Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A1D1F2CA421CE096696D11F1E64CA803A668C3E.cer
File:                     4A1D1F2CA421CE096696D11F1E64CA803A668C3E.cer (raw, json)
Hash identifier:          ji4ng/tgjVc0nAIHKaOvxWgHyTD0tlrZLgCXRj9VBS4=
Subject key identifier:   4A:1D:1F:2C:A4:21:CE:09:66:96:D1:1F:1E:64:CA:80:3A:66:8C:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CF278D10A956BF51DF28C271082BAF756BB1BDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/4A1D1F2CA421CE096696D11F1E64CA803A668C3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Jul 2022 21:05:45 +0000
Certificate not after:    Tue 11 Jul 2023 21:10:45 +0000
Subordinate resources:    AS: 53159
                          IP: 201.49.144.0/21
                          IP: 2801:80:d20::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f2:78:d1:0a:95:6b:f5:1d:f2:8c:27:10:82:ba:f7:56:bb:1b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 21:05:45 2022 GMT
            Not After : Jul 11 21:10:45 2023 GMT
        Subject: CN=4A1D1F2CA421CE096696D11F1E64CA803A668C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:80:e7:c6:04:c3:48:fa:29:3c:24:fb:ba:
                    93:66:3f:32:9a:27:82:76:85:50:07:08:54:b8:f0:
                    ed:e0:a3:16:a0:de:2b:d5:66:ba:a6:65:a5:54:a1:
                    b9:82:bb:2f:f4:43:f9:0a:1d:50:c4:01:98:35:7f:
                    e1:b9:43:0c:42:19:d9:b1:1e:66:d0:25:bf:a0:1f:
                    2c:b7:d3:71:33:81:cc:37:ad:ad:b3:1d:b0:c8:a4:
                    f9:97:54:07:24:21:56:62:5d:f4:77:19:9f:21:c7:
                    07:5f:99:de:d6:f3:4d:be:1c:cc:0f:1a:83:31:08:
                    a8:eb:85:5c:4b:75:43:81:f0:5f:d2:8d:cb:3b:3f:
                    35:f4:a7:cc:5e:4b:ad:66:a0:ea:fb:98:97:9f:d7:
                    c8:98:c3:48:8a:94:7d:56:e6:b6:b4:74:fd:f5:88:
                    85:54:7e:4d:1b:fc:32:56:23:58:c0:0a:54:3a:70:
                    bd:35:12:ab:c0:a0:d5:dc:34:6f:1f:12:d7:69:62:
                    61:ce:e9:10:68:c1:6e:4c:ad:57:c5:43:f5:e3:e1:
                    0f:28:64:ff:1a:d4:bb:f2:d7:01:17:b9:ad:00:d3:
                    e4:29:31:d3:8a:80:9b:46:fb:61:3a:30:e4:e9:cc:
                    89:b0:19:6e:a7:f6:69:80:7a:5c:f0:45:dc:32:b7:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:1D:1F:2C:A4:21:CE:09:66:96:D1:1F:1E:64:CA:80:3A:66:8C:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/4A1D1F2CA421CE096696D11F1E64CA803A668C3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.144.0/21
                IPv6:
                  2801:80:d20::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53159

    Signature Algorithm: sha256WithRSAEncryption
         24:82:a2:be:ff:cc:05:7c:f9:82:0f:bb:13:fa:54:79:6e:36:
         16:21:c1:66:26:ce:2f:d7:e7:16:79:c9:73:05:3c:0f:a0:8b:
         f5:be:a2:96:0a:74:47:fa:3e:c6:64:91:95:c4:99:f2:63:dc:
         87:4b:45:d3:8a:e0:56:f2:ef:05:a3:0c:7f:31:af:c9:42:06:
         13:98:e2:b2:bb:9a:07:ca:ea:cc:ee:60:69:a3:1e:99:77:e1:
         df:d0:9e:7f:ed:bc:dc:22:22:1c:9e:06:52:b4:7b:56:e3:c0:
         27:e1:38:57:c8:5e:18:71:25:50:64:db:f1:03:87:dd:cc:ed:
         82:3b:3c:ac:96:41:6c:85:fd:21:65:e5:b5:86:7c:c7:b9:3c:
         41:61:7a:70:97:df:a9:66:8f:6a:d3:18:47:a5:f9:c6:65:45:
         a8:93:03:91:de:7e:be:cc:11:f8:ba:52:7f:cc:c9:9d:c7:d1:
         03:8e:79:c2:65:10:7e:3e:77:bb:03:ed:8c:27:a8:18:f8:63:
         87:c4:1c:e8:28:7f:b1:b4:3d:7a:2b:e3:f6:19:e5:35:64:53:
         f2:d4:83:0f:90:6d:07:c3:9a:d0:5c:eb:38:af:30:59:ba:2c:
         32:a2:5e:aa:00:17:26:e4:38:35:5d:5a:95:4c:2e:95:af:fa:
         3f:bc:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org