Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.cer
File:                     4BCC581581148CD1639867743FA1351FC5C7EE8F.cer (raw, json)
Hash identifier:          AXAAspmYLquVEmvEmCgKjmqzLWKjAMliQQeGB+hEczQ=
Subject key identifier:   4B:CC:58:15:81:14:8C:D1:63:98:67:74:3F:A1:35:1F:C5:C7:EE:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AA9AE47AAE8DB68C7DF33E1C10C04D6A137B628
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 21:14:54 +0000
Certificate not after:    Mon 22 Jul 2024 21:19:54 +0000
Subordinate resources:    AS: 263563
                          IP: 168.232.180.0/22
                          IP: 177.22.184.0/22
                          IP: 2804:f08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a9:ae:47:aa:e8:db:68:c7:df:33:e1:c1:0c:04:d6:a1:37:b6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 21:14:54 2023 GMT
            Not After : Jul 22 21:19:54 2024 GMT
        Subject: CN=4BCC581581148CD1639867743FA1351FC5C7EE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:4a:01:a1:cf:24:f4:f7:69:f8:80:6f:f4:
                    fc:a1:1e:56:f1:5d:54:33:40:f2:30:8e:f2:4e:1e:
                    b3:d5:e1:20:e3:f8:e1:7b:40:eb:76:e1:1a:66:f3:
                    d6:9a:b1:04:bc:9e:d7:c2:95:07:da:3f:24:01:c7:
                    1b:e7:6f:77:0d:9d:3c:de:b1:af:f9:77:d2:3d:24:
                    0c:8d:5c:cf:06:a3:44:80:45:dc:81:fc:b2:20:f1:
                    02:61:df:5c:f6:d9:9b:29:da:e0:14:c8:73:56:80:
                    5d:de:11:16:01:76:7d:18:1c:50:84:ae:ca:85:01:
                    f1:3c:47:11:db:09:15:41:04:ce:17:65:47:98:bc:
                    af:16:27:c3:e7:dc:16:4d:7a:44:35:8c:dc:47:40:
                    92:c7:4d:4b:4e:eb:f5:d1:df:9e:86:8a:eb:dc:d1:
                    f5:7f:82:21:15:21:69:f8:a2:9c:71:92:2d:fb:ec:
                    28:37:9c:cb:1e:fd:e0:d2:9c:aa:6f:2b:86:28:93:
                    ad:b1:b9:2c:8d:e2:3a:9b:b7:e3:ad:56:e8:d8:32:
                    0b:4f:33:40:ff:ae:c2:20:68:14:97:5c:ea:f6:eb:
                    f8:69:81:40:0c:dc:42:6f:1c:ad:7b:2b:84:3f:c8:
                    0f:e7:bb:1f:3f:8a:90:60:4c:4b:01:31:b4:72:44:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:CC:58:15:81:14:8C:D1:63:98:67:74:3F:A1:35:1F:C5:C7:EE:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.180.0/22
                  177.22.184.0/22
                IPv6:
                  2804:f08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263563

    Signature Algorithm: sha256WithRSAEncryption
         05:36:60:3e:1d:64:57:0d:eb:72:27:cc:3b:97:d2:d0:8f:0e:
         1a:4f:1b:f9:95:7e:f2:80:de:0e:c8:2b:60:37:31:d2:38:4f:
         6d:90:fe:15:dd:36:f7:71:1e:5c:db:46:df:0c:10:0e:2f:e2:
         3a:c9:51:9c:fa:70:b3:13:66:9a:22:de:3e:f3:56:db:0d:b8:
         d2:90:a9:02:80:0e:49:3b:6e:5f:d0:5a:20:c0:f3:90:dd:83:
         01:be:2b:3c:f0:89:28:0a:a4:f1:5e:57:6a:1e:27:da:cc:0f:
         41:11:2f:31:2f:68:f5:8d:ae:6b:58:22:8b:e4:a1:b8:1e:2a:
         ca:7c:82:22:2c:67:e5:38:ac:ba:e6:40:84:6e:8d:18:d9:b2:
         bf:f0:bd:5a:0a:d7:b3:69:c0:13:64:8b:b8:07:3b:80:ba:07:
         43:ae:fa:32:16:64:5c:f3:3d:6a:a0:c0:62:80:8b:aa:95:35:
         d3:81:f4:31:1f:de:78:3a:80:8e:c3:46:cf:8c:17:15:85:44:
         54:fa:ef:54:2f:1c:06:f5:0d:ac:a6:ff:d3:9c:df:30:ff:10:
         db:c0:bc:37:82:1a:39:92:22:cf:74:15:a8:cc:1c:31:5c:db:
         c9:f1:70:62:7b:1d:ee:09:00:a1:fd:05:93:37:57:a7:86:02:
         4c:21:69:bb
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUSqmuR6ro22jH3zPhwQwE1qE3tigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjQyMTE0NTRaFw0yNDA3MjIyMTE5NTRaMDMxMTAvBgNV
BAMTKDRCQ0M1ODE1ODExNDhDRDE2Mzk4Njc3NDNGQTEzNTFGQzVDN0VFOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rEoBoc8k9Pdp+IBv9PyhHlbx
XVQzQPIwjvJOHrPV4SDj+OF7QOt24Rpm89aasQS8ntfClQfaPyQBxxvnb3cNnTze
sa/5d9I9JAyNXM8Go0SARdyB/LIg8QJh31z22Zsp2uAUyHNWgF3eERYBdn0YHFCE
rsqFAfE8RxHbCRVBBM4XZUeYvK8WJ8Pn3BZNekQ1jNxHQJLHTUtO6/XR356Giuvc
0fV/giEVIWn4opxxki377Cg3nMse/eDSnKpvK4Yok62xuSyN4jqbt+OtVujYMgtP
M0D/rsIgaBSXXOr26/hpgUAM3EJvHK17K4Q/yA/nux8/ipBgTEsBMbRyRHJLAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLzFgVgRSM0WOY
Z3Q/oTUfxcfujzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80U012bXNxMWFldjhDMTN2cm41ZFUxcEx6R3Axd0dGQm56
Z21OSmo4c1c2Si8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNFNNdm1zcTFhZXY4QzEzdnJuNWRVMXBMekdwMXdHRkJu
emdtTkpqOHNXNkovMC80QkNDNTgxNTgxMTQ4Q0QxNjM5ODY3NzQzRkExMzUxRkM1
QzdFRThGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKo6LQDBAKxFrgwDQQC
AAIwBwMFACgEDwgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAWLMA0GCSqGSIb3
DQEBCwUAA4IBAQAFNmA+HWRXDetyJ8w7l9LQjw4aTxv5lX7ygN4OyCtgNzHSOE9t
kP4V3Tb3cR5c20bfDBAOL+I6yVGc+nCzE2aaIt4+81bbDbjSkKkCgA5JO25f0Fog
wPOQ3YMBvis88IkoCqTxXldqHifazA9BES8xL2j1ja5rWCKL5KG4HirKfIIiLGfl
OKy65kCEbo0Y2bK/8L1aCtezacATZIu4BzuAugdDrvoyFmRc8z1qoMBigIuqlTXT
gfQxH954OoCOw0bPjBcVhURU+u9ULxwG9Q2spv/TnN8w/xDbwLw3gho5kiLPdBWo
zBwxXNvJ8XBiex3uCQCh/QWTN1enhgJMIWm7
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org