Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
File:                     41A86F24F08AA1689D41C0058E1D1EF36578625D.cer (raw, json)
Hash identifier:          fxBNcnBQNRgcudLMloK+pcpJpvBj2jRh3ebyCU4mB7s=
Subject key identifier:   41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       603A62B538BF36D14AACAF4A8270A1FB898038A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 15:47:31 +0000
Certificate not after:    Tue 11 Feb 2025 15:52:31 +0000
Subordinate resources:    AS: 264915
                          IP: 168.228.220.0/22
                          IP: 2804:2fd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3a:62:b5:38:bf:36:d1:4a:ac:af:4a:82:70:a1:fb:89:80:38:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 15:47:31 2024 GMT
            Not After : Feb 11 15:52:31 2025 GMT
        Subject: CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:87:64:cc:3b:49:02:92:8d:9b:dc:cc:3b:1a:
                    4c:2f:17:6c:ba:0c:76:9c:d9:21:33:1e:0e:0b:89:
                    01:35:29:55:af:bf:7e:c2:b6:f2:a3:5d:c2:b1:de:
                    d6:5a:93:04:7e:3f:54:28:69:b7:27:94:f3:63:d4:
                    40:bf:7c:61:13:a5:c0:87:0d:2c:0a:cd:d7:99:45:
                    68:dc:dd:e1:1e:89:1d:96:5a:dc:85:82:cc:7c:2d:
                    b9:f0:05:01:07:25:64:13:2e:45:81:64:cd:0a:41:
                    b2:a6:d1:58:e0:5c:0d:c2:40:f9:6e:3f:05:b6:5b:
                    22:ca:a1:ea:a2:73:4f:8f:4b:dc:2c:1e:19:99:3c:
                    8d:22:3d:d8:ed:ae:c7:5d:9f:91:1d:10:71:59:8c:
                    e3:df:6c:27:0d:c3:7d:d9:c0:6a:28:97:75:6c:1a:
                    80:52:b9:5b:5e:18:fa:46:a2:d7:dc:f5:d8:8e:6b:
                    28:44:f7:55:d6:d3:fd:25:8c:68:be:45:4e:62:56:
                    3a:bc:54:98:b2:40:71:7d:c5:4d:83:f1:3b:c0:2a:
                    d8:5d:93:61:1d:bf:f4:f2:ff:25:77:89:8e:43:bb:
                    18:22:c1:ca:0e:8f:a3:33:86:57:7a:cc:00:74:9b:
                    55:46:f4:e6:d9:b4:0c:86:c5:57:a8:fc:05:b1:84:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.220.0/22
                IPv6:
                  2804:2fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264915

    Signature Algorithm: sha256WithRSAEncryption
         b1:49:b9:eb:e5:d6:47:47:c7:f7:4f:92:b6:6e:dc:b6:1f:b5:
         6c:9c:33:20:6a:16:56:ab:c7:0c:77:16:74:f5:62:e5:21:ab:
         50:90:9a:32:56:d4:4b:b2:6f:8d:fb:53:62:3c:04:41:80:c4:
         83:bf:99:24:63:56:9c:9c:77:c9:bb:15:ae:bd:c6:6b:6d:ea:
         cd:8d:1d:6c:80:a0:df:28:0d:2c:a2:16:50:6c:c6:29:5b:70:
         4b:04:76:71:0e:86:54:bc:ca:83:42:62:fd:d4:d9:91:20:b1:
         4d:c2:0e:bd:17:d5:ab:00:f3:d1:ec:bd:75:d5:f5:0e:5b:14:
         11:dc:23:4f:07:f8:37:f1:a1:3e:a8:5e:f2:31:e8:93:4c:a4:
         37:1f:68:24:54:73:1f:3d:c6:c8:0b:d3:a7:27:06:e9:38:e2:
         b5:c3:a1:33:68:48:7a:f6:f0:66:d3:5a:a3:e0:e5:2b:39:2d:
         6b:d1:e1:36:b1:69:66:3e:13:ed:23:dc:c4:48:ed:b7:0e:e0:
         50:c7:86:df:db:85:a5:da:56:ba:56:a5:b3:27:d9:ec:64:90:
         be:de:53:d5:d1:d9:37:6e:8a:60:51:7a:8e:a1:73:d0:54:a0:
         ae:ce:68:3b:21:81:aa:6b:8a:0b:32:2a:a7:7f:f7:e1:a0:16:
         71:c2:2e:ee
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUYDpitTi/NtFKrK9KgnCh+4mAOKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTMxNTQ3MzFaFw0yNTAyMTExNTUyMzFaMDMxMTAvBgNV
BAMTKDQxQTg2RjI0RjA4QUExNjg5RDQxQzAwNThFMUQxRUYzNjU3ODYyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgh2TMO0kCko2b3Mw7GkwvF2y6
DHac2SEzHg4LiQE1KVWvv37CtvKjXcKx3tZakwR+P1QoabcnlPNj1EC/fGETpcCH
DSwKzdeZRWjc3eEeiR2WWtyFgsx8LbnwBQEHJWQTLkWBZM0KQbKm0VjgXA3CQPlu
PwW2WyLKoeqic0+PS9wsHhmZPI0iPdjtrsddn5EdEHFZjOPfbCcNw33ZwGool3Vs
GoBSuVteGPpGotfc9diOayhE91XW0/0ljGi+RU5iVjq8VJiyQHF9xU2D8TvAKthd
k2Edv/Ty/yV3iY5DuxgiwcoOj6Mzhld6zAB0m1VG9ObZtAyGxVeo/AWxhFTzAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBqG8k8IqhaJ1B
wAWOHR7zZXhiXTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81Q3pFUjZ3QWdSd3ZFVE1aa29yYnFMeE1qWFJ5Y0ZNWUxt
cGVHS3RDSzdrYy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlM
bXBlR0t0Q0s3a2MvMC80MUE4NkYyNEYwOEFBMTY4OUQ0MUMwMDU4RTFEMUVGMzY1
Nzg2MjVELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKo5NwwDQQCAAIwBwMF
ACgEL9gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBArTMA0GCSqGSIb3DQEBCwUA
A4IBAQCxSbnr5dZHR8f3T5K2bty2H7VsnDMgahZWq8cMdxZ09WLlIatQkJoyVtRL
sm+N+1NiPARBgMSDv5kkY1acnHfJuxWuvcZrberNjR1sgKDfKA0sohZQbMYpW3BL
BHZxDoZUvMqDQmL91NmRILFNwg69F9WrAPPR7L111fUOWxQR3CNPB/g38aE+qF7y
MeiTTKQ3H2gkVHMfPcbIC9OnJwbpOOK1w6EzaEh69vBm01qj4OUrOS1r0eE2sWlm
PhPtI9zESO23DuBQx4bf24Wl2la6VqWzJ9nsZJC+3lPV0dk3bopgUXqOoXPQVKCu
zmg7IYGqa4oLMiqnf/fhoBZxwi7u
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org