Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.cer
File:                     4497D639152C45DECCF541D4FC925E73D6BCDFC1.cer (raw, json)
Hash identifier:          RCmESh6K/rE7EMpgYv8d2onNIxpeCaxXaPAELoVXT6o=
Subject key identifier:   44:97:D6:39:15:2C:45:DE:CC:F5:41:D4:FC:92:5E:73:D6:BC:DF:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       259B58D2B764EEE09EAFBA2B085249ECB0ED2651
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Feb 2023 13:44:02 +0000
Certificate not after:    Wed 21 Feb 2024 13:49:02 +0000
Subordinate resources:    AS: 268622
                          IP: 45.164.36.0/22
                          IP: 2804:5400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9b:58:d2:b7:64:ee:e0:9e:af:ba:2b:08:52:49:ec:b0:ed:26:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 13:44:02 2023 GMT
            Not After : Feb 21 13:49:02 2024 GMT
        Subject: CN=4497D639152C45DECCF541D4FC925E73D6BCDFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:51:b2:c3:74:7e:fb:92:d1:45:2f:2d:e8:
                    d4:73:20:cc:58:d6:0c:22:f2:f9:c2:4e:18:19:ed:
                    3f:94:19:af:f6:59:db:2e:21:e6:a0:e6:87:f6:30:
                    34:ae:41:ad:43:56:2f:22:95:09:2c:f9:26:90:32:
                    e8:db:84:41:7d:8f:64:1b:c9:92:fb:6f:9f:75:6b:
                    ca:a6:9a:34:ed:3d:49:2e:de:2f:3d:3e:5c:bf:eb:
                    aa:e1:a3:c6:d5:30:24:78:fd:3b:d7:cb:95:7d:5e:
                    81:a6:a4:78:a3:50:26:c2:66:fe:b4:bf:17:ab:b5:
                    6e:61:2d:39:84:80:e1:3d:ed:fe:3d:83:b1:80:58:
                    27:ff:cf:26:06:e5:3a:67:7a:f4:60:6a:fd:dc:6e:
                    06:62:1c:12:cd:8c:ed:9b:44:73:73:b1:81:81:e1:
                    9a:8f:1c:e5:ad:6e:d6:a5:05:a6:17:4e:e6:85:22:
                    b7:8f:1a:73:4a:6f:92:75:27:d4:65:16:66:4d:31:
                    a2:64:72:e6:d0:2c:49:45:e4:76:54:1a:86:50:a4:
                    6f:a6:4f:1c:16:d4:0f:14:47:73:01:54:49:59:22:
                    98:65:bc:bf:39:f4:aa:91:ea:e0:22:56:f7:83:f9:
                    bf:59:11:7e:a3:46:d6:3f:52:27:b6:1e:41:8f:98:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:97:D6:39:15:2C:45:DE:CC:F5:41:D4:FC:92:5E:73:D6:BC:DF:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.36.0/22
                IPv6:
                  2804:5400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268622

    Signature Algorithm: sha256WithRSAEncryption
         35:7c:f5:86:41:56:b2:1c:72:86:ec:d6:7f:fd:74:49:9f:c4:
         2a:1d:68:c5:5e:51:4e:ef:74:be:37:a6:cb:82:7d:81:30:68:
         ad:aa:87:37:72:61:de:c6:e2:0e:55:7d:7f:45:41:ce:38:d8:
         44:92:9e:26:a0:2d:fd:31:8c:ff:0a:51:06:65:7f:d6:65:9d:
         cc:b2:ad:bb:f8:50:69:df:7a:d7:67:8f:31:48:25:75:39:47:
         9a:2c:74:57:50:54:7f:24:23:e2:a2:f5:55:7b:ec:8b:7e:de:
         75:55:a6:e7:e9:f4:27:f9:c5:a2:f9:13:13:c3:45:db:da:20:
         68:9d:e0:1c:aa:3e:cd:0f:a9:67:9d:fa:14:3c:bb:d8:2d:8e:
         38:32:3a:5c:1d:db:f6:2c:8a:ab:c2:16:ac:c2:95:54:95:a9:
         18:7d:71:8a:2f:6c:71:08:a4:cd:06:e7:9a:32:bc:eb:ba:81:
         03:51:f1:ae:f2:d1:d5:26:d3:7a:8e:88:38:3b:38:79:34:72:
         21:f6:e5:af:48:1e:9e:78:1d:e1:ed:9f:91:b1:18:b9:c1:f5:
         4f:56:a3:53:47:5b:c9:a7:3b:0d:c0:0b:33:36:35:0c:5a:0b:
         00:3d:4e:88:f7:9a:31:30:a0:19:0c:a0:3a:4e:71:75:d9:fa:
         bd:ff:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org