Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41F39E96A4269390B3E223B7AFA7E3C303E8393F.cer
File:                     41F39E96A4269390B3E223B7AFA7E3C303E8393F.cer (raw, json)
Hash identifier:          i6lKA3SuAJIVXG+YxbVthVPBvA6nOMQfuRPFMlo+cD0=
Subject key identifier:   41:F3:9E:96:A4:26:93:90:B3:E2:23:B7:AF:A7:E3:C3:03:E8:39:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36EB94A382B05AD2A617DAD7AF94DE302A6AB401
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/41F39E96A4269390B3E223B7AFA7E3C303E8393F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 20:57:58 +0000
Certificate not after:    Thu 30 Jan 2025 21:02:58 +0000
Subordinate resources:    AS: 267579
                          IP: 45.70.52.0/22
                          IP: 2804:439c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:eb:94:a3:82:b0:5a:d2:a6:17:da:d7:af:94:de:30:2a:6a:b4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 20:57:58 2024 GMT
            Not After : Jan 30 21:02:58 2025 GMT
        Subject: CN=41F39E96A4269390B3E223B7AFA7E3C303E8393F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:8d:c5:b0:f5:e0:08:a2:ea:c7:7e:ed:74:
                    fd:b8:21:cd:2a:1b:ed:26:1a:bb:00:d9:86:0b:39:
                    54:11:75:2d:4a:3d:dd:3f:ab:52:a7:db:ba:47:ce:
                    f5:1e:4f:b1:9b:24:ed:c7:68:05:5e:24:5d:af:5e:
                    8e:ef:18:ff:06:83:a9:b0:37:9c:05:b5:d4:ca:1a:
                    b5:dd:11:82:4c:b2:5f:d8:02:ab:a2:88:49:5f:3f:
                    d4:bc:82:2e:1f:39:e0:1c:95:01:f9:61:9e:a9:d2:
                    fa:af:70:8b:bd:06:1d:40:58:5a:d1:e4:e6:3f:7a:
                    60:bd:55:5e:8b:33:ca:38:0c:7a:5c:75:30:54:6f:
                    17:11:0b:ef:04:28:b5:a9:b6:b3:59:2f:9d:f8:87:
                    99:49:f6:90:f6:72:1d:73:0b:b8:e2:f1:01:e2:2d:
                    b1:06:84:66:8e:b9:9c:00:9b:28:de:31:4c:2b:cc:
                    ef:7b:56:39:84:ad:56:c9:10:ee:b6:c3:b4:ec:9e:
                    ee:d5:1e:ab:de:54:69:c5:d2:dc:07:f9:ed:0c:2b:
                    4e:37:8a:3a:74:02:a0:b2:63:42:94:f7:13:12:8c:
                    cf:0d:74:e9:76:7e:13:4c:e8:9c:ce:87:06:30:85:
                    44:e9:8e:d6:fd:22:d0:50:ab:e7:d2:5c:7c:f9:36:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:F3:9E:96:A4:26:93:90:B3:E2:23:B7:AF:A7:E3:C3:03:E8:39:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/41F39E96A4269390B3E223B7AFA7E3C303E8393F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/22
                IPv6:
                  2804:439c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267579

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:41:5d:84:e8:2a:10:62:a0:59:a3:a1:6c:b7:e6:6c:4a:
         b9:1d:3e:a8:f2:2a:62:98:7c:ab:a5:f6:62:3b:2b:18:71:fc:
         12:39:a9:44:fe:ee:9a:53:9e:ce:df:92:a8:dd:51:5b:37:bb:
         d5:64:7b:0b:7b:c6:2e:51:4a:e0:e7:c6:dd:6c:13:dc:fb:96:
         4e:7a:84:d3:61:18:54:33:86:50:d8:12:d9:be:47:70:4f:49:
         a8:12:be:8d:82:28:d1:58:2f:01:47:fc:a3:01:61:85:b9:58:
         35:7e:bf:ef:84:6e:89:5e:86:fb:15:1f:78:fc:0e:39:fd:40:
         bc:16:78:95:6b:e6:cc:50:46:53:84:65:f4:56:55:22:c1:02:
         15:97:bb:21:23:3b:0c:e3:ec:ba:56:43:fe:c0:38:66:b0:a9:
         84:87:bc:dd:14:c1:c1:24:18:2a:3e:fa:d2:88:56:de:c1:ac:
         3f:49:7e:8e:f3:2b:6c:16:a6:83:b4:e6:3a:4c:7a:f8:01:43:
         dc:aa:b4:ef:fa:70:9d:22:f0:11:5d:2a:dc:77:b2:39:c3:db:
         51:2c:96:df:8c:07:01:84:8b:b6:9c:2f:a6:f8:43:a7:d8:73:
         4b:5c:a7:6a:e8:09:15:4f:8c:2c:36:0f:38:6d:a6:79:1d:a2:
         65:c4:94:27
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNuuUo4KwWtKmF9rXr5TeMCpqtAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDEyMDU3NThaFw0yNTAxMzAyMTAyNThaMDMxMTAvBgNV
BAMTKDQxRjM5RTk2QTQyNjkzOTBCM0UyMjNCN0FGQTdFM0MzMDNFODM5M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDay43FsPXgCKLqx37tdP24Ic0q
G+0mGrsA2YYLOVQRdS1KPd0/q1Kn27pHzvUeT7GbJO3HaAVeJF2vXo7vGP8Gg6mw
N5wFtdTKGrXdEYJMsl/YAquiiElfP9S8gi4fOeAclQH5YZ6p0vqvcIu9Bh1AWFrR
5OY/emC9VV6LM8o4DHpcdTBUbxcRC+8EKLWptrNZL534h5lJ9pD2ch1zC7ji8QHi
LbEGhGaOuZwAmyjeMUwrzO97VjmErVbJEO62w7Tsnu7VHqveVGnF0twH+e0MK043
ijp0AqCyY0KU9xMSjM8NdOl2fhNM6JzOhwYwhUTpjtb9ItBQq+fSXHz5NgrDAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRB856WpCaTkLPi
I7evp+PDA+g5PzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BQkVOMU1XcjIzbTY5UjF0YUUxREFMdEtSc3U2N1gyU2t3
d01lNFFDWXhaTi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUJFTjFNV3IyM202OVIxdGFFMURBTHRLUnN1NjdYMlNr
d3dNZTRRQ1l4Wk4vMC80MUYzOUU5NkE0MjY5MzkwQjNFMjIzQjdBRkE3RTNDMzAz
RTgzOTNGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItRjQwDQQCAAIwBwMF
ACgEQ5wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBU7MA0GCSqGSIb3DQEBCwUA
A4IBAQBIyUFdhOgqEGKgWaOhbLfmbEq5HT6o8ipimHyrpfZiOysYcfwSOalE/u6a
U57O35Ko3VFbN7vVZHsLe8YuUUrg58bdbBPc+5ZOeoTTYRhUM4ZQ2BLZvkdwT0mo
Er6NgijRWC8BR/yjAWGFuVg1fr/vhG6JXob7FR94/A45/UC8FniVa+bMUEZThGX0
VlUiwQIVl7shIzsM4+y6VkP+wDhmsKmEh7zdFMHBJBgqPvrSiFbewaw/SX6O8yts
FqaDtOY6THr4AUPcqrTv+nCdIvARXSrcd7I5w9tRLJbfjAcBhIu2nC+m+EOn2HNL
XKdq6AkVT4wsNg84baZ5HaJlxJQn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org