Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CA6073E0149C48B79FF51C15FDA6B97E143BDFF.cer
File:                     4CA6073E0149C48B79FF51C15FDA6B97E143BDFF.cer (raw, json)
Hash identifier:          Ztoc37aBMvrctG3B1i5mAJrhIOBWdRWPsbqjlvSc7/k=
Subject key identifier:   4C:A6:07:3E:01:49:C4:8B:79:FF:51:C1:5F:DA:6B:97:E1:43:BD:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4093215706D7E9E1EC5941C3B82482C923814633
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/4CA6073E0149C48B79FF51C15FDA6B97E143BDFF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 01:14:46 +0000
Certificate not after:    Thu 27 Feb 2025 01:19:46 +0000
Subordinate resources:    AS: 268707
                          AS: 270966
                          IP: 45.169.160.0/23
                          IP: 2804:5984::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:93:21:57:06:d7:e9:e1:ec:59:41:c3:b8:24:82:c9:23:81:46:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 01:14:46 2024 GMT
            Not After : Feb 27 01:19:46 2025 GMT
        Subject: CN=4CA6073E0149C48B79FF51C15FDA6B97E143BDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:55:4f:df:50:00:22:5d:f0:5b:c5:12:c3:
                    a7:7d:12:2d:06:09:51:8d:56:4f:a8:89:ab:ac:08:
                    fd:c4:f6:d3:2f:d1:69:01:76:8a:77:2e:c4:e4:8f:
                    8e:6d:a1:42:f9:8d:54:5c:87:99:d7:44:b1:63:60:
                    4b:f5:28:54:24:f4:3a:72:40:dd:05:8e:52:18:12:
                    bc:de:f6:27:bd:ee:11:e2:11:24:1f:9d:0e:52:c5:
                    39:00:f5:27:44:4b:af:07:7d:08:44:96:5a:4c:9d:
                    a3:55:cc:5a:d8:0f:ab:0a:40:c1:29:f9:eb:57:71:
                    d9:90:d2:9e:6b:0f:ab:6b:8c:bf:be:84:d6:25:1d:
                    1b:61:25:7f:42:9d:54:f1:d2:9d:91:db:1a:71:83:
                    85:91:45:0e:3d:9b:c2:a0:e9:d7:b7:18:37:75:50:
                    72:cf:7b:1c:9a:9e:10:9f:a9:57:02:09:93:31:73:
                    4d:99:a7:c6:2d:9a:9e:4d:65:83:55:e4:98:70:68:
                    1e:7f:b6:d7:c0:8e:f0:7f:0f:02:c1:5e:a9:d0:22:
                    15:fd:fd:5f:e4:fa:f1:a7:dc:d7:43:da:ef:6d:70:
                    bb:12:51:e6:e6:7b:5e:e2:d5:ff:88:80:c1:00:73:
                    8c:79:5a:37:10:1e:1a:ee:68:7b:9b:66:65:e1:5d:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:A6:07:3E:01:49:C4:8B:79:FF:51:C1:5F:DA:6B:97:E1:43:BD:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/4CA6073E0149C48B79FF51C15FDA6B97E143BDFF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/23
                IPv6:
                  2804:5984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268707
                  270966

    Signature Algorithm: sha256WithRSAEncryption
         a4:d4:ae:58:ea:fc:8c:a0:17:62:fd:18:23:de:bf:ff:01:83:
         65:0c:21:34:29:0c:b0:86:f5:d8:f5:a9:d6:c9:f6:de:d4:c4:
         be:70:d2:f1:01:86:ea:b1:dd:38:d3:9d:51:a1:aa:0f:0c:d8:
         4e:65:43:70:e8:95:74:6c:f0:e6:32:25:97:ad:7b:7b:9c:e8:
         28:e0:15:8b:97:4f:2a:d6:4c:fc:79:10:3c:e0:4d:06:59:ba:
         ca:69:8f:ab:98:5e:77:32:0d:a5:ca:31:fa:16:1a:ed:95:c2:
         50:ce:eb:72:5b:26:ab:09:ac:18:03:95:73:28:6a:be:87:aa:
         eb:39:c1:43:6e:a5:ab:df:fc:55:47:ce:86:2d:7f:d4:eb:89:
         bb:69:88:f9:27:d9:8e:8b:41:ea:67:77:82:00:9f:c9:7a:28:
         03:a4:5d:6a:d7:8d:9a:a8:c4:86:3d:33:05:2b:76:92:f6:f6:
         34:0a:05:9d:d5:e0:5d:c8:a5:1d:39:68:ae:4a:cc:65:c2:ef:
         2f:b5:f5:9b:2e:aa:91:05:f5:e4:67:15:d2:b0:a6:b1:73:96:
         dd:7b:b7:a6:83:70:86:fb:5e:f4:0d:e0:6d:09:50:22:72:51:
         cc:73:3f:6b:4a:2c:1a:a2:b9:28:63:7c:0f:21:71:9f:1a:a4:
         bb:2c:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org