Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
File:                     F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer (raw, json)
Hash identifier:          ETU+dz/liBKxCnSK/xQ4vsU+lbkq2IlimHCBFHRS7kY=
Subject key identifier:   F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AEAAD40534A510FBDA55FBB7736C50D398F14C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Sep 2022 12:23:21 +0000
Certificate not after:    Tue 26 Sep 2023 12:28:21 +0000
Subordinate resources:    AS: 53059
                          IP: 45.4.64.0/22
                          IP: 138.0.100.0/22
                          IP: 168.228.68.0/22
                          IP: 177.137.192.0/20
                          IP: 179.96.192.0/21
                          IP: 179.96.240.0/20
                          IP: 186.193.96.0/20
                          IP: 186.208.208.0/21
                          IP: 186.235.0.0/20
                          IP: 186.251.112.0/21
                          IP: 187.49.192.0/20
                          IP: 187.86.96.0/20
                          IP: 187.87.112.0/20
                          IP: 187.108.64.0/20
                          IP: 187.109.176.0/20
                          IP: 189.45.16.0/20
                          IP: 200.233.80.0/20
                          IP: 201.148.188.0/22
                          IP: 2804:2140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ea:ad:40:53:4a:51:0f:bd:a5:5f:bb:77:36:c5:0d:39:8f:14:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 12:23:21 2022 GMT
            Not After : Sep 26 12:28:21 2023 GMT
        Subject: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:ce:38:8a:af:6c:54:96:66:74:5b:09:a0:
                    ac:94:21:ee:fb:4b:63:d7:8b:81:bb:e3:7c:ec:d9:
                    04:2e:d5:d5:c3:43:34:e9:04:b4:a7:58:1e:0c:24:
                    d6:17:da:4f:f4:33:cb:8a:06:f6:6c:a0:4c:cc:f8:
                    62:b9:ba:9b:22:63:c6:b6:89:54:94:d3:48:ed:2d:
                    35:2c:27:07:ef:2d:ae:12:1d:46:9a:17:3f:2e:6b:
                    c6:50:7f:5f:f6:c5:3f:29:00:a9:a0:3e:97:b5:51:
                    c6:9c:a9:5e:1e:5d:a6:82:79:c1:1d:04:01:8d:99:
                    33:99:e9:5e:af:2d:41:d0:15:ff:c0:59:04:0e:df:
                    b7:56:4e:67:f6:7a:7b:d3:88:13:c6:61:30:e6:b4:
                    b9:1d:05:13:29:4e:ae:6c:8e:ca:1a:a5:26:44:7e:
                    87:32:c6:f0:a0:4b:f0:c5:a0:37:fb:79:91:e5:16:
                    b8:e2:11:a4:14:e1:da:69:94:eb:17:e4:6a:1a:31:
                    01:f6:b4:1c:ce:21:11:54:61:98:d0:7f:a1:1c:aa:
                    0f:e3:5f:9e:e8:bf:ec:0c:4a:f5:ba:71:ce:21:4e:
                    d2:53:c1:da:5d:d8:ee:0e:88:d4:80:e9:e6:c9:6e:
                    b8:a0:58:fb:07:ab:fe:7c:a4:3d:c0:bb:90:b5:17:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22
                  138.0.100.0/22
                  168.228.68.0/22
                  177.137.192.0/20
                  179.96.192.0/21
                  179.96.240.0/20
                  186.193.96.0/20
                  186.208.208.0/21
                  186.235.0.0/20
                  186.251.112.0/21
                  187.49.192.0/20
                  187.86.96.0/20
                  187.87.112.0/20
                  187.108.64.0/20
                  187.109.176.0/20
                  189.45.16.0/20
                  200.233.80.0/20
                  201.148.188.0/22
                IPv6:
                  2804:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53059

    Signature Algorithm: sha256WithRSAEncryption
         02:37:8b:2c:10:ae:d8:36:71:da:cf:0a:c6:41:9f:21:df:b3:
         cf:2f:60:7f:8e:e9:0c:21:dd:1c:54:e9:49:e6:5f:eb:7c:e6:
         23:0c:47:e3:6a:73:03:f2:7c:19:d1:07:90:8c:d8:29:2f:e4:
         5e:c6:0e:86:ff:eb:4b:6e:83:0b:e9:25:77:0d:2c:f7:0c:f6:
         72:a8:1e:06:f5:c0:0c:0f:38:37:12:be:58:4f:80:5b:92:55:
         92:01:39:53:05:f4:8d:8e:0c:28:ce:7c:7d:b5:c8:23:6b:95:
         a7:4e:eb:72:49:cc:46:24:c2:f2:e4:43:92:9f:9d:4e:f2:ae:
         12:12:f4:84:84:ce:22:e2:06:aa:c4:19:d9:7d:27:4d:e2:10:
         94:34:b6:a6:78:93:bb:bb:3e:26:8d:db:bc:3f:1a:8d:0d:e9:
         ab:40:46:66:19:30:4a:67:92:d9:4e:9d:1c:f4:2a:7a:fb:1a:
         a9:af:2c:cb:3f:f0:f3:1c:4a:37:8a:d9:92:ac:db:06:67:20:
         90:3b:dd:3d:e7:e8:7f:de:94:b4:20:83:ce:a5:e4:60:4b:b1:
         3c:3c:48:1f:e1:dc:f0:e3:47:d5:cf:0c:15:09:56:80:25:23:
         fb:b5:e5:c6:96:df:f2:f2:43:fe:f0:86:d4:33:a2:63:17:46:
         9f:0a:2d:2d
-----BEGIN CERTIFICATE-----
MIIGeTCCBWGgAwIBAgIUWuqtQFNKUQ+9pV+7dzbFDTmPFMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MjcxMjIzMjFaFw0yMzA5MjYxMjI4MjFaMDMxMTAvBgNV
BAMTKEYyNDVBMjBERDc1NDEwMkVCNEM1QURBQkU4RkRGN0M4RjMwQUYzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQM44iq9sVJZmdFsJoKyUIe77
S2PXi4G743zs2QQu1dXDQzTpBLSnWB4MJNYX2k/0M8uKBvZsoEzM+GK5upsiY8a2
iVSU00jtLTUsJwfvLa4SHUaaFz8ua8ZQf1/2xT8pAKmgPpe1UcacqV4eXaaCecEd
BAGNmTOZ6V6vLUHQFf/AWQQO37dWTmf2envTiBPGYTDmtLkdBRMpTq5sjsoapSZE
focyxvCgS/DFoDf7eZHlFrjiEaQU4dpplOsX5GoaMQH2tBzOIRFUYZjQf6Ecqg/j
X57ov+wMSvW6cc4hTtJTwdpd2O4OiNSA6ebJbrigWPsHq/58pD3Au5C1F8lVAgMB
AAGjggODMIIDfzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyRaIN11QQLrTF
ravo/ffI8wrz6DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENk0yNFBHYmZjUkZLSEo1WXh2cVpRN3BVSEZScEpQVG1h
WWkyMTllejMzNi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENk0yNFBHYmZjUkZLSEo1WXh2cVpRN3BVSEZScEpQVG1h
WWkyMTllejMzNi8wL0YyNDVBMjBERDc1NDEwMkVCNEM1QURBQkU4RkRGN0M4RjMw
QUYzRTgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjCBlgYIKwYBBQUHAQcBAf8EgYYwgYMwcgQCAAEwbAMEAi0EQAMEAooAZAME
AqjkRAMEBLGJwAMEA7NgwAMEBLNg8AMEBLrBYAMEA7rQ0AMEBLrrAAMEA7r7cAME
BLsxwAMEBLtWYAMEBLtXcAMEBLtsQAMEBLttsAMEBL0tEAMEBMjpUAMEAsmUvDAN
BAIAAjAHAwUAKAQhQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAz0MwDQYJKoZI
hvcNAQELBQADggEBAAI3iywQrtg2cdrPCsZBnyHfs88vYH+O6Qwh3RxU6UnmX+t8
5iMMR+NqcwPyfBnRB5CM2Ckv5F7GDob/60tugwvpJXcNLPcM9nKoHgb1wAwPODcS
vlhPgFuSVZIBOVMF9I2ODCjOfH21yCNrladO63JJzEYkwvLkQ5KfnU7yrhIS9ISE
ziLiBqrEGdl9J03iEJQ0tqZ4k7u7PiaN27w/Go0N6atARmYZMEpnktlOnRz0Knr7
GqmvLMs/8PMcSjeK2ZKs2wZnIJA73T3n6H/elLQgg86l5GBLsTw8SB/h3PDjR9XP
DBUJVoAlI/u15caW3/LyQ/7whtQzomMXRp8KLS0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org