Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.cer
File:                     4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.cer (raw, json)
Hash identifier:          62YikvtmrKbEwN/T6Z55OdMfs+hMSnpwS/xhk9+4Fjk=
Subject key identifier:   43:69:F8:DE:2C:F4:B9:C1:EB:D1:1A:D4:07:C9:DB:3E:FF:A9:2B:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B4C2E03174B87E0E5CA77D070CE2F2E32E293F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 22:25:47 +0000
Certificate not after:    Mon 01 Apr 2024 22:30:47 +0000
Subordinate resources:    AS: 265204
                          IP: 167.250.64.0/22
                          IP: 2804:2c38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4c:2e:03:17:4b:87:e0:e5:ca:77:d0:70:ce:2f:2e:32:e2:93:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 22:25:47 2023 GMT
            Not After : Apr  1 22:30:47 2024 GMT
        Subject: CN=4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:df:e0:45:bb:d4:79:58:7d:2e:58:65:d2:
                    82:f0:38:7d:a3:50:d9:bf:2b:3f:83:7b:60:13:80:
                    2b:4d:31:b8:07:f1:78:35:4f:eb:39:be:ff:bb:b9:
                    09:16:40:5c:1b:97:2e:36:e5:aa:c4:70:32:f6:a8:
                    cd:aa:8a:84:2d:2d:35:20:75:db:d8:b9:e8:b7:48:
                    73:e7:99:b2:ad:ed:ea:46:f0:13:9e:8b:61:2f:91:
                    af:bd:5a:a7:64:65:ae:bf:99:f8:42:1e:8c:a6:61:
                    cc:44:68:6a:ca:e1:92:8a:72:da:15:4d:46:38:3a:
                    12:6d:0b:48:ff:b4:cd:39:62:37:b6:5e:fd:00:9c:
                    e6:f8:fe:f2:25:c0:1c:02:1a:b9:59:7a:a2:db:57:
                    6b:7a:fc:d8:e5:25:03:98:15:84:e9:29:df:54:6d:
                    64:c4:21:22:c6:c0:b6:3b:e4:12:9b:f2:cf:75:e3:
                    4c:84:25:5d:3a:4e:84:9c:52:f4:aa:ca:83:73:ab:
                    55:b9:2a:d8:04:da:57:1f:5d:2f:18:d6:61:58:32:
                    63:8c:73:93:fe:ca:70:fb:e2:aa:e1:f5:00:3c:3d:
                    49:61:86:85:89:e7:be:b9:63:3a:0c:75:26:8b:cd:
                    eb:04:bf:69:cf:34:00:13:92:01:f8:0a:82:d1:8f:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:69:F8:DE:2C:F4:B9:C1:EB:D1:1A:D4:07:C9:DB:3E:FF:A9:2B:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.64.0/22
                IPv6:
                  2804:2c38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265204

    Signature Algorithm: sha256WithRSAEncryption
         0c:3b:71:3c:20:a6:c8:d1:27:a0:1f:a6:c2:4b:6e:b4:7e:65:
         a3:ec:50:07:d1:4b:4b:ad:d8:ba:25:e1:6e:62:e0:c0:cd:a1:
         dd:d4:f9:7a:f3:60:6f:a4:91:7e:d9:e9:74:e4:f8:36:74:54:
         e6:8d:76:74:bd:cb:04:68:68:8f:23:e7:4a:63:85:8b:01:1f:
         a0:36:86:a8:47:e4:c1:a5:06:d1:2e:d0:29:79:5f:6c:23:0c:
         13:79:6f:12:ea:d9:eb:e8:55:6b:b8:2d:bc:43:e6:86:22:bd:
         a6:97:1a:66:f2:95:f0:ad:04:44:54:7a:23:06:42:83:c0:51:
         0e:11:ed:62:fd:5a:fe:6a:0c:29:bc:40:f3:0e:8e:e6:85:1d:
         a0:2b:06:75:39:1b:9d:00:a0:98:c1:8c:64:3d:ef:1a:6d:bc:
         c4:77:da:6e:62:a4:1d:cd:7d:82:7a:de:bf:66:a3:b6:0a:ae:
         da:5b:74:d9:7f:a6:18:45:c5:18:59:7c:35:e1:8a:7a:f4:41:
         7d:a4:d6:20:91:c8:cc:4d:3c:23:2b:f1:f7:67:6c:2f:c4:e8:
         f2:60:c9:be:64:30:f7:2f:57:3a:c9:f7:15:8e:84:55:79:f5:
         08:18:73:f7:f7:ef:70:bb:cb:1e:5d:8b:2c:93:76:bc:39:5c:
         a9:fa:77:69
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUS0wuAxdLh+DlynfQcM4vLjLik/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MDMyMjI1NDdaFw0yNDA0MDEyMjMwNDdaMDMxMTAvBgNV
BAMTKDQzNjlGOERFMkNGNEI5QzFFQkQxMUFENDA3QzlEQjNFRkZBOTJCM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4N/gRbvUeVh9Llhl0oLwOH2j
UNm/Kz+De2ATgCtNMbgH8Xg1T+s5vv+7uQkWQFwbly425arEcDL2qM2qioQtLTUg
ddvYuei3SHPnmbKt7epG8BOei2Evka+9WqdkZa6/mfhCHoymYcxEaGrK4ZKKctoV
TUY4OhJtC0j/tM05Yje2Xv0AnOb4/vIlwBwCGrlZeqLbV2t6/NjlJQOYFYTpKd9U
bWTEISLGwLY75BKb8s9140yEJV06ToScUvSqyoNzq1W5KtgE2lcfXS8Y1mFYMmOM
c5P+ynD74qrh9QA8PUlhhoWJ5765YzoMdSaLzesEv2nPNAATkgH4CoLRj66FAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDafjeLPS5wevR
GtQHyds+/6krPjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80YXlaWGRWTlhpa2ZqTEVMcXBzQVNvOTk3UnlYb0U0dWFX
aVVMbk03NFZNdy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80YXlaWGRWTlhpa2ZqTEVMcXBzQVNvOTk3UnlYb0U0dWFX
aVVMbk03NFZNdy8wLzQzNjlGOERFMkNGNEI5QzFFQkQxMUFENDA3QzlEQjNFRkZB
OTJCM0UubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqf6QDANBAIAAjAHAwUA
KAQsODAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC/QwDQYJKoZIhvcNAQELBQAD
ggEBAAw7cTwgpsjRJ6AfpsJLbrR+ZaPsUAfRS0ut2Lol4W5i4MDNod3U+XrzYG+k
kX7Z6XTk+DZ0VOaNdnS9ywRoaI8j50pjhYsBH6A2hqhH5MGlBtEu0Cl5X2wjDBN5
bxLq2evoVWu4LbxD5oYivaaXGmbylfCtBERUeiMGQoPAUQ4R7WL9Wv5qDCm8QPMO
juaFHaArBnU5G50AoJjBjGQ97xptvMR32m5ipB3NfYJ63r9mo7YKrtpbdNl/phhF
xRhZfDXhinr0QX2k1iCRyMxNPCMr8fdnbC/E6PJgyb5kMPcvVzrJ9xWOhFV59QgY
c/f373C7yx5diyyTdrw5XKn6d2k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org