Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
File:                     4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer (raw, json)
Hash identifier:          A+431gjJXe5Mu9FJbW8wKsH+57AQ1wKy2kxTeefCtfY=
Subject key identifier:   4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52B63CCABB61342ACE7952947250D13F72DAE7C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 15:17:43 +0000
Certificate not after:    Tue 24 Dec 2024 15:22:43 +0000
Subordinate resources:    AS: 269456
                          IP: 45.187.52.0/22
                          IP: 2804:64e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:3c:ca:bb:61:34:2a:ce:79:52:94:72:50:d1:3f:72:da:e7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 15:17:43 2023 GMT
            Not After : Dec 24 15:22:43 2024 GMT
        Subject: CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:88:48:b7:a6:63:96:98:f2:01:23:e6:f8:
                    2d:d1:5c:d6:d2:f7:07:0b:97:da:35:37:fe:50:b8:
                    67:08:31:a1:86:39:bf:8d:2f:23:66:29:4f:da:dc:
                    66:be:58:65:88:99:86:4f:c2:8b:92:c6:e2:c1:36:
                    dc:73:df:f9:8e:e2:6d:ed:cc:84:e4:a7:70:eb:65:
                    bf:6f:0d:12:49:df:45:bc:13:6c:d0:79:1f:14:a9:
                    20:f4:b0:48:80:bf:3d:70:35:5f:de:0e:81:19:32:
                    b4:fc:1f:ed:07:b1:6a:a3:94:f9:7d:7b:08:53:31:
                    f2:0d:ba:2b:85:9a:ea:d7:12:f7:b9:65:6c:70:bd:
                    59:ca:9f:bc:ab:70:7e:d6:b9:d1:e4:7f:13:fb:32:
                    e8:d0:d4:36:4a:89:fb:dd:86:6e:63:5b:6c:47:55:
                    4f:34:42:3d:9a:b4:66:20:e9:68:32:d5:fa:08:85:
                    42:33:8a:e3:88:26:dd:ff:36:13:36:c5:6a:4d:ff:
                    61:23:ad:ed:ab:d0:44:96:2c:e9:d8:42:9e:5c:1a:
                    14:87:0e:d4:0f:c4:9d:e0:1a:a1:7f:62:d1:18:5d:
                    14:cb:b6:c3:37:7e:21:29:1c:b1:48:ee:4a:04:c9:
                    a0:8d:87:e6:57:a6:73:f8:16:7a:3f:18:5a:a9:42:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.52.0/22
                IPv6:
                  2804:64e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269456

    Signature Algorithm: sha256WithRSAEncryption
         9c:59:6a:eb:36:28:02:c5:7f:05:f5:86:5f:13:4f:9c:84:0c:
         49:1d:11:36:09:90:60:95:f3:08:5c:d7:ac:3f:c7:84:41:27:
         8b:92:03:46:12:c8:fd:7d:76:5a:b2:82:0f:03:91:d6:4c:03:
         c7:70:02:3b:18:d4:e5:f9:1c:bd:43:74:dc:79:80:dd:83:bf:
         ef:c8:bb:0e:00:9c:24:46:c2:59:6e:1c:38:0a:f8:68:ad:15:
         93:13:cf:bf:cc:d0:02:0c:96:49:18:62:8b:d0:7c:8f:82:7c:
         7c:22:10:28:21:4b:01:d6:8a:31:98:23:b1:16:e9:de:e7:89:
         bf:3b:c4:0a:8c:46:28:d8:f6:08:f7:bb:c1:62:ce:54:85:7b:
         d4:02:3c:cc:51:e7:37:99:07:79:f7:b6:6d:31:fe:ba:76:ee:
         7a:8c:50:06:cd:df:b0:ae:f2:0c:6a:0a:ba:c9:fe:4c:d9:fd:
         24:57:d1:f3:b5:18:e6:a6:05:41:cf:cc:f1:94:90:8e:8a:82:
         1c:1a:17:10:98:61:a7:c6:74:20:66:70:a7:08:6c:d0:a4:01:
         b9:86:fa:6a:8c:f5:d1:61:f5:38:5c:d1:82:cf:9d:19:d6:e5:
         7e:77:44:9d:5a:08:4f:15:9a:3b:e1:08:73:14:44:5e:3b:7e:
         31:82:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org