Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C4B40044F330EC444DB5935846E78DA2D7579493.cer
File:                     C4B40044F330EC444DB5935846E78DA2D7579493.cer (raw, json)
Hash identifier:          940Pyu9mmM0RX6wO8mmBag6grEAiM16eottgVkXBHZk=
Subject key identifier:   C4:B4:00:44:F3:30:EC:44:4D:B5:93:58:46:E7:8D:A2:D7:57:94:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E4FFF0F61D0C64A293ACBE664061580ABC0A108
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/C4B40044F330EC444DB5935846E78DA2D7579493.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 19:43:16 +0000
Certificate not after:    Thu 03 Oct 2024 19:48:16 +0000
Subordinate resources:    AS: 265116
                          IP: 170.254.208.0/22
                          IP: 2804:3318::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4f:ff:0f:61:d0:c6:4a:29:3a:cb:e6:64:06:15:80:ab:c0:a1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 19:43:16 2023 GMT
            Not After : Oct  3 19:48:16 2024 GMT
        Subject: CN=C4B40044F330EC444DB5935846E78DA2D7579493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:01:3f:34:76:24:74:d3:8b:b0:e0:32:a3:
                    54:f2:13:23:7b:bd:9b:9e:f1:aa:32:77:85:f0:dd:
                    3a:f7:03:de:e5:ab:b1:8a:73:d6:8f:5e:64:12:f6:
                    f7:72:bb:5a:05:b9:9f:b7:9d:d7:66:13:51:ff:5a:
                    15:7d:72:4d:f7:1e:3a:9a:cd:24:9e:97:03:e7:c9:
                    7e:12:18:92:54:2f:1f:0a:3b:d4:29:1e:3f:51:24:
                    f0:ca:1f:71:1b:21:07:cb:73:bf:a7:94:37:bc:20:
                    a8:7e:82:79:dd:ca:02:81:3f:4d:6a:97:0f:43:a9:
                    da:a6:88:7f:a2:31:77:e0:46:8f:0f:e2:5d:a2:e0:
                    15:3c:c0:c3:46:f0:1c:01:b3:ad:65:e9:ac:1a:7d:
                    80:aa:f4:fc:47:82:66:1b:c2:15:48:85:9d:68:5e:
                    61:d2:e6:c8:11:ad:30:3c:e4:06:12:64:33:1a:c3:
                    c3:fd:83:9f:54:fd:7d:e5:64:3d:37:fd:3b:de:83:
                    c8:55:af:0b:ae:bc:61:f8:bc:59:19:84:7b:bd:0f:
                    42:dd:61:5b:1d:31:30:44:08:4f:5f:52:f3:26:d7:
                    b1:95:fb:31:4c:8f:61:a2:03:3c:75:28:8d:02:22:
                    99:74:ec:ed:6a:3a:0f:6a:a8:df:63:be:e6:91:fe:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:B4:00:44:F3:30:EC:44:4D:B5:93:58:46:E7:8D:A2:D7:57:94:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/C4B40044F330EC444DB5935846E78DA2D7579493.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.208.0/22
                IPv6:
                  2804:3318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265116

    Signature Algorithm: sha256WithRSAEncryption
         59:1b:00:64:99:d3:4f:30:47:8f:cf:ad:1c:6d:93:5a:26:92:
         87:2a:85:a9:b2:97:18:e0:1e:04:bc:07:35:3f:b2:04:5d:39:
         6b:38:1c:a7:ba:7c:7a:38:58:e2:03:57:61:57:02:5a:5c:ea:
         b7:6d:b5:56:4f:de:1a:46:d2:37:99:2f:4e:04:4a:63:ca:57:
         db:f5:48:2e:41:12:44:d2:87:95:df:90:12:c6:78:ff:2d:9a:
         e7:40:ed:41:2e:97:9b:26:f4:64:e2:94:e0:c0:3e:7c:e8:c5:
         e5:80:73:88:48:01:d2:6a:78:7d:17:33:66:36:39:e6:39:51:
         92:c3:3a:8a:d1:e6:18:44:3d:e1:ae:3a:23:71:81:cc:58:0b:
         a6:38:47:5c:3d:c7:d7:10:77:f9:b9:59:bb:71:e8:07:17:65:
         cb:28:32:b1:19:93:93:02:c7:b6:b1:67:10:de:13:49:d0:a9:
         f9:4c:04:ff:66:82:4e:4a:aa:47:ed:57:a0:a7:3c:23:64:67:
         3a:7b:ac:32:8a:71:44:68:a1:af:47:50:8e:16:7d:7b:3b:ba:
         5f:c4:fa:3b:e8:ea:33:3e:ff:fa:18:a0:d2:9b:d6:6c:b8:4b:
         eb:0d:66:0a:06:ae:c8:4a:78:2f:6c:3a:86:81:3c:44:d0:4c:
         6a:9c:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org