Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CFFBDF849A3939ACF2B32A17CC91C07A84DE0B6.cer
File:                     4CFFBDF849A3939ACF2B32A17CC91C07A84DE0B6.cer (raw, json)
Hash identifier:          VVp2d3UqIEpbpHT/iXNOW918d2LetF2sDAeMs6UYLYc=
Subject key identifier:   4C:FF:BD:F8:49:A3:93:9A:CF:2B:32:A1:7C:C9:1C:07:A8:4D:E0:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B8334B996B09C3A62E5666527DA52B189D12C9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/4CFFBDF849A3939ACF2B32A17CC91C07A84DE0B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 18:46:26 +0000
Certificate not after:    Tue 16 Apr 2024 18:51:26 +0000
Subordinate resources:    AS: 268914
                          IP: 45.174.4.0/22
                          IP: 2804:5c88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:83:34:b9:96:b0:9c:3a:62:e5:66:65:27:da:52:b1:89:d1:2c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 18:46:26 2023 GMT
            Not After : Apr 16 18:51:26 2024 GMT
        Subject: CN=4CFFBDF849A3939ACF2B32A17CC91C07A84DE0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:03:cc:03:b3:97:56:a4:29:a9:d3:ef:59:
                    58:52:2c:72:3d:13:c5:04:e8:87:0c:a2:e9:ae:24:
                    e2:a1:65:4e:b6:08:1c:cc:7e:5e:cc:71:7e:65:96:
                    64:28:4a:2b:c5:4f:4e:70:e2:22:cb:84:59:84:e8:
                    9b:7b:68:4e:11:7a:cb:77:91:10:ed:a8:60:ac:1d:
                    2d:37:89:00:28:d8:03:ae:bb:01:ac:fb:84:f7:aa:
                    bf:fe:63:4c:d7:80:86:19:a6:a6:5f:76:46:0b:67:
                    ab:10:25:d0:c6:07:b7:2d:e0:91:fd:20:66:a0:85:
                    6e:ad:35:be:cd:fd:8c:51:77:10:c0:ca:62:80:32:
                    9a:d0:1f:45:f5:7a:08:f4:58:40:2e:8f:a1:99:c0:
                    63:9f:27:ef:3f:c1:fc:9b:35:64:a2:da:de:bf:c5:
                    38:1d:24:af:23:de:5a:e9:46:a0:25:a0:5d:72:7e:
                    f1:d1:9e:56:d6:6e:dd:27:70:6d:30:75:49:5f:c9:
                    f5:d1:19:d6:48:6f:89:f5:0a:a9:94:95:be:53:3a:
                    8c:06:e2:c9:3e:5f:1b:0a:f7:2a:7f:97:88:1d:d8:
                    2c:cf:77:fb:7c:56:0e:c9:7d:82:47:68:e2:36:63:
                    dc:f7:20:02:cc:9e:ee:70:e9:46:ab:0b:52:8d:46:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:FF:BD:F8:49:A3:93:9A:CF:2B:32:A1:7C:C9:1C:07:A8:4D:E0:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/4CFFBDF849A3939ACF2B32A17CC91C07A84DE0B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/22
                IPv6:
                  2804:5c88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268914

    Signature Algorithm: sha256WithRSAEncryption
         1b:27:4a:ca:9b:92:f4:0b:01:9c:13:23:ee:fb:51:a4:32:8f:
         a9:99:ca:dd:9c:29:31:82:4e:03:98:da:fe:33:b7:ee:4c:3d:
         6a:0d:8e:33:4a:ed:b6:44:a7:20:7e:93:ad:0e:96:be:58:db:
         ed:7a:51:da:7d:ca:df:98:bd:68:b5:bb:a1:d9:02:bd:24:29:
         12:63:8e:e2:16:2c:c5:55:7d:fb:93:97:44:4c:86:28:cc:89:
         dd:e5:cf:1e:b7:61:26:59:18:6e:1b:2c:6f:3f:cf:14:f0:2d:
         a5:75:39:02:5d:d7:66:cb:df:74:b6:0a:c2:40:76:7e:6f:18:
         85:99:8c:cf:b3:46:b2:e4:6a:61:c3:f7:4b:bb:04:6e:a3:de:
         db:66:04:6e:76:c0:cd:d1:2c:5e:69:9a:44:ca:3e:8c:e0:c7:
         52:e1:ca:96:ab:64:e1:56:02:ec:d8:76:34:8f:47:21:ae:eb:
         15:93:83:b1:44:c1:7a:b2:fb:69:eb:ba:08:1a:d6:54:ff:90:
         4d:25:4a:a2:ef:49:fe:da:06:76:3a:50:43:03:46:59:55:d3:
         ca:f7:92:da:1d:97:fb:f2:9f:d7:b0:78:cb:87:c6:47:94:6d:
         9f:fb:2c:07:62:28:38:49:c5:c3:83:49:20:60:f9:d7:0c:3c:
         96:07:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org