Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.cer
File:                     470FF6A2012E1FA7944856A4F3B10523D0D9F574.cer (raw, json)
Hash identifier:          S5lXMUkC56G7zlydTFYkIraA/NQq0JfxVUjKYt1lTPQ=
Subject key identifier:   47:0F:F6:A2:01:2E:1F:A7:94:48:56:A4:F3:B1:05:23:D0:D9:F5:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63DDE002612771734206A348151A8E00AA29969E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Jan 2023 17:43:54 +0000
Certificate not after:    Tue 02 Jan 2024 17:48:54 +0000
Subordinate resources:    AS: 266605
                          IP: 45.7.144.0/22
                          IP: 2804:3e8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:dd:e0:02:61:27:71:73:42:06:a3:48:15:1a:8e:00:aa:29:96:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 17:43:54 2023 GMT
            Not After : Jan  2 17:48:54 2024 GMT
        Subject: CN=470FF6A2012E1FA7944856A4F3B10523D0D9F574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:80:2a:93:52:a3:77:a1:f3:9c:e8:fd:87:
                    45:6e:b9:a9:df:bd:7c:ba:19:99:1e:ff:80:11:93:
                    dd:f1:e5:9d:66:99:71:6b:10:7c:5a:f2:e7:cb:62:
                    30:b9:d6:3a:4b:4a:3c:af:e4:de:1f:c2:54:37:b0:
                    2f:5d:6e:0a:3b:fb:55:f3:c8:49:8a:c7:ce:48:c5:
                    a5:ec:de:7f:94:84:89:43:d1:f2:46:c4:34:ec:69:
                    67:3d:29:fa:83:de:23:2a:7f:65:49:ec:ce:ba:47:
                    7d:43:81:94:cd:8d:2c:3b:72:71:1a:b2:88:22:01:
                    26:ce:b1:31:2e:ed:a5:0b:1f:57:81:40:d4:6a:6b:
                    cc:8e:11:02:0b:0e:57:66:fb:80:9d:5d:d7:9f:e3:
                    8c:05:b8:4b:86:ad:37:5e:00:a7:f8:68:4c:3c:c5:
                    1d:02:66:07:30:c6:fb:0e:5e:02:1a:dd:3f:45:ff:
                    0d:b9:49:cd:52:7a:8c:81:ae:ca:6c:0f:26:48:a2:
                    f4:6c:b5:4e:60:c0:a0:5f:07:36:e3:80:23:60:d5:
                    42:12:97:97:82:4d:5f:11:76:29:d9:4c:fa:06:8d:
                    1d:17:b6:41:11:f8:87:cd:74:e0:33:34:32:94:8e:
                    59:d6:a5:53:08:78:de:55:61:f4:71:37:0a:6d:c7:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:0F:F6:A2:01:2E:1F:A7:94:48:56:A4:F3:B1:05:23:D0:D9:F5:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.144.0/22
                IPv6:
                  2804:3e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266605

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:37:6d:0c:be:36:10:a3:b0:45:90:12:15:b5:4c:30:8f:
         12:ad:0a:83:8e:06:1e:82:49:04:aa:d4:78:d2:24:29:24:9b:
         63:b1:71:a4:5d:42:77:3f:3e:19:65:e0:51:7a:91:35:56:be:
         08:c8:4e:35:ef:16:b7:44:df:85:61:67:17:13:92:a6:76:7b:
         f4:4f:f8:5b:75:9f:44:83:cb:c9:78:54:0d:21:b1:c3:b8:57:
         e9:c0:4a:ec:c4:e0:e8:66:79:1b:e0:73:35:c5:a0:3b:23:a4:
         70:5e:64:62:2d:1e:0b:29:9b:99:ff:08:4f:c8:28:1d:f3:a3:
         b0:ae:88:28:0a:a0:fc:de:8a:15:20:09:f9:8d:3b:d3:75:79:
         09:2e:14:e8:76:bb:02:16:0b:35:65:a9:d6:9c:3b:16:70:15:
         ca:d3:7f:65:2f:8f:38:dd:a4:75:4d:e0:b1:e8:91:7c:cd:a3:
         b3:ba:cf:96:80:0e:bb:6b:b8:5d:ad:92:3d:1b:bc:b0:c5:5a:
         ac:43:fb:d3:47:50:c7:75:9c:f1:20:d3:05:f6:98:ef:9f:79:
         dc:64:a6:01:c6:a8:67:78:1f:27:00:c6:d7:29:61:8c:e9:fb:
         d2:5b:d7:23:b3:7d:e3:ba:89:63:00:d4:c4:c8:c7:b3:c6:68:
         9d:0d:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org