Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.cer
File:                     4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.cer (raw, json)
Hash identifier:          L+nGUEDkJNvkWzl7ffOT13ZYomuD9EyY0Dt9l+gopCk=
Subject key identifier:   40:35:C7:79:4A:E8:3A:88:B9:0C:35:E2:C4:32:9A:E4:5A:5F:4E:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1053CE9ECDC1F16524E435E479606CB8C81A232D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 00:34:35 +0000
Certificate not after:    Mon 13 Jan 2025 00:39:35 +0000
Subordinate resources:    AS: 271484
                          IP: 181.233.16.0/22
                          IP: 2804:7c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:53:ce:9e:cd:c1:f1:65:24:e4:35:e4:79:60:6c:b8:c8:1a:23:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 00:34:35 2024 GMT
            Not After : Jan 13 00:39:35 2025 GMT
        Subject: CN=4035C7794AE83A88B90C35E2C4329AE45A5F4EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:40:53:cf:90:58:4a:ca:97:f2:bb:9a:38:
                    75:ec:92:76:e2:22:67:cc:38:f7:95:5e:80:4b:64:
                    25:48:8b:8b:cc:4b:17:80:d5:da:bc:2a:e9:9c:68:
                    2a:c9:82:04:c3:0b:8c:f8:eb:11:57:47:92:4d:45:
                    cc:52:ee:25:37:32:25:f7:78:17:ae:c4:94:fe:18:
                    4f:92:99:f4:f7:fc:67:90:4c:01:da:fd:c6:35:9e:
                    91:0e:19:73:cc:85:05:63:fe:a7:19:ae:60:9d:c5:
                    73:3f:3c:48:41:2b:c8:20:87:12:29:ab:92:d6:74:
                    f6:02:aa:28:07:4d:b3:f1:15:71:73:f1:fc:88:5d:
                    9c:36:35:53:ff:1e:8e:f1:86:95:9b:6f:41:55:9a:
                    9f:80:02:d4:b4:1d:9c:49:b3:0c:fc:82:12:5e:7a:
                    04:78:96:2b:8b:cc:84:f9:e7:70:b7:dc:45:63:af:
                    92:1d:86:05:c9:f5:92:14:1e:9a:29:3f:2b:2e:51:
                    c9:5d:85:11:a0:60:8c:ca:40:b3:82:15:51:db:bf:
                    42:5f:86:13:cd:68:8c:fa:4b:b8:44:f8:39:07:2d:
                    39:9e:a6:58:1c:8a:89:26:19:33:79:6e:07:54:0c:
                    11:25:5c:e4:9f:c2:9b:a9:25:20:6b:03:72:74:e1:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:35:C7:79:4A:E8:3A:88:B9:0C:35:E2:C4:32:9A:E4:5A:5F:4E:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/22
                IPv6:
                  2804:7c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271484

    Signature Algorithm: sha256WithRSAEncryption
         37:fb:57:ba:a4:9c:9e:0d:d1:26:82:ba:83:a1:70:54:96:10:
         50:47:8a:d1:a7:c7:22:49:d1:bf:d0:d4:7e:b8:db:a1:f4:66:
         e5:04:5f:9b:c0:a3:67:cb:2a:cc:bf:91:10:18:f5:23:a7:d1:
         e7:83:39:8e:18:15:6f:55:d0:a1:65:af:a9:04:6a:5e:d1:ab:
         6b:50:71:dc:98:f0:ad:34:27:3d:36:ef:6f:d4:5a:cd:eb:21:
         d1:81:ef:56:73:70:24:58:1d:21:fa:7b:60:ba:46:ec:a2:e0:
         34:f7:c0:a0:da:d6:19:6b:2f:a0:27:ee:f1:3d:9d:44:70:a0:
         c0:cc:b6:a1:03:a9:ea:2f:f7:a0:03:d0:02:f9:8f:9b:28:42:
         4c:e9:55:4f:0f:65:b9:90:8a:58:cf:66:ea:3f:b5:ab:5a:90:
         5d:1f:72:62:9b:d0:f9:b7:dd:3d:22:2a:32:43:92:d8:db:f8:
         c1:01:cb:53:44:b0:13:8d:dc:8d:71:e1:d3:a7:87:d5:45:b7:
         b5:bf:53:a3:79:fd:51:36:2c:fc:d5:7c:ce:e3:ef:f3:7e:b9:
         ed:43:ec:04:20:81:5f:77:30:13:e2:77:7b:21:9e:86:13:e0:
         24:40:e2:32:03:9a:b4:51:ac:51:cd:2a:8e:d3:04:e8:14:69:
         2f:62:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org