Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D.cer
File:                     CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D.cer (raw, json)
Hash identifier:          Y8WSTb9lWEvSkN1GW83cA9c/y1Yh5KiNINmkfNfHV+M=
Subject key identifier:   CB:34:BE:4B:57:5A:97:6B:54:BC:00:6C:BC:4F:B9:D2:F4:6E:A2:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FE883FF3A19BF0FE005DDFD044922ED3BE2A75B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/0/CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 17:57:59 +0000
Certificate not after:    Tue 09 Jul 2024 18:02:59 +0000
Subordinate resources:    AS: 273791
                          IP: 2804:8c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e8:83:ff:3a:19:bf:0f:e0:05:dd:fd:04:49:22:ed:3b:e2:a7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 17:57:59 2023 GMT
            Not After : Jul  9 18:02:59 2024 GMT
        Subject: CN=CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:1d:c8:a3:0c:c8:83:ac:52:c9:2e:06:3e:
                    f4:67:4d:fa:f2:8d:80:a4:24:98:ec:c4:e3:3f:e6:
                    bb:a3:f8:ff:2c:ca:13:3b:04:d5:a9:7a:71:57:eb:
                    80:61:e3:c2:68:85:45:d1:be:57:80:b7:a4:ca:e6:
                    b8:4e:a1:e7:79:d0:17:c7:87:72:97:b4:31:c6:0b:
                    d0:a1:34:7b:bb:45:59:a1:52:44:e1:0a:1f:4f:8f:
                    20:b7:cc:64:ed:9c:e9:25:85:86:b5:aa:14:13:04:
                    29:cf:51:22:4a:04:32:20:de:75:7d:57:84:30:a0:
                    59:ff:c6:46:04:bf:1e:d8:bb:f0:bb:cd:06:03:70:
                    62:9d:77:2e:3b:3d:de:ed:f0:e7:d7:64:f6:c0:0f:
                    a8:ef:bc:1a:82:73:d8:46:44:cf:ac:2d:07:30:0f:
                    0b:f8:a7:b4:96:3e:f8:c6:0c:4b:6b:1d:fa:60:28:
                    7a:f4:37:ac:88:20:b3:d8:af:d7:5c:55:7b:87:0d:
                    c3:e3:46:5b:24:45:c5:45:c8:d8:f0:95:fc:c2:a1:
                    70:9d:b2:2a:c7:a3:9d:0d:c0:7e:cb:50:4f:1e:02:
                    a2:d9:3e:cf:42:5a:43:4e:ca:20:3a:f4:88:b0:2e:
                    1b:10:9d:fa:e1:8c:1a:2d:34:5c:fd:3e:55:24:65:
                    25:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:34:BE:4B:57:5A:97:6B:54:BC:00:6C:BC:4F:B9:D2:F4:6E:A2:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/0/CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273791

    Signature Algorithm: sha256WithRSAEncryption
         95:4c:d0:41:8c:f7:56:69:55:92:43:2f:25:cc:25:85:ad:ef:
         86:4e:1b:89:86:29:4f:cb:54:43:5b:73:7b:cc:74:9c:82:ed:
         ab:2d:18:f7:f3:d2:da:4e:12:48:07:59:3c:0d:93:3f:61:37:
         d4:a3:df:d8:fc:0b:96:89:c1:73:e0:07:b3:10:0c:75:a0:15:
         68:b7:fd:7a:65:05:e6:c3:5c:ab:46:7f:cd:70:61:4d:71:1b:
         7c:9a:7f:81:9f:57:88:8c:9b:ab:3e:0e:53:7f:a3:d9:38:ca:
         61:4d:1f:ed:13:e9:24:e6:7d:36:fd:df:93:2b:a9:03:20:07:
         27:58:c5:ad:a7:ef:c5:07:35:a3:c1:5e:b8:4d:7a:41:ec:4d:
         46:8a:55:49:40:f1:c0:58:9d:d0:f9:44:b2:c8:02:9f:bf:52:
         6e:e5:46:22:54:13:af:76:44:31:ba:0c:54:e4:e6:26:15:26:
         b6:2e:30:90:44:87:c8:a0:6d:e3:b8:ac:1b:2f:ab:5e:7f:e4:
         0a:80:27:c8:36:bf:8f:7c:51:a2:b1:0e:77:b6:86:dc:ae:d7:
         b8:39:86:76:f9:38:a6:be:1d:68:8d:58:47:5b:17:85:2f:b3:
         a9:1b:53:66:99:ec:b4:96:15:ea:cc:3c:2e:a5:3c:e3:b4:e6:
         92:c4:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org