Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF.cer
File:                     4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF.cer (raw, json)
Hash identifier:          da5D8jRHGXX2FOEifSriO3XcXIiW46MJvxajaVwkQbo=
Subject key identifier:   4C:32:96:CF:DB:00:59:DD:09:E9:F4:DD:8E:B6:61:85:77:8D:D4:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0878B5F046B589E518EEF87F4C522BB4FF9C9F8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 17:42:33 +0000
Certificate not after:    Tue 06 Aug 2024 17:47:33 +0000
Subordinate resources:    AS: 264258
                          IP: 138.118.72.0/22
                          IP: 2801:80:f30::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:78:b5:f0:46:b5:89:e5:18:ee:f8:7f:4c:52:2b:b4:ff:9c:9f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 17:42:33 2023 GMT
            Not After : Aug  6 17:47:33 2024 GMT
        Subject: CN=4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:bc:82:d4:b5:56:5d:88:a9:33:b4:73:56:
                    fc:42:f3:d5:ab:8b:ac:4e:be:38:11:cc:f1:92:e5:
                    ad:ba:43:6a:1f:3f:20:cc:74:27:4d:dd:a8:ed:71:
                    ef:59:da:ee:4d:23:d6:34:2f:55:f4:58:37:df:a2:
                    f9:97:07:be:38:41:5e:61:0a:9c:33:51:6c:f6:b4:
                    95:4a:76:c2:db:09:4f:1f:44:41:cb:f2:7c:2c:44:
                    f0:05:43:8a:3c:7d:5b:a1:71:08:fa:1b:7e:4f:21:
                    32:54:c2:25:2d:4d:48:4f:60:04:28:41:bb:e7:dd:
                    0d:11:8b:f6:5b:44:be:8f:7e:31:31:13:af:4d:c2:
                    7e:4a:50:d1:99:23:d0:c1:4e:55:99:26:4c:a8:c1:
                    ee:6e:f1:b2:f6:02:18:4f:80:2d:a8:6f:ac:eb:5d:
                    75:83:5b:31:66:d3:d6:8f:e3:7b:20:32:8c:2e:f9:
                    bc:6b:64:90:35:c5:35:a4:a4:e1:18:b3:6a:c2:59:
                    48:40:dd:f2:20:75:ac:a9:29:c1:b8:5e:68:2e:64:
                    09:f9:b7:36:b1:e8:8c:2c:3a:17:8b:18:7b:0f:82:
                    50:69:d0:5c:a4:fc:7f:fa:ac:86:5a:d2:a2:8b:a6:
                    e3:aa:6d:75:8f:a9:62:b1:50:8c:38:9d:7b:6d:3d:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:32:96:CF:DB:00:59:DD:09:E9:F4:DD:8E:B6:61:85:77:8D:D4:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.72.0/22
                IPv6:
                  2801:80:f30::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264258

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:0b:87:1b:3f:17:88:a2:ca:1c:5f:55:92:c7:01:1c:1a:
         36:b4:9f:38:27:b0:77:5c:3b:d3:a4:5c:47:42:2d:e0:87:82:
         78:01:09:1d:9a:3e:23:7b:05:08:b2:87:b2:da:0a:1e:fd:ac:
         12:ad:6e:cc:62:b0:b1:1c:ac:54:b0:05:af:db:88:92:92:2b:
         53:11:4a:52:05:f7:b9:9a:a9:9d:2d:7d:fd:e7:d1:92:04:61:
         68:ce:d0:97:32:e5:07:c0:3c:21:d9:55:7b:71:18:5d:af:5a:
         41:e0:49:3d:71:ec:c6:67:e8:6a:2d:7b:e4:28:91:82:c2:a9:
         32:91:81:95:94:eb:b2:c0:ff:82:64:13:1c:a6:2c:f3:02:85:
         4c:f4:64:81:71:43:66:4d:d7:3f:fa:a2:cc:6c:31:fb:d3:99:
         d3:37:1f:61:c0:50:fb:a4:ff:42:0f:dd:cd:47:57:de:1e:d9:
         cb:0f:dc:59:17:e5:2b:73:f4:f5:47:f8:2f:5c:2e:40:14:0d:
         6d:ec:26:21:a0:75:d5:f1:32:26:d7:f8:4d:eb:5c:99:c3:92:
         35:95:25:e2:a6:d1:1b:9b:9e:d6:2e:74:05:b8:22:32:b7:dc:
         03:68:42:9e:d1:52:25:1f:f2:08:07:81:e1:60:02:19:cc:56:
         7b:1c:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org