Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer
File:                     4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer (raw, json)
Hash identifier:          RF8/x6JsFybQBaY9qnxyFH7YDhgGVL+glBGHqWrDZe8=
Subject key identifier:   41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64DA12F37ADE13C30D1DBC1959B7FAA10667160D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Mar 2024 08:24:17 +0000
Certificate not after:    Sat 01 Mar 2025 08:29:17 +0000
Subordinate resources:    AS: 266498
                          AS: 269051
                          IP: 45.178.248.0/22
                          IP: 170.244.72.0/22
                          IP: 2804:38bc::/32
                          IP: 2804:5eb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:da:12:f3:7a:de:13:c3:0d:1d:bc:19:59:b7:fa:a1:06:67:16:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  2 08:24:17 2024 GMT
            Not After : Mar  1 08:29:17 2025 GMT
        Subject: CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:dc:97:33:10:5d:cd:54:ea:71:77:82:63:
                    7a:e4:3a:0b:e1:a1:43:09:68:f9:ac:20:28:88:de:
                    9d:8c:c9:93:eb:d7:34:ba:e6:20:ef:c9:66:e7:91:
                    7c:7f:e3:2d:8c:81:4c:85:b6:3e:af:98:44:f4:03:
                    a7:42:76:7f:d6:22:40:fd:93:35:0e:e2:e1:b1:fd:
                    18:e9:9f:61:78:35:a6:4c:e6:8f:55:df:3b:bd:6c:
                    c5:2d:c3:2c:e8:f9:64:93:da:8a:a0:61:d1:dc:eb:
                    95:3e:83:20:1c:9c:c1:86:37:8e:67:8a:78:00:4b:
                    25:57:8e:7f:f7:8c:13:13:66:9a:49:71:ba:46:9e:
                    f8:02:92:67:a3:b9:0b:e8:ee:51:04:6e:68:d7:ce:
                    97:37:b9:fe:9c:e5:67:00:72:13:fc:fe:77:28:28:
                    f2:98:b2:0c:7f:ed:ea:3d:2c:0a:26:a4:a6:77:ee:
                    32:61:73:af:5d:f3:9a:2a:4c:c0:d7:01:06:51:2f:
                    02:fd:fd:b6:3b:84:f9:70:0e:f4:6e:e5:7f:d0:22:
                    28:e6:ae:96:ef:a4:06:26:2b:af:54:0e:37:73:36:
                    02:13:3e:ae:35:7f:d8:e7:d5:2d:7d:65:9f:03:b2:
                    ad:68:4e:2b:dc:eb:65:45:ab:1b:c1:ce:fa:54:77:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.248.0/22
                  170.244.72.0/22
                IPv6:
                  2804:38bc::/32
                  2804:5eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266498
                  269051

    Signature Algorithm: sha256WithRSAEncryption
         31:72:fe:b2:f5:b7:8b:06:c6:f2:ba:f8:da:41:d3:86:7f:67:
         91:4b:be:56:8b:1c:a2:d0:fd:b4:07:ac:03:3a:13:65:12:03:
         2d:e1:55:be:24:8e:d1:2c:04:0a:56:32:9c:91:53:35:96:35:
         4f:82:40:6d:8c:84:dc:75:0f:ac:ab:98:c6:da:73:ad:32:48:
         4e:32:33:33:24:05:4b:92:7d:2b:b4:be:ba:a3:93:67:f2:b0:
         a8:b0:46:d3:0e:10:8c:82:ca:ea:82:36:e9:21:cf:09:fa:55:
         00:f1:ff:3c:7e:8f:c0:8b:73:e4:af:26:75:ba:68:f3:c5:7e:
         47:63:2c:43:8e:15:45:db:cd:d0:94:9f:15:45:d3:f2:43:5b:
         0c:ac:c1:2e:2f:10:dd:a0:73:92:8f:1d:d9:15:b8:d2:5c:d2:
         7f:d9:28:c5:90:d6:23:75:ce:4d:0d:a3:f4:f0:f8:69:ff:ac:
         09:8a:d5:1e:f7:f4:4e:36:14:fc:ff:34:08:42:6f:10:80:61:
         51:fc:1a:fb:32:0d:93:e9:95:f1:92:2c:a8:93:ff:9d:43:ca:
         2d:26:3c:24:2d:92:db:af:19:b9:27:91:8c:6b:8b:5e:89:61:
         ef:ec:2a:32:49:1b:bb:6c:ef:0c:e0:d7:0f:02:1b:15:91:c6:
         18:66:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org