Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer
File:                     4954164C92FA51462EBE84A75D28E2891F0752CF.cer (raw, json)
Hash identifier:          sE2sMHcGp2isBdaPB00rnDaDTFREiclw1usllIu2wEc=
Subject key identifier:   49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       258B607D636CBFA870F0CBE4B41C32E484FFF26A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/4954164C92FA51462EBE84A75D28E2891F0752CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 07:24:59 +0000
Certificate not after:    Tue 21 May 2024 07:29:59 +0000
Subordinate resources:    AS: 61694
                          IP: 131.108.252.0/22
                          IP: 138.185.4.0/22
                          IP: 168.194.40.0/22
                          IP: 2804:1d14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8b:60:7d:63:6c:bf:a8:70:f0:cb:e4:b4:1c:32:e4:84:ff:f2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 07:24:59 2023 GMT
            Not After : May 21 07:29:59 2024 GMT
        Subject: CN=4954164C92FA51462EBE84A75D28E2891F0752CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:d9:09:b7:aa:bb:4b:f4:38:b1:cb:15:30:
                    df:56:a9:a7:bb:de:6d:93:0f:84:9f:6b:e0:1f:78:
                    0e:ea:01:73:e8:7b:82:dd:eb:01:60:a6:9d:b1:03:
                    3c:2e:ce:5e:dd:77:63:45:4c:88:15:c7:6b:a7:2e:
                    7d:89:83:e2:e7:d9:23:84:48:6c:52:ea:1f:ef:b4:
                    fb:44:96:45:a9:76:57:51:9d:f3:90:de:fe:ed:1e:
                    a0:fd:64:4e:93:88:4f:9a:0f:6e:ee:68:df:29:69:
                    80:84:49:eb:a7:f9:f0:43:c8:da:69:00:68:25:71:
                    7e:7b:32:e3:d1:96:34:fd:90:89:48:1f:de:bf:a2:
                    da:38:fa:9c:90:9c:12:2a:8c:d0:37:27:96:56:df:
                    17:8c:ca:7d:71:3e:c1:30:f9:e7:cd:58:f0:29:7c:
                    6a:82:48:03:c7:d3:ce:47:d6:4f:3a:e2:ff:26:d0:
                    50:b7:85:ce:e9:ca:84:9c:3a:fd:0f:28:34:a5:8b:
                    ec:02:21:09:68:3c:c2:06:3e:49:e9:4f:c4:6e:68:
                    19:a7:7e:f1:d5:c3:a7:d3:f9:d4:b3:e5:94:b9:3c:
                    42:9c:d6:ae:fd:f2:e9:54:0d:da:a2:fe:92:a5:95:
                    e3:55:eb:89:4d:10:7c:2f:b9:41:1c:83:ae:19:ed:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/4954164C92FA51462EBE84A75D28E2891F0752CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.252.0/22
                  138.185.4.0/22
                  168.194.40.0/22
                IPv6:
                  2804:1d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61694

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:09:22:50:90:07:b1:ff:84:e0:5f:ca:22:44:73:d6:8f:
         36:c2:2a:90:68:9e:9e:13:2d:f1:dd:79:8f:66:3d:c3:af:d3:
         f5:a5:cc:39:15:76:1f:9f:57:ee:1f:59:37:ae:8b:c3:b3:1a:
         9f:08:b3:cb:6b:d8:fe:e4:8f:d1:eb:96:2b:7c:fa:80:31:30:
         c1:dc:81:c5:72:a0:d9:8d:81:d8:4f:1c:4b:65:2f:ae:c6:bb:
         fe:7b:16:46:68:08:cd:eb:53:bb:ef:07:b1:d1:bf:9f:e5:15:
         e6:3b:26:f0:32:52:83:2a:98:0e:47:47:45:73:ee:f3:1c:a5:
         97:a2:28:7c:87:83:17:72:6a:b2:a1:d6:55:38:fd:b2:1c:9e:
         da:eb:1a:31:31:7f:59:99:12:9a:13:6e:ad:da:b6:25:5a:dc:
         30:8d:a0:5e:50:25:68:83:3d:ab:5e:6d:d5:56:2b:af:f7:7e:
         ff:67:bf:bb:af:29:bf:27:a9:d4:93:ad:b7:90:6d:bb:c9:91:
         50:64:6d:08:9a:90:44:02:90:25:a0:b8:57:1d:65:ea:e4:1d:
         73:ff:ca:95:66:0a:83:68:67:67:dd:ba:e0:f4:b3:5c:8c:2f:
         0a:c5:35:9f:37:d2:17:53:b2:e5:fe:ba:23:2c:57:d9:f1:f5:
         63:66:53:14
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUJYtgfWNsv6hw8MvktBwy5IT/8mowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjMwNzI0NTlaFw0yNDA1MjEwNzI5NTlaMDMxMTAvBgNV
BAMTKDQ5NTQxNjRDOTJGQTUxNDYyRUJFODRBNzVEMjhFMjg5MUYwNzUyQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFK9kJt6q7S/Q4scsVMN9Wqae7
3m2TD4Sfa+AfeA7qAXPoe4Ld6wFgpp2xAzwuzl7dd2NFTIgVx2unLn2Jg+Ln2SOE
SGxS6h/vtPtElkWpdldRnfOQ3v7tHqD9ZE6TiE+aD27uaN8paYCESeun+fBDyNpp
AGglcX57MuPRljT9kIlIH96/oto4+pyQnBIqjNA3J5ZW3xeMyn1xPsEw+efNWPAp
fGqCSAPH085H1k864v8m0FC3hc7pyoScOv0PKDSli+wCIQloPMIGPknpT8RuaBmn
fvHVw6fT+dSz5ZS5PEKc1q798ulUDdqi/pKlleNV64lNEHwvuUEcg64Z7emBAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJVBZMkvpRRi6+
hKddKOKJHwdSzzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82a2VMZFRERUJSczNiVU5icTlFUWRTVXBCUUhDR2J4b2o1
cEc3d1hqZ0thay8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNmtlTGRUREVCUnMzYlVOYnE5RVFkU1VwQlFIQ0dieG9q
NXBHN3dYamdLYWsvMC80OTU0MTY0QzkyRkE1MTQ2MkVCRTg0QTc1RDI4RTI4OTFG
MDc1MkNGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKDbPwDBAKKuQQDBAKo
wigwDQQCAAIwBwMFACgEHRQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPD+MA0G
CSqGSIb3DQEBCwUAA4IBAQAjxAkiUJAHsf+E4F/KIkRz1o82wiqQaJ6eEy3x3XmP
Zj3Dr9P1pcw5FXYfn1fuH1k3rovDsxqfCLPLa9j+5I/R65YrfPqAMTDB3IHFcqDZ
jYHYTxxLZS+uxrv+exZGaAjN61O77wex0b+f5RXmOybwMlKDKpgOR0dFc+7zHKWX
oih8h4MXcmqyodZVOP2yHJ7a6xoxMX9ZmRKaE26t2rYlWtwwjaBeUCVogz2rXm3V
Viuv937/Z7+7rym/J6nUk623kG27yZFQZG0ImpBEApAloLhXHWXq5B1z/8qVZgqD
aGdn3brg9LNcjC8KxTWfN9IXU7Ll/rojLFfZ8fVjZlMU
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org