Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
File:                     CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer (raw, json)
Hash identifier:          k3a0q46ma/qErgQa2QEz8gxM4ea6RBZHMgbIjRcNLzE=
Subject key identifier:   CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40F9B7E47B70834914E66B12BDB25E951CBE5A24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 14:21:10 +0000
Certificate not after:    Mon 02 Sep 2024 14:26:10 +0000
Subordinate resources:    AS: 270717
                          IP: 200.6.84.0/22
                          IP: 2804:7048::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f9:b7:e4:7b:70:83:49:14:e6:6b:12:bd:b2:5e:95:1c:be:5a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 14:21:10 2023 GMT
            Not After : Sep  2 14:26:10 2024 GMT
        Subject: CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:d4:d3:09:3a:bf:e7:8d:a5:ea:bd:bb:0e:
                    cc:4b:86:20:9e:e3:fe:4b:ca:0b:9d:70:fe:af:8c:
                    56:56:9d:9d:ad:d6:78:f8:fb:59:9f:1a:14:96:1f:
                    f7:dd:4d:5f:19:14:c8:3f:d4:dd:a8:b0:a4:a0:9e:
                    a8:24:44:ad:3b:77:03:af:d0:c7:6a:b8:76:e2:2f:
                    21:68:e0:0e:c0:ac:2b:15:86:86:03:33:86:a5:9d:
                    fa:f1:b0:2a:8a:94:8e:4e:9c:6f:ec:c5:c8:70:01:
                    9b:73:54:da:09:70:22:c4:17:ce:77:f4:2a:1a:d7:
                    bd:91:f5:f1:b0:8a:45:d3:68:a4:41:42:b6:0e:e3:
                    7f:53:1c:d4:2d:6e:0c:e4:36:ed:f4:4f:20:be:26:
                    c0:89:ee:c8:d2:e2:11:5a:41:6e:7b:53:ec:3e:0d:
                    4d:1f:de:e4:c0:28:e4:13:57:0a:0f:71:cd:14:7b:
                    0b:06:ba:3f:0d:01:45:a1:f0:86:f9:ce:6f:51:e6:
                    f3:33:13:89:e6:16:33:ad:fc:54:f7:f6:bc:8e:57:
                    15:d4:d7:f0:6b:4e:9f:84:2f:80:3c:c1:f8:34:c7:
                    a9:21:f3:5d:be:59:4f:3c:c5:a3:e8:58:9a:a8:5b:
                    bd:51:18:0a:8c:13:80:98:e6:0b:f4:47:9e:fd:4a:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.84.0/22
                IPv6:
                  2804:7048::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270717

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:b9:ba:56:e7:c3:93:09:96:48:ec:1d:7a:f3:32:3d:dc:
         5e:c1:ea:1a:a6:fc:cc:af:23:c7:53:26:c9:3a:1f:36:73:e9:
         f1:48:81:2d:55:86:ae:d6:a2:a4:92:38:9a:a6:34:36:ca:28:
         4b:8e:d1:5e:71:05:e4:0c:b7:44:b1:40:ad:20:7d:74:32:6d:
         9f:9b:33:4e:de:41:43:44:11:2a:86:60:e4:d9:12:4b:f9:64:
         41:ee:b2:1c:56:de:3d:b0:ef:0d:45:b7:5c:49:73:e7:71:ee:
         ac:d4:c3:a4:20:39:42:e2:a4:fb:d0:bc:9d:a5:20:b4:7b:0d:
         bc:47:0e:47:68:f7:42:62:27:03:bb:c1:c2:6f:9d:f4:e0:02:
         59:4a:be:11:15:89:84:5a:50:a7:cc:4b:e1:49:83:b2:36:f6:
         14:e5:fc:dc:d5:ad:28:e6:92:27:dd:af:af:dd:f4:86:e2:33:
         fe:15:98:c8:9a:42:ab:9d:88:52:47:74:20:74:45:ff:9a:69:
         bf:03:fe:54:ae:28:7e:98:7f:5b:2c:11:69:56:59:1b:a1:25:
         18:78:0c:cf:ee:08:5f:f5:43:3f:43:3b:a3:a9:cd:49:dc:31:
         5d:86:37:e9:d6:b5:b0:c5:7c:37:d4:9b:72:45:2c:47:1e:e8:
         8c:69:4e:19
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQPm35Htwg0kU5msSvbJelRy+WiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDQxNDIxMTBaFw0yNDA5MDIxNDI2MTBaMDMxMTAvBgNV
BAMTKENGMUQ0RUQ0MDJGNkE3NDk1RkY5ODcwNEY2NTA0NjE2RTlDRDAyRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTbtTTCTq/542l6r27DsxLhiCe
4/5LygudcP6vjFZWnZ2t1nj4+1mfGhSWH/fdTV8ZFMg/1N2osKSgnqgkRK07dwOv
0MdquHbiLyFo4A7ArCsVhoYDM4alnfrxsCqKlI5OnG/sxchwAZtzVNoJcCLEF853
9Coa172R9fGwikXTaKRBQrYO439THNQtbgzkNu30TyC+JsCJ7sjS4hFaQW57U+w+
DU0f3uTAKOQTVwoPcc0UewsGuj8NAUWh8Ib5zm9R5vMzE4nmFjOt/FT39ryOVxXU
1/BrTp+EL4A8wfg0x6kh812+WU88xaPoWJqoW71RGAqME4CY5gv0R579SuwlAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPHU7UAvanSV/5
hwT2UEYW6c0C+jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8xMlc4dlFnNzhuV1B1VFlWNXBoZU5lSFFBeThGZWFEcEVH
QkJBVVVwWGEyUi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMTJXOHZRZzc4bldQdVRZVjVwaGVOZUhRQXk4RmVhRHBF
R0JCQVVVcFhhMlIvMC9DRjFENEVENDAyRjZBNzQ5NUZGOTg3MDRGNjUwNDYxNkU5
Q0QwMkZBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIBlQwDQQCAAIwBwMF
ACgEcEgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCF9MA0GCSqGSIb3DQEBCwUA
A4IBAQBD1rm6VufDkwmWSOwdevMyPdxeweoapvzMryPHUybJOh82c+nxSIEtVYau
1qKkkjiapjQ2yihLjtFecQXkDLdEsUCtIH10Mm2fmzNO3kFDRBEqhmDk2RJL+WRB
7rIcVt49sO8NRbdcSXPnce6s1MOkIDlC4qT70LydpSC0ew28Rw5HaPdCYicDu8HC
b5304AJZSr4RFYmEWlCnzEvhSYOyNvYU5fzc1a0o5pIn3a+v3fSG4jP+FZjImkKr
nYhSR3QgdEX/mmm/A/5Urih+mH9bLBFpVlkboSUYeAzP7ghf9UM/Qzujqc1J3DFd
hjfp1rWwxXw31JtyRSxHHuiMaU4Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org