Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
File:                     F541966412A9926340E8F10C31ABE0041F25A41F.cer (raw, json)
Hash identifier:          4Yr04dii6tit8ZTXDv+OLrbyva2pfxWVw+rZuggiPc8=
Subject key identifier:   F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3722DC0D7F6EB219289A1CF540EDB2815E6922CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/F541966412A9926340E8F10C31ABE0041F25A41F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 18:59:17 +0000
Certificate not after:    Fri 07 Feb 2025 19:04:17 +0000
Subordinate resources:    AS: 263950
                          IP: 138.255.0.0/22
                          IP: 2804:2840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:22:dc:0d:7f:6e:b2:19:28:9a:1c:f5:40:ed:b2:81:5e:69:22:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 18:59:17 2024 GMT
            Not After : Feb  7 19:04:17 2025 GMT
        Subject: CN=F541966412A9926340E8F10C31ABE0041F25A41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:be:4f:27:af:f1:be:4b:d3:fa:bb:06:91:
                    65:a4:39:94:8d:dd:18:15:9a:ef:82:ab:89:73:14:
                    c4:7b:4d:05:6e:fb:ec:af:eb:9a:f7:f0:4b:ce:e5:
                    71:42:42:d5:31:a2:51:e4:4a:e2:08:15:27:5f:66:
                    ec:7b:49:7b:4a:9e:91:af:98:26:65:bd:9a:a9:f8:
                    f2:c1:c9:55:d4:dc:05:59:22:8b:ba:9e:70:e1:96:
                    0a:db:63:46:cd:2d:42:a8:28:62:cd:cc:95:43:96:
                    52:4d:e2:0c:05:9e:8e:87:dd:e8:5e:90:46:9a:27:
                    ff:eb:5c:f1:17:3c:36:29:b6:ac:4e:11:81:42:1a:
                    c6:01:1a:2b:62:9c:95:60:ad:15:a1:e9:4a:e0:54:
                    33:94:aa:e8:06:82:1b:91:df:c0:6c:a6:7c:43:d7:
                    4c:65:d4:2d:62:c7:a0:54:1c:7e:ea:f0:39:01:e7:
                    6a:c9:01:57:2c:a0:4a:d1:b3:b9:65:cc:49:90:21:
                    e6:f4:1e:63:50:b1:65:1a:62:cf:7c:f3:e8:1c:f7:
                    5c:94:39:53:be:e3:c3:8c:b6:e4:7e:17:23:55:55:
                    31:62:c8:f9:4a:e4:a1:f8:0c:0c:c1:65:b0:cf:7f:
                    23:34:ee:eb:cf:cf:a3:65:4a:9d:4d:bb:97:43:3e:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/F541966412A9926340E8F10C31ABE0041F25A41F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.0.0/22
                IPv6:
                  2804:2840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263950

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:18:af:82:53:8e:8f:14:77:77:ec:ad:72:9d:00:75:cb:
         fc:a6:06:e0:f4:91:fe:f3:4c:08:17:1e:94:b8:e6:5c:85:66:
         ea:83:0e:93:ce:8f:09:d3:96:6a:22:85:4d:6e:f4:28:b0:e7:
         d1:d1:b7:51:cc:da:d0:0c:93:9a:97:5b:4f:82:c5:eb:21:1a:
         13:77:da:1b:03:55:84:98:c0:d6:67:19:f0:60:1d:15:1d:43:
         a8:1b:83:ab:87:87:f0:13:36:44:8d:8a:74:80:0a:00:18:8e:
         0e:e1:6b:5f:d9:7e:9f:59:99:08:07:80:dc:d6:70:b1:32:2f:
         7d:ab:c0:4a:7c:02:f2:c9:79:e7:e3:6b:cb:4f:03:78:de:f6:
         8d:d2:13:1d:97:13:b0:5e:2a:2c:7c:ec:bc:7d:40:88:4f:8e:
         35:2d:77:51:ac:36:b6:af:f7:00:41:a7:f2:89:c7:90:b5:3b:
         e4:cc:32:45:1c:8b:2a:18:dd:56:41:ab:0f:1a:51:7f:50:1e:
         25:fc:5b:e8:09:d8:11:5e:c8:60:b9:45:81:2c:e8:1c:4d:9f:
         25:0d:7e:3c:23:18:27:b6:ba:97:85:15:7e:c5:a2:e3:72:0f:
         e9:a8:8e:b4:e7:0e:fb:10:7a:08:44:8d:53:0e:c3:99:41:8c:
         b6:f4:ae:16
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUNyLcDX9ushkomhz1QO2ygV5pIsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDkxODU5MTdaFw0yNTAyMDcxOTA0MTdaMDMxMTAvBgNV
BAMTKEY1NDE5NjY0MTJBOTkyNjM0MEU4RjEwQzMxQUJFMDA0MUYyNUE0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6b5PJ6/xvkvT+rsGkWWkOZSN
3RgVmu+Cq4lzFMR7TQVu++yv65r38EvO5XFCQtUxolHkSuIIFSdfZux7SXtKnpGv
mCZlvZqp+PLByVXU3AVZIou6nnDhlgrbY0bNLUKoKGLNzJVDllJN4gwFno6H3ehe
kEaaJ//rXPEXPDYptqxOEYFCGsYBGitinJVgrRWh6UrgVDOUqugGghuR38BspnxD
10xl1C1ix6BUHH7q8DkB52rJAVcsoErRs7llzEmQIeb0HmNQsWUaYs988+gc91yU
OVO+48OMtuR+FyNVVTFiyPlK5KH4DAzBZbDPfyM07uvPz6NlSp1Nu5dDPkldAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1QZZkEqmSY0Do
8Qwxq+AEHyWkHzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8xcmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1Ja
Q05ib2l5RDNjLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8xcmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1Ja
Q05ib2l5RDNjLzAvRjU0MTk2NjQxMkE5OTI2MzQwRThGMTBDMzFBQkUwMDQxRjI1
QTQxRi5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCiv8AMA0EAgACMAcDBQAo
BChAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHDjANBgkqhkiG9w0BAQsFAAOC
AQEAevYYr4JTjo8Ud3fsrXKdAHXL/KYG4PSR/vNMCBcelLjmXIVm6oMOk86PCdOW
aiKFTW70KLDn0dG3Ucza0AyTmpdbT4LF6yEaE3faGwNVhJjA1mcZ8GAdFR1DqBuD
q4eH8BM2RI2KdIAKABiODuFrX9l+n1mZCAeA3NZwsTIvfavASnwC8sl55+Nry08D
eN72jdITHZcTsF4qLHzsvH1AiE+ONS13Uaw2tq/3AEGn8onHkLU75MwyRRyLKhjd
VkGrDxpRf1AeJfxb6AnYEV7IYLlFgSzoHE2fJQ1+PCMYJ7a6l4UVfsWi43IP6aiO
tOcO+xB6CESNUw7DmUGMtvSuFg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org