Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.cer
File:                     41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.cer (raw, json)
Hash identifier:          O07cWfLbTbRnuEWC+xqbTdvMlzu5fLF36mwC0egYmSs=
Subject key identifier:   41:E1:96:8B:09:E2:AD:0B:6F:8C:59:FA:1E:09:9F:DE:91:3D:82:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       010BE4BF4176662A4A60D94C08EAAB59E1CE1D4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 11:08:18 +0000
Certificate not after:    Fri 24 May 2024 11:13:18 +0000
Subordinate resources:    AS: 267654
                          IP: 45.70.156.0/22
                          IP: 2804:44cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:e4:bf:41:76:66:2a:4a:60:d9:4c:08:ea:ab:59:e1:ce:1d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 11:08:18 2023 GMT
            Not After : May 24 11:13:18 2024 GMT
        Subject: CN=41E1968B09E2AD0B6F8C59FA1E099FDE913D829C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:d7:13:1d:b4:77:aa:74:82:7e:47:68:2d:
                    2d:08:6e:cd:0a:a9:93:54:1c:9b:f6:2f:78:ed:f8:
                    da:13:5b:e0:81:65:51:b1:ef:0b:21:00:f5:e3:9d:
                    79:c8:b4:83:0b:2c:71:1f:f1:08:69:90:b8:35:ac:
                    7f:5e:92:1e:56:21:92:3a:71:af:f4:db:28:fd:f0:
                    89:43:55:cd:40:3e:38:28:56:20:37:a2:80:ce:e4:
                    d5:e8:96:14:a8:12:18:da:f7:97:d7:54:e3:0a:14:
                    a8:ce:74:31:35:aa:16:07:27:89:c5:d0:24:29:f5:
                    96:0f:37:77:7c:e7:8f:f2:8b:29:af:42:69:f0:49:
                    b0:4f:95:13:aa:04:35:e7:bc:93:d8:54:fd:f4:92:
                    b6:f2:6d:1e:ad:a2:c0:b5:60:cf:e6:db:61:84:fd:
                    61:d5:2d:99:25:8a:be:6d:df:4c:18:37:62:9f:9c:
                    0a:79:ef:45:0f:45:77:64:50:1c:1c:a0:38:44:15:
                    94:f0:72:74:45:bd:ca:10:8e:6a:16:05:a6:1d:a5:
                    99:a7:e5:12:81:f7:5d:68:39:fd:5e:da:2b:21:13:
                    49:f1:b9:98:74:bd:35:98:46:45:6e:58:47:26:37:
                    a0:27:6e:8d:49:66:e9:2e:ee:bf:67:b7:f9:59:c6:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:E1:96:8B:09:E2:AD:0B:6F:8C:59:FA:1E:09:9F:DE:91:3D:82:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.156.0/22
                IPv6:
                  2804:44cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267654

    Signature Algorithm: sha256WithRSAEncryption
         a1:d9:0d:b4:bb:3d:a3:ac:fa:93:14:33:07:7f:9f:64:67:5c:
         76:ee:43:e3:52:f7:ec:01:31:09:c9:99:0b:16:83:06:aa:58:
         8a:fa:ce:64:eb:38:57:01:b1:c1:47:65:c0:ea:fe:6e:0b:01:
         b9:19:07:b8:cc:1c:56:82:72:98:e7:b0:05:14:61:13:c8:ee:
         99:9b:dc:e0:8f:7e:16:40:3c:ec:bb:49:4b:01:91:95:a3:97:
         f5:d3:eb:c3:35:c6:07:aa:e6:9f:45:85:ec:7f:84:2f:05:f2:
         bd:7f:fc:0e:62:ad:d3:86:24:f8:de:69:2d:8f:b8:8f:3f:22:
         1b:67:a5:72:88:1a:e2:bc:15:09:42:ed:84:50:3a:96:10:35:
         38:83:61:e5:57:fc:f3:1d:01:63:89:34:33:7d:6a:d1:69:09:
         ce:5a:fa:28:b3:16:e7:df:e0:4c:37:5e:ea:82:c1:d5:e3:0a:
         30:c3:f0:69:f4:17:5d:a0:07:6d:a3:64:c7:91:2b:74:82:95:
         9f:25:c1:7f:ce:86:bb:c9:d9:c7:43:d2:4d:39:4e:ff:a3:60:
         90:9a:a3:6b:e9:97:ec:35:06:54:ed:d8:f2:56:21:fa:8e:3d:
         5a:fe:98:2a:d2:08:89:61:01:03:fa:cf:c4:c2:46:de:a0:06:
         a3:cc:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org