Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41D79545AAAF88602FBF313AED62F3EF005B9C93.cer
File:                     41D79545AAAF88602FBF313AED62F3EF005B9C93.cer (raw, json)
Hash identifier:          rFsh4xq9qfTmCIJmEMIgfD5/5eXdgvb8t2iEi0K7SqM=
Subject key identifier:   41:D7:95:45:AA:AF:88:60:2F:BF:31:3A:ED:62:F3:EF:00:5B:9C:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C810FBF10D61EE9CE98C47093089AFFB733DF35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/41D79545AAAF88602FBF313AED62F3EF005B9C93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2024 03:47:11 +0000
Certificate not after:    Thu 23 Jan 2025 03:52:11 +0000
Subordinate resources:    AS: 271599
                          IP: 45.174.196.0/22
                          IP: 2804:7e0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:81:0f:bf:10:d6:1e:e9:ce:98:c4:70:93:08:9a:ff:b7:33:df:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 03:47:11 2024 GMT
            Not After : Jan 23 03:52:11 2025 GMT
        Subject: CN=41D79545AAAF88602FBF313AED62F3EF005B9C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:21:b1:39:64:30:cf:d5:4e:1e:e8:23:db:
                    3c:22:b7:a0:57:82:03:2a:53:4b:45:71:59:7d:46:
                    9a:06:64:31:b0:3f:52:7a:de:09:0f:2c:94:a4:ec:
                    36:19:7a:fd:70:a5:81:38:41:df:4f:00:d6:77:b9:
                    38:bc:f3:f3:f1:8d:f8:e2:68:28:35:81:23:fd:9f:
                    74:74:32:88:18:a6:8a:a5:8b:48:b3:12:23:bb:22:
                    a0:20:dd:d5:ad:5d:99:dc:c7:d4:f2:a3:a9:f5:d2:
                    79:47:b1:dc:8c:b2:71:05:1b:4b:d7:94:90:cd:ad:
                    d2:d2:b9:1e:fc:e9:9c:b3:82:8f:08:2d:35:19:42:
                    da:9e:db:e6:0b:c7:43:a2:e3:7c:15:88:2b:8e:bf:
                    74:7b:61:6b:97:84:be:51:b0:cc:c4:2a:13:95:53:
                    23:31:cf:41:73:43:24:47:a9:ee:d6:55:f7:67:27:
                    78:0e:b2:a1:96:58:e2:56:8a:39:d4:9f:14:7b:d5:
                    c6:a7:1f:2a:69:ab:29:70:01:5e:ec:af:c1:f1:f1:
                    2f:da:99:f9:02:76:9b:8f:a6:10:ec:64:58:4c:ca:
                    61:87:f5:b9:d5:38:f3:8a:e1:06:05:ee:65:3f:65:
                    eb:44:ff:2f:ed:4d:8f:44:71:4f:55:fb:84:66:37:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:D7:95:45:AA:AF:88:60:2F:BF:31:3A:ED:62:F3:EF:00:5B:9C:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/41D79545AAAF88602FBF313AED62F3EF005B9C93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/22
                IPv6:
                  2804:7e0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271599

    Signature Algorithm: sha256WithRSAEncryption
         6b:60:97:0d:4e:a0:6c:27:2c:6c:3a:2a:f6:5b:11:79:d3:26:
         4c:26:17:57:70:b1:db:11:2e:92:45:a4:7d:0b:3d:c1:c2:07:
         1c:ef:bf:b9:c4:e5:d1:d1:68:93:70:ef:c5:d5:2c:62:63:1b:
         8f:72:1d:7d:6d:02:44:8a:c0:9c:9f:5d:a0:a6:0a:d5:6f:7e:
         49:65:75:50:76:94:e7:94:ed:b0:e5:48:60:78:1f:ac:75:04:
         ef:05:69:90:1e:fa:5a:f7:76:c7:33:6d:d3:c6:ba:7b:9d:a4:
         af:6a:4f:0b:f2:c3:e5:ad:63:85:bc:e4:16:21:86:6a:cc:ea:
         59:47:9f:ff:42:ce:10:3d:9c:f2:55:0b:6b:99:96:d4:12:bd:
         33:06:05:7d:99:04:99:dd:09:a1:88:9e:42:c0:e9:d4:4f:1b:
         b5:1f:d6:fc:cd:e1:4e:92:09:b9:8b:e2:da:56:db:59:73:f5:
         c0:a7:6b:86:21:e8:bc:82:35:19:a5:89:e2:88:24:c8:6a:13:
         b2:eb:83:d5:a5:c3:05:78:d7:02:35:ab:74:56:07:c2:17:bb:
         74:0b:03:7f:d7:09:8e:71:54:48:7d:98:81:b0:fe:be:fa:74:
         94:81:2b:82:e3:e5:dd:3d:90:9c:a6:a3:06:08:8b:40:43:cd:
         ae:62:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org