Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer
File:                     4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer (raw, json)
Hash identifier:          g9bV9EpvWsROvEzsS7p6DPWs0eX1K5E6uGW/Ie+ahBQ=
Subject key identifier:   4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FCDF65A217DE3D6B5FBD95E1B9BF85D1377F3DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 12:15:36 +0000
Certificate not after:    Tue 21 May 2024 12:20:36 +0000
Subordinate resources:    AS: 268006
                          IP: 45.167.64.0/22
                          IP: 2804:5684::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cd:f6:5a:21:7d:e3:d6:b5:fb:d9:5e:1b:9b:f8:5d:13:77:f3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 12:15:36 2023 GMT
            Not After : May 21 12:20:36 2024 GMT
        Subject: CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a8:ce:cd:36:3e:da:a4:d7:39:65:ff:8e:7b:
                    51:f2:87:68:a4:10:11:f8:1f:c9:9a:84:c8:84:09:
                    eb:69:fc:a8:59:0d:70:64:fa:09:74:d8:57:b2:87:
                    3f:bf:5d:a6:f3:1f:21:c6:56:29:42:46:81:c7:5c:
                    f3:10:09:98:cc:76:1e:c7:ff:fb:ec:4f:12:4c:6c:
                    66:2c:91:14:0f:f4:f6:03:dd:39:c6:f5:1d:aa:f6:
                    72:e7:f0:ba:52:3b:b3:2e:b9:d5:a1:bf:52:fa:12:
                    54:fd:32:fc:96:ec:92:a8:82:af:7a:d3:e2:68:16:
                    a9:35:74:b6:cd:fb:b4:14:64:c0:31:8e:93:c4:62:
                    4e:bb:91:2d:51:78:26:03:68:dc:28:9a:eb:db:e0:
                    0e:76:cf:ea:69:a0:38:79:da:85:95:87:d5:8f:fe:
                    8f:c7:0b:4c:2d:57:a7:69:26:84:b1:fa:27:e8:c7:
                    d3:33:f8:dd:ad:c2:0d:e1:1d:2e:9c:73:9f:74:61:
                    5b:4c:30:56:e3:79:78:8e:e2:08:e9:82:71:a3:c6:
                    d6:b3:f8:d5:f7:34:75:05:41:ac:6e:75:14:22:25:
                    3d:a1:95:b1:44:eb:db:22:f4:0d:9d:c8:21:7b:b0:
                    8d:d8:20:8e:db:ac:59:7f:1a:c3:ba:64:84:b6:b3:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.64.0/22
                IPv6:
                  2804:5684::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268006

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:ba:fe:52:26:89:af:06:60:76:be:52:10:fc:33:d6:52:
         9b:45:13:ac:2d:4e:80:59:a0:97:f8:57:00:a4:5a:32:98:4f:
         fc:3b:24:50:f2:c9:54:b3:d3:ec:0b:1a:bd:97:1f:c8:ef:35:
         c7:5e:d3:2d:00:b7:df:52:a9:e0:d6:d2:8e:f2:bc:e8:2c:a2:
         68:fc:c7:0f:5e:07:5f:a4:9d:97:ae:5f:2e:8d:72:f0:b0:1c:
         3c:d7:47:f2:26:7c:07:a4:07:5c:b6:b3:38:8f:e0:0d:d2:fd:
         8d:6a:54:7d:e9:3b:a2:35:82:ee:3f:0e:d2:9c:4b:4e:80:8c:
         d9:20:5c:40:64:47:0b:b8:41:79:75:a5:f4:76:5b:de:4c:8f:
         36:80:ff:4b:fd:85:e1:45:c7:80:1c:cb:73:62:16:32:1a:70:
         c1:a0:af:51:82:60:0a:00:cf:30:ea:27:02:3d:2e:76:b2:6a:
         54:57:1c:17:3d:0e:aa:74:0a:15:11:0d:b9:46:93:bf:b0:4e:
         72:b0:04:e5:93:be:9d:2b:30:b8:ad:cf:d9:a1:38:b0:e0:a6:
         57:df:da:38:d0:2d:35:d2:bb:0f:66:aa:d8:e2:fd:d3:61:3e:
         b3:46:3b:af:68:f6:b2:56:d3:0f:2a:23:13:ce:39:6f:5d:ad:
         70:97:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org