Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.cer
File:                     4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.cer (raw, json)
Hash identifier:          IFTV9d2ul9cE6079Q45Y+EFyCj5t3rVBYhgAvoWKBzk=
Subject key identifier:   4D:C5:06:9A:42:7A:CA:65:A4:BB:B5:F9:F9:0E:FB:8D:9C:34:72:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27E29AB761FECD302D6F45CFE2D792561B4F3970
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Feb 2024 06:09:37 +0000
Certificate not after:    Sun 16 Feb 2025 06:14:37 +0000
Subordinate resources:    AS: 269441
                          IP: 45.185.36.0/22
                          IP: 2804:64ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e2:9a:b7:61:fe:cd:30:2d:6f:45:cf:e2:d7:92:56:1b:4f:39:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 06:09:37 2024 GMT
            Not After : Feb 16 06:14:37 2025 GMT
        Subject: CN=4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:e3:1d:05:f8:68:e0:2c:df:71:4a:c0:22:
                    f4:ad:d4:c6:86:a8:22:c1:cc:0d:19:77:59:43:9c:
                    9a:30:3e:e9:de:97:7f:d9:18:89:5c:8e:52:d6:c2:
                    e0:1f:69:a8:06:80:f3:99:ec:80:63:18:d4:19:21:
                    66:a2:db:8b:b0:8b:1b:2e:19:d6:b7:65:5e:24:bb:
                    d8:c6:f8:ad:9b:e1:7e:58:d7:fb:fc:cb:88:4c:d4:
                    0e:b8:56:30:d3:83:41:0e:86:70:d6:67:dd:c1:a0:
                    40:7a:74:7b:e9:ef:e1:69:65:c7:83:e3:ef:ff:41:
                    f9:1f:3d:db:7f:cb:27:96:cb:30:11:2b:04:79:7c:
                    6d:0b:24:6d:36:59:f5:8f:dc:3b:f0:8f:4f:cf:a8:
                    82:b7:47:0a:e9:f8:a4:e5:88:45:a4:2e:31:c4:1d:
                    c0:1e:1a:df:a6:c7:dd:8a:9c:ba:cc:d7:ef:e2:33:
                    f1:ee:2f:43:0b:81:07:7e:1d:2b:58:4f:4c:a6:85:
                    81:f5:13:b0:e3:e5:7c:98:78:83:47:33:22:17:af:
                    b3:11:69:64:7b:fb:43:13:f0:19:55:23:26:91:7d:
                    f4:89:24:4a:34:c3:35:3b:6d:5a:2c:53:83:ed:34:
                    a3:84:0d:c2:53:16:ad:b1:b5:9d:7b:30:bb:e4:e0:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:C5:06:9A:42:7A:CA:65:A4:BB:B5:F9:F9:0E:FB:8D:9C:34:72:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.36.0/22
                IPv6:
                  2804:64ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269441

    Signature Algorithm: sha256WithRSAEncryption
         a5:b1:91:f5:9a:23:a6:84:c1:c7:8f:12:e9:a6:43:58:f4:0b:
         c7:18:dc:db:ee:d5:ae:88:14:77:29:64:15:e1:4d:f5:df:5f:
         3e:ec:a7:00:31:3b:c7:77:f4:8a:b2:c9:6d:ab:c4:da:9e:b1:
         0e:85:42:e4:db:8d:da:6c:5a:7d:fa:2b:7c:38:c0:b0:33:5e:
         47:ef:37:03:cd:cb:a0:4b:7b:77:27:ca:72:bf:4f:6e:d6:99:
         da:d3:2c:7f:ce:87:32:a8:f3:1e:62:6b:97:d2:af:dc:9c:80:
         24:99:20:29:a2:fe:2f:86:e7:a7:05:18:82:53:ff:ab:b4:4b:
         2b:f3:f8:e4:d5:13:43:ec:a6:0e:d7:da:bb:45:66:89:eb:14:
         ba:bc:03:c6:71:ab:69:fd:35:63:44:c9:02:cf:94:14:35:ae:
         c2:76:62:00:66:bc:bf:fa:fd:9a:10:d6:40:84:de:c1:a6:55:
         a7:f8:aa:60:66:24:75:be:2e:7f:3c:1e:94:a4:de:bd:b8:21:
         34:c3:4c:1c:24:98:0f:7d:b7:2a:96:5b:80:e1:a6:87:af:36:
         00:70:d3:71:06:a2:f5:be:a9:41:67:33:92:7a:ab:70:09:be:
         8f:a2:0c:42:bb:9f:a3:5b:58:65:85:f3:2f:c0:cd:e8:97:e8:
         d9:0c:7a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org