Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.cer
File:                     4EDD7C03982C823094F71366C91D29D176F1E0AF.cer (raw, json)
Hash identifier:          iPeqGJsIfeNmwduOV7I/DAPKvgy7zv2X5i8OzYbSUPo=
Subject key identifier:   4E:DD:7C:03:98:2C:82:30:94:F7:13:66:C9:1D:29:D1:76:F1:E0:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F3B092AF657C89B9C41056CED8B8C103CBA2371
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 15:54:33 +0000
Certificate not after:    Tue 31 Dec 2024 15:59:33 +0000
Subordinate resources:    AS: 61574 -- 61576
                          AS: 263842 -- 263844
                          IP: 138.185.228.0/22
                          IP: 2804:269c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3b:09:2a:f6:57:c8:9b:9c:41:05:6c:ed:8b:8c:10:3c:ba:23:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 15:54:33 2024 GMT
            Not After : Dec 31 15:59:33 2024 GMT
        Subject: CN=4EDD7C03982C823094F71366C91D29D176F1E0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:40:f4:d7:99:83:ac:14:fd:3f:46:55:9c:
                    75:53:5c:91:a3:59:68:e3:ae:cc:21:a2:dd:02:f2:
                    e8:cc:da:f2:af:d9:cc:fe:a1:32:46:9a:7b:87:96:
                    99:aa:52:cd:ca:37:72:b8:16:32:6d:89:5f:64:51:
                    ca:3a:ba:5a:ee:7e:9a:8a:b0:98:4b:8b:59:9e:f6:
                    a7:9d:7b:11:3e:df:0a:ee:dc:72:e9:db:d3:ef:f9:
                    05:88:5d:ba:cc:13:65:e6:58:15:4b:6b:6c:78:07:
                    80:72:be:a6:c9:11:0c:b6:74:bc:a5:84:f7:83:28:
                    91:44:b8:8e:b9:5f:55:95:bb:0a:a8:ac:1a:e3:6e:
                    61:fb:e7:75:21:73:36:b3:f0:f6:90:b1:6e:88:08:
                    06:1c:f5:75:7c:53:3e:7e:17:b6:ba:9c:e0:a0:f3:
                    b9:b0:f2:06:5b:91:70:e2:eb:bd:21:a6:c6:d6:ac:
                    60:21:ea:95:45:f2:a9:8f:02:86:3a:1c:2e:46:43:
                    c5:84:a9:ad:44:ee:ee:a8:5d:8a:ae:0f:62:5d:14:
                    25:c3:92:4c:b8:70:83:23:16:16:31:e6:db:3d:d8:
                    7b:23:da:6c:f9:3c:31:3b:28:ec:f5:e0:a7:d4:3f:
                    54:0d:1e:8e:36:af:e8:08:ea:f8:eb:66:5d:34:7e:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:DD:7C:03:98:2C:82:30:94:F7:13:66:C9:1D:29:D1:76:F1:E0:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.228.0/22
                IPv6:
                  2804:269c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61574-61576
                  263842-263844

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:76:50:70:e6:8e:63:b0:46:f6:48:63:99:38:2b:61:1b:
         f9:84:06:f8:04:fc:a6:a9:24:f8:2a:77:cb:82:95:9e:0c:74:
         48:e6:3a:ba:b6:44:e2:db:20:f0:ca:03:cf:cf:8f:b4:f0:00:
         55:22:e6:30:49:85:f0:ff:c1:d3:25:57:f7:6a:4a:ed:4e:62:
         b6:60:4f:6b:83:d4:3f:bb:0c:7c:08:31:13:04:43:e0:47:7b:
         5a:45:44:43:6f:db:99:f3:53:1c:51:7b:05:fb:30:67:df:48:
         fc:ea:80:6f:42:e7:f8:85:96:61:c0:dc:84:e6:d4:aa:3c:7d:
         b4:ce:0a:10:07:c0:01:63:93:c7:a3:c0:3c:9b:e2:fa:b1:26:
         db:40:3c:03:fb:78:59:9f:6e:a0:d8:46:63:6e:f9:e6:78:b9:
         40:ba:f8:7c:c5:02:3e:25:34:d1:07:86:4d:61:4b:f8:e2:ea:
         cb:63:8e:02:13:a5:05:f0:54:38:2f:fd:dc:d5:4c:8a:a8:ae:
         a8:03:4c:67:b3:e4:9d:91:84:0a:b2:86:45:85:41:bf:a9:20:
         48:10:52:31:3d:f9:41:6c:55:61:c5:27:f9:06:cf:1b:57:48:
         ba:7f:26:a1:91:26:94:72:c8:56:c1:62:89:fa:9b:7b:96:2f:
         3c:95:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org