Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
File:                     F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer (raw, json)
Hash identifier:          Hx3k0c/e243d9UZp/rhkKiQEaqCPsO33mgWalYEATlo=
Subject key identifier:   F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       563C44F3C286EBF0B565CD64842AB6558DECA545
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Sep 2023 17:38:06 +0000
Certificate not after:    Thu 26 Sep 2024 17:43:06 +0000
Subordinate resources:    AS: 52951
                          IP: 143.0.204.0/22
                          IP: 170.79.164.0/22
                          IP: 177.11.176.0/21
                          IP: 186.250.140.0/22
                          IP: 2804:2928::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3c:44:f3:c2:86:eb:f0:b5:65:cd:64:84:2a:b6:55:8d:ec:a5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 28 17:38:06 2023 GMT
            Not After : Sep 26 17:43:06 2024 GMT
        Subject: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:bb:8a:ca:5e:1c:6e:d4:bd:53:98:b3:1d:
                    dd:90:2b:68:5d:a5:e7:99:9c:07:7c:56:3a:f7:4c:
                    1a:db:21:22:b9:dd:63:b2:c5:2f:43:01:a4:21:1d:
                    78:5a:31:d5:75:c2:eb:cf:e8:6f:e5:70:b2:1a:6f:
                    99:b1:70:bf:ef:f8:3d:fe:47:41:14:81:74:c7:96:
                    2f:bd:7c:f6:c9:35:aa:80:e0:dc:a7:f5:7a:56:30:
                    2f:b0:1a:4c:28:97:3c:77:4b:48:71:a9:4d:95:2f:
                    86:3a:6d:7f:c0:9c:cb:67:06:b6:45:ac:82:97:0f:
                    0c:b6:58:d1:b0:fe:c8:f2:4c:7e:e6:be:9f:7c:72:
                    cf:ba:a2:9f:cb:d2:af:31:b7:4d:8b:74:4a:b0:5d:
                    54:64:65:7a:eb:de:a6:a6:64:15:9b:9c:af:56:61:
                    f9:c9:2a:f4:b7:29:f5:78:c9:b2:78:52:e3:42:c0:
                    6c:83:24:b7:62:c1:cc:e7:e5:a0:3d:64:cf:63:ce:
                    04:8b:34:a9:ec:87:4d:69:bf:72:fd:19:a0:2d:f6:
                    b8:c7:54:5b:50:66:b8:c6:d4:f8:40:83:28:8a:6b:
                    2d:5b:9d:33:76:d2:18:04:95:09:00:e1:22:78:e7:
                    72:3f:db:5a:c2:e8:12:07:e6:a1:60:1b:30:b5:7f:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.204.0/22
                  170.79.164.0/22
                  177.11.176.0/21
                  186.250.140.0/22
                IPv6:
                  2804:2928::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52951

    Signature Algorithm: sha256WithRSAEncryption
         2c:18:a3:ce:66:db:65:33:bb:31:59:de:ac:aa:a3:6d:d6:ac:
         bf:71:0c:57:c7:11:ea:53:c5:62:ef:a5:ef:a1:79:f4:0f:b8:
         4d:90:08:f9:b2:bf:95:74:c9:9a:4a:9d:88:c0:5a:90:b4:7f:
         8e:3d:d8:a7:b2:e9:76:74:7d:77:1e:30:42:c3:a5:ad:9e:8b:
         84:14:d3:f7:07:ec:a9:bd:1f:37:b1:0b:c9:7c:ac:64:f8:e1:
         52:52:e6:2b:02:2f:30:57:c4:0f:31:84:dc:d3:58:9b:64:98:
         30:2c:53:b5:60:24:2c:bf:03:68:30:76:aa:11:6b:71:07:8e:
         84:ff:e0:f2:ff:4b:8a:a0:3a:f0:df:80:5c:3b:a3:b0:fa:9b:
         33:76:17:ee:2b:6d:c9:0f:61:bb:b4:38:10:29:53:99:1b:52:
         cd:40:5c:94:af:49:e5:69:58:6d:af:4f:85:ec:fb:fd:af:03:
         96:3f:a0:35:21:b9:48:83:2b:cc:8d:eb:2f:29:80:51:ca:4f:
         bb:fe:bb:32:25:7d:14:ca:66:b5:3c:51:01:d6:66:09:34:00:
         f5:e5:5b:e0:42:49:e0:f8:e1:49:5d:bc:df:43:84:11:21:9c:
         5f:97:e3:28:c1:fb:b8:40:d5:9c:3a:72:d0:a3:27:f0:44:bb:
         6d:e9:73:05
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUVjxE88KG6/C1Zc1khCq2VY3spUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjgxNzM4MDZaFw0yNDA5MjYxNzQzMDZaMDMxMTAvBgNV
BAMTKEYxODA0NDAwMDdBQ0Q0QkY4RDk2MjFFRjdDN0RDMkM4NDgxNzVDRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChxruKyl4cbtS9U5izHd2QK2hd
peeZnAd8Vjr3TBrbISK53WOyxS9DAaQhHXhaMdV1wuvP6G/lcLIab5mxcL/v+D3+
R0EUgXTHli+9fPbJNaqA4Nyn9XpWMC+wGkwolzx3S0hxqU2VL4Y6bX/AnMtnBrZF
rIKXDwy2WNGw/sjyTH7mvp98cs+6op/L0q8xt02LdEqwXVRkZXrr3qamZBWbnK9W
YfnJKvS3KfV4ybJ4UuNCwGyDJLdiwczn5aA9ZM9jzgSLNKnsh01pv3L9GaAt9rjH
VFtQZrjG1PhAgyiKay1bnTN20hgElQkA4SJ453I/21rC6BIH5qFgGzC1fw3NAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxgEQAB6zUv42W
Ie98fcLISBdc0zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdTg2V3Q3QjJxaG05UHhkd2t5YXhDblhDOHEyS2dLQzJw
clJxaTM1RFlZYy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXU4Nld0N0IycWhtOVB4ZHdreWF4Q25YQzhxMktnS0My
cHJScWkzNURZWWMvMC9GMTgwNDQwMDA3QUNENEJGOEQ5NjIxRUY3QzdEQzJDODQ4
MTc1Q0QzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKPAMwDBAKqT6QDBAOx
C7ADBAK6+owwDQQCAAIwBwMFACgEKSgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AM7XMA0GCSqGSIb3DQEBCwUAA4IBAQAsGKPOZttlM7sxWd6sqqNt1qy/cQxXxxHq
U8Vi76XvoXn0D7hNkAj5sr+VdMmaSp2IwFqQtH+OPdinsul2dH13HjBCw6WtnouE
FNP3B+ypvR83sQvJfKxk+OFSUuYrAi8wV8QPMYTc01ibZJgwLFO1YCQsvwNoMHaq
EWtxB46E/+Dy/0uKoDrw34BcO6Ow+pszdhfuK23JD2G7tDgQKVOZG1LNQFyUr0nl
aVhtr0+F7Pv9rwOWP6A1IblIgyvMjesvKYBRyk+7/rsyJX0Uyma1PFEB1mYJNAD1
5VvgQkng+OFJXbzfQ4QRIZxfl+Mowfu4QNWcOnLQoyfwRLtt6XMF
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:45 2024 by rpki-client on console-ams.rpki-client.org