Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer
File:                     4C90344E384710E55DBA9D811B8DB9699219721E.cer (raw, json)
Hash identifier:          1o0zNmahQqFd7ZpRCbC412+Pc9mVEnHPTk9sBzepeyw=
Subject key identifier:   4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75161812FD88FF72351E0014A65E5FE37A3705D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 20:55:09 +0000
Certificate not after:    Wed 04 Dec 2024 21:00:09 +0000
Subordinate resources:    AS: 267290
                          IP: 45.233.28.0/22
                          IP: 2804:4b34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:16:18:12:fd:88:ff:72:35:1e:00:14:a6:5e:5f:e3:7a:37:05:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 20:55:09 2023 GMT
            Not After : Dec  4 21:00:09 2024 GMT
        Subject: CN=4C90344E384710E55DBA9D811B8DB9699219721E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:31:6f:fc:4e:29:f6:27:aa:79:a1:07:e5:
                    03:6a:ec:a1:26:ab:78:9a:7e:a5:e5:b5:78:f5:68:
                    bc:f0:e1:47:86:4e:26:6a:ea:7b:a9:5d:81:5b:fe:
                    05:56:7d:48:d8:33:ba:aa:ec:67:57:13:4d:25:96:
                    9b:8c:26:6f:71:9a:17:89:a6:ec:60:24:83:d5:50:
                    06:b3:5a:de:a4:47:5a:44:5d:b5:31:6d:5e:c6:85:
                    dd:4d:51:fc:e6:9c:4b:31:5a:fa:c5:4d:7f:24:fa:
                    9e:61:50:bf:9f:97:06:05:e7:23:9b:ed:b3:78:40:
                    93:75:6b:e0:1a:52:f6:4e:48:a1:48:68:2c:e1:e5:
                    e5:18:60:a3:f7:5f:4d:38:cb:69:e2:60:2d:1c:31:
                    51:cb:5d:70:4d:c2:9c:03:52:1b:3c:3a:86:7e:ec:
                    ce:ba:88:91:90:10:8c:f9:82:5d:54:a0:f8:1d:d4:
                    2b:37:7e:2c:55:b9:32:65:c9:29:ef:3c:cc:22:a7:
                    4f:de:41:da:53:c9:ab:ed:ef:77:77:b9:32:98:f2:
                    a8:f8:20:f3:bb:29:cf:93:b2:fc:d5:73:59:fc:be:
                    3e:a9:7a:80:65:f2:bc:d8:c6:c3:e5:fb:20:c8:bc:
                    28:55:69:99:e2:f3:bc:e7:37:b9:42:fe:c2:e4:fe:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.28.0/22
                IPv6:
                  2804:4b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267290

    Signature Algorithm: sha256WithRSAEncryption
         48:0e:31:c7:fd:9f:e4:8b:b2:75:f7:41:05:8d:cc:5d:c7:6b:
         f1:2e:eb:94:a9:b5:53:01:59:7e:f9:c5:1f:c8:44:27:cb:7e:
         a3:85:d4:a0:29:c5:1a:7a:ac:29:32:ad:75:35:72:99:2d:f3:
         9d:03:57:69:0e:45:9b:6e:db:00:31:63:72:b4:04:a6:b3:d1:
         2b:ec:c8:a4:b1:ab:ad:5d:07:b7:b1:84:bb:be:b6:1b:7b:48:
         0c:d6:2d:3a:da:a0:30:b1:04:66:36:af:7e:d9:9e:c7:af:57:
         bd:1d:7a:51:51:c7:fc:cf:46:84:9c:b3:e1:f4:16:ea:84:eb:
         eb:9b:3b:b1:cd:88:ff:56:c2:fb:2b:63:37:4f:e7:de:21:96:
         ea:2c:2a:b0:74:ac:2e:5a:d9:50:c1:7b:ef:d2:9b:d2:97:eb:
         c7:27:4b:85:9b:32:9d:63:af:b6:f9:64:cd:ce:82:0a:22:59:
         c5:0d:a3:6c:70:3a:2e:66:0b:76:ea:50:ee:46:ad:1e:37:53:
         33:33:1e:6a:63:d4:43:4b:f4:7e:9a:ef:8b:26:09:1a:7c:56:
         be:14:53:f6:a5:62:b9:8b:68:41:0e:0d:c2:ce:64:1f:de:30:
         2f:3c:11:54:f9:ce:ea:94:a8:fb:38:ad:1b:e4:05:36:b9:82:
         e9:35:6c:91
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUdRYYEv2I/3I1HgAUpl5f43o3BdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDYyMDU1MDlaFw0yNDEyMDQyMTAwMDlaMDMxMTAvBgNV
BAMTKDRDOTAzNDRFMzg0NzEwRTU1REJBOUQ4MTFCOERCOTY5OTIxOTcyMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogzFv/E4p9ieqeaEH5QNq7KEm
q3iafqXltXj1aLzw4UeGTiZq6nupXYFb/gVWfUjYM7qq7GdXE00llpuMJm9xmheJ
puxgJIPVUAazWt6kR1pEXbUxbV7Ghd1NUfzmnEsxWvrFTX8k+p5hUL+flwYF5yOb
7bN4QJN1a+AaUvZOSKFIaCzh5eUYYKP3X004y2niYC0cMVHLXXBNwpwDUhs8OoZ+
7M66iJGQEIz5gl1UoPgd1Cs3fixVuTJlySnvPMwip0/eQdpTyavt73d3uTKY8qj4
IPO7Kc+TsvzVc1n8vj6peoBl8rzYxsPl+yDIvChVaZni87znN7lC/sLk/uZHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMkDROOEcQ5V26
nYEbjblpkhlyHjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DTTd0QlJBTmE5YTlaS0p0MkIzRFR3eGd4OTYyaEY5ZnRV
Snd1a2cyOVhSWS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DTTd0QlJBTmE5YTlaS0p0MkIzRFR3eGd4OTYyaEY5ZnRV
Snd1a2cyOVhSWS8wLzRDOTAzNDRFMzg0NzEwRTU1REJBOUQ4MTFCOERCOTY5OTIx
OTcyMUUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3pHDANBAIAAjAHAwUA
KARLNDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFBowDQYJKoZIhvcNAQELBQAD
ggEBAEgOMcf9n+SLsnX3QQWNzF3Ha/Eu65SptVMBWX75xR/IRCfLfqOF1KApxRp6
rCkyrXU1cpkt850DV2kORZtu2wAxY3K0BKaz0SvsyKSxq61dB7exhLu+tht7SAzW
LTraoDCxBGY2r37ZnsevV70delFRx/zPRoScs+H0FuqE6+ubO7HNiP9WwvsrYzdP
594hluosKrB0rC5a2VDBe+/Sm9KX68cnS4WbMp1jr7b5ZM3OggoiWcUNo2xwOi5m
C3bqUO5GrR43UzMzHmpj1ENL9H6a74smCRp8Vr4UU/alYrmLaEEODcLOZB/eMC88
EVT5zuqUqPs4rRvkBTa5guk1bJE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org