Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
File:                     AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer (raw, json)
Hash identifier:          TIxDKO1jn1+V9Ksi14ARC0mVXzLhXLIXGvlwx9VPS3E=
Subject key identifier:   AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21FC0074B657F83504E6B441CFD34A326D541B59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 16:08:17 +0000
Certificate not after:    Mon 24 Jun 2024 16:13:17 +0000
Subordinate resources:    AS: 270275
                          IP: 200.124.88.0/22
                          IP: 2804:6984::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fc:00:74:b6:57:f8:35:04:e6:b4:41:cf:d3:4a:32:6d:54:1b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 16:08:17 2023 GMT
            Not After : Jun 24 16:13:17 2024 GMT
        Subject: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:12:d3:e8:65:17:f5:5f:02:89:99:d4:8a:20:
                    dc:5d:e5:2f:7a:63:4c:33:5e:da:ea:79:de:c3:ce:
                    cf:05:54:c3:b0:cc:c7:3f:08:66:dc:bd:0a:7c:24:
                    2d:ca:f7:57:32:da:70:b5:9b:cc:5a:11:93:c2:33:
                    97:73:56:29:cd:1e:c3:c8:b0:6f:fb:92:44:71:2c:
                    2c:60:4b:f2:f8:2f:57:7d:be:b4:69:25:c0:81:5a:
                    f4:2b:94:ac:c4:71:30:0f:75:63:3f:bc:1a:f0:fb:
                    bf:d3:d1:39:67:ce:85:82:11:65:02:63:f4:f0:c2:
                    0a:83:58:16:a9:f1:1b:f3:21:d9:04:67:be:18:d3:
                    73:24:9f:ae:fb:15:25:d2:e3:4d:4d:fb:06:80:df:
                    1d:e6:64:d7:3b:55:a0:ab:34:c9:a6:23:f8:ba:cf:
                    37:22:71:22:31:7f:44:f6:01:a8:ed:fc:cb:23:84:
                    77:2c:65:60:42:f1:4f:91:51:3b:ba:a5:54:de:51:
                    e0:16:ce:fe:9a:a0:a9:d1:cd:8b:b5:96:28:9e:30:
                    71:4c:6a:a6:29:cb:04:95:db:58:2c:4b:82:e6:e0:
                    7b:21:a7:88:b8:06:df:14:66:a0:f7:be:28:5c:41:
                    84:60:84:69:7c:9e:53:88:05:8d:29:43:62:cb:b1:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.88.0/22
                IPv6:
                  2804:6984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270275

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:00:47:fa:ca:fb:ee:c4:b2:31:91:83:30:15:1d:79:07:
         6b:06:05:92:ae:16:af:9b:f6:f2:aa:db:6b:f1:3c:2a:8b:c1:
         1e:02:e9:c4:5f:85:91:44:4b:08:4c:9a:fb:70:f3:a9:11:63:
         ae:22:58:56:ff:8d:5d:7b:de:45:dd:87:a4:81:e8:d6:ca:0c:
         56:8f:bf:6a:eb:e3:f2:1f:1d:6f:c9:db:c6:50:b7:6c:0c:47:
         ab:98:ae:73:ad:0e:4f:6c:dc:48:06:cc:2d:06:ee:d1:a9:c4:
         7c:dc:96:26:6e:02:dd:c4:21:1c:a3:5f:b6:b7:4b:fe:1d:18:
         65:68:2b:6a:1f:41:50:f3:18:2f:35:ef:d5:5a:88:22:b4:4a:
         5a:de:85:4e:67:f6:de:10:98:4a:43:fa:c2:f0:0b:72:4d:dc:
         e6:da:f4:17:8c:d2:be:b9:fc:0f:d7:4d:01:aa:81:f4:56:e6:
         99:a4:ce:c4:39:cc:65:3a:0e:61:83:f9:c1:81:d4:2b:ea:a7:
         2f:5b:c8:4c:59:2a:68:e8:5d:9a:b7:20:f3:1b:50:fa:4d:89:
         54:f4:07:9b:38:48:80:8b:5e:9d:a0:cd:db:95:16:85:74:7b:
         6d:30:a6:7c:34:0d:59:c7:9a:a3:dc:cd:e4:0a:b3:02:42:99:
         44:8e:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org