Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A4846F738C5423546BC20E3E66A87BDCBE3D9B8.cer
File:                     4A4846F738C5423546BC20E3E66A87BDCBE3D9B8.cer (raw, json)
Hash identifier:          iLmBHmE6BcOIjiXzInmrReuvKNSYzzxnsDG7nMIXyUY=
Subject key identifier:   4A:48:46:F7:38:C5:42:35:46:BC:20:E3:E6:6A:87:BD:CB:E3:D9:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BBA9F3372EDB0B904E8EE5C209A34C20AD49460
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/0/4A4846F738C5423546BC20E3E66A87BDCBE3D9B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 15:02:01 +0000
Certificate not after:    Thu 27 Jun 2024 15:07:01 +0000
Subordinate resources:    AS: 267463
                          IP: 192.141.112.0/22
                          IP: 2804:41e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ba:9f:33:72:ed:b0:b9:04:e8:ee:5c:20:9a:34:c2:0a:d4:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 15:02:01 2023 GMT
            Not After : Jun 27 15:07:01 2024 GMT
        Subject: CN=4A4846F738C5423546BC20E3E66A87BDCBE3D9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:34:e7:ff:5b:17:41:fd:ef:38:80:0a:f3:
                    32:93:df:e9:35:a0:7b:3d:8c:6c:cb:23:63:b3:49:
                    31:98:ab:4b:39:3d:00:2d:3c:fb:c6:ad:14:62:02:
                    53:e3:16:ef:ec:a2:25:96:8e:d1:e0:e7:ee:7b:6a:
                    cd:73:4e:71:9c:18:e5:29:45:a4:a0:46:15:10:ca:
                    60:da:81:ff:39:32:c0:2c:5a:da:b1:08:96:26:7e:
                    8f:14:53:9e:87:2a:89:2c:c0:e0:c4:47:71:75:b7:
                    8a:16:6a:f3:88:e3:2d:e8:e8:95:64:f8:cf:c4:7b:
                    17:3d:0d:eb:fd:96:01:ad:c6:ad:f7:68:12:0a:84:
                    7a:f0:7a:29:2d:5e:03:92:ba:d7:ce:6a:bb:30:4d:
                    51:6e:dd:1d:83:39:70:c4:07:d7:cc:e7:a5:44:d0:
                    25:12:4a:09:e5:5d:59:c4:ec:fd:17:d3:bc:24:b0:
                    6b:4d:24:34:c4:b9:d7:fb:3a:26:4c:18:d4:4c:5b:
                    84:92:16:b1:16:c4:34:02:52:c7:ab:4f:75:a6:ab:
                    89:ce:86:2f:13:53:f7:bd:48:ca:0c:4c:2d:61:08:
                    50:43:bc:52:d7:e4:e9:6c:68:09:70:bf:6e:e4:3b:
                    37:ad:21:ff:0b:90:f9:85:b0:3f:01:27:b1:a2:c3:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:48:46:F7:38:C5:42:35:46:BC:20:E3:E6:6A:87:BD:CB:E3:D9:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/0/4A4846F738C5423546BC20E3E66A87BDCBE3D9B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.112.0/22
                IPv6:
                  2804:41e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267463

    Signature Algorithm: sha256WithRSAEncryption
         16:73:e3:c7:25:15:24:0b:e0:e0:2e:e5:a4:8f:63:eb:1b:37:
         9f:32:2c:46:23:21:15:ce:74:d4:ce:92:10:11:b4:6f:b6:4b:
         fb:db:92:db:e1:ae:94:c1:0d:80:b7:c9:59:68:b7:58:dc:7b:
         a1:4e:e6:d7:09:f2:45:35:81:b7:5e:8e:1e:20:6e:b7:c2:38:
         82:71:7d:5e:ba:5d:36:64:54:de:41:83:f1:3a:ea:1a:56:ef:
         c4:46:f5:48:29:4f:02:b7:13:e0:3b:db:9b:10:3f:a3:c3:a7:
         ad:d2:b8:28:ef:a3:45:83:8a:6c:bf:8c:59:d4:42:d1:46:da:
         d7:d8:6c:e4:ac:69:ae:39:a3:46:e1:c8:1c:85:da:a4:33:d6:
         d2:02:e4:79:87:8a:fe:ba:90:20:c4:7e:15:64:f2:26:da:f0:
         27:57:9e:84:0e:f0:3e:33:f6:c6:af:69:9b:b7:4a:4c:db:71:
         d4:02:d1:64:a2:f1:68:76:6c:56:5e:56:cf:4e:a3:1e:8f:cb:
         37:21:a5:15:86:71:0e:7b:85:8e:3a:4f:e4:07:55:3d:54:95:
         dc:4e:12:de:48:30:7c:98:bc:eb:53:d8:73:b8:be:62:45:eb:
         01:a0:9d:0c:9a:83:88:95:30:fc:ca:8f:bb:b2:90:d6:fe:6e:
         fe:16:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org