Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41708E304CF7ABF013B9D61D9AC203815B961D44.cer
File:                     41708E304CF7ABF013B9D61D9AC203815B961D44.cer (raw, json)
Hash identifier:          sXzRHRZjeNuJa6QxaKUUQqjagLCwrKmUJehkhuQNWxM=
Subject key identifier:   41:70:8E:30:4C:F7:AB:F0:13:B9:D6:1D:9A:C2:03:81:5B:96:1D:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2756FD87CDC646D71AD5CA04308D43273F929D34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/41708E304CF7ABF013B9D61D9AC203815B961D44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 00:10:12 +0000
Certificate not after:    Sat 16 Nov 2024 00:15:12 +0000
Subordinate resources:    AS: 270548
                          IP: 190.115.68.0/22
                          IP: 2804:6dac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:56:fd:87:cd:c6:46:d7:1a:d5:ca:04:30:8d:43:27:3f:92:9d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 00:10:12 2023 GMT
            Not After : Nov 16 00:15:12 2024 GMT
        Subject: CN=41708E304CF7ABF013B9D61D9AC203815B961D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:ac:8d:c8:5a:0f:b3:b1:99:df:19:db:e8:
                    52:6c:90:98:15:0d:fc:87:0b:9a:ae:87:05:ed:5e:
                    30:f0:00:02:a8:ee:7d:86:be:79:45:43:1d:23:32:
                    e9:a9:ae:e5:e7:9a:ea:70:fd:a5:10:d8:6b:0b:8e:
                    67:31:8b:7c:ae:3a:37:b2:c8:be:54:01:90:4d:6b:
                    a3:1d:d0:8c:2d:a9:59:7e:43:ee:6c:cc:19:f1:0b:
                    05:d5:2e:ae:63:5f:39:fc:68:d0:e7:1e:19:26:9b:
                    c1:57:75:96:19:af:e1:b5:fd:da:70:f8:74:64:fe:
                    e4:56:90:5f:ef:68:96:51:dd:ea:fb:e6:20:4a:6c:
                    16:19:19:fd:95:6d:1d:11:a0:31:18:1e:9e:6d:4a:
                    29:ff:75:78:32:2d:61:4d:f6:e8:4f:5a:c0:dc:e9:
                    14:2c:7e:f8:e4:55:54:1b:be:90:a0:80:34:db:c9:
                    76:31:1a:5d:17:0f:91:80:c7:de:84:ee:07:b6:fc:
                    b3:d3:a9:8b:b1:85:17:3c:d5:02:a8:f1:79:e2:b6:
                    ab:97:de:76:e6:46:62:31:fd:31:d8:4e:42:68:1c:
                    e4:f1:85:6e:db:50:8a:95:f4:7b:e5:2d:3f:6d:60:
                    f3:14:05:9f:e2:f6:6d:38:02:0a:6c:f6:7d:45:b0:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:70:8E:30:4C:F7:AB:F0:13:B9:D6:1D:9A:C2:03:81:5B:96:1D:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/41708E304CF7ABF013B9D61D9AC203815B961D44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.68.0/22
                IPv6:
                  2804:6dac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270548

    Signature Algorithm: sha256WithRSAEncryption
         5d:0b:4e:f2:14:45:f2:f4:60:21:1c:c6:f2:e5:62:4a:c4:65:
         22:a8:38:cd:64:23:ab:88:2e:ef:89:1e:ff:3f:9e:a4:7e:d3:
         e2:27:41:fe:a2:54:c4:e8:b0:db:ed:4a:33:7f:f4:48:bf:4d:
         10:44:0f:bb:c4:ec:ad:c3:55:d3:a9:9e:bc:52:94:0c:15:b0:
         72:e3:04:22:c6:8c:28:51:93:21:ba:39:ec:8e:23:95:ca:c1:
         c1:2d:98:77:4e:e4:fb:db:ba:13:fe:d2:fa:f5:7b:1c:c9:00:
         d9:15:d9:7a:74:21:b3:b8:b6:29:bf:c7:27:40:5b:a8:fb:85:
         62:44:16:b3:e7:a5:d3:3c:08:01:7d:0d:68:04:c1:bf:25:2f:
         a9:b4:de:e8:3b:2f:2f:13:5a:15:5e:b0:9c:4b:c9:a4:7b:0b:
         19:85:9b:55:f2:01:8c:d5:f6:7b:d8:77:6b:2e:ae:83:07:4b:
         b0:aa:56:9e:98:80:71:e1:cb:72:f8:7a:b2:d5:8c:a6:19:1d:
         96:57:ee:12:15:ea:06:40:8b:5a:eb:fd:6f:86:d2:e9:85:6b:
         78:bd:d0:17:ff:dc:55:ab:37:97:f6:24:a1:d3:c4:f0:12:36:
         17:79:4d:0f:a9:f8:1d:71:90:5e:04:6c:d6:88:c0:fb:ee:a6:
         cc:37:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org