Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BDC10A083C85EE34445D71BB70A4A2A1D7CC14D.cer
File:                     4BDC10A083C85EE34445D71BB70A4A2A1D7CC14D.cer (raw, json)
Hash identifier:          MDN4S8aL/BFoAwgyRRv1HYFrBUntITquSSChkpzHE+w=
Subject key identifier:   4B:DC:10:A0:83:C8:5E:E3:44:45:D7:1B:B7:0A:4A:2A:1D:7C:C1:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F97F3F65FC5F91C9D74B72937444EFE57B6E42D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/4BDC10A083C85EE34445D71BB70A4A2A1D7CC14D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 12:28:58 +0000
Certificate not after:    Mon 17 Feb 2025 12:33:58 +0000
Subordinate resources:    AS: 262582
                          IP: 138.99.32.0/22
                          IP: 177.84.96.0/21
                          IP: 177.93.88.0/21
                          IP: 2804:664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:97:f3:f6:5f:c5:f9:1c:9d:74:b7:29:37:44:4e:fe:57:b6:e4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 12:28:58 2024 GMT
            Not After : Feb 17 12:33:58 2025 GMT
        Subject: CN=4BDC10A083C85EE34445D71BB70A4A2A1D7CC14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:aa:25:0c:d1:f2:4f:cf:01:48:06:fe:80:27:
                    79:c5:45:4d:5c:fc:bb:49:c8:18:46:9e:2e:33:46:
                    84:9e:04:bb:ab:73:ef:9a:b9:d1:28:60:54:b8:1c:
                    78:71:5a:f6:25:36:2b:5c:40:80:f8:55:f8:44:f4:
                    7c:85:13:69:00:84:db:f7:3a:5b:ee:16:9c:1e:aa:
                    98:38:e8:95:3f:52:0e:9d:16:d6:4d:44:6d:bb:01:
                    da:f8:5d:4b:78:d7:5b:79:3a:4e:45:62:c6:a4:54:
                    fe:79:5e:2a:c4:3f:68:fb:4d:dd:12:2e:e9:98:77:
                    00:a9:15:91:84:11:30:28:c3:ae:0c:d1:a2:cf:50:
                    8d:e8:f7:ac:ad:bb:76:06:68:89:a9:fc:a9:3b:a7:
                    9c:62:05:20:a4:57:d3:a5:c2:c3:f5:e7:f3:68:94:
                    ea:60:4b:d5:1c:68:f2:94:4d:70:e1:47:a5:09:0f:
                    0a:c9:d9:ff:ef:62:e3:e5:c4:2d:c5:49:41:40:a5:
                    60:37:e2:e2:a9:8b:a9:04:1f:fc:ec:9c:11:74:17:
                    dc:a6:cc:a8:53:31:15:4b:3b:40:94:f1:5a:bb:e5:
                    ce:92:18:95:bb:b4:2c:4a:62:5e:48:52:23:ad:9f:
                    e0:cd:84:6c:64:95:61:e2:05:67:0b:5a:8e:cc:61:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:DC:10:A0:83:C8:5E:E3:44:45:D7:1B:B7:0A:4A:2A:1D:7C:C1:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/4BDC10A083C85EE34445D71BB70A4A2A1D7CC14D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.32.0/22
                  177.84.96.0/21
                  177.93.88.0/21
                IPv6:
                  2804:664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262582

    Signature Algorithm: sha256WithRSAEncryption
         76:e5:5f:63:27:62:a4:30:95:a8:06:69:37:2a:ed:b4:4a:e9:
         e0:ea:67:79:de:5e:05:0d:59:b6:1b:77:84:56:f9:71:64:46:
         9f:fb:2b:f0:e9:22:6b:c5:92:90:95:e7:f1:6d:ba:aa:19:60:
         15:d0:e2:88:b7:0c:12:5c:96:08:b2:9e:39:2b:90:b4:52:76:
         6f:3a:ec:36:85:17:da:01:a0:d4:b3:cc:ba:31:3e:1d:d4:5e:
         8b:b2:bd:4c:57:c4:40:cb:2b:9a:7a:d5:7f:20:e6:9c:dd:4f:
         e2:f8:d9:af:6a:44:d3:44:05:1e:8a:63:87:8f:c0:b5:c4:d0:
         63:35:11:3c:9e:00:94:9b:30:c0:35:6a:7e:46:0b:09:d8:0c:
         77:a2:8a:eb:95:3b:69:15:cb:bc:07:f5:69:21:09:4c:f7:eb:
         fa:dd:f1:4d:44:f3:c3:95:98:25:40:80:0a:d3:01:19:25:6c:
         ba:a3:4d:64:8b:2b:67:66:f0:fb:35:ab:23:38:67:96:64:35:
         df:9a:b6:1a:81:44:cd:0a:28:51:d4:d0:ea:d2:39:3d:01:47:
         02:4c:df:27:44:f9:03:7c:ab:86:be:76:59:fa:4b:c4:00:6e:
         67:05:ec:8f:83:93:6a:71:61:4d:a3:f3:39:d1:6d:d8:10:1c:
         bd:e0:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org