Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer
File:                     4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer (raw, json)
Hash identifier:          Z94T0KAIRZ1NpKNdyX2tXFtijDo326PbJIbFo4hBzUI=
Subject key identifier:   40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       288D0BCCB6FBBD4191BEA653191185F476583DD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Mar 2023 13:04:19 +0000
Certificate not after:    Tue 05 Mar 2024 13:09:19 +0000
Subordinate resources:    AS: 270305
                          IP: 201.216.120.0/22
                          IP: 2804:6a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8d:0b:cc:b6:fb:bd:41:91:be:a6:53:19:11:85:f4:76:58:3d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 13:04:19 2023 GMT
            Not After : Mar  5 13:09:19 2024 GMT
        Subject: CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:83:55:99:1d:d4:c8:8c:7f:0a:e2:e6:96:
                    68:e1:e6:56:4c:12:bc:65:7a:e5:74:15:0f:f1:4a:
                    9a:77:f2:bf:4b:d5:d8:67:6e:fa:43:de:60:c6:b7:
                    7f:71:77:b0:c5:72:86:23:e3:44:fc:fd:d5:45:b5:
                    84:8a:53:31:0f:11:7c:e5:2b:40:5a:65:91:db:b5:
                    3a:c8:2f:37:b0:82:83:48:98:fc:e1:46:71:eb:3a:
                    0c:b2:08:9c:58:ec:b0:d3:72:59:47:63:16:f8:20:
                    c4:43:b0:21:9f:48:6c:f6:aa:2b:f7:3e:54:16:b3:
                    a4:9c:f6:52:9a:4d:b1:75:b9:f3:e1:6f:45:6e:48:
                    18:d9:05:bc:fe:7e:ae:55:c1:3f:86:c1:13:6e:1c:
                    8e:56:8a:60:ee:36:cc:f1:9e:15:e8:75:66:e3:24:
                    5d:bb:84:9b:63:41:18:bd:c9:09:40:3c:8a:5d:d1:
                    f4:1c:02:da:81:34:09:52:1c:51:f7:85:cf:b2:04:
                    a1:1c:cc:31:ba:c8:55:13:25:e1:d4:bc:13:0e:d2:
                    c2:69:47:88:81:ad:13:11:6e:32:57:04:2f:29:26:
                    45:60:75:2a:65:b4:51:5d:33:cf:70:20:97:f1:ce:
                    d7:70:87:8a:6d:7e:f3:51:61:fe:81:c5:43:b1:9a:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22
                IPv6:
                  2804:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270305

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:f9:c1:76:0e:76:30:e3:dc:3c:1b:21:98:6f:7a:48:b4:
         c1:d8:0f:26:98:77:0d:03:39:36:d3:a7:17:72:99:12:c7:18:
         11:b7:88:2d:53:83:5d:5e:34:85:e6:5c:39:19:09:b7:38:f7:
         ee:b8:6f:05:34:d6:65:51:dd:57:6a:e8:5d:e6:24:76:a6:80:
         5b:ef:81:e1:df:53:eb:60:5e:7c:cb:8d:9a:cc:a5:49:60:10:
         9f:f2:6b:31:8d:a7:4c:dd:03:4c:47:0d:cd:a0:39:78:d3:5d:
         eb:07:b4:7e:5f:61:e3:9b:4b:80:be:1b:2c:35:4e:cb:04:6c:
         0a:28:3b:4f:5c:c0:0f:1d:dd:97:cc:d0:03:ca:da:a7:2f:bb:
         89:ff:65:92:9b:dd:a6:b9:25:ee:bf:ed:1a:ad:ce:27:9e:9d:
         93:7f:2f:75:91:69:d9:95:8c:b6:07:70:b2:7f:a9:65:34:2c:
         2a:2e:46:8e:c8:b7:7a:f7:66:45:93:bc:2c:b5:8d:2e:d9:4b:
         f5:6e:2c:6f:98:39:71:e8:c3:0b:4f:5f:22:22:05:8d:d1:57:
         74:24:1d:43:88:c5:63:f5:9d:84:ac:94:a2:2a:a3:15:a7:5f:
         c8:40:1f:a3:77:31:62:3d:36:c1:7d:e2:8e:55:19:86:4c:6a:
         95:19:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org