Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.cer
File:                     CF33C03D5A866AA5996EE873A3F6B035911CFAF4.cer (raw, json)
Hash identifier:          IlHBt4/9lnHWzrOPdKneKdqYK0DNuXKC53ut1NJXuZY=
Subject key identifier:   CF:33:C0:3D:5A:86:6A:A5:99:6E:E8:73:A3:F6:B0:35:91:1C:FA:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2981473A4834B4039444931E26AF6C1469233CDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 13:21:55 +0000
Certificate not after:    Tue 07 Jan 2025 13:26:55 +0000
Subordinate resources:    AS: 270766
                          IP: 186.194.172.0/22
                          IP: 2804:7118::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:81:47:3a:48:34:b4:03:94:44:93:1e:26:af:6c:14:69:23:3c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 13:21:55 2024 GMT
            Not After : Jan  7 13:26:55 2025 GMT
        Subject: CN=CF33C03D5A866AA5996EE873A3F6B035911CFAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:7e:da:dc:7b:53:c8:37:e9:33:d2:54:87:
                    40:8e:1b:ce:ff:82:47:eb:2c:19:f6:6e:a7:65:ba:
                    fb:9d:2c:cc:25:dc:19:3b:eb:62:00:55:d5:4b:40:
                    09:5d:e8:40:05:e0:f3:19:da:91:a9:21:81:c5:be:
                    6c:4f:18:d6:a2:86:63:a1:a6:81:f1:71:34:c4:4c:
                    d6:68:88:80:3c:69:f5:1e:63:44:bd:90:08:4e:03:
                    e5:0c:34:6b:70:07:4f:5e:f1:6e:d9:6b:d0:bb:93:
                    c2:c0:d1:3e:b3:dd:b1:5a:bd:e8:da:de:69:c0:86:
                    50:1b:cf:f9:b9:ee:0a:46:c1:0b:10:01:4a:b6:e8:
                    b0:5c:36:a5:e9:17:2d:0f:7c:40:e8:ea:24:ec:8e:
                    d9:91:e2:e3:f8:55:c9:da:4c:53:87:59:01:74:20:
                    ee:f6:f5:54:4a:1e:31:33:ad:f8:f6:9f:47:c2:a5:
                    07:35:4b:00:56:d8:b7:65:68:e6:30:18:30:48:d2:
                    8d:5c:33:31:d8:0f:68:79:eb:63:b8:1c:a9:1e:1e:
                    46:c4:ab:a3:14:6e:76:d3:28:c8:30:bf:83:ec:3b:
                    01:74:9a:fd:e6:7a:f9:e6:d8:33:ae:63:e7:0d:72:
                    f5:27:c2:53:e5:7c:3d:ca:36:b1:70:b8:8a:3d:82:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:33:C0:3D:5A:86:6A:A5:99:6E:E8:73:A3:F6:B0:35:91:1C:FA:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.172.0/22
                IPv6:
                  2804:7118::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270766

    Signature Algorithm: sha256WithRSAEncryption
         60:ad:8d:65:e4:17:67:03:c6:28:00:73:1d:ff:d6:64:2d:9f:
         cb:31:29:fc:b1:c6:6b:75:5d:f0:d0:2e:ec:ba:3e:57:68:13:
         20:40:d6:14:37:2f:fc:40:d5:e0:b3:84:58:8b:72:60:87:a1:
         82:da:b2:1f:2f:a7:86:18:e3:f6:86:74:1a:1c:f1:82:cb:24:
         50:bd:7a:96:44:49:48:a6:1e:72:ac:7f:18:54:b0:ba:61:70:
         9a:88:74:66:65:47:4c:b4:07:fd:81:f6:1e:79:77:36:7f:16:
         bf:72:55:f2:2f:b2:59:47:d9:3c:93:3b:4e:8d:21:aa:ba:3f:
         63:64:d9:e7:e7:ae:a3:6f:7b:80:6f:fa:30:ad:df:03:4a:d0:
         89:ba:aa:7a:b2:0f:1b:a5:56:13:48:8a:f7:6c:40:d0:20:4a:
         23:89:5a:54:46:a9:87:67:67:00:9c:06:c1:53:38:8d:21:44:
         4a:53:cf:bc:e6:38:4b:1f:b6:cd:32:75:e1:8f:76:11:65:58:
         29:45:c0:ec:e0:9f:94:b2:b6:6e:07:31:cc:19:70:93:5c:a5:
         b7:03:4b:ec:d2:37:0f:12:ea:52:5f:f7:66:2d:82:a9:35:3b:
         99:08:7c:68:cb:e9:a2:2a:20:f4:8f:6a:3e:5f:f2:0c:08:f0:
         1f:b9:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org