Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4605BCA6369CE100A4E6D0DFF8D0BF8C97550389.cer
File:                     4605BCA6369CE100A4E6D0DFF8D0BF8C97550389.cer (raw, json)
Hash identifier:          i1wDU5455QH8iO1I4b9vl5s2+cT/3pG1UXuGfWP1Aa8=
Subject key identifier:   46:05:BC:A6:36:9C:E1:00:A4:E6:D0:DF:F8:D0:BF:8C:97:55:03:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BF1CEF763B886AE04D45663F13BB895EE733846
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/4605BCA6369CE100A4E6D0DFF8D0BF8C97550389.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 14:22:45 +0000
Certificate not after:    Mon 24 Feb 2025 14:27:45 +0000
Subordinate resources:    AS: 262989
                          IP: 186.216.208.0/21
                          IP: 189.84.136.0/21
                          IP: 190.103.160.0/20
                          IP: 2804:9c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f1:ce:f7:63:b8:86:ae:04:d4:56:63:f1:3b:b8:95:ee:73:38:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 14:22:45 2024 GMT
            Not After : Feb 24 14:27:45 2025 GMT
        Subject: CN=4605BCA6369CE100A4E6D0DFF8D0BF8C97550389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:d9:f1:b5:ad:59:a7:04:a0:20:60:24:1c:
                    c4:e2:5f:c5:f5:88:ed:cb:e7:63:22:52:47:96:39:
                    ee:b2:51:16:17:2f:66:39:1f:77:f3:06:3e:e6:e1:
                    fe:51:43:63:9e:a5:03:99:98:0f:82:dd:a9:16:8b:
                    b4:c2:73:44:5d:b4:c8:52:52:e6:66:69:c0:09:03:
                    9a:0d:86:85:17:54:b7:ca:47:e3:05:e7:35:94:3c:
                    81:8b:e1:62:c9:70:6b:18:d0:f8:0a:fb:3e:0f:b0:
                    47:36:60:fe:ee:b2:01:9a:81:de:ba:ed:1f:a3:66:
                    19:04:cc:de:23:6f:76:b4:c2:23:1d:d6:8f:79:0f:
                    8c:42:82:3a:63:94:a9:8e:e8:e2:98:07:3b:9d:dc:
                    b3:3c:b6:91:82:3c:65:28:ab:4f:45:12:b2:6b:aa:
                    30:69:a5:ad:35:0d:c7:cf:e6:7c:b1:ed:26:0e:52:
                    2b:01:e1:12:bb:c7:ac:df:1f:e0:6d:99:49:c6:72:
                    1f:6f:cd:98:95:6e:79:47:66:14:6e:f0:6d:92:37:
                    06:f6:ed:6b:f6:70:93:57:ef:b4:12:21:09:86:c1:
                    71:58:ab:40:7f:af:2b:38:98:eb:cd:2a:c8:d1:0a:
                    a7:20:a8:73:e3:03:1e:66:ad:6c:27:23:02:6e:a6:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:05:BC:A6:36:9C:E1:00:A4:E6:D0:DF:F8:D0:BF:8C:97:55:03:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/4605BCA6369CE100A4E6D0DFF8D0BF8C97550389.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.208.0/21
                  189.84.136.0/21
                  190.103.160.0/20
                IPv6:
                  2804:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262989

    Signature Algorithm: sha256WithRSAEncryption
         4b:7a:55:fd:76:6f:7e:17:80:a8:9c:10:93:ef:a6:c6:23:29:
         e1:e3:d3:ce:0c:57:51:ed:65:c6:41:10:e7:47:91:68:95:4f:
         dc:ac:8d:21:0e:e3:5e:03:f2:64:39:c2:0a:11:77:d8:c6:51:
         c5:64:a5:03:5a:0d:f3:99:3b:6c:3b:46:c8:98:bf:1e:d5:3e:
         83:1f:57:55:bb:2c:52:a7:c5:1d:69:3b:19:f5:8f:c8:6d:0e:
         f5:7c:3e:02:f0:ad:02:1e:ef:49:ae:55:9d:61:75:b5:3f:3d:
         26:8e:47:2d:7d:99:00:53:69:5f:10:eb:b0:f6:7e:93:35:00:
         53:66:7c:b2:ab:c0:9a:30:e3:2f:8d:67:b3:27:23:23:1e:66:
         5a:95:ce:89:ef:12:89:d2:62:6b:1c:be:7e:17:b9:7e:3c:d8:
         4b:94:61:e7:b2:c6:a9:d4:cc:af:46:44:7c:e3:ff:ef:7c:00:
         7d:ff:8a:96:f9:b6:80:13:3e:07:ce:39:b1:5e:49:c1:8a:4f:
         e0:12:d8:e5:43:d1:76:ae:aa:cb:0b:b4:58:cf:da:bd:84:27:
         6c:c3:0b:b5:31:04:e2:5c:c5:61:1a:60:e1:3d:b7:ac:46:af:
         d5:1d:e6:63:00:14:95:f6:45:c0:3e:5d:0d:34:98:24:ca:2d:
         5a:eb:9d:62
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUe/HO92O4hq4E1FZj8Tu4le5zOEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjYxNDIyNDVaFw0yNTAyMjQxNDI3NDVaMDMxMTAvBgNV
BAMTKDQ2MDVCQ0E2MzY5Q0UxMDBBNEU2RDBERkY4RDBCRjhDOTc1NTAzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznNnxta1ZpwSgIGAkHMTiX8X1
iO3L52MiUkeWOe6yURYXL2Y5H3fzBj7m4f5RQ2OepQOZmA+C3akWi7TCc0RdtMhS
UuZmacAJA5oNhoUXVLfKR+MF5zWUPIGL4WLJcGsY0PgK+z4PsEc2YP7usgGagd66
7R+jZhkEzN4jb3a0wiMd1o95D4xCgjpjlKmO6OKYBzud3LM8tpGCPGUoq09FErJr
qjBppa01DcfP5nyx7SYOUisB4RK7x6zfH+BtmUnGch9vzZiVbnlHZhRu8G2SNwb2
7Wv2cJNX77QSIQmGwXFYq0B/rys4mOvNKsjRCqcgqHPjAx5mrWwnIwJuppO3AgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGBbymNpzhAKTm
0N/40L+Ml1UDiTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80djFBcmtkUGNpTVdOVkZMa3g2eEZ3c2NhYjFRM2pISndC
UkhnVWFSRXFxTS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3
QlJIZ1VhUkVxcU0vMC80NjA1QkNBNjM2OUNFMTAwQTRFNkQwREZGOEQwQkY4Qzk3
NTUwMzg5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAO62NADBAO9VIgDBAS+
Z6AwDQQCAAIwBwMFACgECcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBANNMA0G
CSqGSIb3DQEBCwUAA4IBAQBLelX9dm9+F4ConBCT76bGIynh49PODFdR7WXGQRDn
R5FolU/crI0hDuNeA/JkOcIKEXfYxlHFZKUDWg3zmTtsO0bImL8e1T6DH1dVuyxS
p8UdaTsZ9Y/IbQ71fD4C8K0CHu9JrlWdYXW1Pz0mjkctfZkAU2lfEOuw9n6TNQBT
Znyyq8CaMOMvjWezJyMjHmZalc6J7xKJ0mJrHL5+F7l+PNhLlGHnssap1MyvRkR8
4//vfAB9/4qW+baAEz4HzjmxXknBik/gEtjlQ9F2rqrLC7RYz9q9hCdswwu1MQTi
XMVhGmDhPbesRq/VHeZjABSV9kXAPl0NNJgkyi1a651i
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org