Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.cer
File:                     A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.cer (raw, json)
Hash identifier:          Rptn4qGhjT/ZwzwEUlDAqW0b1+mcZ/HpQPvqroGac+U=
Subject key identifier:   A4:A2:14:7C:82:6A:A0:9B:EB:65:79:77:5A:08:DA:C3:E4:E9:DB:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DB474875F447B70A522B17BE0B721F1B2D555EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 13:06:13 +0000
Certificate not after:    Thu 16 Jan 2025 13:11:13 +0000
Subordinate resources:    AS: 52898
                          IP: 168.227.156.0/22
                          IP: 177.184.64.0/20
                          IP: 2804:a9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b4:74:87:5f:44:7b:70:a5:22:b1:7b:e0:b7:21:f1:b2:d5:55:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 13:06:13 2024 GMT
            Not After : Jan 16 13:11:13 2025 GMT
        Subject: CN=A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:0d:b9:f5:14:42:89:90:3f:e7:4c:c5:15:
                    2c:ed:88:9a:35:7b:c0:c1:b0:05:1f:47:1e:c3:9a:
                    02:b4:06:cb:f6:05:7e:61:00:4b:e2:70:5f:91:f2:
                    69:ec:d9:24:48:ad:3e:d7:21:be:fa:fc:e9:01:ed:
                    4a:ba:29:12:1c:5b:d3:b7:32:7e:fd:ca:81:74:85:
                    97:ba:77:7d:32:83:56:d3:2c:8d:30:dc:aa:b8:96:
                    97:b5:77:a3:9c:00:1f:18:74:a8:6a:31:93:c6:c0:
                    37:39:cf:ae:00:bc:03:9d:09:52:a0:b0:d4:71:db:
                    aa:6c:1b:bb:bf:3d:d7:a0:26:15:91:9e:3b:5e:84:
                    36:e8:ae:ee:bb:59:51:8b:3a:a5:50:f6:63:da:a6:
                    b5:16:ec:29:d2:e7:58:2e:cd:ef:f6:00:ec:2d:8c:
                    e8:18:11:d8:bb:de:7b:21:e2:d3:2b:ed:c3:78:b8:
                    1e:4a:7d:d3:a4:34:18:2b:d4:e6:64:5c:a0:98:48:
                    a7:d3:ad:fa:b6:fa:1b:74:98:cd:f0:d7:d1:48:dc:
                    a2:97:d7:19:5b:f9:6e:ad:e7:17:90:61:61:0f:a0:
                    51:f6:e6:77:0e:8b:9a:c4:56:ff:e7:f1:e4:4f:d6:
                    04:be:cd:e7:53:93:02:24:a6:fb:49:07:c4:88:9c:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:A2:14:7C:82:6A:A0:9B:EB:65:79:77:5A:08:DA:C3:E4:E9:DB:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22
                  177.184.64.0/20
                IPv6:
                  2804:a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52898

    Signature Algorithm: sha256WithRSAEncryption
         34:06:d8:82:c2:8d:5d:70:7d:e6:fd:5a:d8:09:b9:6a:06:3a:
         2f:24:bf:4b:fe:bd:a4:2b:18:af:ee:e1:54:5a:78:1d:8e:c3:
         bc:1d:12:05:65:c7:02:d1:26:cb:0b:f8:64:79:c0:86:82:1b:
         f5:49:82:b6:3b:96:c2:88:de:d2:54:6a:6f:41:8f:4f:a9:3e:
         de:14:70:3b:b8:6c:71:4a:b3:e7:ef:48:de:c2:c8:16:b9:44:
         76:8f:ad:41:43:2b:0c:66:12:88:bb:38:74:1d:68:53:7f:63:
         10:dd:d2:c9:92:25:55:b7:15:be:b5:be:1c:06:89:81:d9:c2:
         2a:b4:3a:7d:1e:e0:e0:ec:34:09:22:6a:ce:e9:95:ad:07:b6:
         a9:04:58:6d:86:3f:14:f6:fc:53:3b:b7:57:0b:0d:8d:2a:fe:
         83:85:da:7e:96:30:fd:a7:0e:6c:ec:d7:e9:1f:e7:00:41:a4:
         35:fd:e5:7e:cf:f9:e5:18:68:7d:8a:80:a3:fa:71:d4:78:1e:
         58:88:86:2c:a3:b3:27:d9:50:e9:34:7d:86:bc:77:34:5e:d7:
         fd:6f:28:4c:a0:fc:ef:fa:0d:72:f8:55:6a:79:09:d5:e8:2e:
         f0:2a:6c:eb:f5:66:3e:c4:bd:7a:dc:d8:c6:58:dc:26:b3:25:
         ca:6f:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org