Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CACFB04CE41DC1652185A18E41D1795590416E50.cer
File:                     CACFB04CE41DC1652185A18E41D1795590416E50.cer (raw, json)
Hash identifier:          WWOG2fLQkXBWv3m3oCNrfVrXcN07A5KC+l8XcQo81Do=
Subject key identifier:   CA:CF:B0:4C:E4:1D:C1:65:21:85:A1:8E:41:D1:79:55:90:41:6E:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EEED0A1C6AAD8BB0762D3C6CEF672AC14949D52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/CACFB04CE41DC1652185A18E41D1795590416E50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 12:56:01 +0000
Certificate not after:    Wed 20 Mar 2024 13:01:01 +0000
Subordinate resources:    AS: 270684
                          IP: 45.228.12.0/22
                          IP: 200.187.104.0/22
                          IP: 2804:6fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ee:d0:a1:c6:aa:d8:bb:07:62:d3:c6:ce:f6:72:ac:14:94:9d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 12:56:01 2023 GMT
            Not After : Mar 20 13:01:01 2024 GMT
        Subject: CN=CACFB04CE41DC1652185A18E41D1795590416E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:01:e3:fe:90:59:d8:6e:c5:f6:e5:f8:b3:c9:
                    82:b8:5e:6f:b6:8f:07:6f:08:12:6d:0f:59:69:42:
                    f5:5e:24:d6:8b:09:c8:5d:dd:28:59:d8:72:cc:7d:
                    64:76:8c:1e:8f:97:96:74:33:d5:49:84:03:51:23:
                    a7:4e:6a:06:83:91:23:35:23:a2:17:4d:f8:f1:6a:
                    7a:ed:49:c5:d0:71:ab:43:05:cb:f8:30:6d:17:d8:
                    93:8b:0a:81:33:3e:84:02:91:0e:13:07:6d:2f:b7:
                    c5:9e:39:ca:65:07:21:8c:9e:42:db:34:02:4d:95:
                    5d:11:37:3f:a6:31:08:77:db:6c:b6:b8:51:cc:2e:
                    29:e2:0c:91:7a:85:1e:3f:e0:99:d5:2e:12:42:34:
                    15:a2:31:a5:70:e0:b4:ab:82:cd:75:1b:8f:cc:f9:
                    43:49:2b:56:62:05:0b:94:ee:a5:f1:a1:e4:38:26:
                    c5:b1:8c:68:4d:b6:45:f5:60:14:94:5d:6b:1c:04:
                    af:80:1e:0b:47:bf:b6:92:17:c8:2c:85:1b:8b:fe:
                    3c:87:b3:c7:5d:29:42:88:d5:05:d6:e2:29:57:cb:
                    d3:c8:f5:fc:27:3d:28:11:83:f5:b3:68:b3:55:75:
                    28:81:e9:c3:6f:6e:8e:90:80:8b:44:83:06:7c:46:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:CF:B0:4C:E4:1D:C1:65:21:85:A1:8E:41:D1:79:55:90:41:6E:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/CACFB04CE41DC1652185A18E41D1795590416E50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/22
                  200.187.104.0/22
                IPv6:
                  2804:6fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270684

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:05:be:ca:31:4b:b9:ec:7d:20:36:6d:66:51:e5:76:0e:
         51:e6:db:f0:a9:a2:79:12:05:3f:66:af:70:30:8d:82:0c:fc:
         b0:52:55:06:11:57:f7:88:7e:92:34:a9:71:25:f0:be:ea:60:
         79:a3:fb:32:49:e1:5e:41:11:d7:cb:62:5b:ac:3f:81:c0:bc:
         a8:ed:77:cf:68:b9:8b:37:bb:b8:a0:5a:34:43:76:fb:b0:22:
         14:6e:89:2a:95:e8:bf:68:06:15:a4:83:1c:9f:10:59:12:3f:
         3b:33:e7:cb:64:37:cc:38:85:6f:ec:87:57:83:43:cf:23:6d:
         c6:56:75:2b:dc:a0:da:e1:74:07:98:70:00:66:f6:81:b6:c0:
         06:63:c4:cd:a4:61:d3:05:26:01:53:d5:2d:16:11:c3:b5:ea:
         e8:d6:cc:e7:84:35:cf:5f:56:4a:67:f8:1a:14:8c:2b:80:1b:
         db:26:26:da:04:09:9c:6c:ec:4b:99:04:b8:bd:db:0f:de:6f:
         94:09:4f:b4:88:1f:87:79:49:48:d2:e2:a2:b0:5d:d1:4f:b7:
         c7:3b:c5:9f:19:f7:be:66:40:be:c0:eb:2d:21:f6:c0:b4:46:
         c5:46:2f:19:2f:02:c9:24:ac:b8:7a:55:f3:34:29:ad:01:ba:
         30:bd:5a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org