Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.cer
File:                     C42FE5312BD8A91F2735F094C65D949782FBC27C.cer (raw, json)
Hash identifier:          FnVKjJVfEqZK5vAHpd95pndh1XoOFN+OC67Qn2MnHqo=
Subject key identifier:   C4:2F:E5:31:2B:D8:A9:1F:27:35:F0:94:C6:5D:94:97:82:FB:C2:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F5B43027AA589AD2290DF8A5B0D59C87ECA29F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 19:15:43 +0000
Certificate not after:    Tue 03 Dec 2024 19:20:43 +0000
Subordinate resources:    AS: 268440
                          IP: 45.161.20.0/22
                          IP: 2804:5140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5b:43:02:7a:a5:89:ad:22:90:df:8a:5b:0d:59:c8:7e:ca:29:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 19:15:43 2023 GMT
            Not After : Dec  3 19:20:43 2024 GMT
        Subject: CN=C42FE5312BD8A91F2735F094C65D949782FBC27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:e1:99:92:10:2d:bb:5d:74:61:0c:31:ea:
                    03:5b:c2:cf:7f:f9:b3:6b:4d:09:d1:dc:5d:cb:e6:
                    74:65:29:d3:c5:49:c1:b7:e9:19:42:d5:c9:d9:20:
                    23:ac:a8:81:63:92:39:bb:be:e1:35:db:25:13:ff:
                    43:55:b2:b8:49:58:7c:3d:f7:56:49:07:f4:25:42:
                    75:90:50:62:51:44:80:4e:11:e3:f0:d1:af:5c:51:
                    7a:03:31:91:01:bc:44:d6:47:98:51:b4:ff:09:b1:
                    32:74:24:dc:dc:ba:13:78:c0:aa:60:d4:37:d8:eb:
                    18:af:43:07:a0:ad:67:ae:92:09:cd:e8:b6:8c:18:
                    04:77:b6:ad:63:db:23:52:79:c5:29:e9:1d:98:68:
                    60:d4:ac:9e:67:79:a1:9f:a3:d0:90:b4:2c:68:ac:
                    1e:63:80:42:d9:71:9e:01:c3:ac:24:ab:64:02:ea:
                    38:42:b4:22:ed:8c:02:eb:81:ab:f6:0d:d4:85:66:
                    b6:48:95:22:24:97:e1:0e:33:1a:b2:0d:3b:6b:dc:
                    54:88:aa:4e:8b:ac:9d:19:f5:b8:79:93:d5:53:ca:
                    62:60:48:8b:3e:fd:bc:3f:b7:d5:7b:dd:ee:34:80:
                    76:d4:ee:9d:87:c0:1f:33:2f:e2:a9:18:34:4c:67:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:2F:E5:31:2B:D8:A9:1F:27:35:F0:94:C6:5D:94:97:82:FB:C2:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/22
                IPv6:
                  2804:5140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268440

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:12:84:24:a2:b2:33:35:c5:2d:b3:43:f4:54:46:af:7a:
         dd:85:24:f1:1a:96:d1:58:a3:69:21:3d:81:45:5a:c6:7f:aa:
         51:b5:5e:d3:05:08:c0:fe:17:77:ba:e2:94:af:a2:4b:37:4d:
         db:0b:61:4b:0a:10:68:6b:45:53:71:64:85:1c:89:57:20:5e:
         f1:01:77:f4:fa:f3:91:39:89:58:b6:5f:55:31:3e:84:a2:7b:
         de:24:65:da:6d:9f:f7:b6:d8:0d:b6:d1:bc:59:e9:53:e1:a3:
         75:be:fa:ac:68:25:ef:4a:52:a8:36:ca:63:d1:bb:4a:0b:af:
         7c:82:74:1e:c3:51:eb:da:b3:71:2f:07:86:ba:60:a8:ae:cd:
         60:52:c9:27:ed:a9:d3:73:84:c6:3d:d9:f8:e5:15:98:d2:62:
         2d:ee:86:a2:58:e2:b1:d9:fe:38:dc:56:35:3e:13:31:f5:84:
         2d:b4:fb:54:6a:d0:4d:b4:b3:ba:08:3b:c3:f5:4c:eb:bc:c0:
         18:d0:33:71:4c:ef:c3:01:23:b0:f8:ac:fd:ff:c9:7f:ae:6f:
         f0:c3:67:c0:9e:3d:58:de:22:db:2d:07:dc:51:3e:be:9d:f9:
         01:33:27:a9:03:e4:9e:5a:ea:c2:fc:41:a9:2f:9b:cc:ed:e8:
         b7:1a:8e:10
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUP1tDAnqlia0ikN+KWw1ZyH7KKfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDUxOTE1NDNaFw0yNDEyMDMxOTIwNDNaMDMxMTAvBgNV
BAMTKEM0MkZFNTMxMkJEOEE5MUYyNzM1RjA5NEM2NUQ5NDk3ODJGQkMyN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb2OGZkhAtu110YQwx6gNbws9/
+bNrTQnR3F3L5nRlKdPFScG36RlC1cnZICOsqIFjkjm7vuE12yUT/0NVsrhJWHw9
91ZJB/QlQnWQUGJRRIBOEePw0a9cUXoDMZEBvETWR5hRtP8JsTJ0JNzcuhN4wKpg
1DfY6xivQwegrWeukgnN6LaMGAR3tq1j2yNSecUp6R2YaGDUrJ5neaGfo9CQtCxo
rB5jgELZcZ4Bw6wkq2QC6jhCtCLtjALrgav2DdSFZrZIlSIkl+EOMxqyDTtr3FSI
qk6LrJ0Z9bh5k9VTymJgSIs+/bw/t9V73e40gHbU7p2HwB8zL+KpGDRMZ5EvAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEL+UxK9ipHyc1
8JTGXZSXgvvCfDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IYk0zR2NEOXZiaFh1WHQ2Y3pKZGluNVlDdjkyYXNkRUNu
ZVNzcnAxZGUyWS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVD
bmVTc3JwMWRlMlkvMC9DNDJGRTUzMTJCRDhBOTFGMjczNUYwOTRDNjVEOTQ5Nzgy
RkJDMjdDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItoRQwDQQCAAIwBwMF
ACgEUUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBiYMA0GCSqGSIb3DQEBCwUA
A4IBAQBADxKEJKKyMzXFLbND9FRGr3rdhSTxGpbRWKNpIT2BRVrGf6pRtV7TBQjA
/hd3uuKUr6JLN03bC2FLChBoa0VTcWSFHIlXIF7xAXf0+vOROYlYtl9VMT6Eonve
JGXabZ/3ttgNttG8WelT4aN1vvqsaCXvSlKoNspj0btKC698gnQew1Hr2rNxLweG
umCors1gUskn7anTc4TGPdn45RWY0mIt7oaiWOKx2f443FY1PhMx9YQttPtUatBN
tLO6CDvD9UzrvMAY0DNxTO/DASOw+Kz9/8l/rm/ww2fAnj1Y3iLbLQfcUT6+nfkB
MyepA+SeWurC/EGpL5vM7ei3Go4Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org