Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.cer
File:                     1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.cer (raw, json)
Hash identifier:          /FOkB6JTQbp082L2JQPs6TEtFSKN1fl7nLSZ4KfMuuI=
Subject key identifier:   1C:4F:6E:4E:B9:B8:95:A1:66:06:25:EE:A6:5D:38:90:A0:5C:7A:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6394D051A1C2DFF049A998D8413020C9A1F55C28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 14:31:26 +0000
Certificate not after:    Tue 18 Feb 2025 14:36:26 +0000
Subordinate resources:    AS: 269092
                          IP: 45.179.168.0/22
                          IP: 2804:5f54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:94:d0:51:a1:c2:df:f0:49:a9:98:d8:41:30:20:c9:a1:f5:5c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 14:31:26 2024 GMT
            Not After : Feb 18 14:36:26 2025 GMT
        Subject: CN=1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:84:81:21:04:45:69:a4:7b:3f:22:12:dc:
                    a3:2b:2f:f3:20:ad:20:72:87:0c:d4:70:ba:04:2b:
                    7c:b2:9d:c8:12:44:df:00:17:10:bc:9f:fa:28:9f:
                    24:3e:8d:25:4a:e0:89:24:dd:b7:17:13:4e:00:6c:
                    c7:b6:0b:3f:d9:4f:c6:af:4e:01:e2:62:f0:d9:6b:
                    c8:21:40:bc:66:d9:7b:7f:b3:8a:ad:53:5b:89:63:
                    6c:fa:19:15:dc:b5:a5:80:b3:c0:26:19:84:3c:e3:
                    8c:88:ba:ca:d4:df:63:34:f3:6c:0f:52:98:cf:48:
                    73:c0:17:ff:71:e2:6e:31:09:13:ce:3f:4b:b2:c7:
                    a7:13:92:71:cf:81:28:f6:b9:91:0e:0b:3b:86:06:
                    d3:74:c0:67:23:4c:59:df:75:f6:34:1e:92:5a:c6:
                    68:dc:78:b9:52:68:6f:37:ed:12:ca:92:bb:96:21:
                    06:88:d4:98:d0:8e:35:08:88:17:6f:dd:89:fc:99:
                    ce:cc:6c:dd:85:7e:de:52:9a:f1:55:ff:04:c3:03:
                    22:6e:eb:eb:43:e4:0d:89:c4:83:60:2a:b7:02:db:
                    d1:e0:9f:72:7b:98:93:4d:c3:a3:1c:76:02:34:e7:
                    7d:cd:d3:8f:97:a1:dc:88:64:9c:32:2a:7d:95:c3:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:4F:6E:4E:B9:B8:95:A1:66:06:25:EE:A6:5D:38:90:A0:5C:7A:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.168.0/22
                IPv6:
                  2804:5f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269092

    Signature Algorithm: sha256WithRSAEncryption
         ae:f2:40:88:b4:38:b6:4e:f2:b4:a6:04:50:83:1f:a2:23:56:
         82:14:ce:ef:b0:e7:80:aa:18:e2:44:6f:0f:8c:4e:d2:87:dc:
         e7:c4:d7:47:16:88:33:a4:8a:e1:4e:01:7d:17:31:c1:a0:1d:
         4b:2d:bd:35:d7:03:de:d1:c3:e5:69:68:66:d4:25:ce:30:0e:
         78:c8:08:5c:9d:96:18:80:27:5a:b4:57:11:30:59:7b:9d:ce:
         2f:fd:a0:65:32:ef:0b:51:e4:ac:a8:34:cb:81:c9:ef:dc:8b:
         4d:a0:d2:bc:ec:d4:e8:d7:98:45:3e:60:c1:bf:f0:b4:1b:b1:
         02:76:f4:62:39:a9:6a:96:50:dd:5e:ce:4c:c5:fc:11:1d:80:
         fa:a7:7c:84:5f:49:f9:39:36:f3:7e:10:72:fc:61:b4:7f:f4:
         ab:61:19:38:1c:6d:76:22:4e:8c:22:01:99:31:f3:95:a6:2e:
         54:18:14:60:5d:32:eb:b5:cd:34:21:ab:a6:3a:66:ba:e3:6d:
         4c:dd:9a:f2:bb:55:17:7b:36:9c:c6:fb:68:33:b3:7c:55:4e:
         ac:8f:cd:31:c4:f6:34:7b:10:82:22:89:27:c2:76:69:93:c6:
         4b:83:a8:09:37:b8:09:dd:36:1d:8d:4a:27:39:b9:a0:6a:9e:
         b4:82:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org