Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4394F9D85DC2BCCAA8F96B028F1030E6883D02EE.cer
File:                     4394F9D85DC2BCCAA8F96B028F1030E6883D02EE.cer (raw, json)
Hash identifier:          MAkBF0ReAbuL/vIvRtQOCOLnskhvq8P/UPD4WPHZKeU=
Subject key identifier:   43:94:F9:D8:5D:C2:BC:CA:A8:F9:6B:02:8F:10:30:E6:88:3D:02:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       551EAAB7A873170F9C98E73A4C4F3526F50C4BF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/0/4394F9D85DC2BCCAA8F96B028F1030E6883D02EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 11 Nov 2023 15:24:58 +0000
Certificate not after:    Sat 09 Nov 2024 15:29:58 +0000
Subordinate resources:    AS: 266621
                          IP: 128.201.92.0/22
                          IP: 2804:3ecc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1e:aa:b7:a8:73:17:0f:9c:98:e7:3a:4c:4f:35:26:f5:0c:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 11 15:24:58 2023 GMT
            Not After : Nov  9 15:29:58 2024 GMT
        Subject: CN=4394F9D85DC2BCCAA8F96B028F1030E6883D02EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:68:ac:7a:96:b7:4a:39:92:72:ca:51:9f:
                    eb:10:01:2a:4c:e1:ff:0a:a5:19:a0:03:b3:51:c6:
                    d9:57:d5:66:34:58:4c:f0:f3:52:43:21:38:45:64:
                    00:10:d4:ee:2c:48:d5:74:65:eb:b8:72:d7:33:db:
                    14:41:40:dd:67:bb:49:83:61:1d:3f:12:23:0d:48:
                    33:f2:24:f6:c9:17:61:0f:11:e7:ca:58:0f:c5:ae:
                    22:14:64:e7:17:23:dc:93:fb:db:38:2d:fe:d8:0a:
                    d2:64:f7:5a:49:d9:72:6e:4d:1d:b4:20:80:08:0f:
                    f5:33:89:3b:01:42:4d:6b:31:3b:78:98:63:71:43:
                    53:df:cd:1e:04:a1:09:dd:53:13:17:26:0e:d8:4e:
                    33:9f:4a:c8:9e:61:c9:23:84:17:58:68:67:9d:c2:
                    27:98:2a:a7:8b:d4:74:42:25:ab:b4:c8:63:15:d3:
                    e8:9d:44:30:4e:51:e7:ed:69:55:15:e2:a8:03:11:
                    12:47:2b:08:e8:ac:b2:98:2e:c5:d4:05:11:03:be:
                    ef:7c:68:bc:5b:6b:2b:b1:83:ae:51:5f:0f:d4:84:
                    48:90:80:37:8f:d8:80:7a:61:60:d7:2e:e5:ab:d9:
                    ed:f8:8a:53:3a:28:1a:4e:65:48:a0:25:96:f9:39:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:94:F9:D8:5D:C2:BC:CA:A8:F9:6B:02:8F:10:30:E6:88:3D:02:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/0/4394F9D85DC2BCCAA8F96B028F1030E6883D02EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.92.0/22
                IPv6:
                  2804:3ecc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266621

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:9a:f1:d7:09:f6:f8:45:6b:53:b0:a1:fc:cb:a0:9a:f1:
         47:33:a3:2f:52:d4:c2:34:81:da:aa:cf:77:d3:c8:3b:9c:74:
         6c:93:9b:6f:d6:59:07:e2:f2:84:d8:05:38:3b:7b:51:3a:08:
         6f:9b:a4:69:bf:8e:64:40:c1:19:56:5c:73:c3:b4:62:0a:41:
         56:6f:0f:57:2e:44:7d:d4:27:3b:78:64:84:ec:a9:e5:57:35:
         b7:23:a7:51:42:98:d3:df:e3:b0:36:dd:85:2a:b4:fc:89:7a:
         57:74:c1:4b:3d:fc:08:55:d6:82:db:f7:d2:92:71:5b:ae:5f:
         7a:95:b2:ed:13:9d:33:11:18:36:fe:1b:80:92:2a:a5:24:ef:
         40:c8:ed:62:ec:3e:1f:46:f1:ba:d5:ef:d3:40:46:1a:af:36:
         a4:9c:5c:73:10:16:e4:f0:28:00:8c:1f:15:03:5c:af:3f:d5:
         24:19:79:b2:60:b7:2f:31:be:4b:5f:fa:7c:a1:76:11:ab:55:
         f9:0f:17:1a:72:ba:77:36:de:c8:9a:96:51:0b:6e:d5:0f:53:
         38:13:29:57:eb:5f:eb:28:30:82:71:72:8f:a8:a4:36:cc:49:
         05:65:5c:9d:93:90:59:02:a0:66:c7:31:3d:fe:20:4e:98:49:
         24:59:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org