Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.cer
File:                     4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.cer (raw, json)
Hash identifier:          SyAS8zs6lGVmVpKxxN/TczXKz9KaiRMaVBAciI9ZxG0=
Subject key identifier:   4C:34:58:A0:1A:C9:50:A9:DE:1A:83:67:C6:F3:E9:6B:AF:09:B3:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35324B8DBD4900883372CDF62BD9C144DFD53F49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 21:44:29 +0000
Certificate not after:    Mon 02 Dec 2024 21:49:29 +0000
Subordinate resources:    AS: 262899
                          IP: 45.165.128.0/22
                          IP: 2804:554c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:32:4b:8d:bd:49:00:88:33:72:cd:f6:2b:d9:c1:44:df:d5:3f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 21:44:29 2023 GMT
            Not After : Dec  2 21:49:29 2024 GMT
        Subject: CN=4C3458A01AC950A9DE1A8367C6F3E96BAF09B332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:2b:d2:68:35:e2:b2:27:c4:99:1b:13:99:
                    b6:11:96:9d:20:1c:29:fc:cc:32:fa:ad:84:ab:a9:
                    bb:85:2b:11:c9:28:7e:d4:43:09:8d:b2:11:91:d1:
                    d5:ca:5e:28:f5:ad:2b:e1:f3:92:88:26:f7:b6:56:
                    9b:37:e2:d3:d0:98:88:3b:7f:68:53:9f:6c:cb:9d:
                    00:c3:fe:8b:52:22:d6:a6:30:38:0c:4d:c3:38:c1:
                    fc:3e:7e:4f:7d:b5:06:b0:3e:e2:77:99:f8:8f:a4:
                    0e:7d:79:88:a4:e1:41:96:e3:89:ba:6f:99:bf:af:
                    1c:5f:c5:4e:11:48:5d:a2:e7:26:aa:32:5e:71:71:
                    ca:3d:21:1a:b0:70:7b:0b:6e:b8:09:e7:a9:e3:76:
                    f9:b9:7f:79:05:3d:ca:19:db:89:6d:89:4d:fa:a1:
                    f8:66:a4:a6:f5:d3:9c:6c:2e:f0:b5:67:af:01:43:
                    33:8a:30:7a:56:de:13:de:13:d3:67:ec:c6:fd:0d:
                    1b:0e:3f:43:bc:f5:2d:4e:bd:cf:9d:05:b2:10:f7:
                    37:b5:75:d3:81:bd:10:e6:f1:9c:1b:90:bb:cb:ed:
                    f3:7a:24:5e:5b:67:54:04:28:4e:d0:b0:dc:51:55:
                    40:11:4e:0a:c8:c0:0d:5a:23:9b:c8:36:33:72:52:
                    92:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:34:58:A0:1A:C9:50:A9:DE:1A:83:67:C6:F3:E9:6B:AF:09:B3:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/22
                IPv6:
                  2804:554c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262899

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:75:fb:0b:4d:49:6b:0e:43:9c:26:c6:df:fc:d3:52:ba:
         66:4b:ea:e4:af:f4:5c:7a:52:78:18:45:0e:d4:53:d9:0a:71:
         b4:78:2b:d4:3c:1a:11:d5:74:3a:ef:d5:93:80:7b:d2:80:3d:
         35:a3:9f:22:48:f6:75:e8:6f:dd:91:8c:09:82:fc:7a:df:13:
         75:cb:dc:4a:64:0b:fb:b8:5e:47:63:02:1f:b3:4a:37:59:af:
         1e:c7:39:88:e6:a5:92:73:1d:01:1d:8c:e1:43:df:61:55:c7:
         5e:85:13:2a:7d:70:dd:bd:1f:fc:3b:c1:5f:39:4d:36:ca:3a:
         66:2a:14:b2:3f:82:08:81:34:4c:ad:ad:9b:8a:6f:3a:96:f9:
         23:76:69:84:2e:77:ec:b9:bc:dd:61:a5:43:08:e2:76:76:5b:
         1b:e1:22:6e:02:65:bf:d8:b6:e4:cc:a9:11:f7:43:19:76:bc:
         a7:5e:6c:c7:09:c9:6d:03:ce:79:62:1f:91:78:3b:fd:71:a0:
         0a:cc:f5:cf:9c:72:a6:a5:d4:6b:af:23:77:7a:05:2e:12:9c:
         82:05:f1:7a:0b:e7:d7:d0:ba:a3:72:93:ff:ef:ee:16:f5:81:
         06:f2:23:1d:5c:bd:dd:98:18:68:9a:4a:df:23:4c:7d:b8:3d:
         5b:34:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org