Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.cer
File:                     F841D9ED220521410FCC71327DC8CDC7BF9D8113.cer (raw, json)
Hash identifier:          avUd8DfcvjLsuzLgx+pVKLT/sV6Pq6mGvLsXnzD6jeg=
Subject key identifier:   F8:41:D9:ED:22:05:21:41:0F:CC:71:32:7D:C8:CD:C7:BF:9D:81:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3377CECD541C8F10C18D4D8B524B16E2042736C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Aug 2021 20:25:21 +0000
Certificate not after:    Fri 12 Aug 2022 20:30:21 +0000
Subordinate resources:    AS: 270450
                          IP: 200.50.212.0/22
                          IP: 2804:6c2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:77:ce:cd:54:1c:8f:10:c1:8d:4d:8b:52:4b:16:e2:04:27:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 13 20:25:21 2021 GMT
            Not After : Aug 12 20:30:21 2022 GMT
        Subject: CN=F841D9ED220521410FCC71327DC8CDC7BF9D8113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:82:66:8c:ec:0c:00:90:da:4a:a3:19:e5:
                    3b:08:f6:92:ff:00:d5:74:d5:0d:27:9f:46:b6:d2:
                    02:25:6a:e7:5b:78:99:7a:9f:38:72:e8:c6:a9:aa:
                    e4:29:0c:32:10:2b:9e:09:a7:84:be:27:29:d4:e0:
                    31:16:f6:bd:2c:0c:f1:54:7c:c8:6d:b1:94:5d:e1:
                    25:7a:2c:59:35:1b:60:12:68:71:ec:2d:9c:32:5d:
                    26:b0:a4:4b:e7:78:e7:0e:65:c3:5d:36:ac:fb:63:
                    4c:1b:52:73:92:1f:64:59:e2:df:7b:6f:a2:39:8c:
                    9f:40:74:56:41:d7:16:a1:5c:b8:fc:ac:99:70:e7:
                    7f:4b:c2:5f:ae:df:ed:54:75:f5:8f:b5:6d:28:10:
                    47:fe:8c:e8:d2:1a:3a:9b:60:08:75:c0:76:1f:67:
                    b1:7e:72:8d:b2:b5:03:80:31:ed:0b:18:92:47:50:
                    76:1c:7b:e5:ad:e3:d8:a8:db:9a:b3:4d:21:cb:9e:
                    80:98:27:d2:41:f5:7b:ce:c8:73:2a:25:87:c9:54:
                    fd:3c:1d:6d:ef:02:af:ea:c3:f0:93:30:ce:a1:c0:
                    11:a8:91:65:ba:2c:8d:d9:6b:51:2e:c7:db:b1:09:
                    a4:94:dc:d8:d2:d7:6a:b6:b7:bc:64:1c:ed:82:c9:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:41:D9:ED:22:05:21:41:0F:CC:71:32:7D:C8:CD:C7:BF:9D:81:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.212.0/22
                IPv6:
                  2804:6c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270450

    Signature Algorithm: sha256WithRSAEncryption
         ae:7e:ab:6e:70:66:02:cc:50:bb:3d:fe:b7:8b:cd:47:4f:fe:
         95:47:4a:92:cc:23:24:5e:c0:0b:65:39:8e:02:d5:a6:25:d9:
         b2:5b:97:a5:96:ff:99:22:0b:57:96:7e:c1:ec:d8:57:19:cc:
         db:c5:e5:65:c2:bf:fc:eb:92:25:c7:6c:7b:a7:00:e8:6d:56:
         d3:d9:bd:94:ac:43:c1:4e:08:d7:c4:75:98:65:63:8c:31:9d:
         2d:61:ca:4a:68:c7:8b:68:01:9d:9e:61:cd:0a:95:1b:f9:49:
         a6:34:8e:10:06:30:64:63:0a:ad:61:6d:a0:7c:26:41:bf:78:
         bb:b7:78:05:52:72:ed:1f:91:d7:90:27:cf:cc:37:ec:80:c4:
         9b:4e:0e:64:68:73:6b:ae:7c:d7:70:17:c0:cc:fb:07:a3:ee:
         0a:53:37:fd:27:05:8a:5c:ff:4d:9e:f4:5e:81:58:37:bf:d5:
         b4:8d:66:fc:37:1e:dc:14:10:5f:a4:5b:5f:0a:06:d5:51:54:
         b5:0d:0b:96:d5:98:1a:3b:7f:2c:04:9b:fa:54:ca:28:03:27:
         4f:0c:a1:9e:65:ff:31:2b:7a:7f:c0:55:cc:bb:f5:21:b7:bf:
         1e:87:64:e2:9a:8e:a2:b1:29:98:00:1a:2e:12:ba:4a:dd:3e:
         77:25:f2:d1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUM3fOzVQcjxDBjU2LUksW4gQnNscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTA4MTMyMDI1MjFaFw0yMjA4MTIyMDMwMjFaMDMxMTAvBgNV
BAMTKEY4NDFEOUVEMjIwNTIxNDEwRkNDNzEzMjdEQzhDREM3QkY5RDgxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/YJmjOwMAJDaSqMZ5TsI9pL/
ANV01Q0nn0a20gIlaudbeJl6nzhy6MapquQpDDIQK54Jp4S+JynU4DEW9r0sDPFU
fMhtsZRd4SV6LFk1G2ASaHHsLZwyXSawpEvneOcOZcNdNqz7Y0wbUnOSH2RZ4t97
b6I5jJ9AdFZB1xahXLj8rJlw539Lwl+u3+1UdfWPtW0oEEf+jOjSGjqbYAh1wHYf
Z7F+co2ytQOAMe0LGJJHUHYce+Wt49io25qzTSHLnoCYJ9JB9XvOyHMqJYfJVP08
HW3vAq/qw/CTMM6hwBGokWW6LI3Za1Eux9uxCaSU3NjS12q2t7xkHO2CyWQvAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4QdntIgUhQQ/M
cTJ9yM3Hv52BEzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HR1JiUFFSRXM3eEdORzZXMkdjaHhaNkNwV0RRMzdiamVu
RVNydUNRS2NEOS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR0dSYlBRUkVzN3hHTkc2VzJHY2h4WjZDcFdEUTM3Ympl
bkVTcnVDUUtjRDkvMC9GODQxRDlFRDIyMDUyMTQxMEZDQzcxMzI3REM4Q0RDN0JG
OUQ4MTEzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIMtQwDQQCAAIwBwMF
ACgEbCwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCByMA0GCSqGSIb3DQEBCwUA
A4IBAQCufqtucGYCzFC7Pf63i81HT/6VR0qSzCMkXsALZTmOAtWmJdmyW5ellv+Z
IgtXln7B7NhXGczbxeVlwr/865Ilx2x7pwDobVbT2b2UrEPBTgjXxHWYZWOMMZ0t
YcpKaMeLaAGdnmHNCpUb+UmmNI4QBjBkYwqtYW2gfCZBv3i7t3gFUnLtH5HXkCfP
zDfsgMSbTg5kaHNrrnzXcBfAzPsHo+4KUzf9JwWKXP9NnvRegVg3v9W0jWb8Nx7c
FBBfpFtfCgbVUVS1DQuW1ZgaO38sBJv6VMooAydPDKGeZf8xK3p/wFXMu/Uht78e
h2Timo6isSmYABouErpK3T53JfLR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org