Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer
File:                     4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer (raw, json)
Hash identifier:          LKFy/u1uzKmLqw9aFm6eQLHli/l+nF6zIA+7mbTjLMc=
Subject key identifier:   4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E2606EA236C15A89DFCFAA66F06CFBB33831F79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/4CEBA16D103ABE5671D91473DCA22069846E1ADA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 19:51:15 +0000
Certificate not after:    Sat 16 Nov 2024 19:56:15 +0000
Subordinate resources:    AS: 265257
                          IP: 168.0.168.0/22
                          IP: 2804:2d04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:26:06:ea:23:6c:15:a8:9d:fc:fa:a6:6f:06:cf:bb:33:83:1f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 19:51:15 2023 GMT
            Not After : Nov 16 19:56:15 2024 GMT
        Subject: CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:c7:69:c0:a7:ee:a0:df:40:22:a4:5e:e0:
                    7b:e3:2f:fe:21:9c:01:48:09:f2:3b:20:63:d9:b3:
                    73:f7:ff:67:1d:ad:68:a4:f0:cc:b0:87:cb:69:5d:
                    b2:f9:65:5f:2c:45:ea:45:fd:b6:d9:34:53:cc:c4:
                    b7:01:db:d1:0e:2f:ca:d0:25:48:ee:c0:de:1a:72:
                    64:a9:76:4c:e5:72:ee:13:c0:0c:c2:f5:91:66:14:
                    66:21:99:48:41:55:30:3f:b7:19:c8:a5:91:c9:fb:
                    49:09:80:69:40:6c:52:10:9c:cb:3c:35:4f:15:1f:
                    f4:1a:77:ca:5e:fd:e7:ba:3a:cd:9e:00:91:9a:fe:
                    11:4e:3b:5b:0f:4b:b9:f4:7e:d4:a9:e0:dd:a6:7e:
                    f2:06:51:33:87:dd:a1:15:36:c4:93:9d:52:f4:d4:
                    b3:e4:8e:72:f2:27:90:27:d7:00:fa:dd:a4:89:a4:
                    2f:26:65:fa:5c:8e:76:24:cb:aa:1a:a1:89:2a:c0:
                    d4:0b:66:d8:af:1d:76:d4:d0:fe:60:25:7d:f9:a3:
                    04:72:34:66:41:a6:c6:95:30:e9:b0:d3:3e:9e:4c:
                    8a:e1:e2:42:81:09:cb:30:6a:23:fd:74:c5:f6:32:
                    f9:7c:54:70:3a:2f:90:69:9a:e5:31:c0:c8:1c:50:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/4CEBA16D103ABE5671D91473DCA22069846E1ADA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/22
                IPv6:
                  2804:2d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265257

    Signature Algorithm: sha256WithRSAEncryption
         8f:05:1a:63:ad:f2:9c:08:89:9c:25:f2:6f:56:e1:bf:91:0b:
         65:4a:2b:e7:47:0d:e4:b1:dc:4c:d8:51:f1:48:37:b7:46:32:
         59:85:87:ea:e8:a7:23:24:bc:51:0a:46:7b:4c:80:bc:fa:57:
         c2:ac:4a:69:b8:fb:84:be:db:28:f3:08:76:e2:87:04:d1:16:
         39:2d:69:a2:26:3b:10:88:6b:25:61:a9:3b:36:7f:f3:67:e9:
         0e:05:08:23:ff:82:52:85:cf:8d:45:c6:c7:6f:ba:58:25:3f:
         7d:89:e6:81:53:80:1a:42:c2:a2:cb:04:25:3b:94:c3:95:cc:
         9a:67:24:13:8f:9f:3d:09:10:8d:d1:b9:72:af:16:42:ac:76:
         31:1f:8c:5a:80:e3:20:19:6d:a4:4e:3b:6c:bf:f8:0d:88:b9:
         00:d6:8e:89:64:84:ae:e0:38:06:d7:96:0f:77:2b:26:16:6a:
         a7:2a:a8:88:77:3a:fa:22:17:5e:9d:94:ba:e7:2c:3f:b3:d5:
         19:5f:6e:22:84:b0:3b:f1:d4:9e:49:57:9f:0b:f8:c8:77:3c:
         cc:25:1b:24:d6:07:a5:37:c5:35:ec:fe:90:56:2f:66:94:1e:
         06:f3:12:5a:f5:3f:ef:e4:8f:12:6d:87:0b:d5:4f:8e:e5:30:
         5c:b5:a8:82
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPiYG6iNsFaid/PqmbwbPuzODH3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMTgxOTUxMTVaFw0yNDExMTYxOTU2MTVaMDMxMTAvBgNV
BAMTKDRDRUJBMTZEMTAzQUJFNTY3MUQ5MTQ3M0RDQTIyMDY5ODQ2RTFBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzMdpwKfuoN9AIqRe4HvjL/4h
nAFICfI7IGPZs3P3/2cdrWik8Mywh8tpXbL5ZV8sRepF/bbZNFPMxLcB29EOL8rQ
JUjuwN4acmSpdkzlcu4TwAzC9ZFmFGYhmUhBVTA/txnIpZHJ+0kJgGlAbFIQnMs8
NU8VH/Qad8pe/ee6Os2eAJGa/hFOO1sPS7n0ftSp4N2mfvIGUTOH3aEVNsSTnVL0
1LPkjnLyJ5An1wD63aSJpC8mZfpcjnYky6oaoYkqwNQLZtivHXbU0P5gJX35owRy
NGZBpsaVMOmw0z6eTIrh4kKBCcswaiP9dMX2Mvl8VHA6L5BpmuUxwMgcUGqBAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRM66FtEDq+VnHZ
FHPcoiBphG4a2jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EYnpmTWF2WFJXbnJCNEpHVW85V3I0RU40NFRjZ1E2Vm9X
VzFSZmZ0Q043ay8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EYnpmTWF2WFJXbnJCNEpHVW85V3I0RU40NFRjZ1E2Vm9X
VzFSZmZ0Q043ay8xLzRDRUJBMTZEMTAzQUJFNTY3MUQ5MTQ3M0RDQTIyMDY5ODQ2
RTFBREEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqgAqDANBAIAAjAHAwUA
KAQtBDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDCkwDQYJKoZIhvcNAQELBQAD
ggEBAI8FGmOt8pwIiZwl8m9W4b+RC2VKK+dHDeSx3EzYUfFIN7dGMlmFh+ropyMk
vFEKRntMgLz6V8KsSmm4+4S+2yjzCHbihwTRFjktaaImOxCIayVhqTs2f/Nn6Q4F
CCP/glKFz41FxsdvulglP32J5oFTgBpCwqLLBCU7lMOVzJpnJBOPnz0JEI3RuXKv
FkKsdjEfjFqA4yAZbaROO2y/+A2IuQDWjolkhK7gOAbXlg93KyYWaqcqqIh3Ovoi
F16dlLrnLD+z1RlfbiKEsDvx1J5JV58L+Mh3PMwlGyTWB6U3xTXs/pBWL2aUHgbz
Elr1P+/kjxJthwvVT47lMFy1qII=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org