Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C4D18C0CFAA9F7C925F175852C21075E5D6BC5CE.cer
File:                     C4D18C0CFAA9F7C925F175852C21075E5D6BC5CE.cer (raw, json)
Hash identifier:          /xLtqZUqVZMtMdZDWrT/D37pE74VtoalT3tUOLkoQ0I=
Subject key identifier:   C4:D1:8C:0C:FA:A9:F7:C9:25:F1:75:85:2C:21:07:5E:5D:6B:C5:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BD6F8BC406926BDF8DF00EF94F287001070EE0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/C4D18C0CFAA9F7C925F175852C21075E5D6BC5CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Aug 2022 13:05:17 +0000
Certificate not after:    Wed 16 Aug 2023 13:10:17 +0000
Subordinate resources:    AS: 269548
                          IP: 45.189.16.0/22
                          IP: 2804:6650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d6:f8:bc:40:69:26:bd:f8:df:00:ef:94:f2:87:00:10:70:ee:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 13:05:17 2022 GMT
            Not After : Aug 16 13:10:17 2023 GMT
        Subject: CN=C4D18C0CFAA9F7C925F175852C21075E5D6BC5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e2:84:f1:40:d5:be:fa:d0:4c:8c:b6:fe:4b:
                    a3:a2:3f:b9:1e:6a:fb:0b:06:ed:eb:e5:77:de:b0:
                    4d:d5:ee:6a:33:3e:4f:df:03:77:32:96:da:62:33:
                    ed:50:5f:6e:c4:96:03:26:7e:66:ab:7c:9e:2c:1d:
                    9b:0b:b8:4b:9a:28:04:9f:6a:f0:a4:ca:b5:09:f8:
                    63:07:bb:0c:3b:f9:b5:9c:f0:92:c1:5b:b1:e3:d0:
                    8b:d8:a5:37:0d:a0:a2:24:a3:fd:e8:df:35:89:ac:
                    f3:05:4b:07:55:f2:c5:e7:1a:9b:57:26:60:f2:48:
                    99:70:3f:f4:95:a3:a9:14:54:77:e2:5e:26:ce:bc:
                    31:0d:03:c8:a1:81:5b:3c:aa:c9:10:56:ac:f7:a4:
                    1b:b2:d9:e9:dc:80:66:b3:79:df:a0:44:c5:ed:c9:
                    d0:0c:43:d9:23:74:89:ba:a4:3c:17:4f:1a:bc:74:
                    5e:bc:cf:05:c2:28:42:6d:a6:8d:01:8f:3a:56:c3:
                    b7:c7:42:a2:7f:3d:b7:7c:70:67:69:8b:18:88:27:
                    aa:36:10:b6:05:3b:24:d4:4b:bf:8a:f4:8c:26:e8:
                    f4:c3:69:ed:ff:b1:08:62:ae:ae:4d:f7:43:14:51:
                    79:c0:03:2d:6b:78:20:df:f7:db:1d:e9:e6:74:e9:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:D1:8C:0C:FA:A9:F7:C9:25:F1:75:85:2C:21:07:5E:5D:6B:C5:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/C4D18C0CFAA9F7C925F175852C21075E5D6BC5CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.16.0/22
                IPv6:
                  2804:6650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269548

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:c4:0b:8e:9b:b4:8c:bf:93:7c:af:cf:81:15:92:5b:38:
         95:7f:a6:fe:b2:5b:07:a0:b2:19:2a:f1:7e:04:b5:19:81:a7:
         14:cb:19:6f:28:dc:5d:64:06:5f:43:bf:7d:a6:ea:ff:75:ad:
         b5:f1:0c:36:51:52:18:8a:2c:d5:25:f6:6a:d3:42:d1:42:43:
         a3:fd:7d:3c:e1:59:a6:05:f1:8f:22:f5:bf:27:e4:25:96:23:
         3d:2c:8b:22:29:e4:7d:d9:23:e2:8d:77:76:6b:30:c7:58:16:
         e7:fc:62:1b:75:3d:e6:93:43:a6:0d:8a:0f:76:8e:b1:bd:7b:
         49:fd:f5:56:89:68:70:c1:fb:9d:e4:ad:1d:64:95:f6:6d:ff:
         bd:cd:c8:0e:52:c8:5e:d2:51:2d:e1:bf:16:0c:29:0e:53:64:
         42:1a:ef:a3:3a:e2:92:29:8c:3a:ff:9c:b6:6a:a7:97:53:5f:
         2e:81:30:18:9e:0a:ab:9e:00:73:1d:17:3d:3e:01:7d:74:85:
         64:26:90:e1:82:36:58:c4:3f:24:ec:8d:ac:ee:69:16:a7:50:
         bc:3b:67:9f:b2:1e:70:62:e3:a3:18:f0:a8:46:f4:1f:1d:bd:
         86:ac:97:ad:8b:c5:64:fe:d2:05:02:4f:b5:76:f8:78:e4:49:
         45:a2:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org