Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.cer
File:                     04124B6068EE1E77306A1BA87F1F25EA7A596E2D.cer (raw, json)
Hash identifier:          GTgoyjHB6lBADoFGrcZ0Lp9uc/zR8ElabAwxSV3Xevs=
Subject key identifier:   04:12:4B:60:68:EE:1E:77:30:6A:1B:A8:7F:1F:25:EA:7A:59:6E:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75BE9035C0140F128204C9FF461C2618BCA442A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Jun 2023 18:09:21 +0000
Certificate not after:    Fri 31 May 2024 18:14:21 +0000
Subordinate resources:    AS: 263285
                          IP: 186.235.252.0/22
                          IP: 2804:1664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:be:90:35:c0:14:0f:12:82:04:c9:ff:46:1c:26:18:bc:a4:42:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  2 18:09:21 2023 GMT
            Not After : May 31 18:14:21 2024 GMT
        Subject: CN=04124B6068EE1E77306A1BA87F1F25EA7A596E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:cf:10:65:2c:1c:c3:a4:78:ff:80:4f:4f:
                    df:ef:40:58:98:c4:1f:de:b8:b5:78:21:52:2c:37:
                    ce:02:70:8c:56:5d:8f:f6:03:a9:37:d4:65:de:1f:
                    86:8d:12:99:92:d0:8d:8d:75:85:9b:40:af:34:50:
                    03:9a:38:92:47:e8:37:c9:14:44:e2:51:90:91:59:
                    29:8b:34:28:e3:a2:78:a1:ea:bc:1d:78:f2:36:eb:
                    f1:97:c4:8e:a3:ac:b6:59:3b:92:5e:8b:ab:11:06:
                    2d:4a:54:31:e0:10:57:bc:4a:5d:fe:fd:c3:ce:f0:
                    80:94:09:f0:72:17:f6:24:ab:05:d4:ef:47:b7:45:
                    6f:f0:6a:0c:b7:3d:b4:11:18:d1:82:eb:2e:7e:8b:
                    26:66:6b:79:54:c1:40:39:6d:44:ba:03:32:a1:6b:
                    18:c3:26:7b:ce:38:96:cc:ba:9a:a5:46:23:24:da:
                    77:b8:b3:97:51:9e:05:33:7e:b3:0b:87:64:da:03:
                    5c:e4:86:89:dd:b8:44:21:fc:dc:ca:9c:c1:35:4b:
                    97:1d:dc:26:58:be:19:53:62:29:cf:bc:62:4c:c5:
                    ff:9c:b8:10:fc:5c:90:ac:ae:58:0b:a8:b2:5c:61:
                    4a:03:8b:e3:ca:de:dd:11:f1:65:49:06:05:e1:6c:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:12:4B:60:68:EE:1E:77:30:6A:1B:A8:7F:1F:25:EA:7A:59:6E:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.252.0/22
                IPv6:
                  2804:1664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263285

    Signature Algorithm: sha256WithRSAEncryption
         85:bf:8e:78:00:23:33:7a:0a:ef:b0:10:8d:8e:1d:f4:8f:a6:
         b7:ac:ef:38:75:67:bb:78:b3:15:c0:1e:90:cd:34:94:f1:78:
         0e:da:61:45:88:cf:8d:89:58:a6:c1:60:5a:34:fc:f5:8b:e8:
         6e:e9:8c:ab:0a:69:5b:63:4e:f2:8d:bd:2a:6d:dc:27:7d:72:
         bb:23:6e:d8:1b:ef:c5:8d:bc:56:cf:86:24:a5:9a:8d:cd:2d:
         64:07:c6:03:26:36:08:4c:85:2e:85:a7:7d:34:b4:b7:b9:c4:
         c3:1a:03:e8:22:70:65:0d:4c:85:29:70:78:8f:5f:a7:a8:81:
         4e:ce:48:78:74:d3:8c:3b:3c:b0:5f:03:84:fb:5f:a9:fa:43:
         6a:fb:b5:ea:3e:f4:9e:71:ff:93:9b:b6:c6:22:cf:69:32:8f:
         3a:23:7d:73:0a:0b:21:01:40:7b:87:65:1e:eb:51:27:b5:b5:
         d9:de:3c:22:8e:78:07:c9:4f:f1:06:38:2d:70:bb:e0:e5:e3:
         de:f1:c9:5e:e4:b3:6b:6a:10:63:9d:df:f9:f0:72:88:6b:89:
         b0:7f:7d:5e:c9:27:da:e4:7c:44:20:2b:e4:6e:d8:62:38:74:
         76:38:b9:03:ec:a1:10:be:65:ef:26:42:2a:c7:7d:4e:3b:d4:
         e0:07:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org