Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.cer
File:                     4FBE0A9679C453935C9ACF270D3D77053A87C0E6.cer (raw, json)
Hash identifier:          kR/S0p22o8StjCwyT94KS0H2UF371fdE02E1GuWjuus=
Subject key identifier:   4F:BE:0A:96:79:C4:53:93:5C:9A:CF:27:0D:3D:77:05:3A:87:C0:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3EECEFFFEACED827617C802A8B8D14135CB04C57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Mar 2023 12:41:19 +0000
Certificate not after:    Tue 26 Mar 2024 12:46:19 +0000
Subordinate resources:    AS: 264452
                          IP: 132.255.48.0/22
                          IP: 2804:1ee4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ec:ef:ff:ea:ce:d8:27:61:7c:80:2a:8b:8d:14:13:5c:b0:4c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 12:41:19 2023 GMT
            Not After : Mar 26 12:46:19 2024 GMT
        Subject: CN=4FBE0A9679C453935C9ACF270D3D77053A87C0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:08:47:67:8c:ec:66:70:99:ee:ae:82:95:
                    8a:fe:a0:0a:a7:79:34:85:7c:78:7c:2a:42:68:72:
                    f5:f6:cf:8f:17:d8:3d:24:89:96:91:c3:94:21:69:
                    29:9c:a8:bc:ba:02:48:e3:6f:70:f8:12:76:97:75:
                    88:e7:b3:56:5f:7f:b7:86:b7:dc:90:34:66:02:7e:
                    38:f1:55:35:a8:8a:c1:ab:73:48:0a:20:9b:16:dc:
                    14:4f:42:ff:c9:31:3d:9e:c3:28:64:4d:df:38:eb:
                    ad:7b:f6:20:7e:64:47:55:19:72:ae:a5:55:a0:44:
                    1f:f4:95:c3:04:57:15:8c:db:36:da:1b:02:46:57:
                    d5:48:75:74:dd:0f:3d:10:41:b0:c9:04:f9:b3:db:
                    70:6d:4b:2f:89:a3:d6:78:36:b0:30:45:5e:9a:d0:
                    8f:e1:ee:6a:0f:b0:6f:d0:98:89:2a:0b:70:67:2b:
                    9c:63:5b:78:63:f5:cd:ce:59:d7:ca:96:5d:91:81:
                    35:6b:c1:2b:65:e2:6e:1b:17:0e:e9:74:9f:bd:93:
                    c8:99:83:f3:40:4a:53:a4:d2:a6:ae:aa:74:d0:33:
                    18:c9:b2:db:39:05:53:2f:fe:6c:15:6f:53:9d:2f:
                    0a:e2:e1:30:41:d0:ef:40:4c:fd:e8:d5:fa:05:7f:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:BE:0A:96:79:C4:53:93:5C:9A:CF:27:0D:3D:77:05:3A:87:C0:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.48.0/22
                IPv6:
                  2804:1ee4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264452

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:d3:cd:f2:b3:8e:ca:c5:86:b7:76:20:9f:2f:fe:fa:f9:
         3d:7b:d1:45:aa:6e:3a:8b:d7:3c:b4:dc:35:bb:25:5a:a8:85:
         57:46:bd:5e:9e:2c:af:d7:97:39:4f:be:fe:d2:18:ed:69:15:
         ec:9d:ea:39:d4:27:b3:3c:41:2a:35:2a:85:3c:a6:12:ac:f5:
         04:f9:a5:7c:52:72:1b:5e:52:75:39:13:7d:91:a1:80:66:14:
         b5:17:6c:6c:9d:89:7f:3b:55:e3:32:ce:dc:90:b7:10:17:09:
         68:11:5a:6d:3b:57:36:5a:c9:4d:59:0d:d1:6e:84:fc:dc:b3:
         c7:42:f3:0c:67:08:8d:fa:40:f9:78:3d:5b:a2:45:27:22:d6:
         91:c8:bb:50:a3:c4:5d:e2:bf:71:a3:f7:57:18:49:c8:7c:ab:
         36:b4:75:7b:00:68:c3:ca:81:0e:49:75:a8:b0:3e:44:26:54:
         ff:55:30:e0:59:77:f4:db:f5:2c:fd:ff:65:ee:e6:08:96:c4:
         45:15:ae:60:2f:dc:f2:ad:29:db:86:76:27:f0:2a:43:1b:c1:
         af:01:a9:f6:ab:9b:70:86:08:2e:c1:36:f8:1d:b3:a8:c5:a8:
         9d:9e:60:ba:da:ca:2c:5e:bc:3f:96:a8:de:75:dd:2a:17:3d:
         a2:de:ab:10
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUPuzv/+rO2CdhfIAqi40UE1ywTFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjgxMjQxMTlaFw0yNDAzMjYxMjQ2MTlaMDMxMTAvBgNV
BAMTKDRGQkUwQTk2NzlDNDUzOTM1QzlBQ0YyNzBEM0Q3NzA1M0E4N0MwRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWQhHZ4zsZnCZ7q6ClYr+oAqn
eTSFfHh8KkJocvX2z48X2D0kiZaRw5QhaSmcqLy6Akjjb3D4EnaXdYjns1Zff7eG
t9yQNGYCfjjxVTWoisGrc0gKIJsW3BRPQv/JMT2ewyhkTd8466179iB+ZEdVGXKu
pVWgRB/0lcMEVxWM2zbaGwJGV9VIdXTdDz0QQbDJBPmz23BtSy+Jo9Z4NrAwRV6a
0I/h7moPsG/QmIkqC3BnK5xjW3hj9c3OWdfKll2RgTVrwStl4m4bFw7pdJ+9k8iZ
g/NASlOk0qauqnTQMxjJsts5BVMv/mwVb1OdLwri4TBB0O9ATP3o1foFf0LZAgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPvgqWecRTk1ya
zycNPXcFOofA5jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EMkNCblRVbnR1R1NGVDludXE4eUtRQ1VTdzY4NmlyNGdV
ZkdjY0xUNmZvLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL0QyQ0JuVFVudHVHU0ZUOW51cTh5S1FDVVN3Njg2aXI0Z1Vm
R2NjTFQ2Zm8vMC80RkJFMEE5Njc5QzQ1MzkzNUM5QUNGMjcwRDNENzcwNTNBODdD
MEU2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKE/zAwDQQCAAIwBwMFACgE
HuQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAkEMA0GCSqGSIb3DQEBCwUAA4IB
AQAcyNPN8rOOysWGt3Ygny/++vk9e9FFqm46i9c8tNw1uyVaqIVXRr1eniyv15c5
T77+0hjtaRXsneo51CezPEEqNSqFPKYSrPUE+aV8UnIbXlJ1ORN9kaGAZhS1F2xs
nYl/O1XjMs7ckLcQFwloEVptO1c2WslNWQ3RboT83LPHQvMMZwiN+kD5eD1bokUn
ItaRyLtQo8Rd4r9xo/dXGEnIfKs2tHV7AGjDyoEOSXWosD5EJlT/VTDgWXf02/Us
/f9l7uYIlsRFFa5gL9zyrSnbhnYn8CpDG8GvAan2q5twhgguwTb4HbOoxaidnmC6
2sosXrw/lqjedd0qFz2i3qsQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org