Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.cer
File:                     4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.cer (raw, json)
Hash identifier:          AVFOJ14T0syRA/EOH1tChcEqOLBGbA3nXqHwauk6JNY=
Subject key identifier:   4D:2B:9B:62:6E:48:13:E1:FF:30:8E:EC:A3:0C:10:E7:D9:2C:5E:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A9039F8A5FD6852C162826AF646AE889DD55860
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Jun 2023 20:10:06 +0000
Certificate not after:    Fri 07 Jun 2024 20:15:06 +0000
Subordinate resources:    AS: 267293
                          IP: 45.233.44.0/22
                          IP: 2804:4b40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:90:39:f8:a5:fd:68:52:c1:62:82:6a:f6:46:ae:88:9d:d5:58:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  9 20:10:06 2023 GMT
            Not After : Jun  7 20:15:06 2024 GMT
        Subject: CN=4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:b2:f3:2f:d4:a5:f4:86:a7:94:c9:77:2a:
                    86:13:05:74:c3:f0:5d:b0:a1:8b:8e:f0:8a:62:ad:
                    15:61:4b:e4:dd:62:69:98:f9:9d:ee:0e:01:d1:7a:
                    d2:8e:f8:c7:1a:e5:fc:16:00:e2:de:66:81:9d:bc:
                    3e:f0:f8:97:ab:08:de:c5:e6:8b:9c:7a:6e:b6:f4:
                    67:20:f5:4e:08:24:3a:ae:0c:42:34:3e:a7:ad:dd:
                    27:56:f3:1e:a0:d1:5b:53:90:73:28:09:5e:aa:e0:
                    04:c0:1c:60:c3:6a:1e:8b:62:9d:c4:fe:82:06:1d:
                    01:74:97:69:de:7a:51:7b:2e:72:56:30:a6:57:e5:
                    4c:4d:29:9e:b4:f0:e1:09:40:0a:13:4b:d3:3f:d6:
                    87:02:78:bf:7d:24:85:58:91:b7:4c:d3:19:58:eb:
                    a4:14:ac:0a:09:60:0d:b8:26:17:73:2a:20:40:6a:
                    28:26:6e:6a:7f:62:2f:a7:90:8c:3d:3c:6e:1e:32:
                    08:e6:ec:a3:02:a2:fe:6e:4a:b7:2a:7f:ae:2e:81:
                    c1:71:d8:96:b6:89:41:b1:10:ae:83:f8:a4:4a:58:
                    7d:ef:05:d5:2f:af:9c:26:6f:e6:d2:04:01:7d:e9:
                    3d:02:b6:f2:cb:2a:1e:77:29:11:6a:b1:59:1e:80:
                    22:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:2B:9B:62:6E:48:13:E1:FF:30:8E:EC:A3:0C:10:E7:D9:2C:5E:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.44.0/22
                IPv6:
                  2804:4b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267293

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:6b:49:2d:f9:5a:9f:9b:37:5c:00:43:c2:58:55:50:78:
         13:7c:4e:56:03:0e:46:94:b8:05:6d:24:7c:ea:4e:08:a7:00:
         3c:e8:1c:71:b5:4b:37:7e:5d:d2:f5:2c:d1:ae:ed:0a:cf:ce:
         03:c5:d1:9f:9e:a3:db:25:5e:be:d8:24:9c:bb:d1:98:cb:3d:
         fe:0b:bb:38:2f:0c:4f:44:be:47:29:0c:60:c6:c3:61:09:a0:
         bb:9a:b5:86:e1:4c:3f:26:62:02:32:9c:e2:8e:1c:f2:d6:bb:
         0c:90:eb:41:96:92:57:a5:84:26:99:ac:96:a8:ba:45:3c:58:
         8e:6f:01:cd:0d:e9:a7:2e:97:a1:c2:66:48:18:07:81:80:8c:
         18:1d:62:69:05:6e:dd:29:18:cd:d1:e8:45:79:48:8e:e2:ba:
         3f:04:36:1f:2f:53:e4:d2:42:25:5d:c6:17:84:db:ab:9e:ab:
         21:2a:80:91:17:d4:93:9e:43:be:e0:f3:00:be:cd:fd:f3:22:
         cf:02:31:ee:b9:e2:2d:38:5f:8b:c4:da:8c:2f:46:dc:02:9d:
         25:12:93:3c:5a:0f:4d:9a:64:f5:08:aa:a4:d9:8b:0a:ae:e6:
         8f:5b:e3:fd:62:e2:9b:0a:f3:8f:00:49:f4:f4:44:e4:5e:66:
         94:cd:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org