Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.cer
File:                     4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.cer (raw, json)
Hash identifier:          bNiy2jpswZ4AN324LOc6LbEr7Bxr0gLnUph5pRke0GU=
Subject key identifier:   4F:D0:E3:FD:5B:A0:0C:14:AC:4F:48:B2:CE:1C:EF:40:98:2E:80:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B0C8E3300BEE3122A1D0C6C6B29CA2CE32A9142
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Aug 2022 18:03:42 +0000
Certificate not after:    Fri 11 Aug 2023 18:08:42 +0000
Subordinate resources:    AS: 26616
                          IP: 200.152.48.0/20
                          IP: 200.229.160.0/20
                          IP: 2804:3fe4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0c:8e:33:00:be:e3:12:2a:1d:0c:6c:6b:29:ca:2c:e3:2a:91:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 18:03:42 2022 GMT
            Not After : Aug 11 18:08:42 2023 GMT
        Subject: CN=4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:4d:8e:b4:d5:de:82:ac:76:7c:49:68:7e:
                    09:4b:45:b3:ea:9d:e5:b4:53:ea:fc:5b:d6:49:9e:
                    01:43:50:32:87:69:bd:39:bb:5f:93:48:7c:a5:78:
                    9d:aa:99:26:f5:c1:da:f2:22:59:26:e4:13:74:0f:
                    b5:21:94:9d:53:f9:53:6e:54:bd:6d:8b:0e:50:fd:
                    27:22:d2:ed:c5:b0:3e:fe:83:3a:fb:04:30:24:13:
                    ef:bb:1a:90:83:3a:32:ee:d7:f7:c1:cf:0c:80:34:
                    15:32:70:25:4f:72:11:31:d2:6c:32:c4:14:47:83:
                    12:63:f3:57:89:ea:8d:94:e4:a1:1c:c5:64:c4:2f:
                    01:19:48:dd:84:bb:1e:e9:a0:4e:79:ea:ff:a7:18:
                    9a:43:94:b2:d5:47:0c:f7:c4:a4:c0:54:02:a4:81:
                    c5:b1:8c:ae:c7:4e:fb:68:e9:de:d3:82:db:e9:03:
                    4e:46:72:c3:31:0a:74:50:9f:f4:c1:db:44:7d:b4:
                    29:83:e7:ed:19:15:50:2c:af:b8:1f:e0:e4:3e:83:
                    4e:ed:a7:d0:bc:40:1d:7b:69:98:15:bb:22:55:62:
                    00:aa:62:25:e3:f1:97:28:75:06:b0:f9:24:58:cf:
                    05:de:66:a8:6a:cf:57:b5:93:87:76:b7:c8:c9:d8:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:D0:E3:FD:5B:A0:0C:14:AC:4F:48:B2:CE:1C:EF:40:98:2E:80:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.48.0/20
                  200.229.160.0/20
                IPv6:
                  2804:3fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26616

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:94:49:b0:f3:03:c9:e7:21:85:b8:c9:c5:a8:52:51:84:
         98:9e:71:d0:d9:4a:4f:58:c2:7c:8f:95:76:47:58:96:73:8d:
         43:41:50:54:b4:9e:b8:f0:dd:96:00:7c:20:2e:7d:c9:8b:b6:
         0d:b8:7e:04:86:c4:17:99:2b:4e:51:b0:e9:c9:ff:83:00:85:
         6c:4c:ff:f0:2d:6d:fa:60:81:70:d5:c9:af:3f:52:a2:9f:69:
         ea:57:40:af:31:36:2a:07:26:46:82:4f:40:66:a5:d9:5f:22:
         66:63:17:04:e9:1b:ec:76:ea:72:77:9c:8b:12:0c:88:88:bd:
         50:8f:56:94:b9:79:3e:e4:b6:94:b5:6d:46:e1:87:bd:72:d7:
         35:6e:84:67:bc:9a:7f:8d:38:2d:46:44:bb:aa:83:b3:f4:d0:
         5d:66:60:11:29:7c:c6:ad:c7:9e:9f:2b:ef:a4:38:b0:cc:3d:
         39:1f:59:9a:18:48:1b:17:16:3c:8d:ce:59:33:26:a2:a1:f9:
         85:59:f0:80:7f:f3:e8:e7:56:87:e9:65:3c:6f:06:1a:11:b0:
         bd:c9:89:9e:fb:d3:2b:98:03:18:34:69:f1:7b:62:c8:f2:fd:
         f8:e6:4a:d9:22:f2:f6:71:e5:24:0c:01:51:3a:a7:be:d5:39:
         9c:06:47:f0
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUGwyOMwC+4xIqHQxsaynKLOMqkUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MTIxODAzNDJaFw0yMzA4MTExODA4NDJaMDMxMTAvBgNV
BAMTKDRGRDBFM0ZENUJBMDBDMTRBQzRGNDhCMkNFMUNFRjQwOTgyRTgwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uU2OtNXegqx2fElofglLRbPq
neW0U+r8W9ZJngFDUDKHab05u1+TSHyleJ2qmSb1wdryIlkm5BN0D7UhlJ1T+VNu
VL1tiw5Q/Sci0u3FsD7+gzr7BDAkE++7GpCDOjLu1/fBzwyANBUycCVPchEx0mwy
xBRHgxJj81eJ6o2U5KEcxWTELwEZSN2Eux7poE556v+nGJpDlLLVRwz3xKTAVAKk
gcWxjK7HTvto6d7TgtvpA05GcsMxCnRQn/TB20R9tCmD5+0ZFVAsr7gf4OQ+g07t
p9C8QB17aZgVuyJVYgCqYiXj8ZcodQaw+SRYzwXeZqhqz1e1k4d2t8jJ2AUNAgMB
AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRP0OP9W6AMFKxP
SLLOHO9AmC6AmDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80VlFVYUptbXhMeGZuY0Z4N0xuMUFMcFNaakJiaHVieG81
Qk5UelZqZ012VS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80VlFVYUptbXhMeGZuY0Z4N0xuMUFMcFNaakJiaHVieG81
Qk5UelZqZ012VS8wLzRGRDBFM0ZENUJBMDBDMTRBQzRGNDhCMkNFMUNFRjQwOTgy
RTgwOTgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBMiYMAMEBMjloDANBAIA
AjAHAwUAKAQ/5DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJn+DANBgkqhkiG9w0B
AQsFAAOCAQEAnGqUSbDzA8nnIYW4ycWoUlGEmJ5x0NlKT1jCfI+VdkdYlnONQ0FQ
VLSeuPDdlgB8IC59yYu2Dbh+BIbEF5krTlGw6cn/gwCFbEz/8C1t+mCBcNXJrz9S
op9p6ldArzE2KgcmRoJPQGal2V8iZmMXBOkb7HbqcnecixIMiIi9UI9WlLl5PuS2
lLVtRuGHvXLXNW6EZ7yaf404LUZEu6qDs/TQXWZgESl8xq3Hnp8r76Q4sMw9OR9Z
mhhIGxcWPI3OWTMmoqH5hVnwgH/z6OdWh+llPG8GGhGwvcmJnvvTK5gDGDRp8Xti
yPL9+OZK2SLy9nHlJAwBUTqnvtU5nAZH8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org