Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
File:                     C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer (raw, json)
Hash identifier:          g1JpkKTJTXuo46U3FePycON/Rinss07BHjNhqWm0cqo=
Subject key identifier:   C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3058B4299B357DD5AAE5E48BB150095E32BBEDA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 13:41:15 +0000
Certificate not after:    Mon 20 Jan 2025 13:46:15 +0000
Subordinate resources:    AS: 263143
                          IP: 191.242.196.0/22
                          IP: 2804:1764::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:58:b4:29:9b:35:7d:d5:aa:e5:e4:8b:b1:50:09:5e:32:bb:ed:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 22 13:41:15 2024 GMT
            Not After : Jan 20 13:46:15 2025 GMT
        Subject: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:14:8d:9e:f4:8a:f8:4e:1b:70:1d:4a:f0:
                    1e:ef:91:8c:2e:43:e2:f0:2a:d5:da:c1:9b:81:5a:
                    94:73:bf:f1:ec:34:51:91:c2:5a:e8:99:5c:be:f0:
                    8b:44:9a:7f:49:6d:ff:e0:e8:ab:3e:23:d2:bf:a6:
                    bd:3b:0a:1f:bf:85:11:38:98:8e:da:2c:66:ed:11:
                    30:8b:db:fa:2d:0d:99:42:c3:c3:06:e9:1f:d3:8e:
                    dc:f8:61:8c:da:83:1d:ed:c1:e7:16:49:29:94:9c:
                    ed:7d:16:3d:63:ec:ef:d7:8f:fd:3e:16:ad:6e:2e:
                    4e:e1:1a:fd:a1:81:2c:99:8b:0d:08:20:44:93:f0:
                    7d:01:57:8d:25:f9:02:bf:a1:80:b1:df:c4:81:fd:
                    f2:ac:fd:4e:11:8c:08:4d:03:28:58:ed:41:f8:c2:
                    38:92:d5:40:fe:da:fd:db:0f:1e:4b:2d:2e:d3:46:
                    19:09:f3:26:05:a0:c4:16:3b:62:fc:2c:d7:5f:86:
                    60:58:0d:32:eb:16:7e:17:11:20:94:48:eb:08:80:
                    15:fa:38:34:5b:9f:62:1b:f3:9d:2a:a8:0e:3a:d8:
                    ed:e1:21:dc:49:e2:27:28:da:1a:01:56:a5:c7:d1:
                    0b:bb:7e:8d:53:b2:b1:1e:28:4e:be:80:2f:38:8a:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/22
                IPv6:
                  2804:1764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263143

    Signature Algorithm: sha256WithRSAEncryption
         06:e6:d2:0b:f5:df:8e:65:02:19:85:85:a7:28:34:e3:dd:89:
         2b:b5:df:4d:89:ae:69:b5:c3:cc:3e:a8:47:14:73:87:ad:d4:
         7a:af:a6:fd:b4:3d:8c:c6:07:5f:c2:f1:7e:d3:90:d0:53:eb:
         66:48:57:b9:3d:2f:a5:59:22:a2:26:0a:21:84:fd:db:cc:8e:
         b2:6d:1e:d4:b8:48:bd:fd:58:26:7a:c5:c2:8e:b9:44:29:7a:
         a4:2e:96:62:42:fc:dc:81:55:2c:ad:fb:68:fe:35:72:65:02:
         31:5a:79:99:6f:d2:02:d4:0f:3d:51:87:53:30:b6:66:55:3d:
         24:be:26:c1:86:ca:09:83:a4:00:0b:06:15:f3:3f:13:51:26:
         8d:f1:64:0a:e5:e1:24:99:3c:c6:47:bc:8a:20:9e:ba:00:51:
         6b:f6:a3:ef:fa:41:8f:b6:a7:8f:6d:d8:cf:9a:f5:f5:87:09:
         31:02:a6:69:0d:50:d9:22:a3:60:b2:ee:a2:1e:d6:07:d3:c5:
         95:07:52:aa:c1:23:2c:38:04:aa:b1:ad:8e:9f:af:8a:22:46:
         d9:6a:89:16:2c:a8:a1:09:5f:27:5b:67:76:6d:60:ab:f7:ad:
         a6:ca:cf:af:66:67:ff:3d:83:bb:14:63:9d:e5:32:a0:e9:8b:
         f5:0b:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org