Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43669517FACA8C7D9E05E75F438434F3CF1D7057.cer
File:                     43669517FACA8C7D9E05E75F438434F3CF1D7057.cer (raw, json)
Hash identifier:          tiCUF9wO6yiEAojiKv6VOXlnzfLKAj51yFqlBk47jYg=
Subject key identifier:   43:66:95:17:FA:CA:8C:7D:9E:05:E7:5F:43:84:34:F3:CF:1D:70:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FCD003F7A9DFFB89565E859ADD47AD1D5719412
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/43669517FACA8C7D9E05E75F438434F3CF1D7057.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Mar 2023 18:50:41 +0000
Certificate not after:    Mon 11 Mar 2024 18:55:41 +0000
Subordinate resources:    AS: 267375
                          IP: 45.234.168.0/22
                          IP: 2804:4c84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cd:00:3f:7a:9d:ff:b8:95:65:e8:59:ad:d4:7a:d1:d5:71:94:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 18:50:41 2023 GMT
            Not After : Mar 11 18:55:41 2024 GMT
        Subject: CN=43669517FACA8C7D9E05E75F438434F3CF1D7057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:34:7c:b7:39:30:03:ba:61:94:cd:f3:e3:
                    91:6b:db:ea:4d:be:53:96:d7:0d:17:43:54:a4:ba:
                    ab:1b:b4:95:3e:38:42:65:7f:61:01:49:3b:7c:be:
                    dd:0b:ac:b7:eb:79:cf:25:94:81:03:5f:ca:ab:3a:
                    42:3e:e2:c1:ca:41:b1:c4:bf:6c:63:a9:c9:d9:73:
                    4f:13:b1:2f:f0:97:1e:08:45:f3:fb:03:14:f4:cf:
                    a1:7b:20:d1:df:ed:36:83:cb:33:f5:ff:24:e7:6f:
                    1a:ff:f8:1e:61:ce:d9:84:0c:3c:1e:f8:ef:e9:51:
                    11:b3:34:ee:9c:f9:b4:7d:11:8b:72:ef:e7:4b:0d:
                    bf:c3:08:fc:aa:4f:56:ca:3e:74:54:e6:df:34:c5:
                    9c:f7:f5:6e:9e:90:3b:19:82:c1:aa:06:07:32:38:
                    96:53:24:da:a5:dd:33:26:68:11:64:bc:45:ef:88:
                    93:df:d7:fe:f3:f1:98:55:71:b2:8e:e0:04:84:83:
                    94:0c:7a:dc:4a:bd:a0:74:da:74:2c:b8:90:19:be:
                    d7:63:68:f0:f6:27:92:63:28:e2:1e:07:f0:34:46:
                    9f:13:6e:16:74:e0:d8:0b:9b:5e:a9:b4:50:4e:ea:
                    87:d1:1a:79:8c:ec:f4:de:fd:44:3c:33:eb:b8:de:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:66:95:17:FA:CA:8C:7D:9E:05:E7:5F:43:84:34:F3:CF:1D:70:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/43669517FACA8C7D9E05E75F438434F3CF1D7057.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.168.0/22
                IPv6:
                  2804:4c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267375

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:43:f3:d3:97:9c:d4:00:11:f8:f7:6a:48:30:a9:f3:a0:
         9d:50:0d:6b:d3:56:c3:bb:b2:75:23:68:89:5c:6b:bb:00:56:
         84:b8:57:40:f1:a9:a3:11:cf:ac:e1:51:70:0a:fb:44:0b:fe:
         40:f5:78:53:cb:32:41:c0:5f:ea:3c:a4:4a:49:05:45:4d:8a:
         4b:ee:b6:56:b0:7b:35:73:35:f9:f0:d9:96:01:60:f3:79:43:
         25:af:ca:3e:f7:2d:e6:89:37:d8:39:aa:73:2f:4c:6c:3d:83:
         c3:f2:82:08:8b:da:c7:c7:b7:dc:d8:a0:5e:a3:f8:1b:d5:64:
         d9:d1:da:b1:82:03:38:2d:34:13:ea:db:8d:ef:df:d3:7e:46:
         12:ee:17:04:07:5c:90:bc:7b:3d:73:6e:7e:88:7b:75:7f:04:
         8a:f2:8b:4b:99:c8:34:d9:15:d6:10:ed:8a:9d:7b:3b:2d:ba:
         ec:19:45:44:bb:34:ff:52:5e:35:42:43:93:b8:1a:92:57:39:
         04:43:28:fe:17:ad:1f:56:a8:68:99:ff:55:03:64:61:a1:13:
         3d:4a:1f:be:84:8e:1a:21:7d:28:4f:14:9f:8c:12:ea:a2:b0:
         63:c3:bd:69:86:b1:14:3d:59:56:cb:17:cc:a0:3b:d7:8e:12:
         91:b8:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org