Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer
File:                     0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer (raw, json)
Hash identifier:          NaMQG0i3iOW03+bb0S+ZCNJKTXriF7P8u5QFK35WVHQ=
Subject key identifier:   09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A444B6DD8A24340DD505FC15252FDD3504C495B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/0946ABC0E4F85CE0FC04F4D0512F90597B724859.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 15:42:26 +0000
Certificate not after:    Tue 31 Dec 2024 15:47:26 +0000
Subordinate resources:    AS: 265406
                          IP: 168.195.4.0/22
                          IP: 2804:3398::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:44:4b:6d:d8:a2:43:40:dd:50:5f:c1:52:52:fd:d3:50:4c:49:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 15:42:26 2024 GMT
            Not After : Dec 31 15:47:26 2024 GMT
        Subject: CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:87:7f:27:be:7b:95:0f:12:d5:ff:f1:c8:
                    be:27:bd:2f:3d:aa:a4:a5:90:8b:b5:ab:aa:c2:ed:
                    c6:05:d6:26:2b:9d:3b:db:a9:e5:30:0d:4e:a5:1d:
                    9e:1b:00:97:ca:b7:79:da:dd:99:48:07:18:a7:83:
                    78:41:22:e6:36:8b:57:49:53:cd:58:c1:1b:6c:1e:
                    8d:13:22:9c:a9:4a:c2:07:b8:f6:21:21:54:e2:e3:
                    6e:17:1a:49:56:19:63:63:3a:04:d6:fc:8a:7b:37:
                    86:9c:40:61:cb:17:9e:47:41:7a:51:f2:5a:26:fa:
                    ee:64:d1:ec:ea:c5:38:63:5a:e0:16:06:ff:24:af:
                    9e:10:db:79:3c:92:27:02:51:14:0b:ed:ac:be:07:
                    a1:37:f9:12:9d:0e:12:eb:e5:64:92:17:31:c9:7e:
                    da:54:23:e7:d5:d2:0f:16:c0:16:56:24:02:28:3c:
                    94:00:71:20:86:22:b0:19:d8:6d:1b:9d:56:a7:db:
                    cf:dc:5f:d6:80:a0:05:83:c8:3d:d2:57:a4:d4:4b:
                    86:48:75:f7:cc:7e:10:4e:2c:5c:60:77:0e:7c:53:
                    c7:80:b9:20:d1:34:28:9a:40:1b:75:41:6e:33:35:
                    ba:85:c2:08:40:9b:c6:85:fa:c7:11:e8:44:a7:5f:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/0946ABC0E4F85CE0FC04F4D0512F90597B724859.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.4.0/22
                IPv6:
                  2804:3398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265406

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:2c:54:14:f0:4b:d8:4c:54:72:c8:45:70:62:03:a7:0d:
         54:35:62:1b:b6:ad:27:ef:e6:4b:9c:86:2d:40:f3:fb:1a:77:
         4d:42:a4:16:e9:b1:5e:17:58:2e:41:a7:90:6e:a5:dd:47:c1:
         4c:e8:da:41:73:30:30:80:a3:d0:32:d2:8c:8e:df:c3:44:6a:
         b0:2f:c6:25:b9:95:57:c3:cb:fd:be:20:8a:5a:4c:ba:4f:31:
         95:0f:a7:75:3d:56:23:8c:25:ff:37:94:96:da:5c:71:ba:83:
         ba:a2:81:45:32:bc:df:a6:58:b4:6d:cd:30:0a:fd:93:86:0e:
         4b:36:ea:95:71:2f:5a:50:43:04:88:64:67:c0:ed:5a:e5:80:
         b1:38:fa:75:a0:23:b5:b5:54:7a:70:b5:05:d1:86:32:ac:ee:
         1a:94:24:65:cb:a4:0c:fe:35:e8:12:30:8f:ea:4a:f7:42:c8:
         9b:2a:24:58:ea:51:db:2a:e4:95:d8:14:33:15:b8:1c:62:21:
         66:f0:6a:c7:15:e8:72:0b:d2:fb:41:f4:01:f9:46:1c:80:6e:
         8c:d8:3b:0a:26:8d:31:be:67:8f:0f:db:45:4d:d6:35:59:45:
         f8:61:9a:0f:59:ef:25:3b:cd:d6:78:12:a2:7b:18:35:3f:9e:
         64:3d:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org