Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
File:                     13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer (raw, json)
Hash identifier:          tGn42Ls4a1DlaTSe068yPYMhDu4OaXsBW4JNINXWE44=
Subject key identifier:   13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       442348580CF589FB4119DCADD7277C715736ED67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 14:35:08 +0000
Certificate not after:    Tue 01 Apr 2025 14:40:08 +0000
Subordinate resources:    AS: 264936
                          IP: 168.232.80.0/22
                          IP: 2804:3034::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:23:48:58:0c:f5:89:fb:41:19:dc:ad:d7:27:7c:71:57:36:ed:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 14:35:08 2024 GMT
            Not After : Apr  1 14:40:08 2025 GMT
        Subject: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:ef:09:43:fd:a3:bc:94:3c:5e:f0:3e:98:
                    55:46:8b:68:49:9f:05:05:41:79:1e:6a:44:22:6e:
                    49:ac:54:6a:9c:21:98:28:e5:cd:6a:17:55:cd:fb:
                    66:e7:12:b1:e6:0c:4d:72:d3:30:66:87:75:b8:65:
                    34:88:cf:2c:01:a1:f8:df:cb:f3:1b:b4:be:c8:00:
                    bf:33:c5:be:11:b7:1f:b6:20:23:49:ce:7f:38:58:
                    6f:f0:09:91:4b:87:dc:73:98:5c:4e:63:bd:df:1e:
                    a0:14:04:56:10:42:54:31:07:eb:7b:23:2f:ec:e2:
                    56:0a:f8:3a:11:7b:0c:91:a5:99:ea:44:56:62:d3:
                    72:b1:1e:81:e5:09:7a:e7:6d:0e:d2:48:ac:30:e5:
                    87:09:3a:95:a6:f3:e7:15:f2:28:6a:77:2f:39:50:
                    89:e6:59:9e:32:d5:78:da:41:8f:60:4b:e3:bd:97:
                    0b:b2:fd:26:9c:44:de:2c:25:cc:7a:30:32:c7:b8:
                    f6:fa:17:b2:75:de:76:ff:a7:2b:37:2f:16:fb:62:
                    99:24:2d:47:19:18:1f:95:1d:68:d3:aa:ec:be:02:
                    d3:3a:f2:6a:d5:00:87:ac:12:8d:7c:7b:06:bd:44:
                    46:5a:40:d3:f6:9d:fb:fe:24:35:41:ba:84:7d:77:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/22
                IPv6:
                  2804:3034::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264936

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:c2:a4:55:91:04:99:ce:72:b8:5f:83:f8:10:6b:88:3d:
         02:63:58:ac:83:d6:3e:e6:24:d8:21:3d:ea:65:e1:6e:f9:fb:
         cb:90:11:03:f5:cb:1c:9d:48:19:60:c4:f9:74:3a:4f:83:e3:
         01:6a:a9:ed:ca:c1:46:46:0c:68:93:25:6e:db:86:5f:fc:48:
         b2:fd:87:d5:8e:45:be:0f:b2:1d:cf:1b:98:46:8a:ac:6e:52:
         e6:8d:b4:34:f5:93:64:72:e0:42:88:82:ff:3a:dc:96:a6:82:
         03:71:ce:58:56:80:af:72:3b:99:93:2a:19:19:97:39:d8:22:
         78:e0:1c:33:6f:b3:ad:8c:57:78:22:ff:0e:1e:0a:bf:a4:d6:
         54:3c:45:16:b1:fb:5e:cd:c5:15:2a:40:d1:a5:ab:71:f8:fe:
         6e:79:b7:f2:6c:7a:66:60:61:e2:12:90:f5:be:95:fa:11:23:
         55:0e:ed:e7:f9:3b:58:0f:57:cf:c7:8d:da:18:f2:0e:6c:cc:
         96:ae:98:e9:b8:3e:63:07:db:af:5f:33:29:2f:47:9e:dc:e0:
         f2:80:ae:a3:05:c5:9d:1f:ca:bd:3a:63:e9:db:d9:3e:de:03:
         f0:8a:1c:54:49:4b:c0:51:a0:90:98:f5:88:e1:0c:d6:fd:32:
         2e:e7:46:5a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIURCNIWAz1iftBGdyt1yd8cVc27WcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDIxNDM1MDhaFw0yNTA0MDExNDQwMDhaMDMxMTAvBgNV
BAMTKDEzRkRBQ0RDMkYxNjQxQUFFRjI2NjRDMkMxOTkyNzYyNDEyMkE2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ve8JQ/2jvJQ8XvA+mFVGi2hJ
nwUFQXkeakQibkmsVGqcIZgo5c1qF1XN+2bnErHmDE1y0zBmh3W4ZTSIzywBofjf
y/MbtL7IAL8zxb4Rtx+2ICNJzn84WG/wCZFLh9xzmFxOY73fHqAUBFYQQlQxB+t7
Iy/s4lYK+DoRewyRpZnqRFZi03KxHoHlCXrnbQ7SSKww5YcJOpWm8+cV8ihqdy85
UInmWZ4y1XjaQY9gS+O9lwuy/SacRN4sJcx6MDLHuPb6F7J13nb/pys3Lxb7Ypkk
LUcZGB+VHWjTquy+AtM68mrVAIesEo18ewa9REZaQNP2nfv+JDVBuoR9d6fBAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQT/azcLxZBqu8m
ZMLBmSdiQSKmpTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80M3I1SHROdWFCdGZxQ0QzTGJWZ0dvYXd2aXJpd1Y2TlhZ
eXBiYTNyYVdQbi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80M3I1SHROdWFCdGZxQ0QzTGJWZ0dvYXd2aXJpd1Y2TlhZ
eXBiYTNyYVdQbi8wLzEzRkRBQ0RDMkYxNjQxQUFFRjI2NjRDMkMxOTkyNzYyNDEy
MkE2QTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjoUDANBAIAAjAHAwUA
KAQwNDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECugwDQYJKoZIhvcNAQELBQAD
ggEBAKVBwqRVkQSZznK4X4P4EGuIPQJjWKyD1j7mJNghPepl4W75+8uQEQP1yxyd
SBlgxPl0Ok+D4wFqqe3KwUZGDGiTJW7bhl/8SLL9h9WORb4Psh3PG5hGiqxuUuaN
tDT1k2Ry4EKIgv863JamggNxzlhWgK9yO5mTKhkZlznYInjgHDNvs62MV3gi/w4e
Cr+k1lQ8RRax+17NxRUqQNGlq3H4/m55t/JsemZgYeISkPW+lfoRI1UO7ef5O1gP
V8/HjdoY8g5szJaumOm4PmMH269fMykvR57c4PKArqMFxZ0fyr06Y+nb2T7eA/CK
HFRJS8BRoJCY9YjhDNb9Mi7nRlo=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org