Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CA1102CD75669834E63B46E54E533B8FAAA6BA0.cer
File:                     4CA1102CD75669834E63B46E54E533B8FAAA6BA0.cer (raw, json)
Hash identifier:          B/kYRK+HjZlZrZgNIBu9pHtnGvGCQucXHqO+rXj8gLU=
Subject key identifier:   4C:A1:10:2C:D7:56:69:83:4E:63:B4:6E:54:E5:33:B8:FA:AA:6B:A0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E748A19B9599E0D2D24A4D0B174DEC1B9563EA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/4CA1102CD75669834E63B46E54E533B8FAAA6BA0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jan 2022 20:15:54 +0000
Certificate not after:    Thu 12 Jan 2023 20:20:54 +0000
Subordinate resources:    AS: 270888
                          IP: 177.129.240.0/22
                          IP: 2804:72fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:74:8a:19:b9:59:9e:0d:2d:24:a4:d0:b1:74:de:c1:b9:56:3e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 13 20:15:54 2022 GMT
            Not After : Jan 12 20:20:54 2023 GMT
        Subject: CN=4CA1102CD75669834E63B46E54E533B8FAAA6BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:da:e3:0c:13:8f:47:c3:8e:4b:f5:52:cc:06:
                    45:8e:9a:a0:c2:85:d6:b0:58:70:69:de:b2:d4:d9:
                    4a:0c:53:9a:9d:23:d2:72:ea:0f:10:bc:0c:b4:be:
                    f8:61:f7:83:81:09:c9:0b:f9:e4:2b:dd:01:39:33:
                    83:5f:b7:18:a3:ad:b2:d4:f5:8c:2f:b2:46:59:89:
                    e9:a8:d2:f5:56:01:cc:b5:75:e4:84:8d:9e:30:9c:
                    0d:d6:a8:a2:cc:b2:ef:66:b2:a6:14:a3:44:91:7d:
                    fd:86:d3:11:f1:0b:f6:21:b3:21:ca:ef:8f:ac:dd:
                    d8:46:5e:24:86:62:e8:6d:c5:f8:4f:2b:fe:6c:78:
                    09:db:13:d6:76:7c:01:3b:f1:fd:67:ff:e3:61:a2:
                    3f:b3:57:0a:9d:ec:b1:b8:0b:6a:17:d3:af:72:0f:
                    2a:c8:d4:0e:3b:e5:f5:79:27:82:41:25:70:d3:ed:
                    d0:11:14:5d:ff:4e:63:74:16:09:20:82:fa:89:e9:
                    31:82:2e:34:2d:60:3f:4c:ec:92:62:1f:0f:9c:3c:
                    7f:c1:94:04:f8:f9:b1:d6:94:8c:8f:0e:d6:e3:71:
                    5e:d5:f0:05:1a:5f:d3:15:0f:0b:5b:97:63:1a:de:
                    05:21:dc:07:1c:30:57:85:14:5f:85:ad:4b:50:a6:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:A1:10:2C:D7:56:69:83:4E:63:B4:6E:54:E5:33:B8:FA:AA:6B:A0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/4CA1102CD75669834E63B46E54E533B8FAAA6BA0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.240.0/22
                IPv6:
                  2804:72fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270888

    Signature Algorithm: sha256WithRSAEncryption
         9a:0a:c6:b4:59:65:88:84:7b:27:23:27:80:f9:4c:7f:79:eb:
         9e:f3:80:50:05:ae:c8:a6:cc:e9:09:df:9b:8d:91:72:3e:58:
         a2:21:1e:99:f8:1f:10:62:f6:c7:ab:58:9b:63:96:7c:d3:f2:
         88:49:c8:d9:3d:6f:27:6a:51:0b:5f:b3:77:15:e1:64:b4:93:
         bf:8c:90:4f:6e:81:c1:f8:0d:ae:34:38:9b:b1:65:a1:02:d6:
         80:14:a3:f7:c3:63:0c:93:15:a2:fe:32:ff:9e:e6:d6:1f:e1:
         47:5d:e0:17:cf:d0:4d:33:9c:b8:e3:a0:81:44:d1:37:27:69:
         5e:79:b2:d6:51:c1:ce:82:2b:a9:1e:47:bc:c5:9c:b3:80:8e:
         44:17:38:08:70:d6:be:b6:8b:75:29:7f:51:95:26:fc:b5:1b:
         f9:a3:0c:a2:c3:3d:6f:f3:d0:d6:ef:d7:c2:27:72:47:25:3b:
         7c:d4:40:ec:9f:2a:b5:41:92:12:23:c3:72:97:3f:a3:bf:36:
         38:c9:ea:ae:fc:98:20:b1:3f:db:09:6e:dc:38:de:a2:1b:85:
         c6:a7:ae:25:28:f3:56:7a:87:b7:29:58:19:0f:41:74:f8:28:
         e4:50:b5:2d:50:84:11:04:71:19:ed:24:fb:52:cc:5f:c5:8e:
         33:c0:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org