Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D4B7C0B71779F451400B9EFABDEA0FE09CA68C42.cer
File:                     D4B7C0B71779F451400B9EFABDEA0FE09CA68C42.cer (raw, json)
Hash identifier:          IF2NRd33T1ICjBHq0LCIPmTdkDpiCFy53RfzwSls8Wo=
Subject key identifier:   D4:B7:C0:B7:17:79:F4:51:40:0B:9E:FA:BD:EA:0F:E0:9C:A6:8C:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F78F8ABB9098073963204BA6E933F9DE098D953
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/D4B7C0B71779F451400B9EFABDEA0FE09CA68C42.mft
caRepository:             rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Nov 2022 14:42:57 +0000
Certificate not after:    Tue 31 Oct 2023 14:47:57 +0000
Subordinate resources:    AS: 265229
                          IP: 168.0.52.0/22
                          IP: 170.247.208.0/22
                          IP: 2804:2c98::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:78:f8:ab:b9:09:80:73:96:32:04:ba:6e:93:3f:9d:e0:98:d9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 14:42:57 2022 GMT
            Not After : Oct 31 14:47:57 2023 GMT
        Subject: CN=D4B7C0B71779F451400B9EFABDEA0FE09CA68C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:69:af:1a:0f:72:2c:09:7a:d7:81:ba:8b:
                    e0:22:7f:98:24:11:de:e2:83:20:e9:2c:07:c7:aa:
                    50:ab:ab:18:8c:8d:b0:c4:f6:6e:2a:05:f8:03:bd:
                    8f:82:ff:7c:71:2c:01:8d:03:ee:ab:be:83:43:ff:
                    9d:07:f4:06:f3:71:8e:e4:b1:f8:45:28:5c:fe:7f:
                    e2:9b:85:e0:ba:fe:6a:08:4a:a6:2d:35:99:c8:6c:
                    cb:18:4d:b8:97:d6:4a:c5:ff:3c:3b:82:9a:78:8c:
                    0f:d9:98:bb:4b:41:79:de:10:31:75:c2:ef:e3:a5:
                    b4:96:a3:bb:19:5b:0b:ce:23:18:7a:4e:7e:d3:ca:
                    d6:1c:4b:83:39:ad:41:5c:94:69:13:3c:8d:9c:50:
                    e6:30:f3:62:63:55:4f:7c:12:0b:ec:b5:a6:55:b8:
                    76:52:17:f1:96:58:5a:fe:09:b9:16:27:58:36:d7:
                    fb:fd:b7:cd:d5:75:2f:16:47:29:18:43:b1:89:af:
                    91:84:81:a1:bb:36:d6:b2:43:77:a4:ff:76:96:ca:
                    48:0a:cf:ca:3d:04:07:d8:c7:62:da:53:68:e9:61:
                    47:49:bb:32:de:93:17:fd:00:56:30:fc:18:f6:11:
                    9c:4b:8e:65:2b:c2:cd:7b:69:af:f8:a6:53:59:29:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:B7:C0:B7:17:79:F4:51:40:0B:9E:FA:BD:EA:0F:E0:9C:A6:8C:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/D4B7C0B71779F451400B9EFABDEA0FE09CA68C42.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.52.0/22
                  170.247.208.0/22
                IPv6:
                  2804:2c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265229

    Signature Algorithm: sha256WithRSAEncryption
         39:68:71:45:cf:b7:a1:6e:45:7b:a7:be:95:b1:06:7e:97:3b:
         c4:dd:33:54:f8:1f:e8:e0:11:a0:92:52:ab:6e:04:e2:28:65:
         d1:cc:80:f8:58:25:3a:44:89:e1:15:aa:df:cf:38:1e:55:44:
         e7:e0:d0:c8:03:44:c5:99:95:ff:c7:24:29:e1:5e:65:33:cb:
         9a:fc:be:1c:c4:b0:57:b5:5a:97:18:4b:e9:fb:6c:5a:dc:f7:
         5e:fe:1f:cc:94:f4:29:51:84:88:45:64:a0:e3:49:e9:98:9d:
         6a:ed:87:9c:ec:8f:cf:8d:bf:52:62:6b:db:55:22:7d:b5:c3:
         52:95:b9:52:b4:d5:47:c3:af:37:3e:23:f0:41:d8:58:5d:46:
         26:24:78:d3:c3:18:3f:2d:d3:77:96:3c:12:2f:36:0e:48:49:
         fb:cc:41:96:70:4f:c4:41:01:53:c0:e1:cd:f7:a5:49:e6:9a:
         84:61:c1:6a:4d:26:b5:5c:e5:5d:38:f4:32:bb:34:7e:17:5d:
         42:c9:cd:a1:84:f8:ef:75:af:40:97:1b:1c:9a:17:c7:12:3a:
         91:be:f2:96:f8:19:95:bd:a8:ef:0f:a4:c7:e5:ac:04:62:fd:
         a6:d7:4c:f4:17:35:06:1b:0b:f4:9c:8b:d8:1f:ac:6c:38:45:
         b2:f5:92:ca
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIUT3j4q7kJgHOWMgS6bpM/neCY2VMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMDExNDQyNTdaFw0yMzEwMzExNDQ3NTdaMDMxMTAvBgNV
BAMTKEQ0QjdDMEI3MTc3OUY0NTE0MDBCOUVGQUJERUEwRkUwOUNBNjhDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrWmvGg9yLAl614G6i+Aif5gk
Ed7igyDpLAfHqlCrqxiMjbDE9m4qBfgDvY+C/3xxLAGNA+6rvoND/50H9AbzcY7k
sfhFKFz+f+KbheC6/moISqYtNZnIbMsYTbiX1krF/zw7gpp4jA/ZmLtLQXneEDF1
wu/jpbSWo7sZWwvOIxh6Tn7TytYcS4M5rUFclGkTPI2cUOYw82JjVU98EgvstaZV
uHZSF/GWWFr+CbkWJ1g21/v9t83VdS8WRykYQ7GJr5GEgaG7NtayQ3ek/3aWykgK
z8o9BAfYx2LaU2jpYUdJuzLekxf9AFYw/Bj2EZxLjmUrws17aa/4plNZKfzxAgMB
AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUt8C3F3n0UUAL
nvq96g/gnKaMQjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9rQTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0
Ykw5eE54aDRVLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL2tBNmJpSmRvSnlxQndRTnJ1YlhnVjRnWjIyZkZCeGtHVXRi
TDl4TnhoNFUvMC9ENEI3QzBCNzE3NzlGNDUxNDAwQjlFRkFCREVBMEZFMDlDQTY4
QzQyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKoADQDBAKq99AwDQQCAAIw
BwMFACgELJgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAwNMA0GCSqGSIb3DQEB
CwUAA4IBAQA5aHFFz7ehbkV7p76VsQZ+lzvE3TNU+B/o4BGgklKrbgTiKGXRzID4
WCU6RInhFarfzzgeVUTn4NDIA0TFmZX/xyQp4V5lM8ua/L4cxLBXtVqXGEvp+2xa
3Pde/h/MlPQpUYSIRWSg40npmJ1q7Yec7I/Pjb9SYmvbVSJ9tcNSlblStNVHw683
PiPwQdhYXUYmJHjTwxg/LdN3ljwSLzYOSEn7zEGWcE/EQQFTwOHN96VJ5pqEYcFq
TSa1XOVdOPQyuzR+F11Cyc2hhPjvda9AlxscmhfHEjqRvvKW+BmVvajvD6TH5awE
Yv2m10z0FzUGGwv0nIvYH6xsOEWy9ZLK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org