Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4EF80FC0897BE267EB0FA405C463F766731EE11F.cer
File:                     4EF80FC0897BE267EB0FA405C463F766731EE11F.cer (raw, json)
Hash identifier:          4IY3HSr1zaL22VNpu0zsyHFUcfHeK9iP4nsCBsRNFAY=
Subject key identifier:   4E:F8:0F:C0:89:7B:E2:67:EB:0F:A4:05:C4:63:F7:66:73:1E:E1:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76BB1CAA47136A3390EEE104B8F4A2E1DEA9A031
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8rTQPqhjmXRDZCHZATdPFD9ew4sSsdzxM4VaSawTsCjt/0/4EF80FC0897BE267EB0FA405C463F766731EE11F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8rTQPqhjmXRDZCHZATdPFD9ew4sSsdzxM4VaSawTsCjt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 18:36:33 +0000
Certificate not after:    Thu 23 May 2024 18:41:33 +0000
Subordinate resources:    AS: 271135
                          IP: 177.36.20.0/22
                          IP: 2804:76cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bb:1c:aa:47:13:6a:33:90:ee:e1:04:b8:f4:a2:e1:de:a9:a0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 18:36:33 2023 GMT
            Not After : May 23 18:41:33 2024 GMT
        Subject: CN=4EF80FC0897BE267EB0FA405C463F766731EE11F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:26:6a:3d:b0:9d:b6:b0:fc:02:94:3b:d9:
                    aa:49:ed:2a:d6:fb:8d:df:f5:9d:d9:44:3a:57:7e:
                    68:e1:0d:8c:b5:a9:28:c5:b7:0f:19:d0:9d:e1:46:
                    0e:0c:0b:a5:fa:8c:80:f2:09:b6:ea:a3:d4:b9:20:
                    52:db:d3:03:e9:3b:a2:fd:f5:3c:d1:c8:31:a2:5b:
                    ee:12:5c:34:3b:97:a7:33:50:9d:1c:3e:36:ed:ed:
                    b2:3e:be:87:80:eb:59:ba:fa:7e:95:93:05:5c:7e:
                    57:41:6e:cf:53:aa:53:b8:bb:2e:65:e6:75:3e:e5:
                    37:62:34:07:d3:31:6f:42:44:54:42:58:4f:de:d6:
                    ee:08:15:88:c9:e6:0f:6a:e9:ab:12:55:cb:e6:b3:
                    e2:a7:ff:5c:ae:12:dd:19:79:df:76:ab:e1:34:16:
                    8c:c7:c9:85:13:04:f7:75:e3:67:14:cc:5b:d0:7f:
                    34:96:3f:1e:13:91:80:e0:4a:1a:bd:7c:47:1f:84:
                    6c:6f:c1:52:19:12:14:44:e2:a0:15:5a:5d:51:df:
                    ee:97:7f:56:3d:f5:2b:38:d2:b0:f7:23:5f:7c:96:
                    14:6c:7d:42:3f:28:e2:db:02:dc:0c:9e:6d:92:46:
                    b5:f8:c1:84:da:e0:ed:ae:61:65:e1:73:e1:23:cf:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:F8:0F:C0:89:7B:E2:67:EB:0F:A4:05:C4:63:F7:66:73:1E:E1:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8rTQPqhjmXRDZCHZATdPFD9ew4sSsdzxM4VaSawTsCjt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8rTQPqhjmXRDZCHZATdPFD9ew4sSsdzxM4VaSawTsCjt/0/4EF80FC0897BE267EB0FA405C463F766731EE11F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.20.0/22
                IPv6:
                  2804:76cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271135

    Signature Algorithm: sha256WithRSAEncryption
         64:e0:48:f3:72:c7:34:10:df:87:b7:75:4d:8b:3d:5e:89:f1:
         24:1c:31:73:23:3d:f4:42:13:0d:4e:5c:df:0e:e9:79:21:cc:
         af:24:cb:73:3b:2b:8a:94:1d:d0:e1:d7:9a:a3:a6:af:ff:49:
         73:38:8a:ee:b5:26:2f:b7:22:73:9c:c4:e6:74:9a:7d:e1:c8:
         19:4e:2c:b7:06:45:fb:52:cd:6c:ee:f1:11:9f:a8:ad:35:10:
         27:14:30:8d:29:92:f2:f7:49:52:dd:79:52:fd:44:b0:81:15:
         d9:06:37:59:62:b2:ae:9c:e1:92:84:7f:49:22:fa:8f:7e:3f:
         4a:9a:6d:9b:ad:d8:2a:f8:4e:14:df:ce:58:b9:12:87:21:aa:
         b0:39:8e:52:32:aa:ab:0d:55:74:9c:53:3e:77:41:e3:e8:06:
         6e:fd:ee:02:fb:b8:bd:16:0f:a2:23:ea:b7:34:23:c2:6f:0f:
         5e:70:f3:5c:a2:85:85:a6:47:c4:e3:85:fe:21:e3:48:cb:f1:
         a0:a2:2f:6b:4c:60:d7:ee:c5:5b:7d:e5:6c:97:35:5a:5d:8b:
         0a:e6:e2:d3:12:e2:66:18:cb:bf:ec:86:00:dd:74:9f:f1:f3:
         0d:aa:21:af:2d:32:f7:b6:82:cd:5b:ab:dd:d5:70:c0:40:41:
         93:b6:f2:48
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUdrscqkcTajOQ7uEEuPSi4d6poDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjUxODM2MzNaFw0yNDA1MjMxODQxMzNaMDMxMTAvBgNV
BAMTKDRFRjgwRkMwODk3QkUyNjdFQjBGQTQwNUM0NjNGNzY2NzMxRUUxMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXRyZqPbCdtrD8ApQ72apJ7SrW
+43f9Z3ZRDpXfmjhDYy1qSjFtw8Z0J3hRg4MC6X6jIDyCbbqo9S5IFLb0wPpO6L9
9TzRyDGiW+4SXDQ7l6czUJ0cPjbt7bI+voeA61m6+n6VkwVcfldBbs9TqlO4uy5l
5nU+5TdiNAfTMW9CRFRCWE/e1u4IFYjJ5g9q6asSVcvms+Kn/1yuEt0Zed92q+E0
FozHyYUTBPd142cUzFvQfzSWPx4TkYDgShq9fEcfhGxvwVIZEhRE4qAVWl1R3+6X
f1Y99Ss40rD3I198lhRsfUI/KOLbAtwMnm2SRrX4wYTa4O2uYWXhc+Ejz14XAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRO+A/AiXviZ+sP
pAXEY/dmcx7hHzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84clRRUHFoam1YUkRaQ0haQVRkUEZEOWV3NHNTc2R6eE00
VmFTYXdUc0NqdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOHJUUVBxaGptWFJEWkNIWkFUZFBGRDlldzRzU3NkenhN
NFZhU2F3VHNDanQvMC80RUY4MEZDMDg5N0JFMjY3RUIwRkE0MDVDNDYzRjc2Njcz
MUVFMTFGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxJBQwDQQCAAIwBwMF
ACgEdswwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCMfMA0GCSqGSIb3DQEBCwUA
A4IBAQBk4Ejzcsc0EN+Ht3VNiz1eifEkHDFzIz30QhMNTlzfDul5IcyvJMtzOyuK
lB3Q4deao6av/0lzOIrutSYvtyJznMTmdJp94cgZTiy3BkX7Us1s7vERn6itNRAn
FDCNKZLy90lS3XlS/USwgRXZBjdZYrKunOGShH9JIvqPfj9Kmm2brdgq+E4U385Y
uRKHIaqwOY5SMqqrDVV0nFM+d0Hj6AZu/e4C+7i9Fg+iI+q3NCPCbw9ecPNcooWF
pkfE44X+IeNIy/Ggoi9rTGDX7sVbfeVslzVaXYsK5uLTEuJmGMu/7IYA3XSf8fMN
qiGvLTL3toLNW6vd1XDAQEGTtvJI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org