Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10.cer
File:                     4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10.cer (raw, json)
Hash identifier:          XMyhqjU8TgZ3xfYGyEk0RcdfzriDXrX9jEDM688GaQQ=
Subject key identifier:   4B:4A:39:16:DD:0E:AD:2B:BF:92:2C:18:C3:3A:3C:35:81:9E:3E:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3599BCD9CFEEAEECDA504F59669421506DDEFD4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/0/4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 17:56:39 +0000
Certificate not after:    Wed 05 Feb 2025 18:01:39 +0000
Subordinate resources:    AS: 262784
                          IP: 143.202.104.0/22
                          IP: 170.0.28.0/22
                          IP: 186.235.160.0/20
                          IP: 191.241.144.0/20
                          IP: 2804:1e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:99:bc:d9:cf:ee:ae:ec:da:50:4f:59:66:94:21:50:6d:de:fd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 17:56:39 2024 GMT
            Not After : Feb  5 18:01:39 2025 GMT
        Subject: CN=4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:fa:c5:07:c6:44:68:a9:78:10:c5:a6:3a:
                    7f:fe:25:fe:24:19:a6:de:d8:db:2e:30:7f:d4:c3:
                    8b:d2:9b:0a:dd:10:8e:da:af:19:49:33:af:3b:e8:
                    5d:32:e3:24:71:56:4a:35:db:ae:a2:2e:59:60:2c:
                    d5:16:ed:35:a6:7e:04:aa:0c:91:f6:9b:3f:f4:96:
                    59:4a:7c:8b:2f:fa:ae:38:c2:7c:aa:3c:b2:70:e7:
                    ef:21:44:ab:59:ce:39:45:a7:8c:3c:a9:f1:34:8c:
                    a3:7b:c1:60:db:de:d0:19:22:c0:b4:06:9e:29:d5:
                    73:13:ca:40:50:9e:43:03:19:4d:eb:b7:28:d6:17:
                    13:9d:c0:5e:73:41:f4:c3:a9:c2:20:43:de:95:1b:
                    b5:23:28:1c:5a:61:0c:e8:79:17:a1:44:93:e6:13:
                    c9:4e:2a:e8:57:fe:08:10:30:75:e5:e1:28:f9:3c:
                    88:ac:20:8a:5f:ea:97:6b:5e:74:a9:9d:5b:5b:ac:
                    d5:c8:61:db:a9:6a:ad:ee:89:bf:25:18:6a:ed:a5:
                    19:ec:a8:5a:8c:d7:71:3d:36:7c:38:ec:9d:f9:19:
                    f5:a9:cd:f4:93:a7:f1:49:4f:f7:ac:91:a0:1f:8d:
                    f5:2c:2a:39:1d:58:8e:a4:5e:e4:a9:f2:55:f8:d0:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:4A:39:16:DD:0E:AD:2B:BF:92:2C:18:C3:3A:3C:35:81:9E:3E:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/0/4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.104.0/22
                  170.0.28.0/22
                  186.235.160.0/20
                  191.241.144.0/20
                IPv6:
                  2804:1e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262784

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:b2:5c:97:ac:4e:04:12:60:4a:a7:76:a4:89:e6:de:d4:
         28:a8:37:a2:f0:58:f9:22:89:44:9e:fa:5e:97:eb:51:86:4d:
         93:22:fb:d2:ab:4e:09:52:a5:da:f6:c2:53:97:59:2e:f0:c4:
         c7:b2:00:d9:b4:1a:39:45:28:87:88:5f:73:90:f8:b7:50:9a:
         c8:63:f6:33:2e:b7:d9:03:4b:46:55:59:b5:56:75:74:dc:0e:
         b1:3b:ef:4f:27:17:a5:6e:9c:b7:1e:1c:f6:3a:71:f2:76:86:
         e6:16:56:7e:21:71:4c:88:34:5b:23:6e:aa:fe:09:51:0d:1e:
         0e:5c:ad:d3:dc:4a:bf:5d:2c:5a:75:2c:9e:02:56:23:55:ee:
         03:52:a9:fd:c7:df:07:c0:0a:a7:9c:1c:4d:9d:de:67:42:ea:
         9b:95:5c:fb:35:3f:b2:89:10:b8:4b:dc:eb:e4:45:16:62:8a:
         e8:f1:6b:02:50:72:af:e4:bb:32:47:42:9c:9f:59:92:8b:c3:
         7d:91:d1:8c:64:b8:00:97:aa:3c:f8:27:74:59:5b:db:a5:9d:
         75:f7:7f:b9:95:5a:da:94:cf:2d:7a:a2:9e:f1:d2:99:54:25:
         d9:4e:6f:a2:fb:7e:c3:cc:66:de:6e:3f:bd:17:d4:fc:a7:7f:
         dd:d6:30:64
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUNZm82c/uruzaUE9ZZpQhUG3e/U0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDcxNzU2MzlaFw0yNTAyMDUxODAxMzlaMDMxMTAvBgNV
BAMTKDRCNEEzOTE2REQwRUFEMkJCRjkyMkMxOEMzM0EzQzM1ODE5RTNFMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+frFB8ZEaKl4EMWmOn/+Jf4k
Gabe2NsuMH/Uw4vSmwrdEI7arxlJM6876F0y4yRxVko1266iLllgLNUW7TWmfgSq
DJH2mz/0lllKfIsv+q44wnyqPLJw5+8hRKtZzjlFp4w8qfE0jKN7wWDb3tAZIsC0
Bp4p1XMTykBQnkMDGU3rtyjWFxOdwF5zQfTDqcIgQ96VG7UjKBxaYQzoeRehRJPm
E8lOKuhX/ggQMHXl4Sj5PIisIIpf6pdrXnSpnVtbrNXIYdupaq3uib8lGGrtpRns
qFqM13E9Nnw47J35GfWpzfSTp/FJT/eskaAfjfUsKjkdWI6kXuSp8lX40LXRAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLSjkW3Q6tK7+S
LBjDOjw1gZ4+EDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81dUVOaUhEWXdWeTREQUFlUWd4TDRuTHRzcnFuSGFmUERW
dzNLWXd1d0pMNS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81dUVOaUhEWXdWeTREQUFlUWd4TDRuTHRzcnFuSGFmUERW
dzNLWXd1d0pMNS8wLzRCNEEzOTE2REQwRUFEMkJCRjkyMkMxOEMzM0EzQzM1ODE5
RTNFMTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAo/KaAMEAqoAHAMEBLrr
oAMEBL/xkDANBAIAAjAHAwUAKAQB4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
AoAwDQYJKoZIhvcNAQELBQADggEBACXHslyXrE4EEmBKp3akiebe1CioN6LwWPki
iUSe+l6X61GGTZMi+9KrTglSpdr2wlOXWS7wxMeyANm0GjlFKIeIX3OQ+LdQmshj
9jMut9kDS0ZVWbVWdXTcDrE7708nF6VunLceHPY6cfJ2huYWVn4hcUyINFsjbqr+
CVENHg5crdPcSr9dLFp1LJ4CViNV7gNSqf3H3wfACqecHE2d3mdC6puVXPs1P7KJ
ELhL3OvkRRZiiujxawJQcq/kuzJHQpyfWZKLw32R0YxkuACXqjz4J3RZW9ulnXX3
f7mVWtqUzy16op7x0plUJdlOb6L7fsPMZt5uP70X1Pynf93WMGQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org