Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
File:                     4C284B298BD83B2CD795241085A51344CAAA6914.cer (raw, json)
Hash identifier:          Ks5bTIBBB23NsMmOcBDlyrBO/BlgP4OBAek1ViyFse0=
Subject key identifier:   4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       738CD4C7008F5993A683F8831D6606DF8AF0EFB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.mft
caRepository:             rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 14:28:27 +0000
Certificate not after:    Mon 22 Jul 2024 14:33:27 +0000
Subordinate resources:    AS: 264281
                          IP: 138.121.52.0/22
                          IP: 170.233.172.0/22
                          IP: 170.244.12.0/22
                          IP: 2804:2570::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8c:d4:c7:00:8f:59:93:a6:83:f8:83:1d:66:06:df:8a:f0:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 14:28:27 2023 GMT
            Not After : Jul 22 14:33:27 2024 GMT
        Subject: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:e5:7f:c5:c4:ba:8a:0c:16:46:f1:cf:cb:
                    d1:5e:1a:4a:22:6f:f4:ed:ce:d0:a6:08:8d:db:22:
                    28:a6:d7:c8:ff:49:48:34:af:e1:68:e6:3b:aa:43:
                    77:ce:1b:45:ac:ea:ae:9f:a2:f9:1f:e5:40:58:19:
                    1a:92:57:d1:7b:76:a6:bb:7c:5a:2a:d2:41:be:6b:
                    7c:1d:4c:ea:52:c1:72:17:2b:93:b7:f5:86:a4:c6:
                    8b:89:a7:b9:81:dc:7c:99:6d:d6:f7:7b:16:29:a1:
                    4e:ba:b6:1c:42:a0:97:cf:2c:7b:7c:2e:df:a1:d8:
                    e9:18:24:a3:61:a2:29:97:e7:e7:5d:5d:42:21:00:
                    70:89:14:47:92:78:f9:ba:c1:56:34:6b:85:f4:02:
                    bf:7e:1f:3f:50:f0:f4:8c:5b:b1:22:05:ff:c0:d7:
                    3e:f6:39:5d:ec:3f:3c:19:16:18:74:a5:f0:ca:2b:
                    d6:fb:3b:4c:9c:9a:7b:94:ed:db:28:aa:bc:f7:b1:
                    ba:5d:c0:3b:e6:e7:b2:ff:c5:6c:18:20:5f:23:72:
                    a6:de:a7:20:e3:28:e6:b6:a8:46:48:b5:54:e7:38:
                    99:2c:7f:ac:f7:6a:9f:8f:06:fc:93:da:d7:33:02:
                    11:6a:3d:22:b7:16:4b:38:80:66:7a:e3:7f:48:a4:
                    16:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.52.0/22
                  170.233.172.0/22
                  170.244.12.0/22
                IPv6:
                  2804:2570::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264281

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:49:44:bf:91:b5:93:5f:5a:87:ae:59:13:eb:9e:a5:51:
         23:dd:94:13:a9:01:8d:06:28:b2:3b:ea:c3:54:cf:43:21:60:
         d6:9c:98:f7:6c:14:6a:ad:33:46:68:7d:81:7b:1a:9e:08:8f:
         1b:34:f0:50:03:b7:ff:f9:bf:c7:b2:e3:59:24:79:02:64:cb:
         f0:2e:99:1b:e6:55:75:27:5f:04:cf:42:2f:cd:fa:dc:83:a7:
         9a:56:9d:bf:f5:98:2c:62:65:9b:e2:f6:83:a1:0f:4f:3e:44:
         c2:b7:1c:15:e0:fe:f8:84:ac:db:c8:52:c7:2b:53:b6:48:0f:
         5f:3b:63:85:12:ec:d3:34:c8:94:08:7d:36:06:26:60:6b:66:
         ec:a5:90:e2:30:f9:89:29:92:c0:85:34:b7:71:00:5e:1e:58:
         ad:fc:13:66:e1:6c:54:65:c9:f9:22:64:26:ad:a5:ef:65:e0:
         5d:52:3b:9c:dd:0f:88:9a:c4:36:90:57:91:45:0b:ad:5d:71:
         bc:36:5e:13:a0:79:ef:8c:95:d4:c0:17:8c:35:c0:b0:54:63:
         c9:10:d6:5d:66:9f:a1:84:9a:d1:dc:ab:9e:33:c5:5a:a1:dd:
         d3:be:57:d9:b1:4e:c7:ba:76:8d:c5:5c:b9:45:f9:3d:91:f8:
         86:9f:0a:b2
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUc4zUxwCPWZOmg/iDHWYG34rw77cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjQxNDI4MjdaFw0yNDA3MjIxNDMzMjdaMDMxMTAvBgNV
BAMTKDRDMjg0QjI5OEJEODNCMkNENzk1MjQxMDg1QTUxMzQ0Q0FBQTY5MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eeV/xcS6igwWRvHPy9FeGkoi
b/TtztCmCI3bIiim18j/SUg0r+Fo5juqQ3fOG0Ws6q6fovkf5UBYGRqSV9F7dqa7
fFoq0kG+a3wdTOpSwXIXK5O39YakxouJp7mB3HyZbdb3exYpoU66thxCoJfPLHt8
Lt+h2OkYJKNhoimX5+ddXUIhAHCJFEeSePm6wVY0a4X0Ar9+Hz9Q8PSMW7EiBf/A
1z72OV3sPzwZFhh0pfDKK9b7O0ycmnuU7dsoqrz3sbpdwDvm57L/xWwYIF8jcqbe
pyDjKOa2qEZItVTnOJksf6z3ap+PBvyT2tczAhFqPSK3Fks4gGZ6439IpBapAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMKEspi9g7LNeV
JBCFpRNEyqppFDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80OU1XSFNQR2pRZVVuVG5TYnk4bnJrdHdKbVdWZWZmaTlp
V2k0anFuelFXMi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5
aVdpNGpxbnpRVzIvMC80QzI4NEIyOThCRDgzQjJDRDc5NTI0MTA4NUE1MTM0NENB
QUE2OTE0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKKeTQDBAKq6awDBAKq
9AwwDQQCAAIwBwMFACgEJXAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAhZMA0G
CSqGSIb3DQEBCwUAA4IBAQCnUElEv5G1k19ah65ZE+uepVEj3ZQTqQGNBiiyO+rD
VM9DIWDWnJj3bBRqrTNGaH2BexqeCI8bNPBQA7f/+b/HsuNZJHkCZMvwLpkb5lV1
J18Ez0Ivzfrcg6eaVp2/9ZgsYmWb4vaDoQ9PPkTCtxwV4P74hKzbyFLHK1O2SA9f
O2OFEuzTNMiUCH02BiZga2bspZDiMPmJKZLAhTS3cQBeHlit/BNm4WxUZcn5ImQm
raXvZeBdUjuc3Q+ImsQ2kFeRRQutXXG8Nl4ToHnvjJXUwBeMNcCwVGPJENZdZp+h
hJrR3KueM8Vaod3TvlfZsU7HunaNxVy5Rfk9kfiGnwqy
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org