Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.cer
File:                     4214C29D7E63A3D42BD59FD054A82A2231F16C7D.cer (raw, json)
Hash identifier:          5zdvuiRL+8wlT+s9T4sKYzhK+/tu9HQ0wb9eDHUb2JI=
Subject key identifier:   42:14:C2:9D:7E:63:A3:D4:2B:D5:9F:D0:54:A8:2A:22:31:F1:6C:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       727C452AF6501254C084DF13F3B7D6C282F9F75F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 24 Jul 2022 06:10:24 +0000
Certificate not after:    Sun 23 Jul 2023 06:15:24 +0000
Subordinate resources:    AS: 262607
                          IP: 170.150.0.0/22
                          IP: 177.85.112.0/21
                          IP: 2804:6cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7c:45:2a:f6:50:12:54:c0:84:df:13:f3:b7:d6:c2:82:f9:f7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 06:10:24 2022 GMT
            Not After : Jul 23 06:15:24 2023 GMT
        Subject: CN=4214C29D7E63A3D42BD59FD054A82A2231F16C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:8e:68:ce:dd:dc:2e:84:ac:1f:5a:38:d3:
                    b6:ef:22:cc:d4:aa:f5:c2:7b:c0:b0:b0:d8:ba:3c:
                    03:c2:a8:80:e1:88:f8:70:fc:3d:fd:53:09:fa:12:
                    d8:14:89:46:4d:2e:f5:b8:e4:3c:c2:fb:05:79:c9:
                    28:80:09:a3:e3:8e:b2:ab:eb:77:98:54:d0:b3:fc:
                    96:12:1c:71:2c:2b:bb:bc:47:6e:07:83:7c:43:2f:
                    8f:c2:3d:50:de:f8:68:d7:8b:c0:fe:a7:45:86:3c:
                    39:e6:25:d8:3e:53:d3:b5:6c:3d:5d:80:7c:43:a2:
                    eb:99:42:69:85:22:5b:80:ed:fc:1a:2a:00:11:23:
                    57:93:3c:ac:88:1b:24:24:6e:25:25:34:c6:c1:a2:
                    99:96:9f:f2:95:90:8e:32:f6:ab:22:6c:ea:16:5d:
                    87:02:61:28:8b:48:46:bd:c9:de:93:6e:93:72:c3:
                    59:a6:02:da:b0:57:24:c7:54:c1:c2:d0:36:6f:8b:
                    53:ee:45:dd:57:95:fa:c0:5d:bf:df:04:6c:34:9c:
                    5e:77:3e:b3:0e:19:85:06:8e:80:7e:ee:d9:e2:42:
                    eb:5c:af:2c:27:56:aa:eb:d3:a0:61:72:9c:06:79:
                    f0:46:86:fa:66:ea:f1:20:0f:7a:52:61:04:96:db:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:14:C2:9D:7E:63:A3:D4:2B:D5:9F:D0:54:A8:2A:22:31:F1:6C:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.0.0/22
                  177.85.112.0/21
                IPv6:
                  2804:6cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262607

    Signature Algorithm: sha256WithRSAEncryption
         57:52:86:1b:41:2c:29:4a:3c:96:51:63:86:d4:fc:37:5a:47:
         a9:d5:27:38:51:45:54:fd:7a:d6:12:d3:e0:a0:35:71:60:89:
         44:22:f9:a4:3a:bf:33:dc:54:e3:37:5b:42:95:01:53:73:3e:
         00:0d:33:1c:ac:50:6c:a1:dc:90:98:fc:7c:16:d5:de:76:d9:
         c9:fa:d4:fb:18:03:23:ae:b1:66:e3:56:8e:5d:3b:69:df:70:
         25:50:76:2f:47:98:64:2d:1f:77:45:af:fe:4b:75:2e:fc:08:
         b0:3e:fc:94:5e:d9:08:47:8d:06:88:d1:bb:47:68:91:91:45:
         68:47:a8:01:2c:c5:cf:e4:55:d9:e2:4d:90:e0:c2:50:18:d9:
         86:41:3c:6f:56:3b:67:56:0b:89:2b:cc:bb:67:ca:df:33:d2:
         f6:7c:b6:1c:7d:62:27:fe:8d:08:21:bc:08:7a:d3:7a:f9:f4:
         9d:5e:31:d7:a9:fe:98:6d:68:34:1a:e3:c4:31:d2:4c:c7:b7:
         e0:78:20:52:2b:60:6c:b4:c7:1c:80:92:4d:84:3f:42:ef:a3:
         8c:97:96:5f:fc:a5:0a:66:88:8d:12:8c:f5:e3:b4:24:1d:ae:
         4d:d7:b2:4d:ea:f0:f2:71:fd:28:22:ea:07:84:93:e5:7c:6e:
         94:fa:93:96
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUcnxFKvZQElTAhN8T87fWwoL5918wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MjQwNjEwMjRaFw0yMzA3MjMwNjE1MjRaMDMxMTAvBgNV
BAMTKDQyMTRDMjlEN0U2M0EzRDQyQkQ1OUZEMDU0QTgyQTIyMzFGMTZDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRA45ozt3cLoSsH1o407bvIszU
qvXCe8CwsNi6PAPCqIDhiPhw/D39Uwn6EtgUiUZNLvW45DzC+wV5ySiACaPjjrKr
63eYVNCz/JYSHHEsK7u8R24Hg3xDL4/CPVDe+GjXi8D+p0WGPDnmJdg+U9O1bD1d
gHxDouuZQmmFIluA7fwaKgARI1eTPKyIGyQkbiUlNMbBopmWn/KVkI4y9qsibOoW
XYcCYSiLSEa9yd6TbpNyw1mmAtqwVyTHVMHC0DZvi1PuRd1XlfrAXb/fBGw0nF53
PrMOGYUGjoB+7tniQutcrywnVqrr06BhcpwGefBGhvpm6vEgD3pSYQSW2x6DAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCFMKdfmOj1CvV
n9BUqCoiMfFsfTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IM25LcVBhbTZqNHZqeDNrUjhVWW5wSkxwUDNrblA0Z01R
dmtZcUpEZ1VFZC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IM25LcVBhbTZqNHZqeDNrUjhVWW5wSkxwUDNrblA0Z01R
dmtZcUpEZ1VFZC8wLzQyMTRDMjlEN0U2M0EzRDQyQkQ1OUZEMDU0QTgyQTIyMzFG
MTZDN0QubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqqWAAMEA7FVcDANBAIA
AjAHAwUAKAQGzDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAc8wDQYJKoZIhvcN
AQELBQADggEBAFdShhtBLClKPJZRY4bU/DdaR6nVJzhRRVT9etYS0+CgNXFgiUQi
+aQ6vzPcVOM3W0KVAVNzPgANMxysUGyh3JCY/HwW1d522cn61PsYAyOusWbjVo5d
O2nfcCVQdi9HmGQtH3dFr/5LdS78CLA+/JRe2QhHjQaI0btHaJGRRWhHqAEsxc/k
VdniTZDgwlAY2YZBPG9WO2dWC4krzLtnyt8z0vZ8thx9Yif+jQghvAh603r59J1e
Mdep/phtaDQa48Qx0kzHt+B4IFIrYGy0xxyAkk2EP0Lvo4yXll/8pQpmiI0SjPXj
tCQdrk3Xsk3q8PJx/Sgi6geEk+V8bpT6k5Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org