Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD.cer
File:                     4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD.cer (raw, json)
Hash identifier:          LWtVQWPcKJqTHhjNX+SQyTNV3vLeud7ccV3OuIJJ6AI=
Subject key identifier:   44:38:F8:2E:71:FE:A5:23:ED:5A:4C:B6:21:BC:C4:E8:46:CC:8A:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D75B750F8FD6314001B96557C2F26201F645C16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 21:40:58 +0000
Certificate not after:    Fri 04 Oct 2024 21:45:58 +0000
Subordinate resources:    AS: 273813
                          IP: 177.8.70.0/24
                          IP: 2804:8ca8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:75:b7:50:f8:fd:63:14:00:1b:96:55:7c:2f:26:20:1f:64:5c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 21:40:58 2023 GMT
            Not After : Oct  4 21:45:58 2024 GMT
        Subject: CN=4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:f5:21:8e:8d:33:77:b2:59:20:92:3e:7e:
                    22:74:14:86:4c:83:95:47:c0:62:41:29:40:44:1a:
                    79:93:ea:df:38:e2:a0:9c:e1:3f:1b:09:2d:8a:fa:
                    b4:3a:1e:93:e9:06:2f:c7:9b:9e:c1:ed:aa:57:fb:
                    a1:4c:67:b3:57:df:91:b0:15:79:c1:26:e4:7b:34:
                    bd:14:13:09:af:85:33:30:b4:97:64:c6:d9:58:c6:
                    b2:7a:13:79:b5:7e:0b:be:ce:2f:4a:ce:a4:83:06:
                    21:04:78:e2:f4:51:06:50:8c:0b:16:a6:9a:69:1b:
                    7d:7e:5b:b1:80:b5:67:73:24:67:be:2f:94:8c:7a:
                    36:05:6c:10:bf:e3:83:ec:29:ea:79:28:f9:12:3c:
                    92:8a:39:67:ec:cb:24:dd:b3:f1:d2:ee:06:f2:17:
                    81:6e:66:bd:47:26:4b:af:72:37:3d:fc:30:28:de:
                    f5:f7:8d:00:8a:4f:b7:2a:95:bb:4a:e1:fe:3c:e9:
                    b1:36:ab:24:9d:23:0c:4e:55:35:9e:1f:74:b3:6e:
                    dd:5a:a0:8c:0a:e0:84:b0:11:68:f2:7d:d6:e6:7f:
                    d7:92:e0:04:58:9d:e9:02:d9:58:c8:50:f2:fa:3b:
                    ce:82:76:67:10:42:08:ee:22:c2:a3:f9:35:5d:8b:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:38:F8:2E:71:FE:A5:23:ED:5A:4C:B6:21:BC:C4:E8:46:CC:8A:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.70.0/24
                IPv6:
                  2804:8ca8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273813

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:a3:ea:92:ff:01:a3:3f:f6:c5:7a:c8:69:d6:4a:98:07:
         26:1f:f3:18:1e:cf:fc:21:c0:21:6a:fa:b8:8f:bf:69:f1:fa:
         8b:15:d2:d7:51:28:97:97:38:78:07:f8:36:48:aa:83:b9:40:
         56:02:60:51:a5:ca:61:c3:e2:e7:a0:22:26:3b:91:1e:61:32:
         68:b4:a5:01:94:28:7b:72:5b:1f:20:bc:d5:0f:64:2a:5a:27:
         ac:af:84:77:a0:57:c4:e5:d5:8e:78:78:88:0b:b3:5d:d9:b2:
         b2:ca:92:46:0d:f2:d7:a2:38:35:cf:6b:c6:6e:3d:a9:3c:7a:
         72:e1:c5:0c:db:6a:e3:b3:1d:47:05:1e:d2:08:5f:bc:8e:0d:
         5a:8b:2b:b6:fb:87:03:a2:c3:9f:10:91:82:d8:90:b0:32:f9:
         72:74:dc:25:b0:59:92:3c:1a:a1:fe:27:50:8a:aa:11:9f:84:
         46:4b:12:42:f8:0d:fb:12:98:c5:0a:a5:fb:d2:2e:a2:c4:fc:
         4e:b4:d7:75:4f:e5:ed:3f:ce:90:d5:12:cd:3f:8a:53:92:56:
         75:7c:cb:83:8e:cf:46:21:e5:4f:27:ac:c0:86:e5:19:ac:8f:
         15:9b:8e:e6:fc:b5:78:8b:51:b9:1b:48:71:34:fc:93:bb:34:
         eb:6a:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org