Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/47CEE4CC4ECB6C308F26D9163427CBC1C12E360F.cer
File:                     47CEE4CC4ECB6C308F26D9163427CBC1C12E360F.cer (raw, json)
Hash identifier:          0YfNZ4zHHjOopz1bYsOia2My4u58eqtbaHgr41WvRew=
Subject key identifier:   47:CE:E4:CC:4E:CB:6C:30:8F:26:D9:16:34:27:CB:C1:C1:2E:36:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71D083016AD93E8BB6A6E4AFB182364663EF2E3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/47CEE4CC4ECB6C308F26D9163427CBC1C12E360F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Jul 2022 15:58:58 +0000
Certificate not after:    Sat 01 Jul 2023 16:03:58 +0000
Subordinate resources:    AS: 267439
                          IP: 181.191.196.0/22
                          IP: 2804:4188::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d0:83:01:6a:d9:3e:8b:b6:a6:e4:af:b1:82:36:46:63:ef:2e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  2 15:58:58 2022 GMT
            Not After : Jul  1 16:03:58 2023 GMT
        Subject: CN=47CEE4CC4ECB6C308F26D9163427CBC1C12E360F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:54:36:01:43:e0:66:a3:cc:37:21:81:49:
                    68:f8:27:48:33:19:b0:5c:58:7d:e2:f9:1c:75:8b:
                    1b:28:e5:64:a7:dd:8c:6b:be:e7:17:82:db:a7:c5:
                    01:03:10:26:b4:85:6b:3a:d2:e9:2c:f8:d7:ee:e3:
                    72:d2:18:bf:2b:3a:66:19:81:d2:26:5e:d2:8c:ba:
                    ea:c6:93:af:e8:5d:08:a3:34:b8:4c:04:04:26:1c:
                    84:27:37:3b:f2:8e:66:00:af:19:1d:f2:60:46:a7:
                    96:6a:3b:34:7c:f1:bf:a9:4a:90:6a:84:e1:cb:0c:
                    9a:bc:14:c8:6c:b6:b0:e0:ad:f0:89:23:d9:cd:a1:
                    30:c8:ae:65:fc:14:28:d9:69:7c:1e:13:4a:e8:2d:
                    bd:22:87:4e:f6:fd:1e:50:75:8d:53:44:6d:cc:3c:
                    41:32:44:d0:f9:5b:18:67:f3:7f:34:82:09:0a:b7:
                    b8:f9:dd:91:55:69:49:e2:42:ed:48:b8:72:ed:bb:
                    6a:78:bc:53:69:a9:8c:97:6e:bf:11:f7:fc:a0:6d:
                    ea:c8:c0:ca:9e:ee:79:41:13:a7:11:07:04:8e:b1:
                    19:dc:6e:32:96:f6:ba:66:42:b3:96:b4:e0:2c:8f:
                    b2:46:68:e1:84:53:fa:ef:fe:3c:c9:12:b9:ce:ae:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:CE:E4:CC:4E:CB:6C:30:8F:26:D9:16:34:27:CB:C1:C1:2E:36:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/47CEE4CC4ECB6C308F26D9163427CBC1C12E360F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.196.0/22
                IPv6:
                  2804:4188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267439

    Signature Algorithm: sha256WithRSAEncryption
         94:1c:e3:94:ff:94:7c:eb:dd:fb:f4:9c:6a:0b:8c:26:c5:08:
         f4:d1:ba:20:69:cb:2e:f1:53:c0:e3:57:4a:7a:78:89:21:b3:
         90:6d:b5:54:98:32:bc:bf:43:20:f8:c8:b3:49:68:ba:1f:9e:
         f3:be:77:57:eb:eb:8f:53:f6:fd:45:a6:a9:ec:e3:ed:0a:d7:
         29:bd:e4:17:4d:e1:01:11:25:ea:fe:7b:d8:4a:b9:60:91:64:
         47:ee:84:af:69:b8:5e:91:07:be:a9:93:92:7f:7a:1c:f3:7e:
         ca:89:d5:1f:2f:ee:fc:c2:91:ee:97:1d:e8:10:d2:68:b9:1d:
         cb:36:31:4a:4a:9f:ca:91:bb:80:35:11:1e:e2:5d:15:11:99:
         70:b5:2d:e2:01:ac:8c:d8:e0:8a:ad:47:55:b4:34:53:d2:f4:
         92:ca:3d:7b:83:de:fb:8e:26:d5:a7:f4:ba:a6:cd:cb:cd:ae:
         4c:63:57:fb:88:58:67:0b:ba:8a:b8:b2:89:b1:57:5a:ad:8c:
         65:49:7f:54:02:3a:ac:4f:2b:77:b1:d4:ef:39:1f:0f:08:dc:
         97:eb:fc:61:ea:05:a1:6d:ad:a1:8f:56:60:c9:88:bb:7b:d0:
         d7:c5:ae:5d:cd:83:28:a1:b3:5e:ea:40:23:62:dc:9f:3c:3d:
         b9:4f:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org