Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer
File:                     CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer (raw, json)
Hash identifier:          plHg+8eueiD7vSD0bau6kyoPOIDtXDPhFbqQi0dHcfI=
Subject key identifier:   CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F4956B8CD4993011F3D442CCBE89327CA65D2E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Apr 2024 18:01:01 +0000
Certificate not after:    Tue 08 Apr 2025 18:06:01 +0000
Subordinate resources:    AS: 264402
                          IP: 131.161.68.0/22
                          IP: 2804:1dec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:49:56:b8:cd:49:93:01:1f:3d:44:2c:cb:e8:93:27:ca:65:d2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  9 18:01:01 2024 GMT
            Not After : Apr  8 18:06:01 2025 GMT
        Subject: CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:4a:88:ff:1b:fa:92:5b:73:bc:bc:7c:55:
                    16:ba:19:e6:42:84:e0:f9:ea:19:61:76:72:40:f7:
                    ca:3c:6d:2d:69:1c:7f:15:26:34:a1:08:f6:6d:40:
                    70:92:49:c0:0b:6a:f5:4c:95:90:31:94:99:34:57:
                    73:95:85:d2:ab:92:83:d2:d8:95:72:61:09:f8:17:
                    af:6c:e9:0f:56:39:c2:cb:fe:61:8b:26:50:a4:f6:
                    ec:6e:0b:1f:d2:7c:31:51:6e:9e:22:0c:17:20:3c:
                    0b:4b:01:54:6f:d3:a8:b5:ad:82:7a:0e:c7:38:04:
                    5e:17:2a:e6:9c:f4:77:f0:91:e0:b1:f1:08:9c:5c:
                    75:07:a2:b8:69:29:d7:5a:41:b6:35:10:1c:1c:f8:
                    e3:8e:4b:40:fb:b4:dc:69:e1:08:d0:12:60:5f:79:
                    a3:ad:dd:93:20:8f:45:32:25:c5:b0:97:bd:68:40:
                    17:97:e2:de:e5:98:df:9a:71:43:b4:17:9c:63:14:
                    8f:aa:97:cf:28:24:09:12:77:26:8f:36:0c:d7:cc:
                    0b:7b:fe:d0:77:ec:48:28:00:1e:cc:1f:06:b5:58:
                    17:0b:ad:93:61:d0:43:21:97:02:7b:57:42:24:14:
                    72:14:d1:0f:6c:55:cc:4f:df:3f:35:00:40:71:9e:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.68.0/22
                IPv6:
                  2804:1dec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264402

    Signature Algorithm: sha256WithRSAEncryption
         87:59:22:b9:12:ec:96:c7:92:da:4e:c5:0d:dd:60:2e:1b:8b:
         df:4e:9a:46:1a:81:38:c6:d7:32:ac:03:41:4a:30:bc:2d:0f:
         cf:28:3f:7a:28:66:c1:7b:7b:bb:4d:2c:fc:65:79:ab:fc:13:
         df:85:9e:9d:5c:06:75:86:36:9d:47:88:78:cb:12:b4:d9:f4:
         32:26:93:c8:2a:60:6d:7f:f4:03:9e:85:74:9a:79:4e:5e:b0:
         0b:b0:3c:32:ae:fd:b6:66:b6:07:c0:2c:ef:26:91:90:9c:f5:
         54:5b:d8:2d:9e:3e:53:70:65:b7:c6:eb:a8:62:ad:20:31:f7:
         c9:3b:21:a1:7c:7b:7c:72:e7:fd:c0:e1:b4:09:20:82:32:6a:
         ba:9c:35:90:bf:6b:16:66:a5:4d:a3:6c:bf:e7:7b:32:14:e2:
         31:8b:9b:50:57:35:6b:44:61:8e:3e:9c:f4:9d:49:38:ca:47:
         5a:5b:59:90:a4:19:c1:90:c9:7a:61:0b:21:f5:77:27:1e:43:
         3c:0a:d2:83:aa:6f:2c:73:08:6e:39:a3:88:2a:30:57:fa:81:
         22:26:13:cd:f3:ea:a7:da:8c:50:22:63:65:4c:9c:91:e7:8c:
         57:9e:30:5f:ba:38:8d:82:bd:16:bd:26:b5:96:18:dd:ff:6a:
         bf:28:7a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org