Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
File:                     43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer (raw, json)
Hash identifier:          2ByFEClKW7yxwxGodDhaXNwM/tLFRYHTDA4+AFyi9oM=
Subject key identifier:   43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EFEF2E7373E4B353CDE94943D86CD874FC75CA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 04:25:07 +0000
Certificate not after:    Tue 19 Nov 2024 04:30:07 +0000
Subordinate resources:    AS: 52977
                          IP: 143.255.96.0/22
                          IP: 170.231.4.0/22
                          IP: 177.39.72.0/21
                          IP: 200.53.8.0/21
                          IP: 2804:768::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fe:f2:e7:37:3e:4b:35:3c:de:94:94:3d:86:cd:87:4f:c7:5c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 04:25:07 2023 GMT
            Not After : Nov 19 04:30:07 2024 GMT
        Subject: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:63:43:6b:cf:25:d3:a6:01:f1:c4:44:50:
                    97:80:33:07:92:5b:91:e0:0a:61:0e:32:f6:16:76:
                    7d:a5:f0:5e:57:69:71:f9:f3:e8:82:01:34:10:5a:
                    76:8d:0c:88:cb:36:c2:ea:d4:2f:3d:0d:8e:2e:30:
                    1c:1e:a4:80:58:cb:4c:c1:20:d1:f1:51:56:31:21:
                    d6:04:e5:8a:9c:68:0b:b8:e2:27:b8:2d:5f:88:85:
                    29:63:b8:b5:20:1e:cd:59:40:5e:08:60:40:89:13:
                    3a:4e:aa:40:b8:90:dd:eb:1b:ae:07:af:75:ed:85:
                    18:a3:36:a8:df:32:9a:2a:c0:0c:ce:fa:36:10:45:
                    2b:e1:00:df:2c:8f:2e:75:ee:58:40:e3:9b:30:b6:
                    ff:1b:dc:c3:cb:81:46:ff:95:63:b3:a7:3e:54:33:
                    95:29:42:94:16:6a:3e:b7:a6:c8:ca:72:e2:ab:65:
                    a2:40:2a:a9:2a:bc:0e:91:d3:15:d1:ac:c1:bf:58:
                    2c:af:e2:91:8a:e7:cd:c1:c6:3c:41:a8:7a:23:e6:
                    2e:b9:ea:ee:da:46:69:78:2c:fb:82:e4:8e:5a:d5:
                    7b:81:38:99:b0:db:32:a4:1a:36:56:be:8d:bd:1f:
                    52:50:a5:8a:5b:91:04:db:98:0d:e5:13:2b:4d:08:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.96.0/22
                  170.231.4.0/22
                  177.39.72.0/21
                  200.53.8.0/21
                IPv6:
                  2804:768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52977

    Signature Algorithm: sha256WithRSAEncryption
         42:f6:ef:d4:0c:bc:6b:d9:49:c9:48:96:44:19:30:53:b6:b7:
         b1:40:3a:b1:3e:48:b2:8e:cc:df:16:ff:aa:08:e5:b3:eb:89:
         5f:d4:6e:88:ba:8f:ef:f3:5d:fc:63:1f:48:3b:b9:41:0a:7e:
         6b:45:6e:3f:e3:84:87:d3:62:d8:9f:16:78:42:29:df:ef:10:
         f0:7e:b9:c1:09:41:94:40:f9:6c:de:a7:fe:82:13:65:06:bc:
         5a:83:01:90:6d:e5:54:52:a7:e7:5b:41:d4:2a:5f:9f:dc:06:
         1e:22:b4:16:71:54:6b:0e:e6:ea:5a:5d:69:3c:06:52:5a:c5:
         91:21:90:62:2a:47:f8:84:30:fa:51:25:9b:7b:0d:5a:59:8e:
         2a:7c:97:32:e8:84:91:c0:76:f2:96:51:ec:d2:e3:83:d0:1c:
         ba:cd:6d:06:fa:aa:cb:b3:d0:d2:cc:92:c1:3c:42:02:cd:d7:
         75:13:82:8d:f1:97:74:53:43:8a:12:66:c0:82:3a:ae:fa:60:
         53:fe:db:6a:4f:c7:6e:af:1d:79:c6:d8:40:28:ff:f5:51:4e:
         a0:60:90:fb:ab:fe:91:c8:d3:1c:d8:65:bf:2c:0a:44:51:f8:
         55:3e:f9:9a:00:35:b9:f6:d5:8e:1a:af:1e:00:e6:75:7d:af:
         be:e3:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org