Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.cer
File:                     727619F0B90128C3DF95B9AAAE1F281B07964C12.cer (raw, json)
Hash identifier:          iktWnca+cntSGCM2ZEcDGg+o4pGRP6k+VlQvJgDwYZE=
Subject key identifier:   72:76:19:F0:B9:01:28:C3:DF:95:B9:AA:AE:1F:28:1B:07:96:4C:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FB2EABBEF5CE772DF551A4EF1414EFC741D314A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 12:14:16 +0000
Certificate not after:    Fri 24 Jan 2025 12:19:16 +0000
Subordinate resources:    AS: 264280
                          IP: 138.121.44.0/22
                          IP: 138.255.136.0/22
                          IP: 2804:256c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b2:ea:bb:ef:5c:e7:72:df:55:1a:4e:f1:41:4e:fc:74:1d:31:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 12:14:16 2024 GMT
            Not After : Jan 24 12:19:16 2025 GMT
        Subject: CN=727619F0B90128C3DF95B9AAAE1F281B07964C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:74:6f:f5:eb:4e:ef:b3:1e:0b:96:98:c3:
                    23:79:38:3d:39:66:2a:e6:cc:0f:2b:2c:45:1a:46:
                    29:67:14:58:0d:08:53:1b:db:e0:cc:e6:85:10:b3:
                    ca:49:cb:7b:21:95:bc:62:cf:a1:ac:7e:43:81:8c:
                    b4:c2:1a:7b:2f:ad:99:67:cb:46:b8:d0:bc:28:0c:
                    26:f3:0f:76:90:7f:23:af:11:10:dd:20:07:3b:9b:
                    4b:fa:7d:ed:22:c2:fa:d1:e3:d6:60:77:09:95:12:
                    b9:2d:d3:26:5a:26:b6:f8:5a:bb:82:9a:bc:16:33:
                    4f:41:53:2c:45:b2:5b:f5:be:34:11:38:83:29:7b:
                    f9:83:00:dd:0e:70:90:3e:ac:9b:d9:2e:ec:2e:16:
                    8c:c2:c6:41:85:7d:0d:c3:2b:dd:70:8f:a6:2d:9b:
                    4c:a6:8f:c4:0f:f9:6d:f1:c0:a0:7c:03:a8:66:b6:
                    0b:de:89:5f:aa:04:d7:75:4d:a9:8a:32:fc:36:71:
                    44:0c:27:2e:18:d7:28:4e:a4:e3:b4:83:90:d2:8c:
                    83:62:4a:2b:6b:60:23:67:9e:91:d2:7c:15:cc:fc:
                    56:2a:72:6d:61:38:7d:09:25:f2:b4:4f:a3:f1:2e:
                    cb:3f:d5:ac:a6:e8:40:e8:1f:41:48:9a:76:18:92:
                    0f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:76:19:F0:B9:01:28:C3:DF:95:B9:AA:AE:1F:28:1B:07:96:4C:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.44.0/22
                  138.255.136.0/22
                IPv6:
                  2804:256c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264280

    Signature Algorithm: sha256WithRSAEncryption
         af:2c:b7:c1:3d:60:4e:d0:16:c4:14:9f:1c:1f:52:14:2f:a5:
         f6:3a:fc:a7:c9:7e:e0:7f:84:63:86:76:5d:86:bc:6e:34:96:
         1b:c2:06:48:25:da:f5:dc:fd:fc:91:d0:b8:3d:ea:05:51:e7:
         c2:e9:79:b1:53:88:4d:04:a6:86:2b:8b:2e:83:5c:b7:04:86:
         f7:3f:aa:de:86:e2:82:d2:60:fb:ba:de:1a:1c:b9:d4:d4:5c:
         fa:82:7b:8e:b1:f0:1e:9d:6b:a2:34:cb:cf:49:48:94:94:d4:
         ed:8b:21:48:64:a3:86:10:00:ca:a3:cb:98:13:f7:f6:6b:77:
         a7:c6:47:88:3d:db:19:0c:28:2b:59:47:f0:1a:91:27:dc:4f:
         05:5d:1c:c0:d4:dc:1f:7a:f9:1b:65:7b:2b:39:d0:76:76:3a:
         96:d4:ed:ee:38:f9:77:44:da:0d:ab:47:6c:52:b7:b9:ee:8d:
         e7:ab:a1:88:43:4c:77:fe:85:ab:52:fb:83:56:19:0d:79:27:
         0a:c1:eb:82:ca:fa:56:0c:9a:68:98:a2:69:f0:57:b9:ed:f4:
         69:7f:31:3f:ed:8b:8f:05:d2:2e:cc:85:b5:4d:d6:a5:40:4f:
         e1:c0:07:fd:86:e4:70:76:c4:1a:cd:73:ca:07:6b:84:df:8d:
         d3:7f:b6:eb
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUL7Lqu+9c53LfVRpO8UFO/HQdMUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjYxMjE0MTZaFw0yNTAxMjQxMjE5MTZaMDMxMTAvBgNV
BAMTKDcyNzYxOUYwQjkwMTI4QzNERjk1QjlBQUFFMUYyODFCMDc5NjRDMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9nRv9etO77MeC5aYwyN5OD05
ZirmzA8rLEUaRilnFFgNCFMb2+DM5oUQs8pJy3shlbxiz6GsfkOBjLTCGnsvrZln
y0a40LwoDCbzD3aQfyOvERDdIAc7m0v6fe0iwvrR49ZgdwmVErkt0yZaJrb4WruC
mrwWM09BUyxFslv1vjQROIMpe/mDAN0OcJA+rJvZLuwuFozCxkGFfQ3DK91wj6Yt
m0ymj8QP+W3xwKB8A6hmtgveiV+qBNd1TamKMvw2cUQMJy4Y1yhOpOO0g5DSjINi
SitrYCNnnpHSfBXM/FYqcm1hOH0JJfK0T6PxLss/1aym6EDoH0FImnYYkg9xAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRydhnwuQEow9+V
uaquHygbB5ZMEjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GU0dSaHpxaHFSb2RDb3RldHZGUkJ0bnY3SFNLb2dQUnY1
aTR6N3B0Ym9TYS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRlNHUmh6cWhxUm9kQ290ZXR2RlJCdG52N0hTS29nUFJ2
NWk0ejdwdGJvU2EvMC83Mjc2MTlGMEI5MDEyOEMzREY5NUI5QUFBRTFGMjgxQjA3
OTY0QzEyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKKeSwDBAKK/4gwDQQC
AAIwBwMFACgEJWwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAhYMA0GCSqGSIb3
DQEBCwUAA4IBAQCvLLfBPWBO0BbEFJ8cH1IUL6X2OvynyX7gf4RjhnZdhrxuNJYb
wgZIJdr13P38kdC4PeoFUefC6XmxU4hNBKaGK4sug1y3BIb3P6rehuKC0mD7ut4a
HLnU1Fz6gnuOsfAenWuiNMvPSUiUlNTtiyFIZKOGEADKo8uYE/f2a3enxkeIPdsZ
DCgrWUfwGpEn3E8FXRzA1NwfevkbZXsrOdB2djqW1O3uOPl3RNoNq0dsUre57o3n
q6GIQ0x3/oWrUvuDVhkNeScKweuCyvpWDJpomKJp8Fe57fRpfzE/7YuPBdIuzIW1
TdalQE/hwAf9huRwdsQazXPKB2uE343Tf7br
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org