Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4329180F24DF1D33ED89890D8A321F63B1E56783.cer
File:                     4329180F24DF1D33ED89890D8A321F63B1E56783.cer (raw, json)
Hash identifier:          4qyYrHAJMmkpWo+5QrtpTzx2W4bewTtmiZ/4T+j4XIU=
Subject key identifier:   43:29:18:0F:24:DF:1D:33:ED:89:89:0D:8A:32:1F:63:B1:E5:67:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3146402BA9D1A5A09D7B7A894D29C15FC5E71EB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/4329180F24DF1D33ED89890D8A321F63B1E56783.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Jan 2023 19:15:12 +0000
Certificate not after:    Wed 10 Jan 2024 19:20:12 +0000
Subordinate resources:    AS: 263461
                          IP: 177.190.148.0/22
                          IP: 2804:122c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:46:40:2b:a9:d1:a5:a0:9d:7b:7a:89:4d:29:c1:5f:c5:e7:1e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 19:15:12 2023 GMT
            Not After : Jan 10 19:20:12 2024 GMT
        Subject: CN=4329180F24DF1D33ED89890D8A321F63B1E56783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:4d:07:bc:f9:72:2b:b1:1e:b7:97:2d:8d:
                    0d:91:03:cf:8f:d6:95:3d:39:89:c7:f5:75:22:a9:
                    4e:fd:84:db:d1:10:bf:b5:fe:28:36:aa:97:3e:1f:
                    e5:7c:95:ea:d5:3f:f1:da:4e:45:e0:d0:8a:91:16:
                    4d:a8:d5:1f:21:f6:11:68:61:93:3f:2f:e9:dc:bf:
                    b2:c4:bc:47:ee:5a:ed:a7:5c:89:23:c4:b2:99:89:
                    47:8f:63:5f:ed:4d:7f:d0:6f:25:95:52:ad:b3:2b:
                    8c:65:0b:e0:2e:20:58:85:6f:0d:b2:63:c5:ed:9d:
                    3f:ce:98:91:da:bd:24:c4:ce:19:96:5e:86:2c:8d:
                    e6:7d:e8:4d:77:94:2d:33:84:92:52:ec:55:f2:7a:
                    bb:00:f8:09:0a:29:87:56:be:98:52:a6:60:57:89:
                    48:0d:a0:7c:63:83:75:0e:f7:97:97:b5:76:46:28:
                    2f:96:86:98:79:65:56:86:3b:fc:7e:e4:49:0f:da:
                    82:be:aa:94:ca:43:50:55:d0:e4:e9:cb:df:46:ed:
                    9c:4d:15:8a:5a:b4:3b:10:12:68:e0:b7:a4:58:5f:
                    7f:2b:20:38:31:a3:76:bb:0a:fc:b1:f1:2e:a8:69:
                    38:79:8a:57:c0:12:69:fd:03:86:23:ef:17:0d:27:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:29:18:0F:24:DF:1D:33:ED:89:89:0D:8A:32:1F:63:B1:E5:67:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/4329180F24DF1D33ED89890D8A321F63B1E56783.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.148.0/22
                IPv6:
                  2804:122c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263461

    Signature Algorithm: sha256WithRSAEncryption
         85:07:1f:29:ba:55:48:22:bd:3f:53:6f:1f:ad:9b:1b:4f:01:
         b3:f0:dd:de:f9:2e:93:93:b1:3a:42:db:a8:af:ac:c3:df:fc:
         e8:81:1c:f0:32:73:bd:7e:c3:24:ec:d7:89:ad:a1:58:a7:c9:
         46:cb:e0:0b:b0:03:91:f3:9a:8a:a7:aa:65:c9:38:00:30:d3:
         4b:d9:f5:fc:5e:18:af:63:c1:5d:99:43:75:21:41:9a:46:20:
         5e:fc:e6:7b:ca:73:6f:15:34:24:a9:88:55:fb:5c:a5:92:27:
         85:d7:ef:fb:f5:7a:31:2f:7d:af:e1:99:db:9a:9f:f5:1c:c0:
         44:db:f4:a0:7f:0d:2f:01:7c:7a:bc:47:e1:9e:45:d5:2f:17:
         64:ed:3e:80:d8:8f:bf:a1:66:35:ec:02:f0:b2:8e:c9:87:a3:
         36:a1:de:45:77:1b:39:38:54:bf:ce:9c:6a:db:9b:d1:0a:fa:
         fc:0a:da:d9:00:9c:25:3f:bf:24:f0:4a:5a:e2:b7:16:e2:5c:
         1f:38:4c:22:26:47:0f:d7:8e:67:2b:cf:80:f1:2e:ac:f3:ec:
         b7:e6:4a:54:39:82:64:82:0d:f6:6f:47:49:bb:b0:3c:05:25:
         38:29:59:79:18:73:6d:2f:33:f0:e1:76:8e:9b:01:97:f8:b4:
         75:56:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org