Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
File:                     B41C5D20FCE773495931567B28D958303BB191D0.cer (raw, json)
Hash identifier:          dwXHPV0EY66eXcCHlWzJwmo05IUatP8+lPz3Dk9WnL8=
Subject key identifier:   B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39B81CF868A798C6CFBFF265E512AF5FB54A1BA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 12:24:22 +0000
Certificate not after:    Fri 07 Feb 2025 12:29:22 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b8:1c:f8:68:a7:98:c6:cf:bf:f2:65:e5:12:af:5f:b5:4a:1b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 12:24:22 2024 GMT
            Not After : Feb  7 12:29:22 2025 GMT
        Subject: CN=B41C5D20FCE773495931567B28D958303BB191D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:07:96:db:a8:1a:81:11:21:a3:d0:50:59:
                    80:fd:8f:ba:93:fc:3e:87:2c:d7:b6:e8:84:0f:6e:
                    c7:ca:0b:e4:47:a8:57:f3:e7:03:6f:21:b2:50:5d:
                    8d:ad:8a:9e:6b:82:ba:db:88:9e:52:7e:d1:a6:56:
                    c1:29:19:54:e1:a2:e4:60:3d:00:92:2d:3e:2d:07:
                    09:e0:0d:a7:0d:3a:81:aa:ba:51:8e:3d:84:c8:2e:
                    ad:ea:d5:aa:c2:c8:c6:81:e5:b8:be:27:d9:34:65:
                    c8:ec:02:47:df:95:8e:7d:f5:0e:55:ca:61:03:4d:
                    b4:75:d4:7f:5f:e4:05:59:e6:f6:6e:6d:0c:18:ce:
                    be:d9:e1:54:65:c0:d1:6f:a2:34:b0:12:c8:ec:88:
                    4d:71:71:86:ea:7e:37:45:46:dd:71:3b:fc:49:58:
                    ec:5c:d0:81:67:a9:df:ca:c7:77:1c:fe:99:56:8f:
                    a8:23:e2:32:57:06:9c:f8:39:5e:bc:73:73:c0:ab:
                    fd:a0:e0:25:6e:41:df:e6:58:d4:c7:68:16:8e:b1:
                    2d:39:7a:54:63:2c:cd:5b:03:45:7c:2a:30:af:2b:
                    30:bb:6d:b3:ad:10:b5:b8:95:74:bb:ff:1a:60:ec:
                    d7:b4:b4:24:f5:87:b7:7d:99:f8:0a:93:ce:c6:83:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:fb:34:4e:25:1f:d2:e0:25:fc:65:97:09:cd:d1:8a:a2:
         4b:16:80:56:dc:2a:45:5f:70:6d:53:cc:ea:f4:91:3b:1d:ea:
         8e:53:7b:fc:88:3b:25:2e:6f:45:50:1e:4c:4f:4a:7c:83:9d:
         ea:35:31:88:1a:33:ff:72:63:e3:5c:c3:dc:9b:05:23:72:ad:
         cb:4b:03:f3:6e:fa:82:a5:ab:61:4d:a2:27:5d:1f:ec:2e:ca:
         a6:6f:c9:a6:59:5e:69:58:7e:07:ac:dd:23:2f:66:0c:48:73:
         b3:fe:c7:0e:4c:6e:b2:af:5e:db:ac:11:4a:e4:9d:56:f2:85:
         b4:d5:8f:33:53:e5:dd:96:df:ec:fb:4a:db:d0:8d:77:34:a4:
         95:30:7b:f2:44:51:15:4c:87:4e:6f:a1:72:79:b2:72:2c:39:
         3f:90:7d:e4:fc:0a:d6:e4:76:c8:27:47:30:d9:ed:e2:10:0b:
         e5:cd:41:15:f7:3b:ee:bd:bc:86:7d:9a:ae:de:c9:c4:8c:24:
         a5:d3:62:1e:f9:b6:57:87:92:78:d2:b5:04:71:03:f8:d6:82:
         dd:18:42:48:4f:e2:dd:b9:19:2c:bf:9e:30:05:51:45:ea:12:
         ac:4e:79:ed:0b:7e:d0:1c:1e:a8:3b:c3:e1:16:a4:41:3b:ac:
         3c:c7:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org