Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer
File:                     4CF6EBAC581A90E8521B224F46F976605D537556.cer (raw, json)
Hash identifier:          ugrz7vdX3jzVyPbefA5wclx6KIr+yyUOltuKYZcNoI0=
Subject key identifier:   4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       718898B38DBBEE50923AD9EDFF4EE91C013178B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/4CF6EBAC581A90E8521B224F46F976605D537556.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 19:22:34 +0000
Certificate not after:    Mon 21 Oct 2024 19:27:34 +0000
Subordinate resources:    AS: 266202
                          IP: 192.140.36.0/22
                          IP: 2804:3c4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:88:98:b3:8d:bb:ee:50:92:3a:d9:ed:ff:4e:e9:1c:01:31:78:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 19:22:34 2023 GMT
            Not After : Oct 21 19:27:34 2024 GMT
        Subject: CN=4CF6EBAC581A90E8521B224F46F976605D537556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:9d:cc:23:df:f4:5d:09:97:4e:f0:c5:9b:
                    ae:35:7f:26:6d:04:58:81:b7:96:99:44:15:62:72:
                    1f:a7:72:a5:8a:1c:59:92:62:3a:20:e2:98:c8:82:
                    d1:39:fa:b5:96:66:9a:79:f2:93:97:db:dd:bc:95:
                    39:d0:1e:ed:ed:82:c4:45:95:62:9c:d3:99:ed:44:
                    23:5f:61:8f:44:c6:bb:73:a7:d4:53:6c:9f:88:ef:
                    43:fd:ca:4d:50:26:c1:9c:b8:4f:b6:88:f4:fd:d6:
                    21:67:1d:c5:14:06:7d:3f:bb:43:a1:38:ab:82:b4:
                    42:50:a7:48:b0:07:98:84:ac:f9:cc:f5:ce:4c:1c:
                    4f:df:78:fd:8d:8c:c4:0f:04:55:e1:38:bb:3a:42:
                    9f:22:b4:e6:5a:11:28:4b:48:3c:be:aa:6f:5b:58:
                    c1:89:cf:c6:87:a6:20:8a:6c:6a:4c:e8:9b:c8:8d:
                    d4:85:ba:07:6f:82:b0:9b:71:ff:a1:12:4e:a6:68:
                    72:a0:47:ac:7f:ff:23:8c:e7:14:fb:46:26:8e:62:
                    98:d8:f0:7a:29:5a:f1:59:bf:aa:03:67:89:9c:d2:
                    26:48:b1:60:61:aa:3d:dc:56:e6:cc:64:65:b6:e7:
                    e2:f2:7a:46:3c:e8:60:ec:db:d7:ed:4b:4a:94:a2:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/4CF6EBAC581A90E8521B224F46F976605D537556.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.36.0/22
                IPv6:
                  2804:3c4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266202

    Signature Algorithm: sha256WithRSAEncryption
         55:b2:84:86:4f:ff:a7:df:98:12:ba:2c:7b:04:73:57:81:97:
         1d:bc:d2:7c:0a:06:d6:bd:e8:6c:7d:32:49:a7:08:55:09:25:
         36:40:0b:ae:c8:85:56:7e:72:c6:e0:57:ca:67:43:92:c7:af:
         92:d3:d4:3f:88:de:26:83:85:6e:82:3f:b6:57:33:27:f6:d5:
         60:83:bd:91:a6:75:08:7a:cb:f2:96:0a:1a:d4:ae:8a:40:e6:
         15:cb:25:0e:bf:f7:60:0f:24:bc:bd:7a:4f:29:65:e1:18:35:
         13:aa:cd:75:98:83:42:85:41:06:0c:97:08:42:35:1b:c6:17:
         46:6a:dc:62:5d:4f:e9:1f:a9:c5:26:7c:6e:f5:de:e9:98:04:
         d6:ed:e3:4a:93:3f:2e:c0:e5:4b:90:96:49:ed:f5:2e:cd:7f:
         4d:2b:74:4d:1a:ac:10:c8:ef:f2:87:a1:30:02:69:3f:02:0b:
         d3:27:bb:7b:26:68:cc:68:94:62:9a:95:dd:ff:da:d9:75:d6:
         01:d3:1b:3a:3e:13:a8:ed:9f:ff:3c:37:51:09:9d:15:af:67:
         6f:da:c1:0a:24:06:3d:70:a1:79:ca:46:3d:68:b5:b0:a8:3b:
         a1:1d:0a:10:ad:cb:9c:4e:6f:08:53:7f:03:e2:9c:14:1c:b9:
         48:e7:ac:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org