Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer
File:                     4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer (raw, json)
Hash identifier:          h+F4mZD7z6gcD7yOltdZU02lO/l6mZ8LbPC6sBUXFBI=
Subject key identifier:   4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E2FBEB56DFAADB9C1322804A56895014F87B7A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 17:45:10 +0000
Certificate not after:    Wed 04 Sep 2024 17:50:10 +0000
Subordinate resources:    AS: 28294
                          AS: 53125
                          IP: 131.72.84.0/22
                          IP: 138.36.88.0/22
                          IP: 138.204.208.0/22
                          IP: 168.181.0.0/22
                          IP: 168.194.92.0/22
                          IP: 170.246.140.0/22
                          IP: 177.221.0.0/19
                          IP: 179.107.192.0/19
                          IP: 186.226.128.0/20
                          IP: 187.108.112.0/20
                          IP: 189.36.144.0/20
                          IP: 2804:b4::/32
                          IP: 2804:27cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2f:be:b5:6d:fa:ad:b9:c1:32:28:04:a5:68:95:01:4f:87:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 17:45:10 2023 GMT
            Not After : Sep  4 17:50:10 2024 GMT
        Subject: CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:1c:ee:75:db:54:9f:17:ec:a6:8d:1e:da:
                    91:d4:e6:65:0e:45:7d:1d:5f:42:f8:06:d2:43:c6:
                    b0:d0:41:5f:28:48:5c:0a:c7:71:74:37:07:d0:f2:
                    cb:3d:d4:ad:f7:5f:bf:68:f5:8d:ef:1e:20:8c:12:
                    ef:ee:35:a3:d7:03:24:fc:a0:a5:48:ce:64:0f:67:
                    e6:ec:5c:08:3e:cf:3b:09:3d:7a:18:a4:7c:a5:d7:
                    88:c5:be:ad:c9:af:80:74:48:49:cc:ac:fe:fe:72:
                    16:ac:16:a8:6f:85:9a:21:e7:69:31:84:62:40:7f:
                    2c:0c:fb:76:a7:8a:a9:c0:d5:9f:cd:03:63:c6:af:
                    bb:38:61:de:92:52:9d:28:0a:00:4b:e9:61:d4:d3:
                    30:ec:83:a8:ab:86:30:10:d5:98:ea:18:0b:6d:eb:
                    f0:2c:67:20:1e:2b:44:3d:26:96:8f:76:dc:83:62:
                    7b:8a:cb:9a:c4:58:95:42:d5:18:85:2f:bb:cb:ec:
                    6a:6e:b8:c5:0f:3c:32:20:28:0b:04:3a:e3:80:11:
                    90:14:39:ed:e8:30:f9:e2:5f:35:a2:ab:48:dc:03:
                    fb:66:8c:6b:d1:f9:19:67:a4:09:f3:ef:4b:d5:01:
                    21:35:37:e7:ad:5e:de:3f:b2:19:cf:62:e6:2c:45:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.84.0/22
                  138.36.88.0/22
                  138.204.208.0/22
                  168.181.0.0/22
                  168.194.92.0/22
                  170.246.140.0/22
                  177.221.0.0/19
                  179.107.192.0/19
                  186.226.128.0/20
                  187.108.112.0/20
                  189.36.144.0/20
                IPv6:
                  2804:b4::/32
                  2804:27cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28294
                  53125

    Signature Algorithm: sha256WithRSAEncryption
         39:50:13:31:40:a1:ec:6d:b7:87:20:3f:1b:7b:58:e0:d2:be:
         6d:32:ab:c2:4c:ba:f9:3a:48:7f:66:16:e7:17:c5:da:b6:83:
         8f:a8:80:b9:0c:87:48:50:21:4b:24:9b:22:9d:be:9a:e6:61:
         8e:56:58:d2:74:76:00:4f:50:5c:f7:64:6c:b6:b2:d5:fe:65:
         fc:2c:34:9d:63:c4:43:87:ba:ac:f6:82:15:22:a9:27:1b:cc:
         39:e1:14:65:5e:6d:84:8f:9d:5c:67:1d:f3:7c:93:35:d0:45:
         c9:c2:93:36:85:ed:7d:6b:85:e2:56:38:0f:72:3a:c9:02:0c:
         4b:eb:25:bf:16:f5:80:f3:7a:07:3e:aa:f8:f8:45:41:f1:bf:
         b4:03:aa:d6:10:a5:72:04:15:65:a3:f1:95:20:bf:57:8f:8d:
         4a:49:a5:0a:9c:21:8f:bd:33:87:5a:a1:36:0a:7d:a3:dc:c1:
         01:ce:02:9f:57:b1:2e:15:97:b6:89:ca:a9:11:7f:0a:3c:9f:
         f8:3c:dd:2e:0b:33:d4:9d:4f:3b:a1:d7:c1:72:34:f7:c0:28:
         00:20:22:1b:0a:0c:13:79:db:26:51:88:76:a7:c2:95:4b:23:
         44:0a:f7:89:82:4d:f6:fd:96:a3:80:aa:d8:99:de:38:0b:2b:
         97:38:9d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org