Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946.cer
File:                     A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946.cer (raw, json)
Hash identifier:          /c0/HocQkcBgyStXZGxIqIhTNQSJrkdkqnzT9AkHOyU=
Subject key identifier:   A4:10:1A:29:77:EF:B1:D3:AC:F6:2F:74:2D:C6:E9:E8:C5:7B:A9:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CD5DD0ECDA93DB49F31D06C667771A2EF0FE0FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 16:57:39 +0000
Certificate not after:    Tue 14 Jan 2025 17:02:39 +0000
Subordinate resources:    AS: 267528
                          IP: 201.182.176.0/22
                          IP: 2804:42cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d5:dd:0e:cd:a9:3d:b4:9f:31:d0:6c:66:77:71:a2:ef:0f:e0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 16:57:39 2024 GMT
            Not After : Jan 14 17:02:39 2025 GMT
        Subject: CN=A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:16:4a:1d:7f:96:7f:cb:ed:e1:f3:b1:de:
                    3b:7a:60:8c:e0:19:be:ae:e6:bd:58:a8:e0:3d:34:
                    0f:27:d2:2c:54:3a:41:82:6b:63:60:75:bb:8b:64:
                    16:a7:bb:f7:22:3a:a7:c3:ef:24:b2:31:03:ac:4c:
                    c2:a1:dd:5f:6e:d1:bc:8c:2a:27:66:20:40:98:e3:
                    e0:cf:9b:b2:40:44:d0:c9:54:6a:34:18:67:e9:7a:
                    33:38:21:99:0c:15:9e:ad:a5:c6:cb:2c:8f:a1:db:
                    4c:07:59:c7:18:c3:65:46:82:31:a4:fc:40:da:34:
                    0a:02:87:cb:fe:d1:18:aa:70:4d:e0:23:8d:d1:4f:
                    c2:7e:94:8d:3e:03:1d:c5:b2:09:f2:84:a6:e5:07:
                    9a:ee:14:ae:ff:b0:d3:b4:e0:69:1e:96:e9:0e:6e:
                    09:c2:e6:33:3a:d3:a5:e3:6b:5a:11:b3:b4:05:a2:
                    dc:e5:b7:66:4e:62:83:b4:1c:86:c0:61:ba:4f:08:
                    42:fb:59:df:6e:17:4a:13:c6:d2:4d:5d:1d:36:ac:
                    6f:cf:1f:a3:72:34:c9:18:8a:b2:07:4a:cf:ed:8e:
                    58:37:7b:77:79:82:0f:1c:e2:93:10:97:90:9e:c1:
                    d0:9e:87:b7:3c:01:74:6d:8b:2e:f7:85:31:03:71:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:10:1A:29:77:EF:B1:D3:AC:F6:2F:74:2D:C6:E9:E8:C5:7B:A9:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/A4101A2977EFB1D3ACF62F742DC6E9E8C57BA946.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.176.0/22
                IPv6:
                  2804:42cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267528

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:73:63:7a:8c:8a:a5:7b:47:7c:4b:0c:1c:e4:aa:22:37:
         cb:a7:14:69:83:d8:0f:da:3a:73:6e:60:99:df:b3:58:7b:ca:
         4a:46:31:c2:eb:74:48:0d:d8:11:d4:c9:41:ca:9e:72:54:43:
         ab:4a:fb:dd:f4:be:5f:99:19:e0:98:27:83:d4:cd:3c:17:e8:
         e7:f9:b5:63:9b:bc:f8:a7:ba:be:bb:23:25:97:61:c5:f4:c8:
         c6:e6:cd:53:af:84:38:93:d4:d9:db:5e:23:e7:40:d0:62:bf:
         eb:3c:77:44:1e:d0:14:9a:f0:fc:37:b0:1b:15:6d:d3:77:25:
         31:cc:a2:e7:6c:97:19:f3:0d:d9:3c:de:9d:03:5f:34:8f:33:
         57:4b:55:ff:03:f9:3e:18:9d:09:cd:46:98:17:97:2d:08:5e:
         c6:97:d5:f2:62:d5:ab:48:d0:c8:50:07:4c:53:b5:a1:e3:bb:
         00:b7:2a:3f:67:46:8a:04:15:99:6e:30:ec:af:47:40:c1:3a:
         9c:e8:08:7e:4d:8e:de:20:c4:31:84:df:40:70:42:5d:f5:83:
         4d:a3:68:59:e1:32:cb:5c:1b:fe:1c:c3:a1:a1:17:70:8c:15:
         f8:af:31:19:d7:94:d6:d9:b0:1b:79:bf:64:bd:a2:5c:cf:4c:
         3d:b5:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org