Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/55268646F33053B8CA50C07462C0B20DA7420218.cer
File:                     55268646F33053B8CA50C07462C0B20DA7420218.cer (raw, json)
Hash identifier:          pIW7xAcvs8BGdmeMSYQZk3hw2/abC/jI1m8YmMWrpsA=
Subject key identifier:   55:26:86:46:F3:30:53:B8:CA:50:C0:74:62:C0:B2:0D:A7:42:02:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CB6EF328734F0EADC7C1E8AC2FB43D1681502B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/55268646F33053B8CA50C07462C0B20DA7420218.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 19:24:28 +0000
Certificate not after:    Fri 24 Jan 2025 19:29:28 +0000
Subordinate resources:    AS: 263900
                          IP: 138.204.148.0/22
                          IP: 2804:276c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b6:ef:32:87:34:f0:ea:dc:7c:1e:8a:c2:fb:43:d1:68:15:02:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 19:24:28 2024 GMT
            Not After : Jan 24 19:29:28 2025 GMT
        Subject: CN=55268646F33053B8CA50C07462C0B20DA7420218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c8:47:93:ba:0c:43:e6:34:1e:54:36:f1:b0:
                    07:af:d8:a0:78:73:13:12:bb:a3:46:c6:dc:bf:9f:
                    26:6c:ad:ec:85:ea:6a:79:52:fe:75:26:cd:5c:1a:
                    e8:21:5f:25:e3:02:1b:84:40:d7:4b:a9:4f:e8:d3:
                    ec:47:ab:1b:6d:16:82:3c:d6:35:f6:36:49:3e:09:
                    e4:09:67:b8:5b:3e:0d:59:56:fd:29:98:f1:40:46:
                    43:3f:db:5b:9a:fc:7a:9e:2b:ac:5f:65:b7:62:7e:
                    96:47:07:f3:21:71:4a:24:fe:f6:85:02:f2:48:7a:
                    29:38:ef:e7:b9:09:68:16:d4:ad:06:9d:b3:36:47:
                    a0:f2:0c:c6:eb:31:af:ef:28:7b:bb:12:34:9e:9f:
                    a3:a0:63:8a:d0:f0:06:97:71:08:5a:37:9b:b7:b4:
                    ae:d0:c4:e3:dd:83:d5:27:d6:b5:16:8f:e5:43:06:
                    ec:0b:16:6c:ef:f2:c1:74:3d:b4:d4:db:99:dd:cf:
                    db:32:8e:f9:35:c5:ae:82:53:77:c4:31:8d:d9:f3:
                    75:73:46:0f:62:d2:73:67:a5:e2:65:b7:b0:b4:58:
                    9c:7b:63:05:ef:d7:10:81:ad:87:8a:1e:95:70:32:
                    e9:51:ff:ab:91:8a:d2:3e:eb:a6:a1:26:a3:ab:52:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:26:86:46:F3:30:53:B8:CA:50:C0:74:62:C0:B2:0D:A7:42:02:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/55268646F33053B8CA50C07462C0B20DA7420218.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/22
                IPv6:
                  2804:276c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263900

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:6c:04:33:d2:04:3a:d7:b3:cb:c3:9f:dc:42:71:2f:ef:
         02:d1:d3:b5:7e:4e:01:e9:a5:5c:be:96:b9:df:f5:4e:7e:d8:
         7b:a0:1c:cf:ec:f3:21:fc:01:ff:80:96:6f:c5:f0:f3:47:2a:
         48:4a:e5:2f:9c:40:56:3a:0a:37:b4:5b:50:c6:d5:27:3c:2e:
         5b:bd:31:ab:5c:2f:ba:bf:f6:a7:e8:f0:80:61:fd:f7:a0:7b:
         f4:81:ad:7b:f9:98:a0:0b:ee:91:0d:08:59:06:3e:98:f8:ad:
         33:29:8a:ba:c6:8b:20:ec:cf:6c:4f:6a:8a:76:3f:94:63:40:
         5f:12:5f:7c:99:6d:29:53:f9:7a:3b:e9:fa:b7:ff:e8:d8:40:
         d6:3e:6d:80:f3:ab:8c:4b:b3:c0:f7:34:25:37:32:6c:20:7b:
         9f:87:15:9e:4f:dc:e6:a0:7a:be:05:b9:ff:ce:8f:b1:fb:2c:
         cf:f4:56:58:db:64:e6:b2:a7:6e:54:ce:10:ca:3c:6e:1f:12:
         96:08:90:ce:3e:c6:e9:6c:ac:ee:c6:9f:e7:e9:9f:11:2a:5e:
         4a:ae:4d:b9:b6:a7:ca:67:72:62:e1:8a:c9:15:24:0c:0c:b3:
         a5:e2:fc:0d:c5:f7:d6:84:bb:cd:ef:0a:39:bd:52:2a:ff:50:
         d1:16:b8:64
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUfLbvMoc08OrcfB6KwvtD0WgVArAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjYxOTI0MjhaFw0yNTAxMjQxOTI5MjhaMDMxMTAvBgNV
BAMTKDU1MjY4NjQ2RjMzMDUzQjhDQTUwQzA3NDYyQzBCMjBEQTc0MjAyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwyEeTugxD5jQeVDbxsAev2KB4
cxMSu6NGxty/nyZsreyF6mp5Uv51Js1cGughXyXjAhuEQNdLqU/o0+xHqxttFoI8
1jX2Nkk+CeQJZ7hbPg1ZVv0pmPFARkM/21ua/HqeK6xfZbdifpZHB/MhcUok/vaF
AvJIeik47+e5CWgW1K0GnbM2R6DyDMbrMa/vKHu7EjSen6OgY4rQ8AaXcQhaN5u3
tK7QxOPdg9Un1rUWj+VDBuwLFmzv8sF0PbTU25ndz9syjvk1xa6CU3fEMY3Z83Vz
Rg9i0nNnpeJlt7C0WJx7YwXv1xCBrYeKHpVwMulR/6uRitI+66ahJqOrUktxAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVJoZG8zBTuMpQ
wHRiwLINp0ICGDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GUlJNUlpwN3pDWE1VVlVaU1dOcnMzcXNQb1AzYjdYTnlD
OVJqcW1qdjV1ei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRlJSTVJacDd6Q1hNVVZVWlNXTnJzM3FzUG9QM2I3WE55
QzlSanFtanY1dXovMC81NTI2ODY0NkYzMzA1M0I4Q0E1MEMwNzQ2MkMwQjIwREE3
NDIwMjE4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKzJQwDQQCAAIwBwMF
ACgEJ2wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAbcMA0GCSqGSIb3DQEBCwUA
A4IBAQBBTmwEM9IEOtezy8Of3EJxL+8C0dO1fk4B6aVcvpa53/VOfth7oBzP7PMh
/AH/gJZvxfDzRypISuUvnEBWOgo3tFtQxtUnPC5bvTGrXC+6v/an6PCAYf33oHv0
ga17+ZigC+6RDQhZBj6Y+K0zKYq6xosg7M9sT2qKdj+UY0BfEl98mW0pU/l6O+n6
t//o2EDWPm2A86uMS7PA9zQlNzJsIHufhxWeT9zmoHq+Bbn/zo+x+yzP9FZY22Tm
sqduVM4QyjxuHxKWCJDOPsbpbKzuxp/n6Z8RKl5Krk25tqfKZ3Ji4YrJFSQMDLOl
4vwNxffWhLvN7wo5vVIq/1DRFrhk
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org