Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A2AC28ABEFFE60F6E35467053B3DFB9728E7556.cer
File:                     4A2AC28ABEFFE60F6E35467053B3DFB9728E7556.cer (raw, json)
Hash identifier:          0Tgz6DegstaoSTF7lsVfgtJyqX8xtipiJWT95uy8BYk=
Subject key identifier:   4A:2A:C2:8A:BE:FF:E6:0F:6E:35:46:70:53:B3:DF:B9:72:8E:75:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10AC6271A82273F51726FE2079D489B4921BC67F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/4A2AC28ABEFFE60F6E35467053B3DFB9728E7556.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 15:11:32 +0000
Certificate not after:    Wed 18 Dec 2024 15:16:32 +0000
Subordinate resources:    AS: 61633
                          IP: 131.100.148.0/22
                          IP: 2804:1c04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ac:62:71:a8:22:73:f5:17:26:fe:20:79:d4:89:b4:92:1b:c6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 15:11:32 2023 GMT
            Not After : Dec 18 15:16:32 2024 GMT
        Subject: CN=4A2AC28ABEFFE60F6E35467053B3DFB9728E7556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0d:9a:0b:e6:fb:26:a5:4c:fe:db:0c:c3:b0:
                    5f:6b:27:d8:0a:bc:63:cd:52:a4:2a:0a:5d:66:80:
                    4c:56:5d:01:40:e3:e0:87:b6:8d:2a:23:55:51:41:
                    77:2c:4a:87:9c:84:6b:6c:04:ca:1c:32:ba:6e:6e:
                    c3:cf:9e:94:9a:1f:6b:f4:75:8b:d2:d3:ad:46:72:
                    89:af:ab:a3:71:7d:b5:5e:39:7e:f6:74:42:5e:13:
                    6b:56:6d:a7:75:bc:35:a0:0c:42:a5:d1:46:fa:e9:
                    db:b4:40:99:1c:df:93:70:85:67:52:e3:bb:62:3e:
                    e8:a9:e0:5c:ab:46:76:73:53:52:c2:0a:5e:e1:c2:
                    db:09:7e:f8:63:a1:a4:df:cb:3f:87:98:ba:8b:7f:
                    b9:70:ba:7c:d1:5a:d0:09:36:98:a0:31:b0:86:75:
                    ad:fa:71:af:c3:10:92:76:fa:ce:ff:b2:c0:72:0b:
                    d4:1f:11:f3:7f:f1:d7:9e:e1:d7:07:46:cb:a6:d5:
                    dc:a8:4b:46:ff:15:f1:10:12:6f:8d:3a:71:d9:bd:
                    c8:29:82:f9:90:b3:9e:b0:eb:95:b5:84:59:4d:6f:
                    c2:61:07:c2:21:06:37:a9:15:80:ca:3b:fd:95:f4:
                    fa:c6:2c:43:7c:83:95:04:45:11:75:5a:01:4e:d1:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:2A:C2:8A:BE:FF:E6:0F:6E:35:46:70:53:B3:DF:B9:72:8E:75:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/4A2AC28ABEFFE60F6E35467053B3DFB9728E7556.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/22
                IPv6:
                  2804:1c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61633

    Signature Algorithm: sha256WithRSAEncryption
         5f:12:38:02:75:20:ca:30:19:eb:12:d6:ed:e8:16:79:16:22:
         80:8c:6b:a4:51:7c:3a:7c:1b:62:b2:01:84:17:33:c1:ce:1f:
         f5:93:ef:3b:94:4f:78:ff:7d:b1:73:20:49:4e:e8:bd:37:cb:
         9f:9b:9b:5c:ce:bb:9b:84:1b:6b:04:45:56:96:cc:66:84:6b:
         d8:4f:c3:48:90:87:6a:a3:b5:d0:b1:78:c1:a0:05:61:72:e3:
         7d:de:90:f0:06:18:1c:77:dd:de:84:86:39:09:ee:cd:99:39:
         2b:00:08:11:c0:c5:8c:3c:20:06:88:f7:88:e6:c3:5c:03:50:
         e8:b2:c7:db:3e:ac:e1:91:8e:44:c3:df:d0:34:4e:a0:e6:d9:
         be:cf:f7:2c:dd:d7:f5:8f:01:9d:3d:7d:ad:d8:e5:8f:0e:89:
         b2:c2:86:aa:4d:16:68:ae:85:d0:60:7f:25:dc:0b:14:fb:7f:
         d0:fa:c9:3f:ec:24:8f:d2:66:6c:49:6e:61:87:24:fd:d6:81:
         65:b6:4a:db:25:58:c0:a8:a2:55:86:ad:44:6d:2e:28:e3:2a:
         78:74:f0:81:ed:11:90:20:7a:33:e2:6e:94:0a:0b:22:80:be:
         80:e8:4d:5c:6b:fa:65:80:3a:da:19:ac:23:8c:d1:1c:de:70:
         4b:30:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org