Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.cer
File:                     4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.cer (raw, json)
Hash identifier:          KDt4pIbcMKEZf+rnjIoRwD0LIPewKXPqcR1l9RMN7TY=
Subject key identifier:   4A:51:1A:D9:50:FA:F9:BF:EC:65:E0:0E:E8:08:6C:A5:B7:DE:F1:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C36CB24EF472BD164C260B972CA558762A17B06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/1/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:30:16 +0000
Certificate not after:    Thu 03 Apr 2025 12:35:16 +0000
Subordinate resources:    AS: 268982
                          IP: 45.177.132.0/22
                          IP: 2804:5d9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:36:cb:24:ef:47:2b:d1:64:c2:60:b9:72:ca:55:87:62:a1:7b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 12:30:16 2024 GMT
            Not After : Apr  3 12:35:16 2025 GMT
        Subject: CN=4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:b1:78:a7:c0:ba:56:b4:47:4a:da:73:38:
                    3c:1e:d6:5d:b5:6a:23:fc:8d:67:78:fc:9d:cb:09:
                    0d:68:5c:f4:11:45:d9:ef:31:e8:9b:06:2d:30:4e:
                    60:9b:db:5e:e9:d0:4c:45:80:ac:0a:82:5f:24:ce:
                    46:61:c3:d9:48:57:b4:61:b6:11:35:74:ea:5c:14:
                    10:1d:49:cb:bf:dc:76:98:0e:da:cb:f8:64:f7:23:
                    d1:c8:06:76:dc:25:b4:d3:81:3b:f3:4a:1e:67:91:
                    17:b2:62:14:69:01:e3:48:28:1f:11:bc:29:54:ba:
                    eb:db:06:e1:ef:9e:9e:21:b2:d2:38:75:f2:9a:c3:
                    a5:21:ff:9e:42:67:89:2f:0c:53:57:db:96:8f:91:
                    e8:6c:a4:28:ac:f8:f2:36:b4:8d:ad:31:a1:d5:94:
                    36:c8:43:d2:7b:10:b2:a1:fd:85:18:9d:b2:17:63:
                    e9:89:45:6d:85:81:3c:5c:b4:35:ea:e5:8c:91:bb:
                    bc:5e:a4:a7:f3:3a:41:ae:be:11:96:44:c1:0a:c3:
                    50:23:88:7c:ea:36:d1:06:4d:d8:49:a8:8b:3c:84:
                    04:0b:b8:e4:ab:3d:ec:c6:03:31:7f:ef:b5:c5:85:
                    2d:1b:5f:63:0c:b1:e7:74:2b:46:55:3a:94:c7:3b:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:51:1A:D9:50:FA:F9:BF:EC:65:E0:0E:E8:08:6C:A5:B7:DE:F1:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/1/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.132.0/22
                IPv6:
                  2804:5d9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268982

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:b6:f1:a0:cd:76:74:e3:af:39:b2:98:62:5a:ce:63:79:
         31:25:56:c9:91:59:f9:6b:78:26:89:5b:bf:9d:23:05:f6:9d:
         11:9a:6a:41:78:e7:7d:df:e0:f0:61:92:71:ed:e5:2d:42:5a:
         04:b4:e9:e9:ba:9b:42:49:e7:4f:cd:15:38:63:5b:99:d2:d0:
         19:9f:98:4e:28:1e:43:aa:09:16:ab:ed:d2:84:27:a4:93:12:
         9f:04:5a:b4:53:74:d7:3e:2e:23:d0:8b:5a:6b:c4:2e:b4:c3:
         ee:47:aa:6e:ae:3b:90:ae:55:08:be:9b:a0:df:3a:8d:44:b1:
         83:4c:94:13:52:65:27:ee:2b:f0:c4:46:55:9e:d3:86:e8:ae:
         d5:73:d3:14:41:68:36:97:ff:2d:7b:af:17:18:d2:d8:c7:07:
         39:75:0f:fb:9c:46:6d:28:7b:c4:31:e3:1f:e7:bc:0c:fd:5c:
         1e:7e:6c:64:2f:78:3e:4a:fa:2d:a9:97:a9:86:c4:27:61:c3:
         31:20:b5:e9:91:7b:e6:22:59:27:3d:ba:55:12:de:d9:97:17:
         72:13:1b:4c:79:6c:29:87:51:59:c8:73:01:5c:87:1e:c5:67:
         98:2c:1f:fe:7f:ee:91:4b:4d:cf:01:7f:ce:97:cb:b7:52:7d:
         cd:01:cf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org