Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4BDCE480451ABBB0286495824155B9D52C19A01.cer
File:                     F4BDCE480451ABBB0286495824155B9D52C19A01.cer (raw, json)
Hash identifier:          v1cNpzh2R6YHnnpGIX2+SEO8MGFO8TaFuP/rfSxLuak=
Subject key identifier:   F4:BD:CE:48:04:51:AB:BB:02:86:49:58:24:15:5B:9D:52:C1:9A:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C623CD89763CC607027FA923C733D51D19F1A8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/F4BDCE480451ABBB0286495824155B9D52C19A01.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 21:03:01 +0000
Certificate not after:    Thu 13 Feb 2025 21:08:01 +0000
Subordinate resources:    AS: 52576
                          IP: 177.86.200.0/21
                          IP: 2804:cf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:62:3c:d8:97:63:cc:60:70:27:fa:92:3c:73:3d:51:d1:9f:1a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 21:03:01 2024 GMT
            Not After : Feb 13 21:08:01 2025 GMT
        Subject: CN=F4BDCE480451ABBB0286495824155B9D52C19A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:8a:f8:eb:51:45:49:cd:61:cf:26:0b:f7:
                    1a:75:4c:6e:ba:53:f1:7c:79:e1:1e:43:74:6b:02:
                    38:80:8b:f5:28:31:df:c4:c5:22:94:d8:a8:4c:3c:
                    fb:b6:29:21:e0:20:5f:d6:cb:6a:b8:42:c4:ca:ca:
                    1f:5a:e5:86:8a:ae:5d:74:c0:28:6a:b7:5e:f0:1c:
                    79:d0:b0:86:fb:43:fd:57:b7:89:18:86:b0:41:de:
                    cc:39:9a:93:d3:41:01:f9:ff:83:73:17:73:bc:72:
                    80:74:eb:67:9b:3e:31:d0:91:d7:50:af:1d:71:6a:
                    0e:3a:8d:0c:0a:42:da:85:d7:6a:5c:86:40:bb:64:
                    33:05:37:de:47:9e:14:4d:24:49:01:6a:e9:41:f1:
                    95:68:65:74:05:f4:b9:ef:82:8f:f0:96:c4:52:ff:
                    31:09:e7:23:ca:9e:06:92:12:28:90:1e:f4:20:7c:
                    66:65:04:5b:a2:5c:c2:71:dd:87:6d:eb:a4:09:01:
                    24:d5:2b:a5:8e:d1:78:2e:d4:e4:9d:a6:58:b8:b0:
                    5c:69:ec:52:46:fa:e2:b4:da:29:6e:fb:5b:d8:a1:
                    7b:26:bb:a2:8d:fe:11:14:14:9b:89:b8:22:0b:04:
                    d7:53:bc:ee:e5:01:02:3d:de:ed:33:24:46:c7:f9:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:BD:CE:48:04:51:AB:BB:02:86:49:58:24:15:5B:9D:52:C1:9A:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/F4BDCE480451ABBB0286495824155B9D52C19A01.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.200.0/21
                IPv6:
                  2804:cf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52576

    Signature Algorithm: sha256WithRSAEncryption
         69:ea:bd:87:1a:7d:64:30:43:7b:5d:b8:1d:5e:68:47:c7:91:
         80:58:dc:d8:8f:2a:e6:61:28:82:01:00:76:0b:8e:3b:4a:01:
         fa:9d:11:74:ff:93:5e:8d:bf:0b:22:60:a3:fb:18:95:c8:0c:
         d8:0e:6e:31:08:7d:03:a6:27:5f:8d:ec:b6:7e:8c:c3:54:58:
         fa:72:1d:8f:e2:de:a2:6d:34:01:f4:8c:01:3b:04:ad:f8:5c:
         17:97:ad:df:c3:aa:87:a3:6b:4c:6d:cf:ee:b2:22:b8:c9:b3:
         ed:de:2e:4c:1d:8e:1c:ea:4c:52:44:b3:80:81:77:73:6b:0a:
         31:91:0c:4f:53:c7:a1:4e:ec:71:ba:fb:06:2b:35:14:11:02:
         e6:34:58:d8:61:79:19:0f:58:c0:39:1d:3e:dd:c3:11:61:89:
         e2:9b:38:e5:30:a2:87:98:07:95:1e:95:2e:e7:5b:00:43:be:
         e5:80:17:c7:39:ed:b3:3a:f4:1e:b3:7f:be:4b:1a:4e:6c:25:
         44:c0:34:32:38:e1:38:75:87:ea:e6:bd:b9:0a:22:3b:2a:b0:
         de:b3:d7:39:dc:43:58:42:70:e6:5d:97:f1:87:af:8b:1a:24:
         a6:5b:37:8f:06:e2:73:68:1e:6b:bb:a1:06:99:a4:0c:39:c4:
         55:a8:40:08
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTGI82JdjzGBwJ/qSPHM9UdGfGo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUyMTAzMDFaFw0yNTAyMTMyMTA4MDFaMDMxMTAvBgNV
BAMTKEY0QkRDRTQ4MDQ1MUFCQkIwMjg2NDk1ODI0MTU1QjlENTJDMTlBMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+or461FFSc1hzyYL9xp1TG66
U/F8eeEeQ3RrAjiAi/UoMd/ExSKU2KhMPPu2KSHgIF/Wy2q4QsTKyh9a5YaKrl10
wChqt17wHHnQsIb7Q/1Xt4kYhrBB3sw5mpPTQQH5/4NzF3O8coB062ebPjHQkddQ
rx1xag46jQwKQtqF12pchkC7ZDMFN95HnhRNJEkBaulB8ZVoZXQF9Lnvgo/wlsRS
/zEJ5yPKngaSEiiQHvQgfGZlBFuiXMJx3Ydt66QJASTVK6WO0Xgu1OSdpli4sFxp
7FJG+uK02ilu+1vYoXsmu6KN/hEUFJuJuCILBNdTvO7lAQI93u0zJEbH+cz9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0vc5IBFGruwKG
SVgkFVudUsGaATAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81Y25hNmVSTTlUc1dncmMydlN4ZTdBNEwzamJnSkhqb05Y
RVVKNkNNR0pYUi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9O
WEVVSjZDTUdKWFIvMC9GNEJEQ0U0ODA0NTFBQkJCMDI4NjQ5NTgyNDE1NUI5RDUy
QzE5QTAxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxVsgwDQQCAAIwBwMF
ACgEDPAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM1gMA0GCSqGSIb3DQEBCwUA
A4IBAQBp6r2HGn1kMEN7XbgdXmhHx5GAWNzYjyrmYSiCAQB2C447SgH6nRF0/5Ne
jb8LImCj+xiVyAzYDm4xCH0Dpidfjey2fozDVFj6ch2P4t6ibTQB9IwBOwSt+FwX
l63fw6qHo2tMbc/usiK4ybPt3i5MHY4c6kxSRLOAgXdzawoxkQxPU8ehTuxxuvsG
KzUUEQLmNFjYYXkZD1jAOR0+3cMRYYnimzjlMKKHmAeVHpUu51sAQ77lgBfHOe2z
OvQes3++SxpObCVEwDQyOOE4dYfq5r25CiI7KrDes9c53ENYQnDmXZfxh6+LGiSm
WzePBuJzaB5ru6EGmaQMOcRVqEAI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org