Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.cer
File:                     43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.cer (raw, json)
Hash identifier:          jJ8MaHmiMBAD7IOQZ9fx2Dsth8JCTP2cnqX0olKw42I=
Subject key identifier:   43:55:8B:0E:62:F3:AB:F2:4D:E8:8B:7F:8C:4B:D4:7D:CE:78:4B:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D01BD3E50BB385D20F3B06135BB58A3C0C51A66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 14:22:28 +0000
Certificate not after:    Mon 07 Apr 2025 14:27:28 +0000
Subordinate resources:    AS: 262468
                          IP: 45.228.48.0/22
                          IP: 138.122.28.0/22
                          IP: 168.121.100.0/22
                          IP: 168.196.52.0/22
                          IP: 177.53.144.0/22
                          IP: 179.108.48.0/20
                          IP: 191.5.192.0/20
                          IP: 2804:e94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:01:bd:3e:50:bb:38:5d:20:f3:b0:61:35:bb:58:a3:c0:c5:1a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 14:22:28 2024 GMT
            Not After : Apr  7 14:27:28 2025 GMT
        Subject: CN=43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:38:5c:c7:b6:9f:67:8f:00:6c:40:ee:f7:
                    16:3b:6a:81:11:61:a9:4d:6a:a9:13:fd:b5:c3:de:
                    d7:0b:0b:82:8f:de:cc:45:49:ae:5e:78:93:e4:e9:
                    d6:32:46:b4:7b:ea:71:1c:3d:68:0d:51:21:f6:a2:
                    36:bc:54:2d:6d:2c:9b:eb:3d:a9:e7:e3:67:f4:6c:
                    16:e2:ac:66:1b:a2:d6:6f:f4:60:0f:84:81:a5:8e:
                    e3:14:21:ed:02:1f:13:1c:1a:0d:a8:5f:dc:58:c9:
                    05:a1:8a:47:16:9a:47:87:ff:9d:4b:73:24:cf:ec:
                    60:02:11:af:f0:24:ea:b3:26:9d:fb:89:54:77:28:
                    8d:f3:95:0b:c0:79:7d:ab:5f:51:bb:13:e0:b5:7b:
                    29:80:b2:09:54:7f:76:f8:ae:cf:81:5b:70:c8:5f:
                    6d:f4:7b:88:d5:0b:0b:c2:9a:3b:89:d3:23:27:20:
                    ff:d5:4f:ce:a6:ed:17:63:78:ef:34:c8:69:6a:36:
                    fc:b9:5f:3d:72:ef:b9:3b:f7:38:e3:6e:1d:12:bc:
                    94:a8:6a:b0:3a:d9:60:14:95:b9:17:5b:fc:31:f0:
                    67:54:b7:b0:e6:2b:15:47:fc:82:b3:8c:93:62:a0:
                    87:d5:a2:1e:24:0a:58:14:15:01:b7:10:81:0b:0b:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:55:8B:0E:62:F3:AB:F2:4D:E8:8B:7F:8C:4B:D4:7D:CE:78:4B:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.48.0/22
                  138.122.28.0/22
                  168.121.100.0/22
                  168.196.52.0/22
                  177.53.144.0/22
                  179.108.48.0/20
                  191.5.192.0/20
                IPv6:
                  2804:e94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262468

    Signature Algorithm: sha256WithRSAEncryption
         b2:14:40:e9:ce:78:b2:6f:de:11:d5:23:4b:00:c3:15:6b:08:
         f1:66:a4:e7:fd:c4:74:97:82:50:4c:e3:92:ed:35:7b:8c:16:
         a6:2e:67:8b:54:2d:50:f8:e2:29:24:20:9d:8c:e0:48:a9:56:
         a8:d3:ea:5d:0a:a9:e5:37:d5:a6:e3:2f:19:f1:7e:f2:78:83:
         4c:dc:59:98:bb:7f:c4:20:15:16:bb:ed:bb:02:d4:ba:5a:d9:
         c5:74:89:73:ea:e3:04:28:30:73:67:44:31:41:f3:cd:b9:3e:
         78:c7:2e:a6:1a:98:2e:0c:7d:16:32:da:d6:54:bc:af:53:09:
         a2:3a:77:a1:d9:2e:b8:9d:46:0e:19:17:e7:4a:29:4d:b9:b5:
         09:2a:8b:f8:87:a9:58:9a:e9:9f:68:87:0e:52:29:73:7b:97:
         19:ec:1f:6a:a0:ae:2b:49:69:10:45:81:1e:4e:c9:05:72:cd:
         1a:1f:d0:87:c7:5f:f1:22:dc:ea:c6:2f:4f:15:03:26:fd:cd:
         36:3a:c6:ee:8a:96:6f:88:dd:49:10:20:f0:63:35:89:fd:52:
         58:51:cc:20:43:9c:c4:48:08:ab:04:3b:43:b8:7b:da:8e:d0:
         86:24:f1:46:16:58:80:d1:09:64:12:a3:73:5c:99:46:20:14:
         79:1e:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org