Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
File:                     F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer (raw, json)
Hash identifier:          yB17pCg6lRwpSqmgLV0c4qnRE8wSsaDub6+z/TdDWBA=
Subject key identifier:   F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A7D0EFD73D6060896CA7969C5F09BA0FCE5838A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 12:48:48 +0000
Certificate not after:    Wed 05 Feb 2025 12:53:48 +0000
Subordinate resources:    AS: 264273
                          IP: 138.118.220.0/22
                          IP: 2804:2550::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7d:0e:fd:73:d6:06:08:96:ca:79:69:c5:f0:9b:a0:fc:e5:83:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 12:48:48 2024 GMT
            Not After : Feb  5 12:53:48 2025 GMT
        Subject: CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:7a:13:58:c5:60:db:ca:58:40:d5:23:8d:
                    6e:ba:5d:d1:39:3e:26:a5:8b:66:a2:78:45:7c:00:
                    96:a1:eb:1e:ea:1a:7e:06:76:f9:20:e5:47:48:88:
                    9d:98:5d:55:ef:45:39:fa:0e:69:4f:c8:f3:59:1a:
                    96:4d:fa:c3:29:cf:3c:5a:eb:01:72:d7:12:96:a3:
                    cf:6c:5f:66:3d:bb:14:9f:d1:50:85:3f:f7:ba:6f:
                    cc:5d:d8:97:33:49:69:62:af:8e:33:a6:4d:2c:ee:
                    b7:06:5d:e2:8b:f9:91:76:8b:3b:35:e2:fe:22:80:
                    63:80:94:b1:c9:a5:cb:4c:f3:8b:68:33:6e:f0:11:
                    f7:1e:0f:da:7b:17:cb:80:1d:7c:7e:89:8a:8a:77:
                    c0:12:04:dd:3d:c8:61:a5:c1:3d:46:e7:ed:85:fc:
                    16:d6:c1:f1:ce:cb:17:82:4b:37:c6:82:8a:78:96:
                    58:ca:6e:8b:7d:b3:8c:03:23:9e:da:e3:df:53:09:
                    45:fe:cb:7c:fb:96:92:e6:a1:ca:6b:92:b3:4a:ef:
                    88:7f:9a:58:8e:a9:78:81:75:13:a4:a1:3c:40:c3:
                    5a:26:46:15:77:e4:d9:09:a3:d3:c4:5a:f4:b9:a4:
                    a5:bc:21:65:83:5a:c8:61:d1:46:72:ce:2d:00:dc:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.220.0/22
                IPv6:
                  2804:2550::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264273

    Signature Algorithm: sha256WithRSAEncryption
         b7:f6:5c:c4:51:f1:2d:a0:5c:db:f3:b1:bf:07:2d:e8:34:23:
         19:1c:11:74:cd:62:2e:38:bb:60:61:dd:12:b3:8e:82:c4:64:
         dd:eb:a2:d6:a1:12:d0:57:b5:f3:50:ea:09:13:92:bd:26:f6:
         d0:ad:8f:b7:01:69:c9:4b:56:48:12:d3:eb:c6:76:72:b8:d1:
         52:bf:64:74:c6:8a:a4:32:ec:44:57:68:36:0f:f0:21:d0:0b:
         2b:a6:13:f0:06:2b:fb:11:69:2a:c9:53:9e:f6:cf:04:fd:5d:
         57:32:70:2b:12:6f:ec:c1:fc:d1:4e:a6:1a:08:a8:24:13:d8:
         f8:be:45:b8:fc:77:e1:dd:16:8c:0f:c5:50:67:95:8a:05:48:
         42:f0:fc:1a:9e:40:f6:10:27:10:72:a4:02:f7:4c:25:4a:27:
         8a:71:6a:da:23:c8:92:b2:f0:fb:fe:aa:ca:d8:f9:68:04:5f:
         da:cf:ef:01:e6:98:f7:21:00:87:fa:dd:07:ce:5c:00:c1:1a:
         00:90:94:29:fe:79:d2:4c:3d:da:44:f4:e2:4a:a5:66:ce:fc:
         ad:fd:45:e8:c2:3b:f9:93:24:98:44:3b:d6:7a:31:2b:a9:cc:
         de:00:de:ad:ba:b7:0c:d7:e8:b9:4d:10:62:a7:86:5e:15:3c:
         f2:a9:48:70
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUSn0O/XPWBgiWynlpxfCboPzlg4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDcxMjQ4NDhaFw0yNTAyMDUxMjUzNDhaMDMxMTAvBgNV
BAMTKEY0MkEwRENBMjVGMzA3NjdBNkNDQTY5MzI0RUUyMzU2QUM3NzVERTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyi3oTWMVg28pYQNUjjW66XdE5
Piali2aieEV8AJah6x7qGn4Gdvkg5UdIiJ2YXVXvRTn6DmlPyPNZGpZN+sMpzzxa
6wFy1xKWo89sX2Y9uxSf0VCFP/e6b8xd2JczSWlir44zpk0s7rcGXeKL+ZF2izs1
4v4igGOAlLHJpctM84toM27wEfceD9p7F8uAHXx+iYqKd8ASBN09yGGlwT1G5+2F
/BbWwfHOyxeCSzfGgop4lljKbot9s4wDI57a499TCUX+y3z7lpLmocprkrNK74h/
mliOqXiBdROkoTxAw1omRhV35NkJo9PEWvS5pKW8IWWDWshh0UZyzi0A3IflAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0Kg3KJfMHZ6bM
ppMk7iNWrHdd5zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zMU1WblFuaTk5dndBN0hyNmpXbk5FdzRrV3RuVDRHUDll
ZmdZbkhtNWcyWS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMzFNVm5Rbmk5OXZ3QTdIcjZqV25ORXc0a1d0blQ0R1A5
ZWZnWW5IbTVnMlkvMC9GNDJBMERDQTI1RjMwNzY3QTZDQ0E2OTMyNEVFMjM1NkFD
Nzc1REU3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKdtwwDQQCAAIwBwMF
ACgEJVAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAhRMA0GCSqGSIb3DQEBCwUA
A4IBAQC39lzEUfEtoFzb87G/By3oNCMZHBF0zWIuOLtgYd0Ss46CxGTd66LWoRLQ
V7XzUOoJE5K9JvbQrY+3AWnJS1ZIEtPrxnZyuNFSv2R0xoqkMuxEV2g2D/Ah0Asr
phPwBiv7EWkqyVOe9s8E/V1XMnArEm/swfzRTqYaCKgkE9j4vkW4/Hfh3RaMD8VQ
Z5WKBUhC8PwankD2ECcQcqQC90wlSieKcWraI8iSsvD7/qrK2PloBF/az+8B5pj3
IQCH+t0HzlwAwRoAkJQp/nnSTD3aRPTiSqVmzvyt/UXowjv5kySYRDvWejErqcze
AN6turcM1+i5TRBip4ZeFTzyqUhw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org