Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer
File:                     C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer (raw, json)
Hash identifier:          KDOQHgCW9r6HL2JYK5WkHsdai2U9+o8SDmVaVvEpk4s=
Subject key identifier:   C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74CEBB87B3536F8B54534FC8DF3DE5BB26661F0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 11:35:11 +0000
Certificate not after:    Tue 16 Jul 2024 11:40:11 +0000
Subordinate resources:    AS: 269319
                          IP: 45.183.48.0/22
                          IP: 2804:62cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ce:bb:87:b3:53:6f:8b:54:53:4f:c8:df:3d:e5:bb:26:66:1f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 18 11:35:11 2023 GMT
            Not After : Jul 16 11:40:11 2024 GMT
        Subject: CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:bc:8b:67:10:4b:04:3a:6d:42:d3:7d:ac:
                    f1:b3:71:5a:65:0a:e5:56:6b:4b:45:15:6d:b0:50:
                    bd:c3:c7:2b:34:0c:e4:a8:12:6f:54:23:d8:6d:d1:
                    84:17:2d:67:37:39:68:32:64:a5:f0:08:2f:58:e9:
                    4a:99:f9:0a:7f:85:4a:d4:b4:fb:ed:4a:01:a6:34:
                    2c:14:95:b3:a1:27:72:3c:89:e9:d6:97:79:4b:d9:
                    9c:b9:7b:9d:62:63:3b:dc:43:5e:69:1b:0c:0f:52:
                    66:c0:d7:2a:b0:87:e2:e1:da:bb:1f:6d:80:86:57:
                    61:b9:e3:a4:1e:1f:53:7b:79:d6:43:f2:4b:12:8d:
                    bb:b9:8e:ae:a3:77:81:d5:b3:3e:1c:97:bf:f6:e9:
                    8b:15:3c:9e:85:35:e7:1e:35:53:3f:3d:21:ae:c3:
                    7e:5f:52:d0:d6:3e:bd:fd:90:e6:cc:f3:21:68:7b:
                    15:3c:43:c2:5e:8b:a7:3a:78:96:5d:c9:a0:92:b7:
                    52:ca:34:5d:bc:92:3d:64:b5:fe:f3:53:7a:bb:06:
                    16:3e:9b:e8:6e:bc:c0:e9:b5:61:39:fe:3b:d2:7a:
                    33:65:5e:70:8a:03:ee:bb:8e:d5:9d:e1:d6:2d:3a:
                    e3:cc:e2:c5:4b:da:47:f8:0f:db:fb:42:46:68:bd:
                    ec:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.48.0/22
                IPv6:
                  2804:62cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269319

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:11:97:da:58:a5:7f:cd:5d:4d:83:ae:31:6d:1c:39:3c:
         e9:40:33:d1:85:8c:f9:70:67:41:b3:17:8f:67:91:dd:38:86:
         14:e2:51:33:44:f7:51:27:83:73:0f:1e:96:ec:73:79:cd:dc:
         c2:3f:fc:bc:83:ca:d1:fe:6c:5f:e8:23:01:54:2c:2e:f4:43:
         83:6f:fe:8e:5d:5b:ac:7b:43:3e:1e:e9:10:b1:60:7d:ea:6d:
         07:c0:44:f3:a6:ba:bb:41:72:9c:bf:07:17:61:93:42:a7:9e:
         f4:39:aa:45:3e:81:e8:48:d8:00:06:bc:77:ae:59:88:e1:b7:
         5d:e7:ca:07:a3:da:7d:e8:c1:e0:dd:ac:91:8b:c6:1c:83:8a:
         0a:c4:2d:f3:db:e0:22:d0:b7:75:76:cc:e7:31:ae:33:e5:c3:
         01:d5:a0:53:11:68:61:81:70:65:c4:9b:a3:c8:ba:b3:9f:ca:
         51:8e:4c:b7:6a:d3:6b:b3:87:c5:e6:86:15:83:2b:1f:da:32:
         dd:2a:c7:23:2c:14:ef:23:8a:1a:7c:5e:69:13:d4:29:1e:b4:
         a1:24:de:e4:a0:65:12:a6:c9:53:d7:1d:a8:05:3f:2e:e8:1b:
         b1:b8:ea:77:81:5f:8e:e5:c1:6c:eb:67:45:c1:f0:c6:da:28:
         69:1d:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org