Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/478793E5899D008F156F8F358BEBE07B8161103C.cer
File:                     478793E5899D008F156F8F358BEBE07B8161103C.cer (raw, json)
Hash identifier:          ISUB35j82JpDIK+GLKvGvpkyQqoTgqeTaMutQ5Y3p+Q=
Subject key identifier:   47:87:93:E5:89:9D:00:8F:15:6F:8F:35:8B:EB:E0:7B:81:61:10:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F308AD00B8931114BAA9DFC970CE858C4E55996
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/0/478793E5899D008F156F8F358BEBE07B8161103C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 04:37:30 +0000
Certificate not after:    Thu 17 Oct 2024 04:42:30 +0000
Subordinate resources:    AS: 28240
                          IP: 170.78.204.0/22
                          IP: 187.0.160.0/22
                          IP: 2804:3594::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:30:8a:d0:0b:89:31:11:4b:aa:9d:fc:97:0c:e8:58:c4:e5:59:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 04:37:30 2023 GMT
            Not After : Oct 17 04:42:30 2024 GMT
        Subject: CN=478793E5899D008F156F8F358BEBE07B8161103C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:d7:e9:77:a8:f5:8b:6f:3c:f2:21:05:18:
                    bd:31:47:31:04:dc:1a:c4:89:6a:10:01:86:c0:ca:
                    af:94:19:b8:74:3e:fa:c7:3a:14:ac:2b:86:1e:bd:
                    01:85:a9:31:be:e5:74:df:1c:0b:13:71:62:7b:b2:
                    3d:df:5b:a2:30:72:a9:c6:d2:19:32:d0:81:78:14:
                    9b:e4:ec:54:5b:98:56:87:e0:ce:44:8a:19:54:4f:
                    9e:73:50:f3:d2:4b:b6:27:ce:db:47:f5:db:f0:70:
                    bf:06:f7:6d:d4:f5:43:f7:dc:11:78:61:54:c0:24:
                    68:af:23:58:ab:6f:4a:e2:a5:db:8b:ad:45:67:ea:
                    86:6b:57:9d:fd:9c:5e:db:29:4a:93:77:ef:9b:b4:
                    4a:4a:82:9a:04:ba:d6:bb:0b:82:9a:45:dd:e9:1e:
                    18:fd:bb:1c:4d:0b:29:5b:2f:d1:cb:2b:da:e8:7b:
                    96:ca:a9:34:2e:1b:68:7c:be:a2:b0:84:db:88:e5:
                    c7:d5:de:fd:c4:af:b2:da:dd:8c:cb:38:0a:e2:e1:
                    bb:b1:9e:38:91:eb:df:69:4d:38:92:ee:73:ba:b2:
                    b9:5f:87:02:e1:2b:e8:94:39:5b:fb:b0:cc:8e:f2:
                    13:93:36:24:54:a1:57:9f:65:29:c6:4a:5b:8f:70:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:87:93:E5:89:9D:00:8F:15:6F:8F:35:8B:EB:E0:7B:81:61:10:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/0/478793E5899D008F156F8F358BEBE07B8161103C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.204.0/22
                  187.0.160.0/22
                IPv6:
                  2804:3594::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28240

    Signature Algorithm: sha256WithRSAEncryption
         b5:1e:ee:2c:92:0f:44:e8:29:43:ed:4b:7a:df:44:b5:c6:12:
         47:fa:1f:b0:f5:76:6f:92:a2:d0:01:6d:4c:ab:57:ef:20:44:
         67:e6:d6:c3:c7:60:d9:bd:c9:96:45:2b:e7:de:84:8f:cc:2b:
         5e:08:5f:a8:63:be:91:9c:12:8f:3b:c6:89:ff:26:e8:10:af:
         58:25:b6:53:51:9e:de:75:24:6c:45:38:cc:03:3c:ed:5b:cb:
         20:68:ec:a7:6d:6c:69:92:cd:79:e4:aa:b5:bf:69:c0:30:63:
         36:3d:9c:d1:20:a3:4f:70:36:13:c5:0e:90:84:30:af:a2:9e:
         8c:4b:40:ea:ee:cf:47:19:be:9d:7d:6a:68:56:20:6f:2a:ac:
         3f:5d:1f:6d:82:99:af:4d:ca:7b:9b:62:56:d2:34:2d:e8:93:
         24:b6:a8:e5:b2:53:54:f6:d1:3b:cb:10:0e:fb:27:82:ac:ce:
         73:fb:31:1e:f1:25:dd:38:9a:63:32:77:ab:8f:36:d6:72:10:
         c5:c2:bd:0d:63:d9:11:e0:4c:7b:ec:cd:ba:c4:75:af:2b:09:
         15:31:5e:06:c5:5d:47:13:12:ad:0e:21:53:ab:7d:f8:33:ff:
         3b:20:7f:58:85:cc:42:f5:11:1e:54:c0:9b:db:04:28:17:80:
         dd:b3:2f:5d
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUXzCK0AuJMRFLqp38lwzoWMTlWZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTkwNDM3MzBaFw0yNDEwMTcwNDQyMzBaMDMxMTAvBgNV
BAMTKDQ3ODc5M0U1ODk5RDAwOEYxNTZGOEYzNThCRUJFMDdCODE2MTEwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YNfpd6j1i2888iEFGL0xRzEE
3BrEiWoQAYbAyq+UGbh0PvrHOhSsK4YevQGFqTG+5XTfHAsTcWJ7sj3fW6IwcqnG
0hky0IF4FJvk7FRbmFaH4M5EihlUT55zUPPSS7YnzttH9dvwcL8G923U9UP33BF4
YVTAJGivI1irb0ripduLrUVn6oZrV539nF7bKUqTd++btEpKgpoEuta7C4KaRd3p
Hhj9uxxNCylbL9HLK9roe5bKqTQuG2h8vqKwhNuI5cfV3v3Er7La3YzLOAri4bux
njiR699pTTiS7nO6srlfhwLhK+iUOVv7sMyO8hOTNiRUoVefZSnGSluPcJQrAgMB
AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHh5PliZ0AjxVv
jzWL6+B7gWEQPDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85OVJzODZ6ODFuWm1XSEVFN3pEZWhBem5TN0JxS2JUdTFU
cHlYZ0NvZVlzcy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85OVJzODZ6ODFuWm1XSEVFN3pEZWhBem5TN0JxS2JUdTFU
cHlYZ0NvZVlzcy8wLzQ3ODc5M0U1ODk5RDAwOEYxNTZGOEYzNThCRUJFMDdCODE2
MTEwM0MubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqpOzAMEArsAoDANBAIA
AjAHAwUAKAQ1lDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuUDANBgkqhkiG9w0B
AQsFAAOCAQEAtR7uLJIPROgpQ+1Let9EtcYSR/ofsPV2b5Ki0AFtTKtX7yBEZ+bW
w8dg2b3JlkUr596Ej8wrXghfqGO+kZwSjzvGif8m6BCvWCW2U1Ge3nUkbEU4zAM8
7VvLIGjsp21saZLNeeSqtb9pwDBjNj2c0SCjT3A2E8UOkIQwr6KejEtA6u7PRxm+
nX1qaFYgbyqsP10fbYKZr03Ke5tiVtI0LeiTJLao5bJTVPbRO8sQDvsngqzOc/sx
HvEl3TiaYzJ3q4821nIQxcK9DWPZEeBMe+zNusR1rysJFTFeBsVdRxMSrQ4hU6t9
+DP/OyB/WIXMQvURHlTAm9sEKBeA3bMvXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org