Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer
File:                     854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer (raw, json)
Hash identifier:          59dUoEsHSunlrEBpa0YH5tD4O4RHQ/xFj6QXX9rePY0=
Subject key identifier:   85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39738FD1EF1142527B1C5EF97B041889E74094F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Mar 2024 05:56:37 +0000
Certificate not after:    Tue 25 Mar 2025 06:01:37 +0000
Subordinate resources:    AS: 271326
                          IP: 190.123.72.0/22
                          IP: 2804:79c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:73:8f:d1:ef:11:42:52:7b:1c:5e:f9:7b:04:18:89:e7:40:94:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 26 05:56:37 2024 GMT
            Not After : Mar 25 06:01:37 2025 GMT
        Subject: CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:36:ab:4c:1a:b1:ee:c2:cc:68:f9:45:9b:2f:
                    14:06:ed:18:ac:68:f8:da:cb:25:7e:38:3c:b6:6f:
                    b2:4c:ec:a5:4f:1a:3b:8f:58:d3:c9:20:93:43:55:
                    4f:6e:4d:a3:f9:31:4f:37:07:6c:f1:c6:b7:60:2c:
                    72:73:d9:f2:9a:bc:34:3b:03:8b:24:2f:1e:9e:38:
                    68:2c:d0:bc:40:79:86:e5:8d:02:21:0a:ab:02:48:
                    fb:f9:9c:13:8e:3e:e8:44:ba:ba:d3:e1:55:16:21:
                    f2:7d:8b:e5:8c:19:5b:81:16:42:27:82:10:03:57:
                    53:30:88:46:ae:00:b0:2f:a6:20:d1:bd:42:a2:0a:
                    c4:67:cc:22:30:1b:e2:8c:94:02:16:b5:73:53:6c:
                    2c:10:b7:12:d0:d4:c3:83:60:1c:f4:68:cd:e4:63:
                    6e:46:e9:3d:6b:c1:0c:e6:14:44:47:28:84:6b:b5:
                    66:fc:d2:98:30:a6:34:03:98:17:5f:c6:dc:fa:e2:
                    ba:9d:ec:b0:5e:18:c7:24:62:ca:2a:b3:7e:e2:19:
                    02:5b:e4:12:84:99:88:b5:5d:00:7c:25:ba:77:e5:
                    63:a7:f6:36:58:7f:80:a1:32:91:fc:4d:cf:02:ea:
                    2a:2d:19:8b:4e:aa:09:7c:90:a8:5d:88:a5:19:6a:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.72.0/22
                IPv6:
                  2804:79c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271326

    Signature Algorithm: sha256WithRSAEncryption
         b4:ab:97:40:63:3e:f7:b3:6a:1f:c6:04:99:ae:19:f4:ce:4f:
         2f:4a:45:bb:31:36:30:01:82:1d:aa:83:b2:e1:e2:a1:d2:d1:
         b7:ec:ef:57:c9:63:62:1c:7a:55:e8:ee:3e:72:73:4b:9f:f5:
         eb:dd:18:66:21:ff:13:2e:d4:e3:43:cc:6f:d9:f6:9d:79:82:
         f7:2e:ae:9a:d2:3e:d4:11:6b:0a:6d:c7:c6:67:38:09:02:d2:
         28:93:97:b0:fc:5b:3d:cd:eb:97:67:ce:90:95:6c:0b:f4:7a:
         e7:1d:6f:eb:c1:e6:60:54:8a:a1:a4:a2:99:79:39:c6:2f:72:
         a1:7a:7c:40:70:a3:c6:54:aa:cc:cd:a6:de:c7:e6:ce:81:2f:
         65:ea:46:c4:ad:0f:32:2b:92:19:82:19:4a:e8:28:c3:b4:b0:
         16:7c:bb:9a:22:8c:f8:3e:be:13:9f:fe:cc:5f:15:d4:6e:cc:
         fc:f5:5c:5e:20:ee:22:c6:56:91:fc:9f:ce:f8:d1:3d:22:d1:
         72:80:7f:8a:42:16:e9:f6:21:d4:16:9c:6b:08:aa:2f:bf:5e:
         64:2f:39:1e:0f:90:ee:64:91:43:ee:fd:96:4f:d6:8f:97:25:
         be:7d:89:c7:4c:46:5f:be:85:40:be:02:58:41:b5:c9:c1:78:
         36:ac:72:09
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUOXOP0e8RQlJ7HF75ewQYiedAlPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjYwNTU2MzdaFw0yNTAzMjUwNjAxMzdaMDMxMTAvBgNV
BAMTKDg1NEQ2N0E1Mzg4OEM1QzdBMjc1ODE0MjJEQkI2OTczRUY0QTFGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnNqtMGrHuwsxo+UWbLxQG7Ris
aPjayyV+ODy2b7JM7KVPGjuPWNPJIJNDVU9uTaP5MU83B2zxxrdgLHJz2fKavDQ7
A4skLx6eOGgs0LxAeYbljQIhCqsCSPv5nBOOPuhEurrT4VUWIfJ9i+WMGVuBFkIn
ghADV1MwiEauALAvpiDRvUKiCsRnzCIwG+KMlAIWtXNTbCwQtxLQ1MODYBz0aM3k
Y25G6T1rwQzmFERHKIRrtWb80pgwpjQDmBdfxtz64rqd7LBeGMckYsoqs37iGQJb
5BKEmYi1XQB8Jbp35WOn9jZYf4ChMpH8Tc8C6iotGYtOqgl8kKhdiKUZalP/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFTWelOIjFx6J1
gUItu2lz70ofwDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80SEVmcDhHWldRcWhUeHlnclJvdFdBWXoxeENHankyc2ZS
ZXZxMWI5NXh2by8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNEhFZnA4R1pXUXFoVHh5Z3JSb3RXQVl6MXhDR2p5MnNm
UmV2cTFiOTV4dm8vMC84NTRENjdBNTM4ODhDNUM3QTI3NTgxNDIyREJCNjk3M0VG
NEExRkMwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+e0gwDQQCAAIwBwMF
ACgEecQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCPeMA0GCSqGSIb3DQEBCwUA
A4IBAQC0q5dAYz73s2ofxgSZrhn0zk8vSkW7MTYwAYIdqoOy4eKh0tG37O9XyWNi
HHpV6O4+cnNLn/Xr3RhmIf8TLtTjQ8xv2fadeYL3Lq6a0j7UEWsKbcfGZzgJAtIo
k5ew/Fs9zeuXZ86QlWwL9HrnHW/rweZgVIqhpKKZeTnGL3KhenxAcKPGVKrMzabe
x+bOgS9l6kbErQ8yK5IZghlK6CjDtLAWfLuaIoz4Pr4Tn/7MXxXUbsz89VxeIO4i
xlaR/J/O+NE9ItFygH+KQhbp9iHUFpxrCKovv15kLzkeD5DuZJFD7v2WT9aPlyW+
fYnHTEZfvoVAvgJYQbXJwXg2rHIJ
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org