Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer
File:                     4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer (raw, json)
Hash identifier:          8lmNlxh4kaiFNFTTpcobe+9TnFJOf7ycBcwfiysyds0=
Subject key identifier:   4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21EDF5FA2D3992BA7DA6E3AF13A598CF7F272628
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 20:33:13 +0000
Certificate not after:    Thu 17 Oct 2024 20:38:13 +0000
Subordinate resources:    AS: 263866
                          IP: 138.186.112.0/22
                          IP: 2804:26f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ed:f5:fa:2d:39:92:ba:7d:a6:e3:af:13:a5:98:cf:7f:27:26:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 20:33:13 2023 GMT
            Not After : Oct 17 20:38:13 2024 GMT
        Subject: CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:7f:36:63:b2:a8:cb:12:06:ef:24:50:b9:
                    9e:dc:af:74:43:6b:05:8c:24:99:9f:f1:66:e6:6b:
                    c3:a2:c1:92:05:b5:de:7a:11:03:ff:b2:05:92:1e:
                    84:39:dc:99:de:d0:83:5f:db:13:5e:89:03:ba:0a:
                    85:47:a3:da:bf:e9:27:8f:be:0b:83:68:9e:28:69:
                    f2:d9:05:d9:9c:8e:8b:51:6d:0f:15:4a:d6:23:43:
                    44:00:d1:e8:1f:21:da:1c:5f:a3:c1:1c:c3:d9:60:
                    19:a9:5f:12:9d:ee:e0:ce:5d:fd:46:86:eb:d8:f3:
                    45:99:c1:85:2c:08:9e:7c:1a:c5:2e:c6:fb:20:d9:
                    ca:1e:e2:82:2f:60:f5:f8:67:d0:b9:86:c7:09:90:
                    79:9f:57:0b:ea:2a:4a:d1:c6:4a:d7:d3:64:5b:8a:
                    5b:a6:29:28:15:c3:8e:ca:98:32:b1:55:91:11:e7:
                    65:a8:4e:9e:79:d9:f8:ab:a6:cd:35:56:7d:1d:40:
                    c7:0f:20:9d:ed:e7:6a:46:16:69:66:16:3d:ed:38:
                    6b:32:ab:46:ae:c0:5d:bd:42:af:aa:60:b5:c7:16:
                    65:87:3e:74:90:ba:e8:d2:8d:3a:d4:0e:6e:53:82:
                    07:8f:34:d8:7e:47:25:42:33:2e:40:10:da:b2:5f:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.112.0/22
                IPv6:
                  2804:26f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263866

    Signature Algorithm: sha256WithRSAEncryption
         7e:57:06:ce:5e:39:c6:2d:e0:d3:23:01:92:ac:15:06:8c:b1:
         a3:53:db:e1:0b:ac:cb:2e:b3:a3:54:8d:50:ec:b6:e1:ba:fd:
         2f:d1:3e:01:6e:85:56:79:09:98:dc:7e:98:70:a9:9d:b2:68:
         87:39:12:71:9f:eb:24:70:2e:fd:19:41:d1:38:d4:05:1f:a0:
         81:91:bd:57:81:a7:67:2a:72:4a:c2:93:6c:51:4b:57:83:11:
         ea:08:eb:47:b7:a9:a7:4b:88:36:89:1f:82:50:f0:5b:b8:e3:
         93:e8:bc:01:6c:67:c4:df:c0:08:e5:6d:9f:5d:7c:d9:02:aa:
         6b:3d:19:57:bb:be:a2:86:c1:cc:c5:59:76:83:b4:38:88:d2:
         d9:df:da:28:96:fc:b8:e5:37:24:17:4b:22:1c:34:bd:31:1a:
         c1:43:3b:6f:a7:e3:ed:ea:44:ca:8e:12:3f:79:39:8d:bf:8a:
         a6:13:3a:d3:70:a2:db:0b:aa:49:6f:62:fb:9d:30:d2:7f:23:
         cb:60:e6:8a:fe:5f:ed:c9:a4:9f:64:12:d8:b6:22:63:b8:51:
         f9:1c:a0:1f:0d:9f:63:b5:96:ef:b2:a8:65:e3:65:7f:8f:ad:
         af:45:ee:7b:85:95:20:4f:e2:77:8f:ed:d0:da:91:3c:3e:a7:
         81:e2:1c:78
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUIe31+i05krp9puOvE6WYz38nJigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTkyMDMzMTNaFw0yNDEwMTcyMDM4MTNaMDMxMTAvBgNV
BAMTKDRBNjIxQzU1NUUwQTYzN0Y4QTU4OEYyM0JERkFGOUNCRjUzMEJENDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhH82Y7KoyxIG7yRQuZ7cr3RD
awWMJJmf8Wbma8OiwZIFtd56EQP/sgWSHoQ53Jne0INf2xNeiQO6CoVHo9q/6SeP
vguDaJ4oafLZBdmcjotRbQ8VStYjQ0QA0egfIdocX6PBHMPZYBmpXxKd7uDOXf1G
huvY80WZwYUsCJ58GsUuxvsg2coe4oIvYPX4Z9C5hscJkHmfVwvqKkrRxkrX02Rb
ilumKSgVw47KmDKxVZER52WoTp552firps01Vn0dQMcPIJ3t52pGFmlmFj3tOGsy
q0auwF29Qq+qYLXHFmWHPnSQuujSjTrUDm5TggePNNh+RyVCMy5AENqyX+GzAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKYhxVXgpjf4pY
jyO9+vnL9TC9STAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9RSlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZ
NW9xTmFlRG45LzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9RSlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZ
NW9xTmFlRG45LzAvNEE2MjFDNTU1RTBBNjM3RjhBNTg4RjIzQkRGQUY5Q0JGNTMw
QkQ0OS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCirpwMA0EAgACMAcDBQAo
BCb0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGujANBgkqhkiG9w0BAQsFAAOC
AQEAflcGzl45xi3g0yMBkqwVBoyxo1Pb4Qusyy6zo1SNUOy24br9L9E+AW6FVnkJ
mNx+mHCpnbJohzkScZ/rJHAu/RlB0TjUBR+ggZG9V4GnZypySsKTbFFLV4MR6gjr
R7epp0uINokfglDwW7jjk+i8AWxnxN/ACOVtn1182QKqaz0ZV7u+oobBzMVZdoO0
OIjS2d/aKJb8uOU3JBdLIhw0vTEawUM7b6fj7epEyo4SP3k5jb+KphM603Ci2wuq
SW9i+50w0n8jy2Dmiv5f7cmkn2QS2LYiY7hR+RygHw2fY7WW77KoZeNlf4+tr0Xu
e4WVIE/id4/t0NqRPD6ngeIceA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org