Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4DE416E09A01830950A55162BC22D178BE19A9E.cer
File:                     F4DE416E09A01830950A55162BC22D178BE19A9E.cer (raw, json)
Hash identifier:          TsKEDU7ii//zqnQPbhL3faKcm+OnKG88GOWwhBhbWL8=
Subject key identifier:   F4:DE:41:6E:09:A0:18:30:95:0A:55:16:2B:C2:2D:17:8B:E1:9A:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4274381FA1AC785FE984467DAE0411AF92B748BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F4DE416E09A01830950A55162BC22D178BE19A9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 12:30:46 +0000
Certificate not after:    Fri 22 Nov 2024 12:35:46 +0000
Subordinate resources:    AS: 267992
                          IP: 45.167.68.0/22
                          IP: 2804:5658::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:74:38:1f:a1:ac:78:5f:e9:84:46:7d:ae:04:11:af:92:b7:48:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 12:30:46 2023 GMT
            Not After : Nov 22 12:35:46 2024 GMT
        Subject: CN=F4DE416E09A01830950A55162BC22D178BE19A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:b3:1f:4f:a9:e1:e1:6a:64:86:08:2f:ed:
                    14:7b:ed:47:fa:5a:b7:58:34:a6:4f:e3:3c:e0:1d:
                    3c:67:0c:d8:b4:19:87:46:3e:23:84:fb:42:11:14:
                    48:da:16:8e:c3:19:b5:db:f8:d6:77:c3:0b:6a:bb:
                    c8:4f:56:09:11:67:32:8c:da:2c:41:62:f9:17:26:
                    dc:e7:c9:34:20:e2:a8:c9:ed:d2:94:e1:db:59:c0:
                    85:f4:7c:23:a3:1a:54:0d:42:6f:2a:30:bc:55:d7:
                    10:c0:74:72:5d:84:2f:70:c9:74:69:26:e5:e1:4a:
                    97:c2:23:02:e8:49:7b:63:13:fa:5b:d4:5a:51:fc:
                    84:1d:11:c4:24:57:85:d5:a3:0a:5e:e4:2d:a3:2e:
                    08:e5:d7:22:63:2b:83:5b:3d:03:dd:b4:0f:1c:be:
                    3c:8c:cb:98:08:78:7a:5b:60:87:13:4e:75:39:1a:
                    73:bf:d3:14:95:04:ff:b6:f2:d6:91:75:f4:6d:ff:
                    e8:1a:d0:39:82:92:d7:5f:85:27:a8:67:97:74:07:
                    e9:72:83:43:f0:bc:df:c1:f1:cd:fe:20:ea:b1:37:
                    f3:ec:07:cf:af:6b:72:30:57:fc:ec:2b:79:d7:c1:
                    d2:aa:f7:80:72:71:d0:53:f2:7b:b3:39:f3:eb:31:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:DE:41:6E:09:A0:18:30:95:0A:55:16:2B:C2:2D:17:8B:E1:9A:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F4DE416E09A01830950A55162BC22D178BE19A9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.68.0/22
                IPv6:
                  2804:5658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267992

    Signature Algorithm: sha256WithRSAEncryption
         b3:c0:27:3f:ec:46:2b:e8:55:4f:91:2e:f3:f1:19:76:61:a0:
         c9:0a:4d:89:1c:fc:9d:f1:24:e4:3d:ed:ad:20:15:52:8e:4e:
         59:c0:89:e8:4c:12:95:3b:50:8e:ab:ac:41:06:cd:d6:3f:d2:
         d9:3a:8c:24:ee:1b:aa:d0:ba:69:4a:61:01:d3:c5:26:20:d3:
         cb:5a:1d:38:e8:d6:f9:5e:f2:26:19:f1:2e:01:88:0f:95:4f:
         a3:3b:18:42:da:c0:fc:60:77:ac:9d:80:39:7f:ad:5f:3c:52:
         12:d0:0c:67:aa:88:08:b6:1d:50:40:64:70:c8:2d:81:18:46:
         eb:ae:e4:e7:50:88:91:8e:9e:71:18:20:9a:2a:a4:1d:36:b8:
         e9:29:98:a3:38:fd:75:2f:36:f5:a4:03:da:3f:f5:03:c5:a4:
         6f:24:a0:0b:19:dc:5a:5b:18:84:39:4b:f3:86:0c:d4:e0:c2:
         48:25:89:54:38:6b:8a:fd:3e:f1:e8:79:a4:21:ea:6e:f1:91:
         fb:56:76:07:a0:55:95:60:e2:69:16:02:5a:ed:49:47:ce:ba:
         aa:42:19:a3:59:5e:8d:cb:ac:1a:62:c2:e0:84:b2:02:3d:ce:
         0d:70:8d:d4:fc:67:90:ee:f3:4c:3a:32:45:25:00:2c:ea:3c:
         ab:9d:f2:9a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQnQ4H6GseF/phEZ9rgQRr5K3SLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjQxMjMwNDZaFw0yNDExMjIxMjM1NDZaMDMxMTAvBgNV
BAMTKEY0REU0MTZFMDlBMDE4MzA5NTBBNTUxNjJCQzIyRDE3OEJFMTlBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEW7MfT6nh4Wpkhggv7RR77Uf6
WrdYNKZP4zzgHTxnDNi0GYdGPiOE+0IRFEjaFo7DGbXb+NZ3wwtqu8hPVgkRZzKM
2ixBYvkXJtznyTQg4qjJ7dKU4dtZwIX0fCOjGlQNQm8qMLxV1xDAdHJdhC9wyXRp
JuXhSpfCIwLoSXtjE/pb1FpR/IQdEcQkV4XVowpe5C2jLgjl1yJjK4NbPQPdtA8c
vjyMy5gIeHpbYIcTTnU5GnO/0xSVBP+28taRdfRt/+ga0DmCktdfhSeoZ5d0B+ly
g0PwvN/B8c3+IOqxN/PsB8+va3IwV/zsK3nXwdKq94BycdBT8nuzOfPrMTHjAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT03kFuCaAYMJUK
VRYrwi0Xi+GanjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HQnNpMkw1TTFQWkp0M2dMYnFtaXgxQ3JSdVdBQVhabm1E
ZHdxUWtNd3VuYS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HQnNpMkw1TTFQWkp0M2dMYnFtaXgxQ3JSdVdBQVhabm1E
ZHdxUWtNd3VuYS8wL0Y0REU0MTZFMDlBMDE4MzA5NTBBNTUxNjJCQzIyRDE3OEJF
MTlBOUUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2nRDANBAIAAjAHAwUA
KARWWDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFtgwDQYJKoZIhvcNAQELBQAD
ggEBALPAJz/sRivoVU+RLvPxGXZhoMkKTYkc/J3xJOQ97a0gFVKOTlnAiehMEpU7
UI6rrEEGzdY/0tk6jCTuG6rQumlKYQHTxSYg08taHTjo1vle8iYZ8S4BiA+VT6M7
GELawPxgd6ydgDl/rV88UhLQDGeqiAi2HVBAZHDILYEYRuuu5OdQiJGOnnEYIJoq
pB02uOkpmKM4/XUvNvWkA9o/9QPFpG8koAsZ3FpbGIQ5S/OGDNTgwkgliVQ4a4r9
PvHoeaQh6m7xkftWdgegVZVg4mkWAlrtSUfOuqpCGaNZXo3LrBpiwuCEsgI9zg1w
jdT8Z5Du80w6MkUlACzqPKud8po=
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:44:45 2025 by rpki-client