Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer
File:                     4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer (raw, json)
Hash identifier:          buZEnoH28e5ENSJ06kmRyeR1MAJV6L3EwY0EPweLrJE=
Subject key identifier:   4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C712E00E4271189B3627E9E1413A937D310A55D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 20:48:00 +0000
Certificate not after:    Tue 11 Mar 2025 20:53:00 +0000
Subordinate resources:    AS: 267374
                          IP: 45.234.124.0/22
                          IP: 2804:4c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:71:2e:00:e4:27:11:89:b3:62:7e:9e:14:13:a9:37:d3:10:a5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 20:48:00 2024 GMT
            Not After : Mar 11 20:53:00 2025 GMT
        Subject: CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e5:15:9d:57:03:1a:1a:40:e6:47:e9:87:e9:
                    51:2d:94:60:c3:90:a6:6b:01:eb:ac:5b:72:19:12:
                    ae:59:13:96:e5:2f:8b:a0:2a:b0:00:7e:5c:2b:07:
                    1a:54:26:71:60:2b:ef:ab:96:35:14:de:66:4f:ad:
                    27:fa:9e:ff:04:cf:e8:21:34:26:d2:86:2b:71:fd:
                    d6:5b:db:ad:a4:af:4b:3e:d4:8f:02:75:51:55:cd:
                    4e:32:1f:2b:60:f0:e7:0d:c3:f1:ba:f1:cc:bb:6a:
                    e5:e4:54:a7:33:89:bc:07:78:08:b6:c7:a6:0b:89:
                    f6:08:d4:25:6b:cf:56:1d:5a:0b:f1:a0:fd:43:76:
                    5c:ff:de:02:d4:f8:6a:a9:ff:e7:9e:b5:05:18:23:
                    65:0f:1d:f6:18:73:b7:5c:1a:47:8a:bb:15:01:31:
                    c6:84:75:7b:fb:49:e9:12:d4:fb:00:a5:4c:2a:ee:
                    63:7c:65:4c:42:13:1c:c6:c6:5b:12:08:25:a7:7d:
                    25:8e:fb:93:dc:bd:33:a1:1a:10:9e:cc:d9:ea:69:
                    6e:8a:99:45:88:22:1e:19:fa:80:51:b7:8c:f4:75:
                    4f:93:ec:44:bf:aa:fd:60:37:42:2a:df:fc:be:98:
                    d1:0e:15:f0:2a:76:13:cd:4e:30:f2:68:49:70:2a:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/22
                IPv6:
                  2804:4c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267374

    Signature Algorithm: sha256WithRSAEncryption
         8d:3b:4b:95:74:98:dc:ec:1e:69:ed:e6:95:22:99:18:53:52:
         21:49:65:d8:b2:05:30:ef:8c:7c:63:5c:1c:64:c7:a4:86:dd:
         3b:30:59:77:d3:f3:b3:42:d4:87:2b:88:d7:63:56:66:1c:40:
         fc:4c:72:10:2a:92:31:33:a0:a0:79:fa:98:ee:f5:7b:30:67:
         7e:20:e0:a9:db:a8:3b:4a:a1:96:72:78:fd:1b:0f:b5:75:14:
         cc:69:12:75:2d:0d:6d:37:26:9b:d6:d3:0a:3d:95:1e:b5:60:
         60:a1:53:a5:f6:c9:c4:63:bb:f2:3c:16:63:ce:78:90:cc:1b:
         03:76:1c:ed:61:88:8e:4b:47:d1:d9:62:23:e4:b2:bb:9c:55:
         f2:b5:de:73:6e:45:c3:89:b0:1e:52:de:8f:14:8d:06:95:c9:
         22:54:56:89:24:e7:4c:ea:5a:4a:62:02:08:e1:c3:68:c2:23:
         62:cb:21:86:86:04:06:79:87:77:8d:0f:2a:9d:4f:aa:4a:ea:
         90:02:f1:6b:5c:f6:9c:65:94:bc:bc:f4:40:26:23:67:80:ef:
         0c:d4:00:37:78:e0:7a:b0:bc:1c:57:8e:ce:d2:67:bc:19:77:
         29:01:42:e7:41:ef:bc:bd:3e:d4:c4:98:9f:ef:20:43:8d:16:
         6e:5d:b7:f0
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUbHEuAOQnEYmzYn6eFBOpN9MQpV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIyMDQ4MDBaFw0yNTAzMTEyMDUzMDBaMDMxMTAvBgNV
BAMTKDRGNEEwNzIxNDc3MjU5ODg4RDZGMDJEMkM3NURGQjM4M0RFMzRFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp5RWdVwMaGkDmR+mH6VEtlGDD
kKZrAeusW3IZEq5ZE5blL4ugKrAAflwrBxpUJnFgK++rljUU3mZPrSf6nv8Ez+gh
NCbShitx/dZb262kr0s+1I8CdVFVzU4yHytg8OcNw/G68cy7auXkVKczibwHeAi2
x6YLifYI1CVrz1YdWgvxoP1Ddlz/3gLU+Gqp/+eetQUYI2UPHfYYc7dcGkeKuxUB
McaEdXv7SekS1PsApUwq7mN8ZUxCExzGxlsSCCWnfSWO+5PcvTOhGhCezNnqaW6K
mUWIIh4Z+oBRt4z0dU+T7ES/qv1gN0Iq3/y+mNEOFfAqdhPNTjDyaElwKlopAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPSgchR3JZiI1v
AtLHXfs4PeNOuDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Fd2FZQWZEZVhrRHpFUFlpeHd6dzNIUXRRUUJ4Qmd3b1N3
VEF5OUNHNGplSC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXdhWUFmRGVYa0R6RVBZaXh3enczSFF0UVFCeEJnd29T
d1RBeTlDRzRqZUgvMC80RjRBMDcyMTQ3NzI1OTg4OEQ2RjAyRDJDNzVERkIzODNE
RTM0RUI4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt6nwwDQQCAAIwBwMF
ACgETIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBRuMA0GCSqGSIb3DQEBCwUA
A4IBAQCNO0uVdJjc7B5p7eaVIpkYU1IhSWXYsgUw74x8Y1wcZMekht07MFl30/Oz
QtSHK4jXY1ZmHED8THIQKpIxM6CgefqY7vV7MGd+IOCp26g7SqGWcnj9Gw+1dRTM
aRJ1LQ1tNyab1tMKPZUetWBgoVOl9snEY7vyPBZjzniQzBsDdhztYYiOS0fR2WIj
5LK7nFXytd5zbkXDibAeUt6PFI0GlckiVFaJJOdM6lpKYgII4cNowiNiyyGGhgQG
eYd3jQ8qnU+qSuqQAvFrXPacZZS8vPRAJiNngO8M1AA3eOB6sLwcV47O0me8GXcp
AULnQe+8vT7UxJif7yBDjRZuXbfw
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org