Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.cer
File:                     42BF35C6FF36C97758EA11F34742DBBF27A61DE9.cer (raw, json)
Hash identifier:          A59H5cv7MBuUaa48hpsGYK5n2dZ31wgERTW/ZK3D3xw=
Subject key identifier:   42:BF:35:C6:FF:36:C9:77:58:EA:11:F3:47:42:DB:BF:27:A6:1D:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E781A1655BB62D8DF1B44C63F61F17BA64DA25B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 18:45:09 +0000
Certificate not after:    Fri 22 Nov 2024 18:50:09 +0000
Subordinate resources:    AS: 267651
                          IP: 45.71.244.0/22
                          IP: 2804:44c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:1a:16:55:bb:62:d8:df:1b:44:c6:3f:61:f1:7b:a6:4d:a2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 18:45:09 2023 GMT
            Not After : Nov 22 18:50:09 2024 GMT
        Subject: CN=42BF35C6FF36C97758EA11F34742DBBF27A61DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:66:5b:eb:87:b1:40:77:66:43:97:c0:6f:
                    89:94:d0:f9:e3:21:cf:7a:5d:d7:be:d7:3a:1a:eb:
                    75:cb:ed:d4:33:35:c2:f8:8f:c4:ea:3b:9d:05:9b:
                    29:62:ba:96:4f:35:36:5c:6c:95:7e:36:eb:06:ac:
                    5b:3e:17:57:3c:56:08:e4:a4:45:c5:62:fc:8c:e4:
                    a5:22:dd:ec:35:20:8b:64:a3:ea:69:88:5d:71:9d:
                    01:df:be:e1:6b:99:be:da:7a:4f:83:bc:ed:82:22:
                    0b:0b:c2:12:4a:95:33:1b:66:4b:8a:93:98:41:63:
                    18:b4:04:cd:93:eb:99:5c:d9:14:89:53:d4:5f:46:
                    43:12:cd:39:e9:04:57:e5:ca:39:e4:b9:b4:8b:f7:
                    24:be:4b:49:b0:51:f9:ed:63:32:88:9e:ca:8d:71:
                    de:c1:fe:3f:18:6c:ad:1f:70:b8:16:fd:1d:5e:8f:
                    56:5d:e4:db:4c:21:b8:55:d2:d2:aa:c1:18:1b:8f:
                    f1:5c:e5:16:3d:d5:1c:28:d6:dc:74:e0:c4:34:ad:
                    1b:85:a1:34:00:90:8a:c2:9b:97:74:a2:1a:74:aa:
                    27:ed:2b:6e:55:1a:7a:8c:7d:a6:6c:87:05:3d:b6:
                    45:97:b7:2f:3a:b2:f1:e5:4a:b4:07:77:b2:6c:b1:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:BF:35:C6:FF:36:C9:77:58:EA:11:F3:47:42:DB:BF:27:A6:1D:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.244.0/22
                IPv6:
                  2804:44c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267651

    Signature Algorithm: sha256WithRSAEncryption
         0a:a1:ce:28:33:43:96:3f:47:bb:df:c7:3f:fc:80:fc:b3:00:
         66:fa:b9:eb:34:a2:03:e2:1e:b7:bc:61:62:59:83:9e:92:f5:
         74:76:40:a3:68:f0:40:13:cf:b5:64:45:1e:a7:f5:b5:23:4c:
         fe:25:a3:7a:ac:72:f6:0a:df:7b:da:4c:d3:f1:54:3a:93:b2:
         bd:86:e9:fe:e7:20:95:90:3a:31:09:53:9a:5a:d9:36:34:8f:
         c3:0a:73:c7:1d:54:43:5b:8c:f4:2e:48:09:8f:3e:65:3f:14:
         3f:84:13:4c:f7:9d:98:2b:6e:06:53:5d:7a:92:f9:19:d8:f6:
         7e:61:d5:f5:84:4e:3c:05:7f:35:1d:3a:92:8b:0c:69:02:03:
         da:6f:47:35:69:e8:2e:d9:1d:32:fa:4b:6b:73:80:c0:fb:3a:
         d6:8e:2a:6a:23:0b:64:d2:2d:05:e3:cf:f8:04:29:2f:55:3e:
         fd:04:5d:ef:a8:53:42:a4:a3:02:5f:69:a1:7e:89:cb:01:20:
         4f:df:ab:72:86:7b:57:31:bc:62:d9:9a:41:36:8b:ee:65:02:
         3a:36:79:12:99:64:2b:8b:a2:7c:fc:39:93:25:93:cf:ff:86:
         8c:d2:5c:a3:dd:e0:4d:d3:d1:1f:e4:4e:bc:0a:47:27:c4:9f:
         dc:19:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org