Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.cer
File:                     A4EE9086838FC8FB2411061B251E9E405C2B56DF.cer (raw, json)
Hash identifier:          gUs/X2NHgEgP6RqHvT0OxCTcYZYlm4PeAMHQQ8QfX2U=
Subject key identifier:   A4:EE:90:86:83:8F:C8:FB:24:11:06:1B:25:1E:9E:40:5C:2B:56:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A404477523D3983DA19CCA5FEF8C29D5AE35FA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Jul 2023 10:34:56 +0000
Certificate not after:    Sat 13 Jul 2024 10:39:56 +0000
Subordinate resources:    AS: 271152
                          IP: 179.42.140.0/22
                          IP: 2804:7710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:40:44:77:52:3d:39:83:da:19:cc:a5:fe:f8:c2:9d:5a:e3:5f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 15 10:34:56 2023 GMT
            Not After : Jul 13 10:39:56 2024 GMT
        Subject: CN=A4EE9086838FC8FB2411061B251E9E405C2B56DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:90:4a:b1:76:4d:dc:5f:e3:20:88:a3:72:
                    4e:ec:20:20:5a:e5:88:98:12:c3:b7:36:c0:03:2c:
                    ab:83:35:a8:1a:95:89:4c:9e:54:08:eb:9e:1a:57:
                    72:42:ea:9f:0a:a0:32:4e:9d:e3:d8:e5:db:4b:fe:
                    40:df:df:e0:58:1f:90:0b:fa:9b:70:6e:e6:6e:c4:
                    90:c2:2d:97:8a:7e:d9:89:0d:c1:39:54:25:95:1c:
                    68:61:2d:8f:18:f5:06:26:c8:97:4f:97:ae:b0:a4:
                    e6:50:ea:04:53:4f:11:fd:41:08:25:2f:cc:b0:1c:
                    8a:61:ee:7b:b4:a8:d6:e6:c1:98:c4:23:af:e0:ba:
                    30:4b:e4:86:b7:64:d1:3a:fa:4a:ef:9f:dc:57:0d:
                    c5:4d:4e:80:21:a4:ff:cf:33:92:19:42:3e:58:d3:
                    52:0b:ca:ec:49:55:4c:8b:5a:eb:8c:3a:11:a5:2e:
                    18:e0:08:3d:74:a8:ae:d0:bb:68:aa:a6:50:c5:1a:
                    01:1d:b2:05:40:7f:4e:e9:ae:8e:8d:df:1c:08:ab:
                    e9:75:fb:29:7c:20:3b:f8:dd:a8:44:61:3e:35:7d:
                    98:b7:72:b0:6b:33:e6:f5:08:5d:0e:84:21:a9:08:
                    b0:fd:b1:c3:5e:68:5d:9b:52:cd:88:d7:37:7d:70:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:EE:90:86:83:8F:C8:FB:24:11:06:1B:25:1E:9E:40:5C:2B:56:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.140.0/22
                IPv6:
                  2804:7710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271152

    Signature Algorithm: sha256WithRSAEncryption
         6f:27:68:6f:a4:3c:3a:25:c0:77:43:17:fe:bd:7b:69:b7:cf:
         9b:25:0c:77:fa:61:a3:e5:58:87:90:e7:c5:42:c1:64:67:4e:
         83:17:25:f3:c6:1c:79:f5:3a:73:a8:af:04:08:57:7a:be:9b:
         59:df:ba:5c:32:ea:40:6a:65:0c:ae:21:b2:10:28:8b:1b:27:
         ce:66:7e:65:1b:1d:e6:08:de:3a:22:6d:fd:17:96:b1:be:61:
         8d:8d:89:f6:50:20:ea:37:ed:4a:78:9b:2e:79:07:93:41:52:
         80:72:02:d2:8c:36:ed:4e:0e:4b:08:8b:60:6d:a1:f6:a3:6a:
         b1:10:ac:31:8a:6c:26:86:07:b5:23:e2:1e:5e:77:eb:69:e8:
         01:5a:4b:87:75:b1:ce:92:fb:12:ad:18:0c:f7:21:3c:74:14:
         53:04:78:c3:21:60:90:32:69:66:ff:12:62:b0:82:5e:90:fd:
         56:79:2c:92:e6:1e:cc:1b:58:3a:bf:d7:09:f5:b1:99:a5:d5:
         74:fd:7d:c2:83:f0:06:ce:6a:be:15:b6:09:fb:ed:78:21:e6:
         93:aa:e8:4c:66:93:49:70:ca:1d:8f:9b:ae:42:ea:6c:e5:e9:
         d0:c5:2a:c5:3b:dd:7e:d3:24:24:43:1d:63:87:5a:40:d0:b5:
         5c:da:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org