZFNERGMzM2MjZEODUzQTY1NEY5RTMzOTNCRUVGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+TY2OcjtQzbfXIGxEqr/xVRu
4tVrZrCDIelojwHZ1+vMwjb0bhjEqSVlfYc20i+kG3CZK1jJU6249i6V+dAPtXQC
NLVwivj/dAQZqMLxVy6eBu/RZVh3XTjbJ/3PK2VlePewIoRXEHKe2QdqYekzH+f3
PeafYN0vSEUT/f9C8f+6MOaEXSEC3Qz+9VVFrjTPvtx0EyYMhwdULsp+KY+U3O93
rsU5FRBMSlyHYjaUghYV+j6MkFCjFVB+IfoTJ96Tiq6LJC359/H5y5jq61r+R4LQ
A5vOLNu4r+MtFVf9Q5F5frDHdfZEt8EgpYpF1oVy6HHpQ2KK+LLRyv4QMhUBAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQP23K2f+TfM2Jt
hTplT54zk77vVDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CVm1tUDF6SldNc3BDSmFMNGFBQ0ZVRnFNZTFOVExpV2FL
ZTJnaktMN1RRdi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQlZtbVAxekpXTXNwQ0phTDRhQUNGVUZxTWUxTlRMaVdh
S2UyZ2pLTDdUUXYvMC8wRkRCNzJCNjdGRTRERjMzNjI2RDg1M0E2NTRGOUUzMzkz
QkVFRjU0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIttYwwDQQCAAIwBwMF
ACgEYLwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBuDMA0GCSqGSIb3DQEBCwUA
A4IBAQAu7RrH7AK3PtlbBdwRR9JyD58SO/TDs1AHSwInyxmdlPQEXh8wHgmkTvvw
dgLQK6rlK9cvc782md+A7NO++XHcQHwTjy4HIb8hZDEO5x1rdWMqyHv0TW5laBpE
i5AsUlbwf1h9lOh8yw1BFOANRo9MUlMNxql2v+4FTeNpur8buPB8bmi4heZfjpNa
yVQ5et9hM+Ton5gPDbbGQTcRjTZyB0cSuNmud7+6K4C8APjguCqx343gxMSY/rG9
L19FiwYY7x1VfQbu6Q2hU1gbovGByBz+YDwsJ5HlnXrKuUTXxdHx+YBvgv4sLux/
+I+yb1+qcqSWtsvQW+ctuGTk26RI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org