Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4481A27D53C172F7D6C4614493892E9919009470.cer
File:                     4481A27D53C172F7D6C4614493892E9919009470.cer (raw, json)
Hash identifier:          MQty6OZpgRLo1WothZ1neXnFT58zpsUKYqQqDtVToRw=
Subject key identifier:   44:81:A2:7D:53:C1:72:F7:D6:C4:61:44:93:89:2E:99:19:00:94:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       101B64B803253CAD1CA978FDBF701B9AF56E8436
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/4481A27D53C172F7D6C4614493892E9919009470.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Mar 2022 16:44:16 +0000
Certificate not after:    Wed 29 Mar 2023 16:49:16 +0000
Subordinate resources:    AS: 265329
                          IP: 168.181.28.0/22
                          IP: 2804:2e2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1b:64:b8:03:25:3c:ad:1c:a9:78:fd:bf:70:1b:9a:f5:6e:84:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 16:44:16 2022 GMT
            Not After : Mar 29 16:49:16 2023 GMT
        Subject: CN=4481A27D53C172F7D6C4614493892E9919009470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:62:5b:28:30:3f:3d:b6:83:1b:0e:1a:91:
                    70:eb:c3:52:cd:93:4b:52:f1:92:5c:4e:e9:03:ea:
                    0f:df:cd:26:db:61:7e:14:be:79:69:e4:49:29:5e:
                    18:83:08:11:2d:f9:ed:68:9f:7d:cf:6b:5e:3d:f6:
                    cb:c3:c3:5d:d5:87:17:d3:3f:b4:9a:6f:4f:5a:d8:
                    de:ab:a9:72:84:05:50:e9:fc:20:e0:5a:71:9c:39:
                    3c:51:20:a2:ef:cb:ee:6c:96:0c:7f:ae:a2:73:97:
                    4b:5a:40:05:eb:3b:ff:00:d4:13:e1:3e:6a:c6:c1:
                    a0:04:cc:64:14:55:90:43:21:80:4b:9d:c8:cd:54:
                    ad:fa:47:29:d7:63:8e:7b:be:84:bb:4e:f1:9b:90:
                    28:c9:11:5c:73:7b:02:e5:e6:30:71:9a:b5:62:1d:
                    8d:ae:e2:f9:f4:8a:96:4d:1b:0f:64:fa:8a:fb:fe:
                    6b:04:f5:21:54:19:89:56:a7:fb:3d:60:53:d5:d6:
                    63:d8:b5:00:4c:67:00:49:f4:b6:b2:d0:ea:c6:70:
                    52:c7:6e:48:24:85:46:83:c7:90:15:51:c0:d8:94:
                    6a:c1:da:b1:de:1a:c3:cf:e5:b9:80:99:73:7c:80:
                    6a:97:c7:92:44:2f:98:18:e6:00:1f:86:18:49:00:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:81:A2:7D:53:C1:72:F7:D6:C4:61:44:93:89:2E:99:19:00:94:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/4481A27D53C172F7D6C4614493892E9919009470.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.28.0/22
                IPv6:
                  2804:2e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265329

    Signature Algorithm: sha256WithRSAEncryption
         5b:ca:70:69:4b:f6:55:dd:23:68:35:68:be:7d:1a:37:2f:bd:
         a0:ca:bb:90:01:ad:aa:ed:9c:c0:91:97:e1:c7:9b:de:1c:3c:
         44:25:ca:f9:d6:86:27:ba:fe:a2:84:6e:5a:f8:ed:9f:4e:e4:
         d0:a8:39:cb:83:16:ab:48:ff:97:e8:c6:c0:42:45:31:4d:69:
         fa:fa:36:fa:7b:ce:45:9e:ee:aa:82:83:11:bb:a6:56:8d:6c:
         3c:13:75:28:a3:bc:2b:ab:ec:1e:d0:e4:b1:90:2a:f0:7f:57:
         2f:ec:f2:b3:27:72:5e:36:cf:8c:31:cf:df:c6:9f:b8:b2:0d:
         d8:3a:76:a0:76:2f:a7:be:d2:f4:4c:36:e1:59:9f:a9:b3:1f:
         81:ef:86:ab:d4:d0:cd:d0:9a:8d:2a:24:54:a8:69:4e:bf:52:
         04:55:21:63:7e:a1:dd:b0:e7:bd:85:e4:9e:67:c8:54:68:a8:
         3d:c8:a7:83:3f:8b:32:dc:e5:5e:ea:55:8c:8d:fe:e4:e6:57:
         9a:0c:c0:0b:d1:8f:88:96:dd:55:c3:4b:79:8d:2e:24:e8:bd:
         50:90:56:a4:a0:09:6e:a0:26:ab:ae:21:0f:e5:d9:4e:87:e4:
         ec:74:9b:fc:ee:1e:2d:39:f1:a4:40:80:bf:fb:ce:08:d5:71:
         54:64:9a:45
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUEBtkuAMlPK0cqXj9v3AbmvVuhDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAzMzAxNjQ0MTZaFw0yMzAzMjkxNjQ5MTZaMDMxMTAvBgNV
BAMTKDQ0ODFBMjdENTNDMTcyRjdENkM0NjE0NDkzODkyRTk5MTkwMDk0NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSWJbKDA/PbaDGw4akXDrw1LN
k0tS8ZJcTukD6g/fzSbbYX4Uvnlp5EkpXhiDCBEt+e1on33Pa1499svDw13VhxfT
P7Sab09a2N6rqXKEBVDp/CDgWnGcOTxRIKLvy+5slgx/rqJzl0taQAXrO/8A1BPh
PmrGwaAEzGQUVZBDIYBLncjNVK36RynXY457voS7TvGbkCjJEVxzewLl5jBxmrVi
HY2u4vn0ipZNGw9k+or7/msE9SFUGYlWp/s9YFPV1mPYtQBMZwBJ9Lay0OrGcFLH
bkgkhUaDx5AVUcDYlGrB2rHeGsPP5bmAmXN8gGqXx5JEL5gY5gAfhhhJALhlAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREgaJ9U8Fy99bE
YUSTiS6ZGQCUcDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84bU41RTRHUVF0WFB6bjhKSjhvTlNZNW8zZGtRMlBiRW5F
c1Z5dVhqc0NCUS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOG1ONUU0R1FRdFhQem44Sko4b05TWTVvM2RrUTJQYkVu
RXNWeXVYanNDQlEvMC80NDgxQTI3RDUzQzE3MkY3RDZDNDYxNDQ5Mzg5MkU5OTE5
MDA5NDcwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKotRwwDQQCAAIwBwMF
ACgELiwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAxxMA0GCSqGSIb3DQEBCwUA
A4IBAQBbynBpS/ZV3SNoNWi+fRo3L72gyruQAa2q7ZzAkZfhx5veHDxEJcr51oYn
uv6ihG5a+O2fTuTQqDnLgxarSP+X6MbAQkUxTWn6+jb6e85Fnu6qgoMRu6ZWjWw8
E3Uoo7wrq+we0OSxkCrwf1cv7PKzJ3JeNs+MMc/fxp+4sg3YOnagdi+nvtL0TDbh
WZ+psx+B74ar1NDN0JqNKiRUqGlOv1IEVSFjfqHdsOe9heSeZ8hUaKg9yKeDP4sy
3OVe6lWMjf7k5leaDMAL0Y+Ilt1Vw0t5jS4k6L1QkFakoAluoCarriEP5dlOh+Ts
dJv87h4tOfGkQIC/+84I1XFUZJpF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org