Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
File:                     4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer (raw, json)
Hash identifier:          MCO7uljzfGmW87Mtk3ABNBYSDHUIEy8C0WUIQcP/lPk=
Subject key identifier:   4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67A198F5845FD0487EE430572CEC31DE93208D60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 Jan 2024 02:06:41 +0000
Certificate not after:    Sat 25 Jan 2025 02:11:41 +0000
Subordinate resources:    AS: 270375
                          IP: 190.89.156.0/22
                          IP: 2804:6b10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a1:98:f5:84:5f:d0:48:7e:e4:30:57:2c:ec:31:de:93:20:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 27 02:06:41 2024 GMT
            Not After : Jan 25 02:11:41 2025 GMT
        Subject: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:e1:30:43:9d:38:2a:37:91:b5:3b:b2:9c:
                    29:38:cc:81:ef:80:82:c7:3f:e2:ba:98:d8:8a:b1:
                    44:7e:b3:8b:f4:56:f1:0d:c0:ee:db:55:56:69:c5:
                    8e:2f:cc:38:58:27:47:02:ec:a2:50:f3:48:29:c0:
                    58:50:29:38:0a:4d:b4:3d:ff:ce:2d:af:d4:55:5e:
                    2f:49:23:75:37:67:be:80:c8:17:f1:ce:13:5c:6f:
                    4d:eb:66:94:1c:39:5f:12:c4:df:b3:d0:92:f4:66:
                    e0:da:92:9a:93:06:59:43:40:69:3a:30:fc:c3:24:
                    be:a9:17:47:37:c9:a3:a0:95:e3:e7:e4:31:9c:94:
                    f6:9e:e8:e2:01:9e:e8:b9:0b:9e:69:dc:07:aa:ea:
                    72:23:2e:6a:90:fb:a8:b7:42:9b:1e:92:28:4f:a8:
                    4d:80:05:ea:43:04:1d:e5:33:9c:eb:59:63:4b:6c:
                    a0:b1:15:dd:53:d3:06:47:1b:6c:e3:27:0d:15:3b:
                    65:93:37:00:19:88:f5:d9:96:43:f3:02:fd:1d:f2:
                    15:97:62:d6:42:0d:6a:b4:4f:43:40:ff:bf:9a:1a:
                    06:23:7b:04:22:33:c6:5a:6e:ac:3f:ac:34:00:ae:
                    7c:b0:9f:38:a2:76:8b:c8:9d:8a:b8:c8:84:14:77:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/22
                IPv6:
                  2804:6b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270375

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:73:f2:86:fe:fc:43:52:81:71:72:a9:1b:9f:64:55:7e:
         62:2a:89:0d:d6:1d:7d:8c:40:f4:3b:55:a1:7b:b9:30:74:32:
         5e:2e:68:93:48:80:4c:b1:72:99:32:0f:3c:53:8e:de:ba:85:
         78:be:0b:66:59:97:3f:b8:60:b3:13:a2:69:bf:15:87:df:46:
         30:34:5b:5c:9b:42:86:91:cc:e2:dc:7a:a9:bf:39:22:f1:ac:
         2f:3b:b2:2e:4a:67:d6:d1:71:1a:68:bc:78:62:67:14:4f:5f:
         43:c2:ed:93:b9:32:17:98:94:40:ee:1a:58:61:1b:8b:7f:87:
         b2:f6:f7:09:34:6b:0c:03:02:f2:df:02:5d:4d:dc:94:57:85:
         bd:52:7f:5e:e8:2c:a0:71:c8:86:50:d1:0f:47:6f:7d:9d:82:
         a7:0e:bb:d3:cb:1c:ac:5e:26:ad:7c:33:e1:8a:04:43:95:6d:
         e7:51:92:6f:de:1b:e5:f7:66:b0:ca:b8:41:3e:5e:66:3e:ea:
         71:86:51:67:9a:68:67:e9:e5:7c:76:62:a3:12:0e:ad:cf:98:
         92:ac:7c:9d:95:e1:f0:96:05:c2:9b:1f:af:eb:0f:b0:17:bb:
         2c:ad:94:40:79:56:44:83:e2:1b:68:b6:99:26:34:06:02:63:
         aa:19:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org