Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/18F419A180314B79E88307605FA439DF04529F3D.cer
File:                     18F419A180314B79E88307605FA439DF04529F3D.cer (raw, json)
Hash identifier:          FcYO5jV2ye8VMbLNJAiudN7tG8/49/fxUM8DlVLtYDU=
Subject key identifier:   18:F4:19:A1:80:31:4B:79:E8:83:07:60:5F:A4:39:DF:04:52:9F:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DC5DE1CFE8135460EA14CA944E33FAC87F75382
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/18F419A180314B79E88307605FA439DF04529F3D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 10:19:23 +0000
Certificate not after:    Wed 26 Feb 2025 10:24:23 +0000
Subordinate resources:    AS: 264390
                          IP: 131.161.156.0/22
                          IP: 168.121.20.0/22
                          IP: 170.246.32.0/22
                          IP: 2804:1dbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c5:de:1c:fe:81:35:46:0e:a1:4c:a9:44:e3:3f:ac:87:f7:53:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 10:19:23 2024 GMT
            Not After : Feb 26 10:24:23 2025 GMT
        Subject: CN=18F419A180314B79E88307605FA439DF04529F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:75:46:95:10:a6:d3:16:50:95:dd:fe:47:
                    88:4c:46:11:9a:e7:05:cf:c6:59:f9:c3:3c:5c:a5:
                    eb:94:13:a5:a2:19:01:d4:e2:c5:13:37:48:44:06:
                    08:8e:c9:38:5e:6e:94:62:2c:23:bd:d9:25:be:17:
                    39:8a:cf:9a:b2:a0:5a:d1:07:ef:86:c2:75:e8:8f:
                    70:8d:3f:72:d5:83:eb:4b:55:1f:3e:ca:d0:df:5a:
                    d7:85:8f:95:88:2e:4d:56:59:d3:02:b2:f8:b9:33:
                    84:43:a1:e5:56:37:75:b9:2c:f8:1b:d3:d9:88:dc:
                    e7:b0:ec:f4:f3:39:99:38:53:21:b7:8a:fe:98:c0:
                    13:18:3a:1b:e9:21:99:a5:11:e1:2b:5d:7a:29:d5:
                    04:44:63:45:e1:ab:ce:f1:d9:e2:76:35:02:e2:8a:
                    ca:44:f2:e7:fa:0f:f5:57:3f:cd:e0:80:6c:90:c8:
                    14:dc:0d:91:d4:cd:fe:45:07:4f:26:10:a1:75:71:
                    92:ea:e1:90:b1:2e:f0:98:8f:c1:30:b8:6a:78:08:
                    03:8e:3e:b5:3f:26:72:51:ef:b0:0a:bb:31:9d:a4:
                    f6:a8:0e:99:5f:b9:b7:2a:12:d0:6b:27:a8:b0:0d:
                    00:b3:e4:8d:9d:93:45:3e:5f:eb:91:60:d5:73:6e:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:F4:19:A1:80:31:4B:79:E8:83:07:60:5F:A4:39:DF:04:52:9F:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/18F419A180314B79E88307605FA439DF04529F3D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.156.0/22
                  168.121.20.0/22
                  170.246.32.0/22
                IPv6:
                  2804:1dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264390

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:67:d8:2b:6a:03:2c:db:c5:59:50:3c:5c:28:04:61:71:
         ff:27:66:14:c1:de:4b:a7:90:65:19:68:db:dc:f1:f2:4f:a7:
         8e:22:8f:f2:83:7f:d2:b1:9b:04:b4:6f:8e:fe:c3:bb:83:b9:
         54:60:ff:2a:57:a2:47:83:94:e8:93:1b:2a:79:f3:c4:5a:31:
         4d:7b:22:93:51:3d:59:1b:bf:5f:32:84:af:5c:a6:93:a3:ab:
         0a:48:0a:42:01:88:1b:11:83:40:27:f3:cb:93:62:52:cc:93:
         5b:24:09:76:dc:3e:5c:8d:f9:9c:75:d0:c8:ef:0e:96:a7:e8:
         ef:0a:a1:b3:d2:19:0b:48:f9:d1:c5:f2:90:b6:c3:9e:20:e3:
         08:56:8e:2c:8c:6a:7b:2f:96:a9:8d:b3:f7:0c:04:04:02:bf:
         76:21:7c:25:5e:5d:fd:9d:d7:85:b0:b9:5b:f6:84:3e:bb:e5:
         9d:bc:75:53:1d:ca:58:76:00:c0:ed:32:c0:ff:eb:50:d5:7a:
         eb:e6:55:ef:ab:ca:85:65:db:1b:86:56:78:e6:e2:97:ae:85:
         87:65:a6:a6:23:24:4b:6f:0b:f7:7f:62:f9:25:9d:39:c9:7a:
         13:a0:b2:cb:a8:81:60:38:d5:87:98:87:08:79:92:89:e6:70:
         28:e7:e7:21
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIULcXeHP6BNUYOoUypROM/rIf3U4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjgxMDE5MjNaFw0yNTAyMjYxMDI0MjNaMDMxMTAvBgNV
BAMTKDE4RjQxOUExODAzMTRCNzlFODgzMDc2MDVGQTQzOURGMDQ1MjlGM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+3VGlRCm0xZQld3+R4hMRhGa
5wXPxln5wzxcpeuUE6WiGQHU4sUTN0hEBgiOyThebpRiLCO92SW+FzmKz5qyoFrR
B++GwnXoj3CNP3LVg+tLVR8+ytDfWteFj5WILk1WWdMCsvi5M4RDoeVWN3W5LPgb
09mI3Oew7PTzOZk4UyG3iv6YwBMYOhvpIZmlEeErXXop1QREY0Xhq87x2eJ2NQLi
ispE8uf6D/VXP83ggGyQyBTcDZHUzf5FB08mEKF1cZLq4ZCxLvCYj8EwuGp4CAOO
PrU/JnJR77AKuzGdpPaoDplfubcqEtBrJ6iwDQCz5I2dk0U+X+uRYNVzbgt3AgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQY9BmhgDFLeeiD
B2BfpDnfBFKfPTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82cWJMTWt2OU5lb0VoZ2JnRUNFWU1aODVDdG5xN2RCSmFM
M1J5YU5EbVh5NS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNnFiTE1rdjlOZW9FaGdiZ0VDRVlNWjg1Q3RucTdkQkph
TDNSeWFORG1YeTUvMC8xOEY0MTlBMTgwMzE0Qjc5RTg4MzA3NjA1RkE0MzlERjA0
NTI5RjNELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKDoZwDBAKoeRQDBAKq
9iAwDQQCAAIwBwMFACgEHbwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAjGMA0G
CSqGSIb3DQEBCwUAA4IBAQBddmfYK2oDLNvFWVA8XCgEYXH/J2YUwd5Lp5BlGWjb
3PHyT6eOIo/yg3/SsZsEtG+O/sO7g7lUYP8qV6JHg5TokxsqefPEWjFNeyKTUT1Z
G79fMoSvXKaTo6sKSApCAYgbEYNAJ/PLk2JSzJNbJAl23D5cjfmcddDI7w6Wp+jv
CqGz0hkLSPnRxfKQtsOeIOMIVo4sjGp7L5apjbP3DAQEAr92IXwlXl39ndeFsLlb
9oQ+u+WdvHVTHcpYdgDA7TLA/+tQ1Xrr5lXvq8qFZdsbhlZ45uKXroWHZaamIyRL
bwv3f2L5JZ05yXoToLLLqIFgONWHmIcIeZKJ5nAo5+ch
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org