Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4211525F8C1A24BF6EA600936B62F70A6142F334.cer
File:                     4211525F8C1A24BF6EA600936B62F70A6142F334.cer (raw, json)
Hash identifier:          zr18rb4KH68JS3k9gexfO4iGK0mrz2NgztvDu31WEh8=
Subject key identifier:   42:11:52:5F:8C:1A:24:BF:6E:A6:00:93:6B:62:F7:0A:61:42:F3:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39D78AB439ADFD6D532CE1F8260E3FFAE8F8B1BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/4211525F8C1A24BF6EA600936B62F70A6142F334.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Jan 2023 19:25:15 +0000
Certificate not after:    Tue 09 Jan 2024 19:30:15 +0000
Subordinate resources:    AS: 270689
                          IP: 181.225.152.0/22
                          IP: 2804:6fdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d7:8a:b4:39:ad:fd:6d:53:2c:e1:f8:26:0e:3f:fa:e8:f8:b1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 19:25:15 2023 GMT
            Not After : Jan  9 19:30:15 2024 GMT
        Subject: CN=4211525F8C1A24BF6EA600936B62F70A6142F334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:36:1d:3a:0b:85:1c:45:68:12:87:40:34:
                    83:cc:7c:cf:60:52:9a:69:0c:4a:e5:cc:ed:dc:d9:
                    5f:98:e9:d2:90:de:00:f1:d8:40:be:a5:f3:e4:b4:
                    1c:0d:29:87:86:33:d5:03:dc:ca:5c:e4:4a:86:a9:
                    4f:d8:5c:d0:fc:3a:30:20:76:c5:c7:d3:48:e6:7d:
                    45:5b:df:29:fd:f4:05:67:37:66:2f:21:76:f9:fc:
                    ea:80:bd:fa:66:d8:ca:aa:c1:d3:b6:46:1e:74:42:
                    1f:4a:0c:49:24:ee:d4:2c:5a:13:15:6b:14:d7:cc:
                    37:91:00:a0:26:30:4a:4e:01:90:f9:62:8c:25:0c:
                    a9:dc:54:05:a9:25:d1:ca:ec:26:8a:9e:14:e6:fa:
                    d3:93:fe:9c:b3:f9:9c:fa:9f:4b:8a:97:a0:00:7b:
                    06:fc:58:ca:a6:ae:0b:ca:bc:8c:e9:37:15:f8:64:
                    5a:a4:36:aa:7e:2d:3d:cf:d3:26:4a:a5:7a:b5:53:
                    49:ef:5a:4d:2b:62:d5:bd:6c:3e:e4:29:16:46:95:
                    b0:60:a6:38:a7:94:5d:d1:4d:32:f8:ba:86:74:00:
                    94:ad:fc:e4:7d:c0:bd:7f:61:64:78:bf:82:2d:75:
                    16:78:55:d6:30:26:de:5a:d4:fb:1f:63:29:7e:3c:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:11:52:5F:8C:1A:24:BF:6E:A6:00:93:6B:62:F7:0A:61:42:F3:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/4211525F8C1A24BF6EA600936B62F70A6142F334.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.152.0/22
                IPv6:
                  2804:6fdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270689

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:d8:31:2a:e2:ea:67:16:63:4c:a7:42:bc:c7:6c:11:78:
         b2:27:39:08:85:2d:5a:db:26:65:85:c8:90:54:ff:6d:53:03:
         05:d7:3d:d1:9d:d2:c1:7e:da:b1:1a:0b:f1:02:a4:5b:30:b1:
         b6:12:98:8d:33:2a:fa:87:34:43:a4:b4:87:72:bc:bd:90:51:
         09:6d:70:72:2c:cd:17:23:d6:73:1b:86:90:99:cf:86:49:18:
         e8:31:22:1c:b1:f7:e7:8f:be:ab:09:a3:44:69:f3:d7:2b:8b:
         51:97:f4:ae:13:48:29:13:16:37:0a:b4:f5:44:ff:0d:a1:e8:
         4d:b3:25:60:bf:c0:ca:08:aa:86:f1:fe:9c:f9:ae:27:56:aa:
         40:60:2b:96:dd:db:7b:a5:df:ff:72:48:79:88:76:c9:5f:83:
         38:06:a1:6e:e6:99:4f:fd:2b:f8:49:ea:08:fd:f7:4f:d8:a8:
         a8:54:a0:b0:77:af:ef:79:40:ad:08:d4:9b:94:59:4c:0f:98:
         36:0c:1a:05:61:9c:16:f1:95:ed:5d:f3:6c:c4:86:1b:bf:27:
         7c:ac:26:62:55:e3:60:00:09:26:97:8b:4c:8e:ac:a6:c3:2c:
         eb:4e:17:12:66:f4:0c:06:f3:f2:5d:69:de:c0:04:55:96:ea:
         ce:2b:db:d9
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUOdeKtDmt/W1TLOH4Jg4/+uj4sbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMTAxOTI1MTVaFw0yNDAxMDkxOTMwMTVaMDMxMTAvBgNV
BAMTKDQyMTE1MjVGOEMxQTI0QkY2RUE2MDA5MzZCNjJGNzBBNjE0MkYzMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtzYdOguFHEVoEodANIPMfM9g
UpppDErlzO3c2V+Y6dKQ3gDx2EC+pfPktBwNKYeGM9UD3Mpc5EqGqU/YXND8OjAg
dsXH00jmfUVb3yn99AVnN2YvIXb5/OqAvfpm2MqqwdO2Rh50Qh9KDEkk7tQsWhMV
axTXzDeRAKAmMEpOAZD5YowlDKncVAWpJdHK7CaKnhTm+tOT/pyz+Zz6n0uKl6AA
ewb8WMqmrgvKvIzpNxX4ZFqkNqp+LT3P0yZKpXq1U0nvWk0rYtW9bD7kKRZGlbBg
pjinlF3RTTL4uoZ0AJSt/OR9wL1/YWR4v4ItdRZ4VdYwJt5a1PsfYyl+PPK5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCEVJfjBokv26m
AJNrYvcKYULzNDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RFdEOUxmdVI5VWNZaTZoWXg5WGdHWFlBRUZXZ295dWdV
WVc3M0JoQVlWeS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNURXRDlMZnVSOVVjWWk2aFl4OVhnR1hZQUVGV2dveXVn
VVlXNzNCaEFZVnkvMC80MjExNTI1RjhDMUEyNEJGNkVBNjAwOTM2QjYyRjcwQTYx
NDJGMzM0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK14ZgwDQQCAAIwBwMF
ACgEb9wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCFhMA0GCSqGSIb3DQEBCwUA
A4IBAQCG5tgxKuLqZxZjTKdCvMdsEXiyJzkIhS1a2yZlhciQVP9tUwMF1z3RndLB
ftqxGgvxAqRbMLG2EpiNMyr6hzRDpLSHcry9kFEJbXByLM0XI9ZzG4aQmc+GSRjo
MSIcsffnj76rCaNEafPXK4tRl/SuE0gpExY3CrT1RP8NoehNsyVgv8DKCKqG8f6c
+a4nVqpAYCuW3dt7pd//ckh5iHbJX4M4BqFu5plP/Sv4SeoI/fdP2KioVKCwd6/v
eUCtCNSblFlMD5g2DBoFYZwW8ZXtXfNsxIYbvyd8rCZiVeNgAAkml4tMjqymwyzr
ThcSZvQMBvPyXWnewARVlurOK9vZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org