Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42BB0511496FEEF6C1182D37EB25C5E135C2F6AD.cer
File:                     42BB0511496FEEF6C1182D37EB25C5E135C2F6AD.cer (raw, json)
Hash identifier:          OQILtFiOI68DDP9yna8NkqzQ1gGAJyMhcdE2X3RpcqU=
Subject key identifier:   42:BB:05:11:49:6F:EE:F6:C1:18:2D:37:EB:25:C5:E1:35:C2:F6:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       344A673461457D35B0679D1AF07AB70FFD02ACDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/42BB0511496FEEF6C1182D37EB25C5E135C2F6AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 16:02:45 +0000
Certificate not after:    Wed 19 Feb 2025 16:07:45 +0000
Subordinate resources:    AS: 271175
                          IP: 179.51.176.0/22
                          IP: 2804:7764::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4a:67:34:61:45:7d:35:b0:67:9d:1a:f0:7a:b7:0f:fd:02:ac:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 16:02:45 2024 GMT
            Not After : Feb 19 16:07:45 2025 GMT
        Subject: CN=42BB0511496FEEF6C1182D37EB25C5E135C2F6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:a7:39:20:6f:30:55:ef:2a:ab:ee:af:b1:
                    a8:0e:2b:17:16:bb:7d:3b:d3:2f:82:29:17:d2:f1:
                    bc:26:d1:43:e6:ce:f7:0a:0c:fc:e1:9f:21:0d:0b:
                    72:47:86:53:53:b4:80:86:fc:f2:58:01:ce:87:cd:
                    9b:d6:8d:d5:ec:0b:bf:fe:99:2d:b5:d6:de:5a:23:
                    06:83:ea:88:75:70:54:80:5b:f9:98:da:0a:a7:56:
                    8d:c3:dd:80:2d:e6:49:09:d0:f9:c6:a4:38:37:a6:
                    5f:f7:78:94:49:7f:58:d6:af:a4:b9:e8:13:1c:aa:
                    3d:78:cf:f0:d4:4e:a5:b2:d7:da:90:be:91:23:51:
                    22:8b:d9:a0:57:43:1d:9f:d3:cb:52:a5:eb:8f:a4:
                    16:7e:79:80:c2:c0:d1:14:38:e5:81:f6:c3:89:5b:
                    f8:66:4f:fb:d3:cc:36:51:aa:76:b5:4d:45:2e:0c:
                    7e:71:03:8a:08:15:f4:a3:a2:38:72:b9:77:d6:46:
                    a0:72:fc:26:50:a2:fc:a4:00:68:26:bb:3a:6b:42:
                    0f:d2:d9:b6:e0:73:4d:29:d7:07:7f:c1:06:5d:d9:
                    8a:a3:32:43:3d:ec:c1:6a:45:5b:f4:77:e6:3a:5c:
                    ae:b1:26:81:88:c4:6a:e8:e7:7b:c0:20:fd:80:16:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:BB:05:11:49:6F:EE:F6:C1:18:2D:37:EB:25:C5:E1:35:C2:F6:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/42BB0511496FEEF6C1182D37EB25C5E135C2F6AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.176.0/22
                IPv6:
                  2804:7764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271175

    Signature Algorithm: sha256WithRSAEncryption
         88:bc:75:32:f5:12:aa:b7:60:26:e2:67:c3:54:46:b9:81:f3:
         e4:8a:14:b2:84:93:26:c6:7a:0b:1a:fa:9d:69:69:c1:17:7a:
         f4:cb:6b:ff:d9:a7:55:d0:be:a1:8f:eb:63:75:71:78:53:42:
         23:3a:41:7a:22:c0:ec:e6:59:25:7c:fa:8e:5a:7b:00:09:26:
         36:aa:05:2e:97:c8:9e:a9:21:49:b4:51:3e:8e:cb:84:6b:5e:
         c3:b0:8f:89:29:a3:50:96:88:5e:e4:d2:9c:48:27:e9:7b:dd:
         45:b6:bc:f0:fb:56:72:42:c3:68:c6:ac:30:0e:d4:8b:c2:93:
         78:4b:dd:78:42:05:1a:b9:25:e2:1c:33:89:2b:43:1f:64:05:
         5d:2b:f6:c0:4e:69:72:58:5a:47:1b:c8:98:d1:da:87:85:5b:
         ee:fe:b9:ff:6c:9f:a5:7e:7e:6b:ef:db:90:dd:0f:ed:6c:e4:
         39:8b:ce:0a:d8:10:33:fd:d4:0b:1d:03:7e:45:75:d1:4a:5c:
         3f:9d:f8:23:95:d3:d8:91:1f:6e:39:21:79:d8:59:f4:a0:b3:
         c3:6f:f5:1a:ff:1c:74:0e:c5:9e:54:8c:65:c6:87:40:ad:b0:
         01:a6:ac:93:85:70:d6:b6:64:c0:e6:90:3a:06:3f:c4:5c:9f:
         e1:9a:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org