Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4D30AC27DF988AA76B945204A3F14D14A74F97B.cer
File:                     F4D30AC27DF988AA76B945204A3F14D14A74F97B.cer (raw, json)
Hash identifier:          pt3YVXgvocVC/9nhYTSmH3th2xHh0V6+Pr8LlDuxbCg=
Subject key identifier:   F4:D3:0A:C2:7D:F9:88:AA:76:B9:45:20:4A:3F:14:D1:4A:74:F9:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17A0AF4503419E77893066904E66B318FA9F7AD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/F4D30AC27DF988AA76B945204A3F14D14A74F97B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 16:22:21 +0000
Certificate not after:    Wed 22 Jan 2025 16:27:21 +0000
Subordinate resources:    AS: 264899
                          IP: 168.228.4.0/22
                          IP: 2804:2f90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a0:af:45:03:41:9e:77:89:30:66:90:4e:66:b3:18:fa:9f:7a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 16:22:21 2024 GMT
            Not After : Jan 22 16:27:21 2025 GMT
        Subject: CN=F4D30AC27DF988AA76B945204A3F14D14A74F97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:e0:99:ab:f7:0e:0d:a6:de:0f:bd:1b:08:
                    18:80:de:d0:6b:32:83:8a:a9:6a:92:8a:08:60:08:
                    6d:e3:0b:ce:fb:68:bc:f9:88:05:28:99:f8:47:d6:
                    ae:1d:f5:37:ce:3a:1e:0e:31:eb:26:c2:74:46:9f:
                    ff:28:9b:c4:80:4b:34:f3:0f:1f:05:5c:72:0f:e9:
                    3b:26:5b:34:92:c9:f6:5d:a9:3e:11:02:86:0a:6d:
                    f1:ff:92:77:2b:c1:1c:29:e0:a7:27:23:8c:1c:43:
                    1d:a5:65:12:8c:67:cc:e7:61:28:a4:af:22:63:b1:
                    4d:ad:9f:3f:eb:0e:2f:48:2e:57:04:ed:d9:3f:d5:
                    44:a0:a4:16:ee:60:c4:e5:92:33:bf:f6:2d:bd:4a:
                    5a:c9:4e:6e:58:62:5f:d6:40:4c:f3:96:13:f4:6e:
                    08:d2:8b:02:c4:96:52:44:e9:98:fd:23:01:ca:82:
                    5e:d5:2a:27:c2:fa:e5:8d:db:60:0d:b6:cf:32:c0:
                    35:2e:66:9f:3f:e7:01:a5:40:52:17:e0:ef:f9:9b:
                    1b:8b:db:b5:2d:b9:55:2b:9c:1f:15:98:eb:f6:c6:
                    e6:5e:25:58:6e:53:ec:98:7e:5d:74:d5:f3:64:53:
                    de:be:7d:68:4f:71:13:09:de:b2:52:92:f2:bf:d7:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:D3:0A:C2:7D:F9:88:AA:76:B9:45:20:4A:3F:14:D1:4A:74:F9:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/F4D30AC27DF988AA76B945204A3F14D14A74F97B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/22
                IPv6:
                  2804:2f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264899

    Signature Algorithm: sha256WithRSAEncryption
         85:2d:69:e9:3b:00:11:68:12:de:3b:a1:33:b1:9b:78:6c:52:
         61:df:53:a4:8b:06:a0:0a:7d:12:e9:2a:15:ed:d2:e4:04:e0:
         e5:96:cc:3a:9c:2d:07:b5:3a:f7:56:3b:ac:cb:ec:59:b0:6b:
         c9:06:a6:e7:f9:8d:91:46:51:2e:36:c3:90:de:9b:84:19:08:
         53:c3:a5:9f:61:2b:ad:d8:4f:fa:6f:10:12:7a:fd:dc:4d:ad:
         9b:9a:45:a1:bf:ea:d4:f0:9a:f2:79:3b:1a:da:f6:79:bb:c1:
         56:0f:79:40:a6:4c:2d:0d:fc:3f:70:ef:35:68:1e:ae:20:68:
         ba:2b:65:1d:04:4f:b8:4e:61:f5:fe:08:87:d7:d3:86:29:48:
         dd:c2:b9:f1:96:b2:19:54:f2:dc:d6:90:48:0e:65:0a:f6:06:
         fd:c8:15:50:f5:4b:ac:8d:08:6f:6f:d8:8d:08:da:b3:a7:56:
         c4:e0:6a:b6:a6:f3:74:17:5d:b7:02:45:b2:35:21:e7:46:f4:
         82:29:a1:3e:3f:0e:f2:a7:bb:e7:2b:99:08:bc:26:bd:d0:56:
         34:22:18:49:fe:b2:8a:98:74:78:71:01:23:b8:15:97:80:39:
         cc:4a:12:b1:f5:50:9a:66:39:8f:77:a8:ce:b0:29:26:31:c8:
         27:15:7b:64
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUF6CvRQNBnneJMGaQTmazGPqfetMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjQxNjIyMjFaFw0yNTAxMjIxNjI3MjFaMDMxMTAvBgNV
BAMTKEY0RDMwQUMyN0RGOTg4QUE3NkI5NDUyMDRBM0YxNEQxNEE3NEY5N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDepOCZq/cODabeD70bCBiA3tBr
MoOKqWqSighgCG3jC877aLz5iAUomfhH1q4d9TfOOh4OMesmwnRGn/8om8SASzTz
Dx8FXHIP6TsmWzSSyfZdqT4RAoYKbfH/kncrwRwp4KcnI4wcQx2lZRKMZ8znYSik
ryJjsU2tnz/rDi9ILlcE7dk/1USgpBbuYMTlkjO/9i29SlrJTm5YYl/WQEzzlhP0
bgjSiwLEllJE6Zj9IwHKgl7VKifC+uWN22ANts8ywDUuZp8/5wGlQFIX4O/5mxuL
27UtuVUrnB8VmOv2xuZeJVhuU+yYfl101fNkU96+fWhPcRMJ3rJSkvK/16QnAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT00wrCffmIqna5
RSBKPxTRSnT5ezAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdmFxYVpmVTNHMU5YZ216QlhCMVRRZEtYOGptbzdRTWll
UHJCQlVpY2tpbS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXZhcWFaZlUzRzFOWGdtekJYQjFUUWRLWDhqbW83UU1p
ZVByQkJVaWNraW0vMC9GNEQzMEFDMjdERjk4OEFBNzZCOTQ1MjA0QTNGMTREMTRB
NzRGOTdCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKo5AQwDQQCAAIwBwMF
ACgEL5AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBArDMA0GCSqGSIb3DQEBCwUA
A4IBAQCFLWnpOwARaBLeO6EzsZt4bFJh31OkiwagCn0S6SoV7dLkBODllsw6nC0H
tTr3Vjusy+xZsGvJBqbn+Y2RRlEuNsOQ3puEGQhTw6WfYSut2E/6bxASev3cTa2b
mkWhv+rU8JryeTsa2vZ5u8FWD3lApkwtDfw/cO81aB6uIGi6K2UdBE+4TmH1/giH
19OGKUjdwrnxlrIZVPLc1pBIDmUK9gb9yBVQ9UusjQhvb9iNCNqzp1bE4Gq2pvN0
F123AkWyNSHnRvSCKaE+Pw7yp7vnK5kIvCa90FY0IhhJ/rKKmHR4cQEjuBWXgDnM
ShKx9VCaZjmPd6jOsCkmMcgnFXtk
-----END CERTIFICATE-----
Generated at Thu Feb 20 01:32:11 2025 by rpki-client