Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4276B533F3F7C999A8C2148429BF062754CDA501.cer
File:                     4276B533F3F7C999A8C2148429BF062754CDA501.cer (raw, json)
Hash identifier:          fesf3TEdklTzAOqiVGv7Ko0yuoijHJOH5e7NdLuBsxk=
Subject key identifier:   42:76:B5:33:F3:F7:C9:99:A8:C2:14:84:29:BF:06:27:54:CD:A5:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       723C0D2784FA0506809FADF83F6FB9BAB102805C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/4276B533F3F7C999A8C2148429BF062754CDA501.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 08:27:47 +0000
Certificate not after:    Wed 12 Feb 2025 08:32:47 +0000
Subordinate resources:    AS: 262851
                          IP: 177.10.144.0/21
                          IP: 177.86.144.0/21
                          IP: 191.240.200.0/21
                          IP: 191.242.112.0/20
                          IP: 2804:1270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3c:0d:27:84:fa:05:06:80:9f:ad:f8:3f:6f:b9:ba:b1:02:80:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 08:27:47 2024 GMT
            Not After : Feb 12 08:32:47 2025 GMT
        Subject: CN=4276B533F3F7C999A8C2148429BF062754CDA501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:5c:3e:ec:db:22:ff:e5:da:b9:26:0b:c2:
                    df:6d:29:a1:fe:e6:2f:d7:0d:10:63:21:14:4a:45:
                    8b:0c:5e:1c:33:53:59:04:83:7f:31:fe:4f:e7:6e:
                    87:c2:a0:e7:c2:40:c9:57:d1:5a:e9:af:d4:4d:f2:
                    4b:89:e8:00:18:6e:10:2a:3a:ad:b8:79:a7:e8:86:
                    c5:2c:52:4a:1f:cc:cc:cf:fd:05:c9:77:65:44:4c:
                    bb:8a:bb:fb:48:a7:4e:a7:ad:2c:5f:1e:53:f1:b1:
                    ef:57:e4:f4:a5:2d:07:21:21:7c:2b:44:f2:30:4d:
                    ac:a4:08:31:80:c3:e8:79:b1:b1:18:10:15:08:07:
                    ff:51:2c:9c:1b:9b:1b:62:df:86:81:04:a3:9c:d8:
                    dd:e1:cb:58:20:9e:f3:c3:38:d4:66:7d:c9:68:9e:
                    1f:85:3e:74:ee:87:77:26:72:94:f2:c8:a8:2f:7e:
                    7a:cd:7c:0b:37:34:66:7a:5d:3b:d2:8d:bb:19:a4:
                    3a:c1:7c:05:4e:c7:f2:43:b4:f8:a8:3b:42:fb:4e:
                    f8:10:0c:68:0d:60:fd:18:1c:a0:c2:a6:9d:04:bc:
                    46:6e:9a:3c:f1:a7:09:90:0a:5f:8e:29:d8:2f:34:
                    3a:25:ea:fa:8f:1d:42:5d:5c:3b:19:5d:0e:e5:28:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:76:B5:33:F3:F7:C9:99:A8:C2:14:84:29:BF:06:27:54:CD:A5:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/4276B533F3F7C999A8C2148429BF062754CDA501.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.144.0/21
                  177.86.144.0/21
                  191.240.200.0/21
                  191.242.112.0/20
                IPv6:
                  2804:1270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262851

    Signature Algorithm: sha256WithRSAEncryption
         0c:3b:c5:d1:42:d1:9d:ab:1e:c0:ea:b1:04:33:13:dc:8e:12:
         d1:94:35:20:07:2c:75:06:0c:96:e2:64:06:7e:3e:48:d2:1e:
         3a:e9:a1:9d:bb:34:0f:a8:e3:52:a9:d0:9d:71:c1:f5:3f:d8:
         b5:7d:ce:29:ce:98:5c:7d:0f:21:45:c6:a3:b2:cd:7c:89:98:
         40:a4:13:84:8c:36:87:b3:b5:69:8c:9f:7f:31:9b:91:29:40:
         08:45:66:63:d2:be:8b:41:b6:04:42:c1:77:91:24:f1:0e:1f:
         d7:70:1f:c4:79:72:d3:11:5c:75:6c:7b:ac:2b:49:d2:50:c5:
         fe:8a:1a:8d:9c:a7:5e:63:c0:c0:8f:6a:7a:ac:5f:64:48:6b:
         ad:95:50:55:70:14:c9:f5:3d:c0:eb:4b:f2:00:bd:92:31:5d:
         57:ef:01:2f:34:e4:89:a9:e0:3a:1e:ee:28:0a:b4:1d:5b:5d:
         30:61:9e:1c:57:63:57:67:24:ee:c9:16:e5:a0:15:13:d7:66:
         42:61:50:0b:35:90:be:d1:d7:d1:4f:0e:b5:59:c5:c9:64:b6:
         a3:ab:d6:a1:78:a7:72:51:03:e5:0a:65:b7:1f:3a:08:c5:1f:
         41:37:7f:22:ba:42:57:c4:d5:fe:71:fe:83:c5:33:a1:df:56:
         ae:fa:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org