Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA.cer
File:                     4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA.cer (raw, json)
Hash identifier:          IzUUlKpy8jQ7EwN1fESYkBVBFrQDgRlep7I5YpORXjc=
Subject key identifier:   4F:58:EB:08:78:DA:3D:87:1D:2B:0A:CA:0F:F1:8A:E9:C6:BE:C1:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59E63BD6593067DAAF93482F6E5F5A86E79F3F2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/1/4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 09:20:09 +0000
Certificate not after:    Tue 25 Feb 2025 09:25:09 +0000
Subordinate resources:    AS: 265050
                          IP: 170.150.220.0/22
                          IP: 2804:3200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e6:3b:d6:59:30:67:da:af:93:48:2f:6e:5f:5a:86:e7:9f:3f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 09:20:09 2024 GMT
            Not After : Feb 25 09:25:09 2025 GMT
        Subject: CN=4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:26:ba:64:d5:ac:f2:84:ff:28:75:df:4c:
                    09:ca:0b:9e:3d:e5:5b:02:95:af:d3:30:7e:5e:bb:
                    86:04:ce:de:f1:37:01:cd:7b:20:34:75:28:38:c0:
                    0d:84:be:f8:bc:00:7d:3e:98:32:18:1a:64:bf:5e:
                    88:2b:1e:38:54:08:cf:30:6c:9c:07:8f:ca:7b:1e:
                    3d:13:58:20:29:97:4d:36:b9:c7:48:da:bd:99:2b:
                    56:f1:cd:33:b7:50:71:98:92:00:4c:8e:f4:f9:fc:
                    90:2f:0c:b8:81:0b:65:80:52:24:a2:9a:3d:89:4d:
                    be:82:81:96:2a:77:9f:26:28:df:78:7e:93:bb:dc:
                    d4:d6:e0:d7:d1:01:89:97:68:b9:01:4c:5b:1c:f5:
                    8c:51:c2:ae:1b:11:2a:4c:ed:a0:60:ce:b8:e3:4a:
                    41:98:30:00:2e:32:40:df:17:f5:4b:e9:31:4f:96:
                    32:05:33:6a:70:bc:ea:02:2d:3d:cf:be:c4:b0:ce:
                    63:cd:11:76:ad:a6:1f:9b:bf:60:34:27:3d:87:22:
                    c9:be:b0:e8:d1:b0:62:0f:41:dd:13:99:ed:40:bf:
                    91:2e:48:60:83:00:02:d9:d2:3a:ee:6d:05:1f:cd:
                    bd:b0:e6:b1:29:a6:88:16:ec:6c:ff:b5:c4:46:2b:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:58:EB:08:78:DA:3D:87:1D:2B:0A:CA:0F:F1:8A:E9:C6:BE:C1:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/1/4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.220.0/22
                IPv6:
                  2804:3200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265050

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:fe:08:d1:2c:2c:a8:99:61:91:88:10:8d:42:7a:29:f9:
         41:a8:3d:b2:15:ff:a8:78:09:56:46:35:85:1f:8e:ea:4b:c9:
         d1:33:93:1e:ea:91:6c:ff:40:2f:3f:8e:01:33:a3:c8:dc:05:
         fe:f4:a2:b1:26:c9:e7:d3:bd:0e:29:90:c0:ed:ac:13:c4:cc:
         e3:29:65:ee:94:69:04:e9:c4:a1:b5:2c:77:44:d0:5c:1e:25:
         71:63:68:67:b3:f3:0a:d1:a0:c3:38:59:d5:38:75:89:51:db:
         3e:a1:75:60:62:f1:60:a2:83:82:44:12:e6:c6:5f:a2:bf:02:
         56:67:c2:78:37:d2:43:84:93:61:1a:7b:6a:94:db:a0:6c:18:
         8a:ea:01:66:21:6e:50:34:26:78:e7:51:d4:a1:b1:36:ee:fe:
         c7:0d:8f:20:67:00:44:93:d3:a9:3f:80:a8:62:5c:cf:b4:21:
         b9:59:15:07:96:b6:ba:26:3b:91:8d:6b:fd:86:64:ec:67:bf:
         b5:71:ed:67:3a:f6:cc:75:9a:48:36:59:a3:ef:e6:68:3a:f8:
         3b:f9:cb:5c:b5:b4:06:96:8f:09:1c:ea:3c:a5:a4:ec:dd:e1:
         c5:04:1e:0d:ff:5c:f0:9e:6d:6e:bd:52:7e:0b:9a:1d:c0:63:
         bb:2b:d7:01
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUWeY71lkwZ9qvk0gvbl9ahuefPyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjcwOTIwMDlaFw0yNTAyMjUwOTI1MDlaMDMxMTAvBgNV
BAMTKDRGNThFQjA4NzhEQTNEODcxRDJCMEFDQTBGRjE4QUU5QzZCRUMxQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThia6ZNWs8oT/KHXfTAnKC549
5VsCla/TMH5eu4YEzt7xNwHNeyA0dSg4wA2Evvi8AH0+mDIYGmS/XogrHjhUCM8w
bJwHj8p7Hj0TWCApl002ucdI2r2ZK1bxzTO3UHGYkgBMjvT5/JAvDLiBC2WAUiSi
mj2JTb6CgZYqd58mKN94fpO73NTW4NfRAYmXaLkBTFsc9YxRwq4bESpM7aBgzrjj
SkGYMAAuMkDfF/VL6TFPljIFM2pwvOoCLT3PvsSwzmPNEXatph+bv2A0Jz2HIsm+
sOjRsGIPQd0Tme1Av5EuSGCDAALZ0jrubQUfzb2w5rEppogW7Gz/tcRGKwKNAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPWOsIeNo9hx0r
CsoP8Yrpxr7BujAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbTlucVcyMUVWc2Z5YlVIU29iV3BMTENFRzFLNFBLU3pK
d1FGM3BkcnV0Ny8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbTlucVcyMUVWc2Z5YlVIU29iV3BMTENFRzFLNFBLU3pK
d1FGM3BkcnV0Ny8xLzRGNThFQjA4NzhEQTNEODcxRDJCMEFDQTBGRjE4QUU5QzZC
RUMxQkEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqqW3DANBAIAAjAHAwUA
KAQyADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC1owDQYJKoZIhvcNAQELBQAD
ggEBAKIa/gjRLCyomWGRiBCNQnop+UGoPbIV/6h4CVZGNYUfjupLydEzkx7qkWz/
QC8/jgEzo8jcBf70orEmyefTvQ4pkMDtrBPEzOMpZe6UaQTpxKG1LHdE0FweJXFj
aGez8wrRoMM4WdU4dYlR2z6hdWBi8WCig4JEEubGX6K/AlZnwng30kOEk2Eae2qU
26BsGIrqAWYhblA0JnjnUdShsTbu/scNjyBnAEST06k/gKhiXM+0IblZFQeWtrom
O5GNa/2GZOxnv7Vx7Wc69sx1mkg2WaPv5mg6+Dv5y1y1tAaWjwkc6jylpOzd4cUE
Hg3/XPCebW69Un4Lmh3AY7sr1wE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org