Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C4B88A7B913815E7F9917402C3CC7931DF14AEE7.cer
File:                     C4B88A7B913815E7F9917402C3CC7931DF14AEE7.cer (raw, json)
Hash identifier:          ss5SiOZO3BFpPIOIp2xx8IWR0hJ8ItyGFcnRbcVUtYY=
Subject key identifier:   C4:B8:8A:7B:91:38:15:E7:F9:91:74:02:C3:CC:79:31:DF:14:AE:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73FFCF8B706C63D6B21E07859044A628697AD939
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/C4B88A7B913815E7F9917402C3CC7931DF14AEE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 13:55:14 +0000
Certificate not after:    Thu 18 Apr 2024 14:00:14 +0000
Subordinate resources:    AS: 266371
                          IP: 170.80.76.0/22
                          IP: 2804:36c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ff:cf:8b:70:6c:63:d6:b2:1e:07:85:90:44:a6:28:69:7a:d9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 13:55:14 2023 GMT
            Not After : Apr 18 14:00:14 2024 GMT
        Subject: CN=C4B88A7B913815E7F9917402C3CC7931DF14AEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:b4:af:dd:57:73:7c:7b:20:17:37:ee:85:
                    0c:65:40:f1:cb:36:7f:80:1d:df:97:92:95:bb:42:
                    b5:f5:9f:91:87:23:b9:a7:58:50:b2:0f:36:62:c2:
                    48:c2:b9:29:44:7a:8f:3d:01:4b:03:99:9a:58:b1:
                    cd:3c:8a:25:b0:d2:c0:79:12:28:b8:35:33:9a:10:
                    4d:ca:73:f5:03:bb:a3:d0:55:c0:e9:1a:34:cd:fc:
                    7c:97:cb:ff:c3:a1:24:7d:83:e2:aa:97:39:7a:e1:
                    b4:f1:50:8c:2d:ff:71:f9:78:ad:2f:c3:33:1e:2e:
                    99:02:12:4f:a3:1f:b9:c2:97:25:f0:c2:05:53:5a:
                    a2:68:27:29:7b:8c:2b:44:f2:0c:a3:72:4b:60:83:
                    f9:f5:a0:16:37:74:a0:25:3c:7d:b0:d9:86:01:6b:
                    9b:c9:83:c2:f7:c1:51:cd:fe:60:e1:21:5c:16:05:
                    64:4b:c2:70:b5:7d:05:1d:74:e4:35:c7:0a:44:3d:
                    08:f6:f8:04:90:bc:60:b2:43:b1:5c:50:45:c9:4c:
                    c5:73:2a:d4:1f:7d:26:e1:42:7a:55:68:0c:12:87:
                    50:09:48:d6:78:b8:8d:3b:f0:5e:2d:c4:79:2f:ab:
                    5c:0f:df:5a:a9:47:5f:67:4d:92:e4:fd:43:e3:73:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:B8:8A:7B:91:38:15:E7:F9:91:74:02:C3:CC:79:31:DF:14:AE:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/C4B88A7B913815E7F9917402C3CC7931DF14AEE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.76.0/22
                IPv6:
                  2804:36c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266371

    Signature Algorithm: sha256WithRSAEncryption
         2f:a7:67:d2:9f:84:35:9f:ad:b0:ee:7a:29:14:a9:b6:7c:72:
         19:18:78:15:6f:e4:95:9a:6b:27:37:2b:0a:43:db:00:61:48:
         b4:e9:89:12:11:fa:8b:0e:3c:a5:c5:18:ce:25:ba:e5:a0:dc:
         d5:9b:68:e3:86:37:62:ab:88:69:ae:b5:96:62:eb:b5:fe:8f:
         a7:34:21:43:93:7d:d5:86:13:7d:fd:e5:15:bb:36:08:0f:b2:
         83:40:4d:64:76:79:6a:05:65:81:88:ef:5d:7f:6e:d7:b9:f7:
         f6:0d:54:fc:f5:ee:e5:e5:6c:93:3f:25:1f:1a:4a:c1:16:4b:
         9e:17:47:ce:4e:a9:5e:9f:d2:33:7d:d0:bf:43:5d:3f:2b:1b:
         28:21:4f:a6:fd:e1:4d:fd:0c:64:c4:75:62:73:d7:77:15:18:
         85:3b:2c:7a:95:44:39:57:47:6d:d0:24:51:9e:b2:47:12:53:
         6d:6f:04:3c:55:93:3a:e4:a4:71:2e:a0:3e:0f:38:6a:19:0b:
         8c:13:5c:9b:84:82:11:cc:b7:27:35:94:e1:0d:02:40:cc:76:
         9f:34:db:01:62:70:bb:d3:a3:88:42:7c:89:79:fa:c8:6c:e6:
         79:6e:f5:f9:a5:c1:79:52:5a:bf:e1:13:56:9e:f8:54:61:46:
         9a:19:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org