Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.cer
File:                     741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.cer (raw, json)
Hash identifier:          4Bug1jfiTe6sDuEePNAeVQafNakIEviARcSsIGM0rYw=
Subject key identifier:   74:1F:6F:CE:A8:20:E2:DA:7D:2A:3F:BF:8D:D4:EB:68:51:C6:A1:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53CE69E04F33C921E88DDFA3BE8A30BDACA302E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 19:31:06 +0000
Certificate not after:    Wed 26 Feb 2025 19:36:06 +0000
Subordinate resources:    AS: 61613
                          IP: 45.171.60.0/22
                          IP: 2804:5964::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ce:69:e0:4f:33:c9:21:e8:8d:df:a3:be:8a:30:bd:ac:a3:02:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 19:31:06 2024 GMT
            Not After : Feb 26 19:36:06 2025 GMT
        Subject: CN=741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:1e:66:07:81:f6:9b:9d:2d:c6:cd:33:56:
                    1f:3a:ee:05:b9:3c:d3:35:bd:3e:fc:8c:77:53:b2:
                    ff:b7:b1:02:c0:2a:75:48:b8:7a:ea:28:29:7e:69:
                    c9:13:57:bd:f8:6d:8e:a9:2e:36:ce:31:d6:40:5e:
                    39:d9:29:81:b9:b9:c0:07:61:4f:75:48:a9:38:b3:
                    ba:b0:ff:cb:7f:ce:1e:27:cf:d4:89:fb:d0:d4:c6:
                    02:4f:cf:5e:35:e4:e5:af:ec:c5:92:a0:e8:4e:29:
                    ce:55:c3:55:81:db:4d:77:57:c2:49:9e:5a:16:b1:
                    4c:45:c1:ce:c9:0f:0b:b7:4a:83:7b:40:54:18:18:
                    9f:54:32:9e:e9:e7:69:8f:6e:4f:9a:c2:0c:6d:0b:
                    5b:1a:39:7d:17:67:11:c9:16:3d:be:da:d7:e7:7e:
                    61:69:70:fb:9a:73:a0:70:3f:87:8e:fd:65:b1:7f:
                    7c:3b:e7:c8:ee:57:89:86:3d:db:6f:07:b0:59:69:
                    4a:7e:d4:38:df:b6:f8:52:e0:e1:d7:82:35:75:b1:
                    aa:c8:85:ab:4a:bf:c4:76:00:56:21:de:04:85:01:
                    46:f0:d6:82:27:b9:2b:3a:c3:70:bb:ce:b5:ff:76:
                    d4:68:a7:ac:c7:a8:fe:99:60:3f:b1:cd:f9:69:7e:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:1F:6F:CE:A8:20:E2:DA:7D:2A:3F:BF:8D:D4:EB:68:51:C6:A1:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.60.0/22
                IPv6:
                  2804:5964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61613

    Signature Algorithm: sha256WithRSAEncryption
         b5:dd:c2:9f:6f:10:88:1c:7d:fb:e6:5c:a0:af:9f:c7:1a:d7:
         69:c9:64:cd:18:a1:e2:03:25:6e:2c:ad:ac:2e:63:18:02:fd:
         d2:14:d8:d9:22:0a:3f:fa:44:94:80:70:40:a6:77:ca:bc:75:
         a1:44:f0:1c:63:39:20:58:aa:3d:7f:9e:d6:9a:76:4c:04:a6:
         c3:f0:9e:b2:3e:45:d2:14:b1:ee:50:8b:67:8b:ea:e2:8e:b3:
         c4:1f:f0:0a:87:28:4d:a7:07:5a:7b:c8:d0:a2:22:fa:02:ac:
         dc:ec:5c:e9:60:61:d4:17:32:9c:10:42:ef:7c:e4:06:11:3d:
         c8:aa:eb:d3:7c:8d:db:2f:d8:cd:4c:ca:62:7e:38:15:df:cc:
         2e:7c:e7:35:19:6d:01:f3:75:ba:e9:fd:a2:02:6b:af:6e:52:
         7b:85:28:94:5a:0b:be:4d:e1:b5:73:b8:56:e3:1a:13:ee:83:
         c5:81:84:ba:05:b2:fe:81:1d:a8:c3:72:e0:ba:cd:f9:b9:3c:
         81:6d:12:f2:63:a2:fa:b2:d9:b7:f9:cc:2e:cd:47:a9:87:2a:
         94:53:54:f7:77:fb:43:f6:65:09:6e:ff:53:0b:5d:33:3e:91:
         61:14:12:3d:9b:b6:2d:d2:43:3e:00:fc:98:50:06:e5:a0:64:
         d5:9e:38:e4
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUU85p4E8zySHojd+jvoowvayjAuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjgxOTMxMDZaFw0yNTAyMjYxOTM2MDZaMDMxMTAvBgNV
BAMTKDc0MUY2RkNFQTgyMEUyREE3RDJBM0ZCRjhERDRFQjY4NTFDNkExMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzh5mB4H2m50txs0zVh867gW5
PNM1vT78jHdTsv+3sQLAKnVIuHrqKCl+ackTV734bY6pLjbOMdZAXjnZKYG5ucAH
YU91SKk4s7qw/8t/zh4nz9SJ+9DUxgJPz1415OWv7MWSoOhOKc5Vw1WB2013V8JJ
nloWsUxFwc7JDwu3SoN7QFQYGJ9UMp7p52mPbk+awgxtC1saOX0XZxHJFj2+2tfn
fmFpcPuac6BwP4eO/WWxf3w758juV4mGPdtvB7BZaUp+1DjftvhS4OHXgjV1sarI
hatKv8R2AFYh3gSFAUbw1oInuSs6w3C7zrX/dtRop6zHqP6ZYD+xzflpfumnAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0H2/OqCDi2n0q
P7+N1OtoUcahJTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENjNQQTFoZkpXcjRSVGRRbk1USFh3bU5TU3MxRUNVaFV2
UGp4UE5EWFR3VC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhV
dlBqeFBORFhUd1QvMC83NDFGNkZDRUE4MjBFMkRBN0QyQTNGQkY4REQ0RUI2ODUx
QzZBMTI1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqzwwDQQCAAIwBwMF
ACgEWWQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPCtMA0GCSqGSIb3DQEBCwUA
A4IBAQC13cKfbxCIHH375lygr5/HGtdpyWTNGKHiAyVuLK2sLmMYAv3SFNjZIgo/
+kSUgHBApnfKvHWhRPAcYzkgWKo9f57WmnZMBKbD8J6yPkXSFLHuUItni+rijrPE
H/AKhyhNpwdae8jQoiL6Aqzc7FzpYGHUFzKcEELvfOQGET3IquvTfI3bL9jNTMpi
fjgV38wufOc1GW0B83W66f2iAmuvblJ7hSiUWgu+TeG1c7hW4xoT7oPFgYS6BbL+
gR2ow3Lgus35uTyBbRLyY6L6stm3+cwuzUephyqUU1T3d/tD9mUJbv9TC10zPpFh
FBI9m7Yt0kM+APyYUAbloGTVnjjk
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org