Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F9B0B53F8E38877FCEEF1EE7045074EA444E88F.cer
File:                     4F9B0B53F8E38877FCEEF1EE7045074EA444E88F.cer (raw, json)
Hash identifier:          8HdG7FracqpD/8Wz++RE/WUoIWV1ychb6atI0WDsknU=
Subject key identifier:   4F:9B:0B:53:F8:E3:88:77:FC:EE:F1:EE:70:45:07:4E:A4:44:E8:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77C4A825AF6F06EC4DA59AA3BF41676D53265451
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4F9B0B53F8E38877FCEEF1EE7045074EA444E88F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Mar 2023 20:48:03 +0000
Certificate not after:    Thu 07 Mar 2024 20:53:03 +0000
Subordinate resources:    AS: 268463
                          IP: 45.161.96.0/22
                          IP: 2804:5194::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c4:a8:25:af:6f:06:ec:4d:a5:9a:a3:bf:41:67:6d:53:26:54:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 20:48:03 2023 GMT
            Not After : Mar  7 20:53:03 2024 GMT
        Subject: CN=4F9B0B53F8E38877FCEEF1EE7045074EA444E88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:e4:9f:ab:21:e5:4b:26:bf:1e:63:d4:e6:
                    07:c5:a4:6b:31:b8:3e:f6:de:9d:a4:aa:be:8d:4a:
                    0e:79:15:de:8c:bb:99:dc:57:cc:aa:e6:1f:be:1f:
                    00:30:65:72:13:7f:bf:c6:a1:0b:c4:e2:6c:28:fe:
                    66:c0:a4:87:96:d3:83:d1:99:db:75:07:36:a8:37:
                    f7:8e:a8:67:fa:5f:1d:10:11:ef:79:8d:08:52:b2:
                    01:70:40:4a:fa:7b:03:63:14:bb:50:50:6b:ce:49:
                    34:a9:f9:a0:09:a1:97:76:15:bb:45:fe:d3:87:ce:
                    cc:36:11:b6:53:14:38:ec:55:77:25:75:6c:8b:2b:
                    7e:ef:62:98:b5:8d:d3:fc:28:d3:db:0d:4c:10:8f:
                    29:30:d9:51:73:4f:59:bc:f2:0f:32:51:06:46:13:
                    aa:bb:32:e5:e9:76:11:82:09:ad:39:ae:ad:f3:20:
                    83:af:86:37:7a:d4:d1:2e:11:56:ea:e7:a0:38:d3:
                    64:96:8f:ea:00:64:b6:18:34:b5:23:f3:8d:fd:3f:
                    9f:02:a8:b9:e8:b4:32:51:96:d8:e7:c9:01:c7:16:
                    f0:df:bd:79:06:50:0e:4c:1e:e7:2f:a0:6b:86:e7:
                    d6:97:dc:b8:2b:41:2e:4a:5b:82:8e:73:c9:98:cf:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:9B:0B:53:F8:E3:88:77:FC:EE:F1:EE:70:45:07:4E:A4:44:E8:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4F9B0B53F8E38877FCEEF1EE7045074EA444E88F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22
                IPv6:
                  2804:5194::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268463

    Signature Algorithm: sha256WithRSAEncryption
         a1:68:73:c1:1a:b3:18:5e:34:04:32:94:7b:77:16:57:14:e0:
         73:c1:37:43:96:75:71:98:c6:71:b7:0f:b3:47:82:f1:20:45:
         7d:cf:dd:cf:18:9b:74:f0:35:f7:83:34:77:89:17:8d:cf:50:
         cc:8c:cc:26:fa:66:5d:c0:d3:a2:ce:c0:ce:8d:59:dc:55:bc:
         88:d1:42:b5:10:d6:b2:a6:b1:3c:e7:3a:e7:3d:db:ee:7c:a0:
         80:99:8d:39:67:f3:1f:5a:3a:12:01:36:6c:2b:31:c2:90:ba:
         6d:b3:dd:f8:62:54:f0:a1:d5:07:6c:90:b8:66:f5:e2:24:a5:
         0c:22:83:ba:ed:11:da:79:ad:ac:0a:d4:d6:c2:eb:84:17:27:
         13:80:26:13:b4:61:82:ef:2a:89:0a:df:73:93:72:be:3f:a6:
         b7:8c:cf:f0:d8:51:88:a6:5e:e5:df:93:41:97:8f:eb:a0:48:
         83:68:27:c9:4c:0b:8f:e6:84:3c:d4:b4:09:6a:b8:27:0a:e4:
         8f:b1:74:46:f4:e4:a5:d4:cc:1b:ae:44:f9:a5:33:6c:e5:ef:
         de:ec:94:d0:02:36:24:a9:ca:77:7e:49:09:3f:42:88:a8:30:
         4d:84:ab:3a:9c:bb:db:0d:0e:3a:bf:a7:1e:f4:10:50:0f:c5:
         62:f6:16:cc
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUd8SoJa9vBuxNpZqjv0FnbVMmVFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDkyMDQ4MDNaFw0yNDAzMDcyMDUzMDNaMDMxMTAvBgNV
BAMTKDRGOUIwQjUzRjhFMzg4NzdGQ0VFRjFFRTcwNDUwNzRFQTQ0NEU4OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRaOSfqyHlSya/HmPU5gfFpGsx
uD723p2kqr6NSg55Fd6Mu5ncV8yq5h++HwAwZXITf7/GoQvE4mwo/mbApIeW04PR
mdt1BzaoN/eOqGf6Xx0QEe95jQhSsgFwQEr6ewNjFLtQUGvOSTSp+aAJoZd2FbtF
/tOHzsw2EbZTFDjsVXcldWyLK37vYpi1jdP8KNPbDUwQjykw2VFzT1m88g8yUQZG
E6q7MuXpdhGCCa05rq3zIIOvhjd61NEuEVbq56A402SWj+oAZLYYNLUj8439P58C
qLnotDJRltjnyQHHFvDfvXkGUA5MHucvoGuG59aX3LgrQS5KW4KOc8mYzzCzAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPmwtT+OOId/zu
8e5wRQdOpETojzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Gc013cG9XUURFOVEyUTRhVEZHSHF2NmpkZzJtN1lGY0Q2
OU5xSzZlMmZLcy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Gc013cG9XUURFOVEyUTRhVEZHSHF2NmpkZzJtN1lGY0Q2
OU5xSzZlMmZLcy8wLzRGOUIwQjUzRjhFMzg4NzdGQ0VFRjFFRTcwNDUwNzRFQTQ0
NEU4OEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2hYDANBAIAAjAHAwUA
KARRlDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGK8wDQYJKoZIhvcNAQELBQAD
ggEBAKFoc8EasxheNAQylHt3FlcU4HPBN0OWdXGYxnG3D7NHgvEgRX3P3c8Ym3Tw
NfeDNHeJF43PUMyMzCb6Zl3A06LOwM6NWdxVvIjRQrUQ1rKmsTznOuc92+58oICZ
jTln8x9aOhIBNmwrMcKQum2z3fhiVPCh1QdskLhm9eIkpQwig7rtEdp5rawK1NbC
64QXJxOAJhO0YYLvKokK33OTcr4/preMz/DYUYimXuXfk0GXj+ugSINoJ8lMC4/m
hDzUtAlquCcK5I+xdEb05KXUzBuuRPmlM2zl797slNACNiSpynd+SQk/QoioME2E
qzqcu9sNDjq/px70EFAPxWL2Fsw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org