Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C768365A8BB62D46DA956EBE2528873CD540F87.cer
File:                     4C768365A8BB62D46DA956EBE2528873CD540F87.cer (raw, json)
Hash identifier:          FCqgmF0Wh9cjhtYB9jaZKhHAtYB5oTT85ZBX61CWZhA=
Subject key identifier:   4C:76:83:65:A8:BB:62:D4:6D:A9:56:EB:E2:52:88:73:CD:54:0F:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45E9416C88DABE9CC7358B7DE4F3B30945403290
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/4C768365A8BB62D46DA956EBE2528873CD540F87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jun 2023 12:42:31 +0000
Certificate not after:    Mon 10 Jun 2024 12:47:31 +0000
Subordinate resources:    AS: 269083
                          IP: 45.179.76.0/22
                          IP: 2804:5f34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e9:41:6c:88:da:be:9c:c7:35:8b:7d:e4:f3:b3:09:45:40:32:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 12 12:42:31 2023 GMT
            Not After : Jun 10 12:47:31 2024 GMT
        Subject: CN=4C768365A8BB62D46DA956EBE2528873CD540F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:36:a2:d5:f5:ca:4d:2a:06:37:5f:4b:23:
                    eb:cb:1b:04:5f:be:d1:99:36:84:ea:66:ff:8a:74:
                    1f:88:28:5e:49:45:3e:d9:02:b3:6e:ac:09:24:d7:
                    74:99:ea:94:fd:b2:f0:22:a9:95:2b:47:6a:08:76:
                    b8:6b:9a:c5:06:45:92:e8:fd:76:a8:48:28:de:07:
                    15:54:5a:5e:a2:d4:e9:5d:24:6e:ad:0a:21:bf:ef:
                    29:06:09:c3:c1:2a:68:49:81:05:c7:07:27:d9:14:
                    70:00:30:64:5b:0a:80:6e:db:f5:3c:2b:6a:80:49:
                    34:f0:30:ba:3b:10:37:2e:21:2f:43:e8:a4:07:c3:
                    65:53:e6:40:a8:da:8e:22:bc:17:c7:a7:35:3b:54:
                    1e:41:ba:03:7c:33:4d:99:ba:91:58:bf:29:10:3c:
                    27:e7:43:9c:17:56:15:19:4a:23:16:33:a7:b1:56:
                    d6:be:f5:63:a6:cf:27:c7:fd:42:4a:77:4a:e6:b8:
                    e4:84:40:52:1d:ae:4f:88:e3:ab:4c:30:7a:46:14:
                    c0:4d:aa:7b:2a:e1:e9:13:ea:d0:74:7e:13:99:32:
                    f5:29:ac:99:2f:da:7d:16:68:11:34:a9:6e:30:7e:
                    a2:58:9a:67:89:a3:ea:78:78:77:7d:78:79:5a:f6:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:76:83:65:A8:BB:62:D4:6D:A9:56:EB:E2:52:88:73:CD:54:0F:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/4C768365A8BB62D46DA956EBE2528873CD540F87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.76.0/22
                IPv6:
                  2804:5f34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269083

    Signature Algorithm: sha256WithRSAEncryption
         8a:b4:c0:42:98:5a:9c:9e:4b:0b:3c:17:2c:46:dc:c0:5e:8a:
         b2:4c:48:b3:67:d6:6c:3d:a2:ed:06:68:72:94:31:37:b9:dc:
         a3:9e:2a:d2:52:2a:64:fb:21:f0:4a:0e:61:70:d6:c7:87:fd:
         6c:0c:9d:db:32:f5:e5:44:51:88:5f:6e:f5:0f:56:75:f6:33:
         62:14:a3:6f:db:d9:5a:dc:25:1a:51:9e:c8:2e:d9:7c:37:8e:
         75:e8:74:c0:8b:71:e8:a9:e0:9f:05:17:de:58:d3:18:17:2f:
         4e:f9:d7:12:88:bd:ec:36:e6:10:44:d1:8b:d3:85:e5:d5:4b:
         32:4e:86:b3:2f:0c:32:3e:8b:1a:d2:cf:6a:a1:67:b8:e2:c1:
         a6:29:d4:76:8b:88:d5:b9:8a:98:e7:23:1b:22:30:f4:d9:80:
         d6:c4:5b:57:6b:ce:bd:83:18:03:cd:cb:b1:5e:f6:17:61:78:
         74:99:a7:ca:a8:fc:1c:83:ef:06:70:c4:3e:7b:bf:20:36:8e:
         3b:1c:72:f6:85:3b:89:fe:d6:5d:d4:9d:67:2a:18:be:02:5c:
         9f:27:49:6f:66:f1:5e:5f:e6:55:1c:e8:b0:b1:07:93:70:e3:
         a8:36:0c:d4:fa:79:a4:9c:08:2a:84:f6:0b:db:6f:3b:57:58:
         87:69:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org