Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.cer
File:                     4C877B842838E9616EB624E5ADB8C99C14F0AC36.cer (raw, json)
Hash identifier:          59dogT1BA+MxpDbCBM0/r+OanR467Fz7mqZenFu4OJc=
Subject key identifier:   4C:87:7B:84:28:38:E9:61:6E:B6:24:E5:AD:B8:C9:9C:14:F0:AC:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56536A8A069BF173B961DB01F784FF012B967E0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 13:52:17 +0000
Certificate not after:    Tue 14 Jan 2025 13:57:17 +0000
Subordinate resources:    AS: 266953
                          IP: 45.226.4.0/22
                          IP: 2804:45d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:53:6a:8a:06:9b:f1:73:b9:61:db:01:f7:84:ff:01:2b:96:7e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 13:52:17 2024 GMT
            Not After : Jan 14 13:57:17 2025 GMT
        Subject: CN=4C877B842838E9616EB624E5ADB8C99C14F0AC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:71:dd:a4:95:5b:12:57:eb:49:ec:00:4a:
                    cc:8e:a2:80:60:93:cc:0e:45:dc:bd:b7:03:43:f0:
                    10:90:be:52:f1:4c:df:ed:49:d1:a2:e9:e3:6a:d9:
                    6c:92:a8:5c:7f:0e:4f:2a:b9:1a:c2:32:86:60:dd:
                    cb:da:f9:56:08:bb:df:aa:29:0e:82:a3:81:f8:50:
                    20:92:ef:5c:b7:07:49:ec:48:14:21:6a:83:d2:f1:
                    c4:07:4c:19:54:43:38:c6:bb:e9:bc:6b:cf:6e:85:
                    8b:5e:f6:e8:b6:86:55:6a:3c:bf:f4:44:bc:fd:63:
                    5b:6a:eb:52:f1:ce:67:8e:b9:7a:ee:c9:08:fd:f4:
                    21:68:59:ae:35:dd:7e:87:70:18:a7:2e:4b:30:6d:
                    78:eb:24:17:3e:32:c9:db:05:88:b5:f4:bf:6e:a5:
                    21:94:e8:87:75:ec:a7:c5:87:4a:5f:7f:d8:64:a1:
                    7e:0c:c7:1b:e0:5b:bc:13:58:2e:0b:38:72:79:2a:
                    00:07:15:c0:ff:9b:2b:36:ba:e5:cf:88:9d:67:4d:
                    c2:20:7b:00:76:e4:d3:1f:32:3e:36:53:66:de:a4:
                    4e:54:7e:c4:c2:61:2e:ed:65:2b:c3:2c:7e:eb:39:
                    7a:08:a7:c9:40:f5:8f:72:a9:a0:80:ae:c5:24:63:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:87:7B:84:28:38:E9:61:6E:B6:24:E5:AD:B8:C9:9C:14:F0:AC:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.4.0/22
                IPv6:
                  2804:45d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266953

    Signature Algorithm: sha256WithRSAEncryption
         93:a6:38:8e:21:27:e5:32:f6:40:b5:99:85:ef:32:3d:85:c5:
         59:82:2e:d8:fe:c8:9f:96:e8:b4:6a:df:99:4b:2d:3b:c5:79:
         54:ee:63:ed:cb:75:33:2d:37:0a:58:83:59:5c:0f:cf:24:c5:
         a8:c3:d4:42:63:31:d0:0b:45:1b:80:00:1c:35:91:f5:84:38:
         c9:f9:ef:20:1e:30:2e:d8:e3:b7:1a:0e:ff:1d:4c:45:e4:da:
         8d:b1:c9:b1:c4:46:3c:3c:67:8d:bd:44:b9:fb:2e:21:8d:27:
         fc:8e:4c:29:c8:ac:62:07:3f:33:a0:8c:3b:8b:40:13:6d:af:
         1d:a0:f9:0d:54:0e:4b:38:ba:3f:3b:5e:e4:58:1d:51:66:05:
         ac:74:63:4d:fe:40:de:56:4f:0d:68:5f:a8:30:a5:13:f6:46:
         c2:fb:12:9c:67:d7:4e:ae:64:83:7e:10:7b:56:c2:15:3d:52:
         97:8c:74:92:ad:9e:18:c6:27:55:d4:f5:22:14:e4:26:a3:56:
         9d:c3:fe:03:94:47:00:7c:7d:12:99:5b:08:aa:85:c5:0f:6d:
         2f:02:d9:a7:70:e9:08:e4:e7:87:fc:d4:69:68:92:42:63:6b:
         de:03:be:2b:04:a9:72:6b:e2:96:0c:fb:c8:e2:ee:e2:ba:7f:
         32:d8:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org