Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41F56C7DA191862CA67053F5ACD40D3362C0F87E.cer
File:                     41F56C7DA191862CA67053F5ACD40D3362C0F87E.cer (raw, json)
Hash identifier:          BN+mtDR6wChvP/h+tpDYVXLKAobC/BDBMaGax632/28=
Subject key identifier:   41:F5:6C:7D:A1:91:86:2C:A6:70:53:F5:AC:D4:0D:33:62:C0:F8:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73E9C0D69D1F0414EEBC2A864A96CB6AE5B0E644
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/41F56C7DA191862CA67053F5ACD40D3362C0F87E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 20:37:54 +0000
Certificate not after:    Thu 20 Mar 2025 20:42:54 +0000
Subordinate resources:    AS: 262601
                          IP: 177.75.240.0/20
                          IP: 2804:6ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e9:c0:d6:9d:1f:04:14:ee:bc:2a:86:4a:96:cb:6a:e5:b0:e6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 20:37:54 2024 GMT
            Not After : Mar 20 20:42:54 2025 GMT
        Subject: CN=41F56C7DA191862CA67053F5ACD40D3362C0F87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0f:c8:3f:d2:82:07:47:18:dc:58:0e:a6:38:
                    96:47:f8:86:64:e8:63:6c:ff:76:ce:de:e6:05:56:
                    0b:25:54:4a:fb:16:cd:73:ac:64:b6:4b:1f:a6:be:
                    ef:c9:e9:2b:c7:62:6a:6a:4d:d9:1e:b5:7d:ea:77:
                    f0:f4:e0:df:2a:35:dc:5b:49:67:aa:0e:85:70:a5:
                    fa:56:6d:8a:df:cb:a8:b1:0a:c1:98:b6:38:e6:06:
                    bf:ce:1f:85:07:3a:87:77:91:ca:89:cd:06:e9:f9:
                    46:c0:8b:0b:ac:41:d3:6e:88:26:34:e7:98:91:74:
                    96:79:92:c7:55:dd:09:db:7e:43:66:87:4d:ae:76:
                    af:90:01:90:74:07:57:16:84:00:f8:f4:be:a6:f6:
                    85:fe:01:f7:ac:a9:f2:28:1c:f7:34:23:5e:3f:00:
                    53:d7:ac:c7:d8:36:93:7f:d5:90:29:37:34:61:65:
                    d5:53:cb:cb:6a:97:c8:ba:30:0e:4b:63:e1:04:54:
                    c6:20:01:bd:03:c6:17:9c:c8:a5:c3:cf:36:6d:f4:
                    f4:1a:08:b0:18:42:4f:29:84:c0:6c:3d:81:87:77:
                    a1:ab:f8:88:07:8c:ec:e8:c3:26:b3:0e:5b:05:76:
                    f6:cb:17:10:ad:33:4a:e9:57:bb:92:cd:5a:6f:20:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:F5:6C:7D:A1:91:86:2C:A6:70:53:F5:AC:D4:0D:33:62:C0:F8:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/41F56C7DA191862CA67053F5ACD40D3362C0F87E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.240.0/20
                IPv6:
                  2804:6ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262601

    Signature Algorithm: sha256WithRSAEncryption
         29:dd:8a:31:41:51:57:59:3f:25:c0:48:7d:bc:8e:c1:23:ad:
         49:d2:fc:bb:51:4d:23:45:9e:74:11:10:f1:1d:16:4e:9b:15:
         a4:2e:45:cf:f7:9d:a1:c0:d2:8a:89:cc:dc:a7:15:d4:f9:a0:
         f1:4d:e5:17:c2:60:16:8a:10:6e:3b:18:96:f5:15:c3:a1:ee:
         44:75:03:0a:21:b4:f1:52:45:5f:dd:b2:93:69:87:30:35:14:
         eb:d1:eb:3c:2f:37:55:ef:39:c7:4e:0e:5a:6a:bb:ce:1d:d5:
         b4:f9:c4:cd:57:bc:ad:41:5c:34:f4:0f:d5:90:ec:7a:e6:a5:
         0c:4a:19:36:92:da:e8:e9:56:c7:99:31:b8:2c:56:33:0f:f8:
         3c:b2:58:20:81:08:d2:66:97:d2:3c:94:1a:a1:3d:6c:91:66:
         31:10:88:5d:5e:d1:5e:7a:2f:fc:0b:f9:49:37:e5:c3:ec:51:
         05:6d:0e:22:6b:6f:8b:4d:37:a0:64:37:36:f8:ff:3e:c2:61:
         41:79:6e:ee:5d:4a:64:c9:73:59:26:91:bc:b0:38:36:ee:dc:
         0b:4d:d7:fb:07:bb:c5:2d:5f:30:9e:1d:f9:65:17:9c:32:05:
         15:c8:5e:0c:ed:26:2f:da:e1:a7:73:37:b7:da:98:9a:83:ac:
         cb:d3:ee:53
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUc+nA1p0fBBTuvCqGSpbLauWw5kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjEyMDM3NTRaFw0yNTAzMjAyMDQyNTRaMDMxMTAvBgNV
BAMTKDQxRjU2QzdEQTE5MTg2MkNBNjcwNTNGNUFDRDQwRDMzNjJDMEY4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1D8g/0oIHRxjcWA6mOJZH+IZk
6GNs/3bO3uYFVgslVEr7Fs1zrGS2Sx+mvu/J6SvHYmpqTdketX3qd/D04N8qNdxb
SWeqDoVwpfpWbYrfy6ixCsGYtjjmBr/OH4UHOod3kcqJzQbp+UbAiwusQdNuiCY0
55iRdJZ5ksdV3QnbfkNmh02udq+QAZB0B1cWhAD49L6m9oX+AfesqfIoHPc0I14/
AFPXrMfYNpN/1ZApNzRhZdVTy8tql8i6MA5LY+EEVMYgAb0DxhecyKXDzzZt9PQa
CLAYQk8phMBsPYGHd6Gr+IgHjOzowyazDlsFdvbLFxCtM0rpV7uSzVpvINcPAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRB9Wx9oZGGLKZw
U/Ws1A0zYsD4fjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DQ1dIaW9nODEyV2hGUXRaRG9pc1E0OW8ybnVtckpwSG4x
VkJpTnpOajhOcC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhu
MVZCaU56Tmo4TnAvMC80MUY1NkM3REExOTE4NjJDQTY3MDUzRjVBQ0Q0MEQzMzYy
QzBGODdFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBASxS/AwDQQCAAIwBwMF
ACgEBqwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAHJMA0GCSqGSIb3DQEBCwUA
A4IBAQAp3YoxQVFXWT8lwEh9vI7BI61J0vy7UU0jRZ50ERDxHRZOmxWkLkXP952h
wNKKiczcpxXU+aDxTeUXwmAWihBuOxiW9RXDoe5EdQMKIbTxUkVf3bKTaYcwNRTr
0es8LzdV7znHTg5aarvOHdW0+cTNV7ytQVw09A/VkOx65qUMShk2ktro6VbHmTG4
LFYzD/g8slgggQjSZpfSPJQaoT1skWYxEIhdXtFeei/8C/lJN+XD7FEFbQ4ia2+L
TTegZDc2+P8+wmFBeW7uXUpkyXNZJpG8sDg27twLTdf7B7vFLV8wnh35ZRecMgUV
yF4M7SYv2uGncze32piag6zL0+5T
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org