Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.cer
File:                     4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.cer (raw, json)
Hash identifier:          tqkv9mZcAYTKdPoQ5RQBdP2rsK5vehlfYu+WHhR6170=
Subject key identifier:   4B:F0:0F:36:5A:B6:F6:D0:DB:4F:E7:90:40:E8:90:5D:EB:16:FF:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40E2A8867356D5D8742860A25E6362B4F07354B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Jan 2023 17:52:32 +0000
Certificate not after:    Fri 12 Jan 2024 17:57:32 +0000
Subordinate resources:    AS: 270956
                          IP: 131.221.76.0/22
                          IP: 2804:7410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e2:a8:86:73:56:d5:d8:74:28:60:a2:5e:63:62:b4:f0:73:54:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 13 17:52:32 2023 GMT
            Not After : Jan 12 17:57:32 2024 GMT
        Subject: CN=4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2a:66:32:01:7e:a6:b1:62:56:bd:3a:c9:32:
                    f6:72:3d:3a:59:6c:e0:7a:cc:a2:ac:61:d3:ec:db:
                    7f:0a:53:54:e4:a3:ca:f4:54:1c:1a:61:9c:e6:1d:
                    a0:5c:fe:03:9c:a5:a1:5a:98:7d:6c:6d:52:c1:0c:
                    bf:50:9a:94:a1:6c:7f:af:61:ac:ac:62:dd:9d:78:
                    11:82:a2:7c:72:a2:6c:09:7a:a5:22:7e:af:7d:aa:
                    55:49:25:07:e7:01:6e:6b:e0:29:98:01:ca:1d:32:
                    23:9e:f8:91:a0:38:73:53:63:a2:51:4d:ec:c0:b9:
                    0b:ec:56:ac:b4:d0:07:2e:f9:bf:04:2f:e6:e1:50:
                    d0:36:c9:f3:da:de:5c:90:29:e7:74:28:65:20:87:
                    1c:21:de:4d:77:31:a9:1e:17:9c:90:3b:62:cb:69:
                    d3:bf:ed:bf:ec:43:ff:eb:95:53:2e:6c:c6:5a:e7:
                    54:79:38:4b:64:74:43:11:9c:10:bb:e0:33:c7:a6:
                    c2:9c:d8:08:40:98:a1:09:0d:6f:65:18:a6:9f:1f:
                    1f:c7:e8:da:d6:61:38:fe:5a:31:ff:41:34:16:8a:
                    44:3b:a8:58:d9:5c:93:70:7d:15:74:6d:d0:6f:88:
                    f3:a3:81:01:6d:5d:48:cc:c3:19:3e:24:7a:44:e5:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:F0:0F:36:5A:B6:F6:D0:DB:4F:E7:90:40:E8:90:5D:EB:16:FF:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/22
                IPv6:
                  2804:7410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270956

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:8e:94:64:7a:8e:4b:69:74:29:fe:f1:7d:dd:54:d2:3a:
         c6:98:10:62:31:60:5b:0d:bd:69:6a:96:7c:94:c0:38:77:ef:
         01:41:08:4d:75:6e:a9:18:76:d0:c5:11:3d:a6:d0:79:db:85:
         52:da:9c:16:85:af:a7:07:81:97:32:57:16:d6:3a:55:49:a2:
         cf:38:9e:a4:01:02:ff:f1:4b:08:cb:6f:47:0d:1b:b6:35:bc:
         b2:f7:20:ba:d9:2f:30:c7:ef:0c:3a:50:58:e8:31:3b:1d:92:
         84:b8:a7:b4:2d:29:1e:d0:a6:7b:7b:23:83:9d:3f:08:d6:11:
         46:74:85:b5:03:9f:f8:e6:06:67:be:87:05:8f:da:3a:43:27:
         75:ec:69:6c:87:82:91:93:e2:71:46:6f:f8:74:2b:1e:fb:f9:
         a8:bb:61:52:20:93:35:ae:d5:f0:e0:51:b2:79:71:06:f5:33:
         47:c6:f6:9b:bb:79:8a:e2:d6:53:f7:f2:38:a1:d6:ca:87:6e:
         1b:53:c7:60:41:4c:21:0a:31:3c:ed:22:0a:af:33:08:d8:de:
         9f:d6:01:15:95:6d:9c:86:20:de:d0:2d:b7:93:03:71:43:90:
         24:cc:5d:df:3f:d0:ab:23:9a:47:a7:40:70:14:be:7c:40:c8:
         1f:b4:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org