Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C401CC56A53B6BE293F35CDDD46093B73990392F.cer
File:                     C401CC56A53B6BE293F35CDDD46093B73990392F.cer (raw, json)
Hash identifier:          BWNgRzKDBe0h+1NEoAk9GRHAJ3gJZ0Baq2mX8rDdlI8=
Subject key identifier:   C4:01:CC:56:A5:3B:6B:E2:93:F3:5C:DD:D4:60:93:B7:39:90:39:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       366EEFAAD49870A01D56619727E14991917603C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/C401CC56A53B6BE293F35CDDD46093B73990392F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 Jun 2023 20:12:46 +0000
Certificate not after:    Sat 01 Jun 2024 20:17:46 +0000
Subordinate resources:    AS: 263267
                          IP: 179.108.24.0/21
                          IP: 2804:1618::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6e:ef:aa:d4:98:70:a0:1d:56:61:97:27:e1:49:91:91:76:03:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  3 20:12:46 2023 GMT
            Not After : Jun  1 20:17:46 2024 GMT
        Subject: CN=C401CC56A53B6BE293F35CDDD46093B73990392F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:0e:4a:db:61:17:95:e6:10:0e:07:dd:03:
                    1c:7b:22:80:2f:18:2d:5e:bb:a1:4d:93:da:62:e2:
                    62:2b:80:c2:70:8a:cd:3c:2c:bc:38:7b:33:5e:cd:
                    ec:be:2c:29:b7:ce:12:25:5a:64:b5:f0:ec:83:4b:
                    f0:05:94:89:2c:cb:b5:ae:e4:d7:61:68:48:0b:ef:
                    c8:5d:10:0b:8c:4b:dc:9d:97:bb:dd:7c:d2:26:06:
                    0d:77:a2:dc:14:f0:be:9e:74:b1:30:9d:77:78:c0:
                    a9:86:c3:62:3d:c9:5e:b5:a3:05:8a:29:2e:6a:d9:
                    2b:25:0f:81:53:e3:97:c1:e4:17:b2:a8:6d:52:a8:
                    1e:62:19:28:5d:03:c7:13:1d:36:5a:97:48:ee:f1:
                    1c:5b:6e:31:ee:49:75:43:40:e2:4c:94:88:fc:2a:
                    20:36:e2:d1:1e:88:41:4a:57:e8:16:be:05:25:c6:
                    0d:67:ef:2d:5e:44:b9:96:84:f1:eb:88:c7:e3:d9:
                    fd:f5:91:54:2c:26:57:06:60:22:f4:43:6f:8e:d2:
                    7a:0d:cb:1a:ed:f0:91:6a:5e:47:2d:93:a2:32:0e:
                    19:b7:ee:2f:4f:86:0f:a3:7c:e2:9b:30:ff:1c:79:
                    b1:7f:61:5e:6f:6e:54:b4:f0:ee:e7:d9:bc:d7:5e:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:01:CC:56:A5:3B:6B:E2:93:F3:5C:DD:D4:60:93:B7:39:90:39:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/C401CC56A53B6BE293F35CDDD46093B73990392F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.24.0/21
                IPv6:
                  2804:1618::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263267

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:c4:be:ae:99:34:9a:5d:54:63:95:f2:ad:50:2b:6e:e8:
         2c:66:dc:c2:0f:6c:43:47:2d:8e:fd:6a:67:e8:74:68:17:5c:
         ac:15:46:35:61:f5:2b:e9:b0:ce:ab:56:01:8d:33:56:a5:b4:
         23:d8:bb:76:c3:ac:76:fc:50:78:1e:86:14:eb:fc:91:64:c3:
         00:1a:77:4c:55:e0:e3:b2:68:82:48:25:dd:2f:2e:28:89:45:
         6c:2f:11:c4:92:d0:07:d0:d3:72:83:98:9b:05:7c:ba:28:4e:
         09:cb:66:e3:2c:25:ba:c4:8a:1c:6c:5f:3a:60:ce:97:d7:5c:
         43:c4:27:75:15:d4:6e:6a:41:6c:ba:3e:90:79:a9:75:22:7d:
         6e:8a:53:77:dd:aa:7c:6f:a9:e8:a5:ce:f8:d0:77:47:54:3b:
         6d:c0:1d:0e:38:65:ec:25:db:55:68:56:46:97:6a:91:00:46:
         0b:5c:aa:6b:ae:30:ca:51:1b:c2:00:a0:5f:c5:9a:89:34:90:
         4f:32:11:11:0a:51:15:53:67:69:4f:db:06:84:83:fb:2b:2e:
         24:a3:e3:2f:50:ca:4a:be:a8:3e:44:bc:64:46:72:dc:66:1e:
         a9:f9:0b:f4:ea:06:07:2e:77:31:c1:29:72:e1:93:46:36:e6:
         44:3b:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org