Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E.cer
File:                     C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E.cer (raw, json)
Hash identifier:          XdenBqbNEVxY45+Sbt0gBFfsCeYd6dOtsXSkigRhAFc=
Subject key identifier:   C0:DA:C4:1E:A5:64:8C:64:04:CF:F0:6E:09:D7:CA:F7:F2:43:F9:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CD74BB226A52C25C25DD21AAB08CA20779B1708
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/0/C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jul 2023 17:15:09 +0000
Certificate not after:    Mon 01 Jul 2024 17:20:09 +0000
Subordinate resources:    AS: 268751
                          IP: 45.172.60.0/22
                          IP: 2804:5a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d7:4b:b2:26:a5:2c:25:c2:5d:d2:1a:ab:08:ca:20:77:9b:17:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  3 17:15:09 2023 GMT
            Not After : Jul  1 17:20:09 2024 GMT
        Subject: CN=C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:3d:47:3b:64:af:fb:df:b7:4f:27:b0:a9:
                    dc:85:b3:8a:b8:bf:ea:76:00:3c:d9:ed:9f:52:28:
                    91:e1:36:37:8e:a3:c1:28:9f:37:3e:f9:49:23:9c:
                    7e:34:8b:72:55:b5:21:1b:9f:1f:f9:69:59:61:65:
                    b5:dc:aa:27:ca:a8:8c:33:90:21:34:17:37:8f:f9:
                    4e:3e:ac:2c:19:a1:14:4e:d6:35:ff:48:ea:86:6d:
                    9a:56:68:73:1a:c8:b2:af:27:3b:00:bc:87:f7:6a:
                    dc:b8:15:49:ca:f1:52:c3:e7:d6:1f:19:48:41:ac:
                    ab:b9:95:c1:57:23:fe:a9:a3:d0:47:5a:f5:a9:40:
                    2a:d3:1b:53:bf:32:6f:cd:d0:5d:38:ed:19:b7:72:
                    37:57:39:28:60:28:8d:5b:2a:56:54:a6:45:6a:39:
                    e7:0f:09:9a:37:06:2a:85:31:1d:a6:be:40:b9:4b:
                    40:32:f4:af:97:49:33:f2:b1:aa:59:cf:e1:a7:19:
                    07:ff:a2:47:bf:52:71:fd:b1:3d:6f:e2:99:d0:f0:
                    d6:31:43:71:a3:0e:d6:30:19:66:ba:9b:5d:b8:0c:
                    8f:ec:a7:fc:69:83:fa:30:10:22:49:c4:41:8e:f4:
                    bf:95:ac:16:8e:c1:7e:76:f4:77:af:65:9e:74:36:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:DA:C4:1E:A5:64:8C:64:04:CF:F0:6E:09:D7:CA:F7:F2:43:F9:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/0/C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.60.0/22
                IPv6:
                  2804:5a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268751

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:10:a1:b8:cb:43:ed:7b:05:19:d4:1b:05:e7:ab:94:5a:
         2b:c0:d0:41:3a:06:39:f5:c1:f5:39:77:2f:d9:6f:57:f8:f9:
         b3:5a:21:93:df:94:d3:97:b1:38:b7:d6:79:3f:9e:72:40:00:
         2f:b5:3c:63:1d:89:18:60:71:fa:10:c9:0d:5d:f9:4f:b0:04:
         0d:40:80:7f:75:97:8c:34:a3:d4:96:55:cd:5a:da:06:97:fc:
         1e:64:ac:60:fd:54:ed:25:1e:fd:29:b5:c3:71:98:e7:01:bc:
         5b:79:39:d5:56:97:f2:ee:6c:80:c9:08:35:54:4a:44:01:58:
         9e:dd:fe:c0:53:e4:db:cb:2f:a4:03:f0:c3:5e:20:6d:84:4a:
         66:e1:ec:8c:63:aa:16:b7:8a:cc:d8:9b:90:dd:ae:0e:6d:5f:
         ff:11:95:aa:1c:47:1f:49:15:7e:ea:de:fc:8e:2c:41:f5:97:
         49:ee:e0:37:44:f2:7c:cf:75:37:a0:fd:50:21:5f:00:13:9e:
         de:c2:3f:e4:03:44:25:da:80:1a:59:86:ec:9b:a2:af:ea:b4:
         8f:1d:dc:76:2b:55:80:ca:50:b2:a2:0c:32:90:22:66:e2:4d:
         c0:34:b1:08:40:87:24:92:ea:f6:78:47:16:5b:d4:ac:53:5b:
         58:4b:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org