Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4200E39F4CB12DC5363272ADAF1AD7D734E755ED.cer
File:                     4200E39F4CB12DC5363272ADAF1AD7D734E755ED.cer (raw, json)
Hash identifier:          gO8uJdCH/NsappQy5tL1GIt67NDCYKPkRotgp0RPIk8=
Subject key identifier:   42:00:E3:9F:4C:B1:2D:C5:36:32:72:AD:AF:1A:D7:D7:34:E7:55:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       629D344DD66DBF2984E020BAA137A6ECE961DA88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/4200E39F4CB12DC5363272ADAF1AD7D734E755ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 18:40:18 +0000
Certificate not after:    Fri 04 Oct 2024 18:45:18 +0000
Subordinate resources:    AS: 267375
                          IP: 45.234.168.0/22
                          IP: 2804:4c84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9d:34:4d:d6:6d:bf:29:84:e0:20:ba:a1:37:a6:ec:e9:61:da:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 18:40:18 2023 GMT
            Not After : Oct  4 18:45:18 2024 GMT
        Subject: CN=4200E39F4CB12DC5363272ADAF1AD7D734E755ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:06:b2:40:f6:19:f4:1f:c4:bf:96:4b:42:
                    b8:d2:95:5f:59:44:17:c9:98:5c:98:41:ec:98:fb:
                    0f:ab:8c:0b:01:d3:ab:12:f2:8f:e1:a9:bd:d6:a3:
                    12:e0:de:f1:43:eb:52:49:c9:6f:ab:82:a9:ee:cd:
                    3c:5b:ba:72:59:fd:78:67:f0:b2:82:03:54:7b:2d:
                    8f:61:26:61:f3:f3:3b:a5:b1:18:f1:15:11:0d:35:
                    4c:45:c1:78:f7:05:fe:d9:e2:7d:52:20:c6:6a:60:
                    f5:8d:c3:cf:69:bc:57:04:ac:dc:ba:19:fe:14:cd:
                    82:73:fb:a7:0d:04:63:ab:2e:6a:d8:ff:83:34:e3:
                    b5:c9:f6:37:be:0b:13:fa:c5:1b:38:30:62:0d:d2:
                    09:2d:5c:71:f1:8c:e7:6a:d7:db:cf:db:b7:c8:8c:
                    b7:4e:b6:1f:8c:f8:45:9b:98:f3:9b:be:6e:26:eb:
                    2b:49:5a:43:c4:50:ee:81:7a:4a:58:56:3a:53:60:
                    82:55:1f:c9:eb:95:b6:68:4a:d4:55:70:05:70:9e:
                    b5:b2:44:32:77:aa:4b:8b:43:e9:89:41:95:15:25:
                    c9:ae:52:0c:dd:d9:f4:e4:f7:b1:39:1f:28:47:b6:
                    8d:3f:cd:dd:ef:b2:bd:56:7a:09:dc:0d:c6:eb:71:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:00:E3:9F:4C:B1:2D:C5:36:32:72:AD:AF:1A:D7:D7:34:E7:55:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/4200E39F4CB12DC5363272ADAF1AD7D734E755ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.168.0/22
                IPv6:
                  2804:4c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267375

    Signature Algorithm: sha256WithRSAEncryption
         14:0c:06:d5:91:45:fb:01:fa:14:d2:27:83:cb:dc:3c:16:e1:
         b8:c8:e7:c3:fb:cc:a3:1f:89:d6:48:2d:22:57:f9:8b:dd:bf:
         81:8a:e4:12:5f:b5:62:4d:d6:08:29:8f:f0:24:d2:4b:85:99:
         7a:ee:ad:69:a2:67:86:44:9d:07:23:d2:a7:41:91:5e:79:f5:
         e7:64:a2:80:46:4c:f8:eb:3d:44:bc:93:6e:66:b0:d2:1d:2e:
         b7:ec:b5:f7:40:ee:3b:03:f5:c8:8b:75:27:61:56:02:11:15:
         e8:ac:4b:c3:64:67:68:be:cb:e3:2e:e6:30:fe:69:8d:0c:6f:
         f7:b1:83:4d:c7:47:35:e0:fd:89:0e:00:1c:40:f1:0c:4d:fb:
         3e:fb:43:ef:08:58:f9:75:ad:31:15:4d:4a:fa:cc:17:d8:65:
         5c:f7:5d:18:d9:a8:b3:81:32:86:88:8d:38:f5:50:4b:e7:76:
         78:67:56:f2:e6:8b:d5:60:97:89:bf:52:e9:31:78:77:f0:a4:
         f4:82:2c:17:86:9d:dd:7f:3d:3d:93:fc:16:97:39:71:3d:53:
         15:aa:e5:63:53:3a:ce:08:3e:69:28:39:7e:98:d1:0d:3c:e5:
         9e:be:bc:b4:ca:10:06:71:7c:13:ac:fa:c8:26:3e:d6:90:58:
         a1:20:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org