Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.cer
File:                     4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.cer (raw, json)
Hash identifier:          /Cqmh62m+TY9LZOVT9lFWIYsyV+8VI87XWZG1VRQouI=
Subject key identifier:   4F:77:4C:8A:6C:51:2C:53:00:41:1E:7B:17:BB:34:D2:2F:E6:F2:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       033B3D22CE70904BC84129286FDFE248A221E3B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 11:52:49 +0000
Certificate not after:    Mon 10 Mar 2025 11:57:49 +0000
Subordinate resources:    AS: 268874
                          IP: 45.175.12.0/22
                          IP: 2804:5be0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3b:3d:22:ce:70:90:4b:c8:41:29:28:6f:df:e2:48:a2:21:e3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 11:52:49 2024 GMT
            Not After : Mar 10 11:57:49 2025 GMT
        Subject: CN=4F774C8A6C512C5300411E7B17BB34D22FE6F2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:83:8a:d4:a6:8b:5e:07:6a:35:db:37:37:
                    fb:4c:da:5b:cd:65:2f:c8:80:8e:4c:31:bb:0b:28:
                    3b:e6:16:c5:52:ca:7c:05:61:57:70:1a:3c:ef:f6:
                    a3:32:0f:00:f0:c9:5a:a4:fd:36:0a:16:6d:a6:d0:
                    ec:d8:39:92:ec:f6:0d:0d:6f:dd:be:da:a0:8a:fb:
                    0f:c0:05:17:46:5d:47:a4:e2:6c:3c:aa:2a:8b:f3:
                    b8:30:6b:a6:a1:ea:60:5b:88:0a:ee:bc:1e:1b:4a:
                    3f:8d:39:cb:31:8a:68:b8:68:a8:e8:5e:59:a5:fd:
                    08:ee:fe:4e:d4:e4:6a:99:15:99:6f:28:3e:90:bd:
                    01:37:89:a3:b9:c7:dc:94:1a:7e:d9:ad:76:54:f2:
                    27:03:a6:21:bf:3c:ea:0c:d9:ed:d4:75:16:8a:8b:
                    0f:a0:08:b4:98:c3:cb:20:5e:40:3e:f8:60:07:a9:
                    c5:49:75:cf:52:1f:20:45:69:1b:b8:44:8e:90:eb:
                    1f:0e:0c:f8:ee:9d:23:8c:40:c8:6e:de:35:ea:5b:
                    34:fa:81:39:d6:78:3a:b2:61:24:c8:46:bb:5b:2a:
                    4c:a2:03:a2:a2:c2:5d:2c:98:3f:f8:b8:c1:ae:f5:
                    9a:4c:dc:71:42:f7:b1:5a:4c:8b:b5:0c:10:07:88:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:77:4C:8A:6C:51:2C:53:00:41:1E:7B:17:BB:34:D2:2F:E6:F2:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.12.0/22
                IPv6:
                  2804:5be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268874

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:d4:8e:3f:f6:88:1b:d3:6e:12:39:4c:93:50:bb:e7:3f:
         20:04:8a:35:e4:51:c6:b1:d4:17:ac:19:f8:1d:54:06:15:e7:
         46:82:09:45:f0:c0:85:83:c5:eb:8d:b3:55:9d:a1:85:36:24:
         b4:8f:5b:f8:a0:4c:24:1f:46:9c:cb:60:fa:d1:4c:9a:c9:19:
         92:b7:c2:d3:86:b5:31:dd:59:fe:b1:bd:11:b0:cd:54:5a:32:
         cb:e4:03:4d:98:f6:90:65:68:32:2d:2f:ef:d1:6c:3b:b3:20:
         56:3f:78:b4:8c:cb:f2:ce:ad:4c:e9:d8:14:25:54:db:04:f8:
         ab:0c:30:88:69:1e:47:ee:bd:fc:e7:cf:3f:a7:bb:7a:d7:02:
         3d:aa:83:3f:7f:db:cf:62:da:50:2f:ae:bd:f2:04:1a:ae:aa:
         84:a4:53:c3:1d:c8:1d:5d:7c:6d:c5:7c:ef:58:ee:f7:c4:c2:
         d7:bf:86:bd:49:26:e8:7c:4e:7e:8f:13:50:45:cb:0b:5d:00:
         69:6c:14:da:42:5d:d0:71:11:da:3f:c4:18:f7:5a:1e:a0:2b:
         5a:9e:f2:1c:fd:13:7f:b5:25:71:17:72:9f:53:7a:87:b6:6b:
         5a:48:e3:19:37:9b:c3:f0:8f:8a:62:89:58:8d:8c:e8:02:1a:
         5e:da:5e:69
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUAzs9Is5wkEvIQSkob9/iSKIh47EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTExMTUyNDlaFw0yNTAzMTAxMTU3NDlaMDMxMTAvBgNV
BAMTKDRGNzc0QzhBNkM1MTJDNTMwMDQxMUU3QjE3QkIzNEQyMkZFNkYyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDapoOK1KaLXgdqNds3N/tM2lvN
ZS/IgI5MMbsLKDvmFsVSynwFYVdwGjzv9qMyDwDwyVqk/TYKFm2m0OzYOZLs9g0N
b92+2qCK+w/ABRdGXUek4mw8qiqL87gwa6ah6mBbiAruvB4bSj+NOcsximi4aKjo
Xlml/Qju/k7U5GqZFZlvKD6QvQE3iaO5x9yUGn7ZrXZU8icDpiG/POoM2e3UdRaK
iw+gCLSYw8sgXkA++GAHqcVJdc9SHyBFaRu4RI6Q6x8ODPjunSOMQMhu3jXqWzT6
gTnWeDqyYSTIRrtbKkyiA6Kiwl0smD/4uMGu9ZpM3HFC97FaTIu1DBAHiF1PAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPd0yKbFEsUwBB
HnsXuzTSL+by2TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80amtQY1JteEhNb29tOTZnbWFOV1lRSnYxTGgyUFFoWXZX
ZU1WMjJZWGNpNC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNGprUGNSbXhITW9vbTk2Z21hTldZUUp2MUxoMlBRaFl2
V2VNVjIyWVhjaTQvMC80Rjc3NEM4QTZDNTEyQzUzMDA0MTFFN0IxN0JCMzREMjJG
RTZGMkQ5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItrwwwDQQCAAIwBwMF
ACgEW+AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBpKMA0GCSqGSIb3DQEBCwUA
A4IBAQAb2NSOP/aIG9NuEjlMk1C75z8gBIo15FHGsdQXrBn4HVQGFedGgglF8MCF
g8XrjbNVnaGFNiS0j1v4oEwkH0acy2D60UyayRmSt8LThrUx3Vn+sb0RsM1UWjLL
5ANNmPaQZWgyLS/v0Ww7syBWP3i0jMvyzq1M6dgUJVTbBPirDDCIaR5H7r38588/
p7t61wI9qoM/f9vPYtpQL6698gQarqqEpFPDHcgdXXxtxXzvWO73xMLXv4a9SSbo
fE5+jxNQRcsLXQBpbBTaQl3QcRHaP8QY91oeoCtanvIc/RN/tSVxF3KfU3qHtmta
SOMZN5vD8I+KYolYjYzoAhpe2l5p
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org