Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/04E4A6AB52B0E9EEB814060BA2A79EC635E1F242.cer
File:                     04E4A6AB52B0E9EEB814060BA2A79EC635E1F242.cer (raw, json)
Hash identifier:          xlyaa21aNhXnt85XYU+yqks3iqq6pTgvKJLB2MNMJVw=
Subject key identifier:   04:E4:A6:AB:52:B0:E9:EE:B8:14:06:0B:A2:A7:9E:C6:35:E1:F2:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54358D85ABD3762CCCC72343CCB43594BCE0AF77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/0/04E4A6AB52B0E9EEB814060BA2A79EC635E1F242.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 18:53:44 +0000
Certificate not after:    Wed 03 Jul 2024 18:58:44 +0000
Subordinate resources:    AS: 270683
                          IP: 200.187.100.0/22
                          IP: 2804:6fc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:35:8d:85:ab:d3:76:2c:cc:c7:23:43:cc:b4:35:94:bc:e0:af:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 18:53:44 2023 GMT
            Not After : Jul  3 18:58:44 2024 GMT
        Subject: CN=04E4A6AB52B0E9EEB814060BA2A79EC635E1F242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:31:a6:cc:66:6e:20:09:4a:6e:3f:c9:52:
                    3d:04:08:2f:e7:bc:eb:e0:df:00:3e:93:7d:c2:58:
                    aa:b5:f9:6e:bc:33:bd:ea:c3:a5:d1:02:85:57:db:
                    fa:df:db:21:ff:32:52:fc:c5:ce:b2:63:6d:9d:cc:
                    2c:1e:df:8b:3a:93:08:15:b6:2a:36:25:c5:7f:c0:
                    f8:e0:24:6a:2c:04:ca:1e:d6:aa:19:97:ed:d7:26:
                    3f:93:c8:5c:3c:29:5f:56:e6:0f:a4:df:06:2e:33:
                    a7:58:66:7c:c4:a0:5d:7d:12:0c:30:31:ac:f7:24:
                    5f:e0:c6:92:6c:3f:48:86:0b:c7:e8:31:90:b8:c5:
                    31:36:5b:bf:cf:ea:9a:8f:00:7b:84:6c:0d:da:98:
                    cc:dc:d2:c2:21:5f:32:92:3b:36:59:ab:e7:83:b2:
                    e3:ad:71:9c:44:33:e3:bf:c9:f5:59:77:83:e4:3d:
                    6c:55:1b:7b:e7:7d:3a:63:89:1d:57:60:35:2e:03:
                    b4:a7:0e:3e:4b:af:7a:11:4f:d8:96:42:1b:58:2b:
                    fd:84:1a:6b:5e:f1:98:34:57:ed:1b:c5:52:0d:e1:
                    e2:88:9c:e5:e2:4b:76:de:3d:f5:ee:06:a7:94:cd:
                    5b:2c:6e:ff:3d:b1:0e:b5:44:70:3b:cf:b6:f2:5e:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:E4:A6:AB:52:B0:E9:EE:B8:14:06:0B:A2:A7:9E:C6:35:E1:F2:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/0/04E4A6AB52B0E9EEB814060BA2A79EC635E1F242.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.100.0/22
                IPv6:
                  2804:6fc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270683

    Signature Algorithm: sha256WithRSAEncryption
         25:4c:d0:5a:fc:cc:65:cf:9c:0a:8e:e4:83:0a:00:66:d6:30:
         57:e6:cc:82:c8:08:10:f7:fc:2b:ee:52:98:8e:e0:4f:0e:da:
         8b:22:1b:c1:cc:ac:af:a7:69:58:8b:d0:9b:a4:78:36:92:40:
         d4:8d:e8:61:36:00:da:a3:dd:26:8b:4f:d3:f2:43:b9:e3:44:
         dd:4e:1d:2e:a0:36:75:8a:6c:db:a5:59:06:53:47:4e:e2:9a:
         dc:ee:d2:46:dc:ff:b3:6a:ef:e2:c5:9a:7c:9d:85:71:a8:6f:
         a3:a6:47:b4:16:81:9f:3a:7c:b4:95:00:18:d2:0a:5d:6f:1e:
         f5:e7:8d:45:26:09:ae:b6:a2:12:bb:5e:7f:c1:a6:d6:e2:b6:
         69:22:06:8a:4a:79:4a:39:a8:ee:04:00:0f:03:0d:50:7d:bc:
         6f:3a:68:64:ff:a9:ee:7c:23:f0:87:c9:f0:83:a8:70:98:a3:
         3d:9d:fc:7d:8b:01:d1:e2:7d:79:5e:d8:f9:66:6c:55:32:55:
         ed:ba:3d:c3:32:f8:68:e2:45:de:56:7a:be:83:76:20:33:0b:
         a7:cb:3e:6f:0f:41:a1:7f:65:9b:a9:d3:14:a8:10:c9:14:aa:
         09:90:6a:6d:ce:b8:3b:35:61:6c:f2:81:c9:74:65:60:9a:b5:
         4e:3a:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org