Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C4C158CFE320EE02FA275E85BCC3A99E8325A739.cer
File:                     C4C158CFE320EE02FA275E85BCC3A99E8325A739.cer (raw, json)
Hash identifier:          rgFJECvak+p1ctpqbJCdZFpSuJrNhpE40jhMZjBDENI=
Subject key identifier:   C4:C1:58:CF:E3:20:EE:02:FA:27:5E:85:BC:C3:A9:9E:83:25:A7:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F9D7378B18979A34B55DCCEF1425BDE8D6FCF6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/C4C158CFE320EE02FA275E85BCC3A99E8325A739.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Feb 2022 19:55:54 +0000
Certificate not after:    Tue 07 Feb 2023 20:00:54 +0000
Subordinate resources:    AS: 53175
                          IP: 168.90.120.0/22
                          IP: 186.225.224.0/19
                          IP: 2804:1ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9d:73:78:b1:89:79:a3:4b:55:dc:ce:f1:42:5b:de:8d:6f:cf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 19:55:54 2022 GMT
            Not After : Feb  7 20:00:54 2023 GMT
        Subject: CN=C4C158CFE320EE02FA275E85BCC3A99E8325A739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:50:92:b1:6a:3d:0d:1d:f4:f8:6d:dc:65:
                    97:94:45:fe:81:12:77:c4:83:b1:c7:38:05:95:38:
                    bb:63:f2:cf:de:60:12:f0:e2:fe:b6:75:1f:68:23:
                    83:2f:18:eb:da:41:d1:dd:c7:8a:12:40:7f:fb:fb:
                    16:1f:91:9e:0b:e4:e8:24:a6:31:8b:7f:3a:e2:76:
                    91:37:04:84:1f:ef:f0:a4:5d:3c:73:68:63:49:17:
                    e7:56:80:20:dc:bd:67:34:1e:4c:49:34:9b:b4:94:
                    65:0f:44:8c:f5:d9:bc:c0:8f:5b:0d:00:33:1f:93:
                    c4:ef:1b:f7:5e:2b:9e:ed:ff:cc:c9:05:b2:e2:8a:
                    19:5c:66:25:e8:82:df:c5:d8:57:ea:10:4d:a2:9b:
                    b2:cd:c5:94:86:ed:4b:47:05:1f:74:7d:10:0a:aa:
                    fb:24:18:9d:40:4d:79:f2:9b:ac:23:25:e1:80:cc:
                    3e:78:fa:f5:8f:66:b3:fc:09:fe:ab:29:f2:c7:1b:
                    60:d5:82:61:a1:43:86:50:9e:1e:be:55:07:72:01:
                    78:3e:ac:92:00:13:17:8e:88:c5:74:6b:e4:c7:c2:
                    1c:ae:f1:32:89:43:6f:fa:8d:21:dd:39:7a:92:b4:
                    46:24:ed:dc:12:b6:7b:4e:82:f3:a1:06:3a:62:36:
                    ea:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:C1:58:CF:E3:20:EE:02:FA:27:5E:85:BC:C3:A9:9E:83:25:A7:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/C4C158CFE320EE02FA275E85BCC3A99E8325A739.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.120.0/22
                  186.225.224.0/19
                IPv6:
                  2804:1ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53175

    Signature Algorithm: sha256WithRSAEncryption
         9c:b8:a9:28:74:6d:ae:0f:97:5e:35:ab:8e:33:19:dc:05:e2:
         1c:e4:a9:bd:f3:9a:ff:63:86:2d:d9:5e:14:e0:ce:69:36:ec:
         ff:e1:4f:c1:68:92:c7:8a:3f:63:e0:ee:76:9c:9f:18:a9:bf:
         d4:a6:23:d4:20:c9:67:d5:5d:a0:a6:f0:20:2b:c0:8c:1c:07:
         09:a3:74:70:99:9b:88:34:bd:e5:04:d1:70:86:67:ae:21:81:
         3e:7a:ad:dd:33:0c:78:8b:42:6c:48:54:2e:67:a0:b7:aa:69:
         04:86:fa:d1:d9:d3:06:c4:33:a0:55:70:f8:c2:b1:42:62:4d:
         f4:d3:68:c5:83:d8:91:48:61:52:27:ad:db:3c:8d:fa:89:72:
         f7:af:d4:1b:b9:a6:31:22:f2:28:4d:74:45:1f:db:2d:d7:d0:
         a6:f1:22:f0:b1:18:c7:1f:5b:f8:45:b8:ef:23:77:b0:f3:5a:
         68:fa:cb:8d:17:a1:53:91:42:4d:73:c9:06:21:5a:da:6c:05:
         c3:d0:c3:2e:4e:a1:83:59:24:ff:eb:5f:64:68:a6:74:40:7d:
         96:d3:6c:a1:f3:81:12:c0:88:b1:60:29:a7:37:22:85:da:9a:
         4d:ae:68:4f:fb:63:fb:ff:e6:d2:b7:54:d8:e4:34:48:7f:6d:
         8c:8a:d5:5d
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUf51zeLGJeaNLVdzO8UJb3o1vz2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAyMDgxOTU1NTRaFw0yMzAyMDcyMDAwNTRaMDMxMTAvBgNV
BAMTKEM0QzE1OENGRTMyMEVFMDJGQTI3NUU4NUJDQzNBOTlFODMyNUE3MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkNVCSsWo9DR30+G3cZZeURf6B
EnfEg7HHOAWVOLtj8s/eYBLw4v62dR9oI4MvGOvaQdHdx4oSQH/7+xYfkZ4L5Ogk
pjGLfzridpE3BIQf7/CkXTxzaGNJF+dWgCDcvWc0HkxJNJu0lGUPRIz12bzAj1sN
ADMfk8TvG/deK57t/8zJBbLiihlcZiXogt/F2FfqEE2im7LNxZSG7UtHBR90fRAK
qvskGJ1ATXnym6wjJeGAzD54+vWPZrP8Cf6rKfLHG2DVgmGhQ4ZQnh6+VQdyAXg+
rJIAExeOiMV0a+THwhyu8TKJQ2/6jSHdOXqStEYk7dwStntOgvOhBjpiNupHAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEwVjP4yDuAvon
XoW8w6megyWnOTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ER1FzR1ZyR2ZnMmtxVDRrazU3SG9KRjNaUlpZOGtwVGJ4
YW5uemdUdUNWdy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vREdRc0dWckdmZzJrcVQ0a2s1N0hvSkYzWlJaWThrcFRi
eGFubnpnVHVDVncvMC9DNEMxNThDRkUzMjBFRTAyRkEyNzVFODVCQ0MzQTk5RTgz
MjVBNzM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKoWngDBAW64eAwDQQC
AAIwBwMFACgEAawwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM+3MA0GCSqGSIb3
DQEBCwUAA4IBAQCcuKkodG2uD5deNauOMxncBeIc5Km985r/Y4Yt2V4U4M5pNuz/
4U/BaJLHij9j4O52nJ8Yqb/UpiPUIMln1V2gpvAgK8CMHAcJo3RwmZuINL3lBNFw
hmeuIYE+eq3dMwx4i0JsSFQuZ6C3qmkEhvrR2dMGxDOgVXD4wrFCYk3002jFg9iR
SGFSJ63bPI36iXL3r9QbuaYxIvIoTXRFH9st19Cm8SLwsRjHH1v4RbjvI3ew81po
+suNF6FTkUJNc8kGIVrabAXD0MMuTqGDWST/619kaKZ0QH2W02yh84ESwIixYCmn
NyKF2ppNrmhP+2P7/+bSt1TY5DRIf22MitVd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org