Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
File:                     A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer (raw, json)
Hash identifier:          0yJl+NOXdY1lBqd7BPLFCiSg04i8ElaF8zqPmDbwU8M=
Subject key identifier:   A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       571E9D99F4D117BEC2289EE7FD63E1B554E70272
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2024 21:11:13 +0000
Certificate not after:    Fri 21 Mar 2025 21:16:13 +0000
Subordinate resources:    AS: 265463
                          IP: 168.197.12.0/22
                          IP: 2804:3484::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1e:9d:99:f4:d1:17:be:c2:28:9e:e7:fd:63:e1:b5:54:e7:02:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 21:11:13 2024 GMT
            Not After : Mar 21 21:16:13 2025 GMT
        Subject: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:3f:98:df:cf:36:d5:95:cc:c1:db:b8:2f:
                    d0:52:be:69:67:4d:29:3c:71:dc:f7:f3:ca:21:e0:
                    f1:aa:7e:32:3c:63:bf:b3:42:02:78:ac:1e:5b:9b:
                    ca:c7:4a:6b:23:16:9b:f7:f7:0c:d9:0c:c1:f6:52:
                    81:7a:89:5b:64:0a:89:03:36:e6:6d:89:cd:0f:46:
                    51:1d:2e:d3:ab:63:e0:95:b3:e7:d3:f8:9a:3e:20:
                    25:b2:ff:0e:16:26:cb:67:14:d5:1e:14:35:51:18:
                    43:07:9f:6c:a4:b0:8f:3d:6d:7e:5e:3f:c6:38:7a:
                    1d:e0:79:d6:5c:e7:4d:7c:52:ab:80:3b:41:1f:f0:
                    f5:d8:47:3f:d2:37:16:e4:9c:f4:26:04:89:8d:0e:
                    b5:a9:e3:8e:d0:9d:96:9c:4a:59:fd:74:6e:fb:69:
                    d6:88:45:cc:36:30:d3:7a:4b:ed:df:1b:00:0a:1f:
                    ae:c8:32:ba:77:b2:89:a7:2d:e6:2a:a3:43:d1:23:
                    2b:e9:7c:52:31:38:15:46:6e:bc:5a:90:0c:e0:f8:
                    74:bc:af:33:1d:80:47:cf:a8:0a:3d:7d:7f:1c:a9:
                    7d:9c:72:33:3f:5d:4a:21:c0:68:7b:73:8e:6f:95:
                    b6:22:60:18:ec:42:52:ba:67:90:ac:69:b0:af:86:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22
                IPv6:
                  2804:3484::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265463

    Signature Algorithm: sha256WithRSAEncryption
         90:eb:4a:14:b8:f3:4d:bf:40:6b:d1:15:c1:fc:9f:cd:6d:e6:
         40:f7:26:b8:d2:fe:47:85:a2:b1:f8:74:d8:f2:74:74:68:e8:
         2a:3b:b9:e4:2e:48:3d:c5:99:71:f3:de:ff:e0:48:8a:54:22:
         1c:7b:51:65:68:d1:50:87:04:d9:12:ef:0e:f3:41:24:4d:eb:
         64:96:ee:94:66:7a:53:ce:db:21:03:94:e3:8e:b7:49:e4:10:
         c8:30:63:a4:98:d4:38:b2:1a:e2:9a:71:75:91:1e:71:eb:49:
         56:7a:de:e3:ab:c3:8d:f5:80:a8:51:22:f3:d9:45:8b:22:16:
         2e:f9:c9:24:0c:b1:06:d2:67:19:a3:fa:71:1d:bd:49:36:38:
         f1:22:13:48:0e:8c:ee:0e:bd:5b:a7:b5:46:b8:7c:58:f8:f9:
         19:60:3b:0e:08:68:cc:97:2f:29:cd:76:3d:c8:b2:36:6c:29:
         36:97:c6:c7:34:5a:65:39:d9:c1:27:c6:d7:92:43:3d:dc:e7:
         77:68:6c:3d:0c:99:96:93:3e:9d:81:58:35:fb:d8:18:62:26:
         af:b8:04:02:de:1b:17:80:81:f1:bb:62:36:18:f2:34:7f:17:
         53:86:68:24:87:91:ca:1b:4e:4b:1b:15:3f:7d:ba:68:29:d6:
         ad:59:b3:0e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUVx6dmfTRF77CKJ7n/WPhtVTnAnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjIyMTExMTNaFw0yNTAzMjEyMTE2MTNaMDMxMTAvBgNV
BAMTKEE0QjIzRTdEMUQ4QUJGOTRGNjcyMjY5OTVFMDA0RUE2MTE0MTE1QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcD+Y38821ZXMwdu4L9BSvmln
TSk8cdz388oh4PGqfjI8Y7+zQgJ4rB5bm8rHSmsjFpv39wzZDMH2UoF6iVtkCokD
NuZtic0PRlEdLtOrY+CVs+fT+Jo+ICWy/w4WJstnFNUeFDVRGEMHn2yksI89bX5e
P8Y4eh3gedZc5018UquAO0Ef8PXYRz/SNxbknPQmBImNDrWp447QnZacSln9dG77
adaIRcw2MNN6S+3fGwAKH67IMrp3somnLeYqo0PRIyvpfFIxOBVGbrxakAzg+HS8
rzMdgEfPqAo9fX8cqX2ccjM/XUohwGh7c45vlbYiYBjsQlK6Z5CsabCvhpThAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSksj59HYq/lPZy
JpleAE6mEUEVrzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80M2Y0NlNucUZMM0tnVnpVVEZ0UFNyYmNXOExQcWQ5VWRQ
SlFhVFJSN3R1cC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80M2Y0NlNucUZMM0tnVnpVVEZ0UFNyYmNXOExQcWQ5VWRQ
SlFhVFJSN3R1cC8wL0E0QjIzRTdEMUQ4QUJGOTRGNjcyMjY5OTVFMDA0RUE2MTE0
MTE1QUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjFDDANBAIAAjAHAwUA
KAQ0hDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDPcwDQYJKoZIhvcNAQELBQAD
ggEBAJDrShS4802/QGvRFcH8n81t5kD3JrjS/keForH4dNjydHRo6Co7ueQuSD3F
mXHz3v/gSIpUIhx7UWVo0VCHBNkS7w7zQSRN62SW7pRmelPO2yEDlOOOt0nkEMgw
Y6SY1DiyGuKacXWRHnHrSVZ63uOrw431gKhRIvPZRYsiFi75ySQMsQbSZxmj+nEd
vUk2OPEiE0gOjO4OvVuntUa4fFj4+RlgOw4IaMyXLynNdj3IsjZsKTaXxsc0WmU5
2cEnxteSQz3c53dobD0MmZaTPp2BWDX72BhiJq+4BALeGxeAgfG7YjYY8jR/F1OG
aCSHkcobTksbFT99umgp1q1Zsw4=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org