Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
File:                     443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer (raw, json)
Hash identifier:          Uz+AhM0GP2CxNNAxZmww7B3hlTfGFNl9QKolFfJ8xHM=
Subject key identifier:   44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4021C4E6F3AD84D765B197B5EB53531EF36AC8FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jan 2024 16:48:38 +0000
Certificate not after:    Wed 08 Jan 2025 16:53:38 +0000
Subordinate resources:    AS: 265303
                          IP: 168.0.172.0/22
                          IP: 177.126.1.0/24
                          IP: 177.126.6.0/24
                          IP: 177.126.8.0/24
                          IP: 177.126.10.0/23
                          IP: 177.126.13.0/24
                          IP: 177.126.15.0/24
                          IP: 187.120.12.0/24
                          IP: 189.39.216.0/22
                          IP: 200.150.164.0/23
                          IP: 200.150.167.0/24
                          IP: 200.150.169.0 -- 200.150.170.255
                          IP: 200.150.172.0/24
                          IP: 200.150.174.0/23
                          IP: 201.87.128.0/24
                          IP: 201.87.131.0/24
                          IP: 201.87.133.0 -- 201.87.137.255
                          IP: 201.87.139.0 -- 201.87.142.255
                          IP: 201.87.144.0/24
                          IP: 201.87.146.0 -- 201.87.150.255
                          IP: 201.87.152.0/23
                          IP: 201.87.157.0/24
                          IP: 2804:2dc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:21:c4:e6:f3:ad:84:d7:65:b1:97:b5:eb:53:53:1e:f3:6a:c8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 16:48:38 2024 GMT
            Not After : Jan  8 16:53:38 2025 GMT
        Subject: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:06:97:10:99:0d:65:20:4f:b7:c9:d0:53:
                    d4:a8:13:e6:1f:17:e7:8f:1f:fe:d9:22:fe:79:c4:
                    bf:fc:c6:a3:b9:92:10:7e:f1:e2:93:0b:76:c5:8b:
                    35:82:f0:31:03:27:dc:5a:fe:9e:50:fa:d2:d5:4a:
                    2d:53:62:3e:71:fe:4f:f8:0e:30:6c:1e:49:98:cd:
                    0b:62:86:59:4a:23:58:02:80:8d:47:fa:90:99:e3:
                    28:0e:ba:9c:93:96:af:e1:4b:53:fe:90:20:5d:00:
                    1e:3a:f3:a0:63:fb:fd:0c:84:01:b3:5d:c7:cb:90:
                    f0:ba:4e:54:60:94:7c:0c:f0:3b:13:81:58:5d:76:
                    18:72:68:61:10:30:27:c5:aa:08:4f:01:79:0c:4a:
                    d6:13:11:eb:d2:12:eb:e2:7a:64:c7:0f:f0:6e:63:
                    93:2b:01:2c:f8:3f:39:65:37:b5:c6:4c:08:c2:4a:
                    84:f6:43:c1:69:a5:42:a4:fe:60:1f:c4:6f:07:4a:
                    70:21:39:d4:44:38:a3:aa:6f:99:46:2d:6f:70:1a:
                    b6:95:05:16:5a:c1:ef:9c:50:21:c7:6c:73:c6:e6:
                    f8:fe:e5:f6:25:b7:d3:2a:9c:60:ea:56:b1:e0:02:
                    6e:aa:30:38:2a:f8:7d:2e:dc:dc:b1:24:b7:be:4f:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.172.0/22
                  177.126.1.0/24
                  177.126.6.0/24
                  177.126.8.0/24
                  177.126.10.0/23
                  177.126.13.0/24
                  177.126.15.0/24
                  187.120.12.0/24
                  189.39.216.0/22
                  200.150.164.0/23
                  200.150.167.0/24
                  200.150.169.0-200.150.170.255
                  200.150.172.0/24
                  200.150.174.0/23
                  201.87.128.0/24
                  201.87.131.0/24
                  201.87.133.0-201.87.137.255
                  201.87.139.0-201.87.142.255
                  201.87.144.0/24
                  201.87.146.0-201.87.150.255
                  201.87.152.0/23
                  201.87.157.0/24
                IPv6:
                  2804:2dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265303

    Signature Algorithm: sha256WithRSAEncryption
         0c:7b:8e:bc:e9:3a:88:06:cd:e0:d2:f7:41:ca:5c:a3:8a:ff:
         02:fd:41:4f:4f:7f:11:d1:32:86:61:0b:96:6f:68:c6:a4:7d:
         78:77:11:46:c3:df:e2:ed:ac:b3:f0:f5:00:e0:26:81:64:62:
         3c:39:ca:10:9c:be:51:35:55:2b:ec:25:86:b2:ef:88:6d:7a:
         28:b4:d6:49:d9:27:b9:2b:d8:be:7f:16:4e:51:ec:70:1b:d3:
         77:55:46:56:dc:17:bf:2d:68:36:20:ed:28:b6:98:f5:24:ea:
         f1:f2:37:fe:30:5f:ce:c3:2d:37:3b:f9:cf:d1:78:c0:d0:6a:
         0e:b6:80:68:e3:8f:28:5d:27:62:57:46:79:8a:ad:09:fd:17:
         23:e1:aa:f5:0e:a1:24:01:95:7b:d2:9f:6e:f1:de:69:90:49:
         6f:19:e0:5a:be:9c:bb:d8:79:09:f2:67:18:2b:45:a4:b6:19:
         3a:aa:8a:cc:e2:ea:3f:ec:87:60:12:d1:7a:09:89:e3:40:19:
         be:5a:9e:6b:65:44:35:4a:d8:fe:1b:6b:21:12:b7:e4:62:66:
         57:66:e4:69:68:b4:27:07:ca:a4:2e:f9:68:18:46:6c:f9:3d:
         e8:31:cc:63:f9:78:02:da:1a:8a:51:99:1a:65:b4:3c:d0:f9:
         51:b5:d3:c1
-----BEGIN CERTIFICATE-----
MIIGtDCCBZygAwIBAgIUQCHE5vOthNdlsZe161NTHvNqyP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTAxNjQ4MzhaFw0yNTAxMDgxNjUzMzhaMDMxMTAvBgNV
BAMTKDQ0MzY0MzQxNUQ0RENENENEMERENEU0MTFEMUEyNjFGRjQ3QTVCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FgaXEJkNZSBPt8nQU9SoE+Yf
F+ePH/7ZIv55xL/8xqO5khB+8eKTC3bFizWC8DEDJ9xa/p5Q+tLVSi1TYj5x/k/4
DjBsHkmYzQtihllKI1gCgI1H+pCZ4ygOupyTlq/hS1P+kCBdAB4686Bj+/0MhAGz
XcfLkPC6TlRglHwM8DsTgVhddhhyaGEQMCfFqghPAXkMStYTEevSEuviemTHD/Bu
Y5MrASz4PzllN7XGTAjCSoT2Q8FppUKk/mAfxG8HSnAhOdREOKOqb5lGLW9wGraV
BRZawe+cUCHHbHPG5vj+5fYlt9MqnGDqVrHgAm6qMDgq+H0u3NyxJLe+T6JRAgMB
AAGjggO+MIIDujAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRENkNBXU3NTNDd
TkEdGiYf9Hpb3jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85bjdGdkQzUXhQTEVYczhIcGdXVXVwSHFCaFBWc0pHS0g4
R0VrUnBWcHQ3WC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOW43RnZEM1F4UExFWHM4SHBnV1V1cEhxQmhQVnNKR0tI
OEdFa1JwVnB0N1gvMC80NDM2NDM0MTVENERDRDRDRDBERDRFNDExRDFBMjYxRkY0
N0E1QkRFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwgdAGCCsGAQUFBwEHAQH/BIHAMIG9MIGrBAIAATCBpAMEAqgArAMEALF+
AQMEALF+BgMEALF+CAMEAbF+CgMEALF+DQMEALF+DwMEALt4DAMEAr0n2AMEAciW
pAMEAMiWpzAMAwQAyJapAwQAyJaqAwQAyJasAwQByJauAwQAyVeAAwQAyVeDMAwD
BADJV4UDBAHJV4gwDAMEAMlXiwMEAMlXjgMEAMlXkDAMAwQByVeSAwQAyVeWAwQB
yVeYAwQAyVedMA0EAgACMAcDBQAoBC3IMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwQMVzANBgkqhkiG9w0BAQsFAAOCAQEADHuOvOk6iAbN4NL3Qcpco4r/Av1BT09/
EdEyhmELlm9oxqR9eHcRRsPf4u2ss/D1AOAmgWRiPDnKEJy+UTVVK+wlhrLviG16
KLTWSdknuSvYvn8WTlHscBvTd1VGVtwXvy1oNiDtKLaY9STq8fI3/jBfzsMtNzv5
z9F4wNBqDraAaOOPKF0nYldGeYqtCf0XI+Gq9Q6hJAGVe9KfbvHeaZBJbxngWr6c
u9h5CfJnGCtFpLYZOqqKzOLqP+yHYBLRegmJ40AZvlqea2VENUrY/htrIRK35GJm
V2bkaWi0JwfKpC75aBhGbPk96DHMY/l4AtoailGZGmW0PND5UbXTwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org