Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.cer
File:                     469A53B9F91A9A8071D2848E6D2024DF31F63E43.cer (raw, json)
Hash identifier:          HBgwYr/MZYPlFkhLypLOUqNUCe4slGbOzUnhwkslSqg=
Subject key identifier:   46:9A:53:B9:F9:1A:9A:80:71:D2:84:8E:6D:20:24:DF:31:F6:3E:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E085FA70785EBA170DC697090053E8676E86762
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Oct 2022 20:36:38 +0000
Certificate not after:    Thu 19 Oct 2023 20:41:38 +0000
Subordinate resources:    AS: 61751
                          IP: 131.72.252.0/22
                          IP: 168.228.40.0/22
                          IP: 2804:1bcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:08:5f:a7:07:85:eb:a1:70:dc:69:70:90:05:3e:86:76:e8:67:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 20:36:38 2022 GMT
            Not After : Oct 19 20:41:38 2023 GMT
        Subject: CN=469A53B9F91A9A8071D2848E6D2024DF31F63E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:7a:3d:76:20:98:5d:4a:d9:6f:6c:e0:66:
                    d6:58:17:7a:1f:44:bc:34:b7:57:13:e6:54:aa:1c:
                    50:7c:c3:b5:96:15:06:18:83:0b:2f:11:7e:74:9a:
                    61:bb:7c:cd:f5:50:00:fa:79:57:6d:8e:34:0f:8f:
                    e9:8b:88:92:12:8d:ae:58:aa:96:36:ed:c8:32:46:
                    d1:30:74:ed:4e:86:22:8e:56:85:4c:8e:8f:aa:0b:
                    ac:00:29:ef:f0:09:9d:d9:66:a0:a8:9a:b1:0b:27:
                    db:a8:d4:39:66:41:87:2d:14:62:1c:86:f0:6c:bc:
                    62:78:ee:06:da:fa:07:45:3c:a3:95:6f:77:d8:2e:
                    26:98:07:ba:05:c4:87:52:21:ca:94:43:b3:5a:66:
                    ed:9d:16:24:66:66:f2:55:56:9c:ad:8d:9f:e5:30:
                    e3:86:ec:83:ba:d9:1b:e5:ac:c3:91:32:8f:c9:12:
                    5f:6b:48:07:d6:48:5d:38:1a:70:3d:b5:b3:9e:56:
                    2b:fe:4f:bd:53:e8:a7:50:66:fb:62:40:81:88:dd:
                    c4:de:48:a1:c8:b4:d1:70:b0:cc:3e:64:b4:c8:11:
                    12:f0:8d:18:86:56:1f:0c:35:2a:e4:dc:20:23:18:
                    16:ec:a8:23:f1:04:ff:f1:4e:17:c9:05:be:f5:54:
                    6e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:9A:53:B9:F9:1A:9A:80:71:D2:84:8E:6D:20:24:DF:31:F6:3E:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.252.0/22
                  168.228.40.0/22
                IPv6:
                  2804:1bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61751

    Signature Algorithm: sha256WithRSAEncryption
         67:89:79:3e:9e:96:26:b2:51:bf:08:d5:c3:07:f1:bd:57:85:
         d3:ed:4a:1d:47:b9:46:91:1e:84:e0:f7:e7:d8:02:38:19:4d:
         ac:ee:11:d6:8a:f2:ab:76:a3:1e:ca:ab:f5:28:a8:19:05:38:
         a9:50:c5:6f:9d:86:3c:b3:4a:0c:7f:89:07:97:ca:12:8f:f2:
         d8:be:3a:e5:d5:25:63:35:08:4b:e0:d0:80:b3:20:9e:cf:40:
         ac:96:4a:a3:f0:42:7f:39:41:4c:5d:5b:ba:9c:62:59:5b:a9:
         3a:fd:39:ab:a9:33:8c:26:37:96:67:6d:d8:61:38:2b:12:cb:
         a6:af:e3:67:bc:c4:e9:df:46:39:7f:f2:e3:3a:f7:8d:c9:2d:
         0a:a5:16:78:00:b0:ac:eb:d6:dc:9a:66:f8:2b:1f:7d:07:f6:
         78:1c:a3:f5:6c:53:28:af:07:85:35:9f:c0:6a:20:c6:88:6f:
         76:ef:26:bb:1d:d0:26:4f:a6:93:92:a5:0b:d8:13:0b:5f:68:
         b1:c7:25:43:26:14:69:fa:8a:9a:33:ba:c6:b9:c8:cf:dc:58:
         16:17:54:99:2b:86:52:98:19:27:df:91:2e:bd:8e:0e:b4:16:
         a4:7e:c7:07:e4:27:3b:82:94:e5:9b:43:fc:a6:f1:fc:b3:e3:
         d5:bd:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org