Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC4FBCD6B1E1746055DDACDB88473CFDCF11FF51.cer
File:                     CC4FBCD6B1E1746055DDACDB88473CFDCF11FF51.cer (raw, json)
Hash identifier:          ffi4IGl4aY7PyueDVyFPFgniPxW93XTTgtU5QT9NWis=
Subject key identifier:   CC:4F:BC:D6:B1:E1:74:60:55:DD:AC:DB:88:47:3C:FD:CF:11:FF:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CAB65B200A796CBD3F236E8C1C2AC0E0B2CDE82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/CC4FBCD6B1E1746055DDACDB88473CFDCF11FF51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Mar 2023 12:35:44 +0000
Certificate not after:    Thu 21 Mar 2024 12:40:44 +0000
Subordinate resources:    AS: 266605
                          IP: 45.7.144.0/22
                          IP: 2804:3e8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ab:65:b2:00:a7:96:cb:d3:f2:36:e8:c1:c2:ac:0e:0b:2c:de:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 23 12:35:44 2023 GMT
            Not After : Mar 21 12:40:44 2024 GMT
        Subject: CN=CC4FBCD6B1E1746055DDACDB88473CFDCF11FF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:ca:ad:5f:83:32:63:84:59:cc:32:de:f6:
                    35:43:18:36:7b:c7:45:46:a3:d2:1f:ef:dc:36:ae:
                    80:78:92:45:d0:4f:a1:bf:42:b4:b4:5b:19:d7:d0:
                    d6:55:43:06:2f:3d:99:70:aa:9c:1c:9f:88:9d:cc:
                    2a:dc:07:19:cf:e3:2c:df:38:00:24:89:07:71:93:
                    2a:d8:e7:94:08:21:e7:0c:c7:8f:b4:06:58:42:49:
                    53:a0:77:d8:35:de:65:d8:c7:48:84:47:37:4b:4f:
                    5b:a1:a5:4b:00:76:19:5c:c0:0c:dd:91:68:3f:71:
                    21:7c:42:ed:01:2a:5d:76:49:9b:54:24:51:cd:27:
                    d0:67:8b:5c:c1:c0:e4:12:c6:f4:e5:c3:a4:e3:de:
                    64:f2:ff:d5:9e:86:bd:d0:73:d6:79:5b:99:9d:ef:
                    9f:70:d6:46:01:7e:1a:35:94:c1:b9:9a:cc:37:f8:
                    9a:ee:42:3f:2d:28:fe:23:d8:b7:6c:22:30:d3:b5:
                    3e:64:32:45:0f:4b:d4:16:d2:53:b8:8d:4e:bd:d4:
                    2c:e6:63:9b:43:a2:c4:bc:29:c0:7e:1d:14:b4:70:
                    34:01:5c:fa:5d:5c:22:16:f3:65:c9:be:b9:b1:04:
                    1a:da:97:7c:49:e5:55:16:a9:d1:92:9b:21:a9:e5:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:4F:BC:D6:B1:E1:74:60:55:DD:AC:DB:88:47:3C:FD:CF:11:FF:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/CC4FBCD6B1E1746055DDACDB88473CFDCF11FF51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.144.0/22
                IPv6:
                  2804:3e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266605

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:ae:21:06:5c:1f:5f:e2:84:67:f7:31:1a:0f:c1:f5:bc:
         b2:d5:3f:ea:ab:06:4d:a9:ca:37:1f:70:6f:d3:1b:1d:a2:59:
         b6:c2:17:7b:ec:0f:f2:89:48:db:4b:20:76:39:a8:e7:b5:45:
         62:9b:ed:51:e3:4e:e5:e2:be:12:c7:5c:d0:7a:ab:eb:69:d2:
         f1:e8:b7:2e:a2:b2:2e:89:45:90:0c:66:f8:db:09:40:59:a6:
         a4:33:c1:30:ac:ef:33:f2:36:c7:da:2f:ec:87:37:5e:dd:a4:
         81:fc:6c:ef:29:ff:e4:64:8d:4d:90:d6:80:d7:de:fe:f2:c9:
         90:32:63:4c:04:93:30:68:ac:4f:54:7f:05:99:f2:e6:bb:88:
         95:76:26:65:30:59:fa:91:26:6e:0f:63:5d:f5:cf:92:b1:a5:
         5e:9b:1b:cf:97:52:8c:f3:b7:31:41:5a:74:51:1a:17:fb:08:
         15:a9:61:7e:c2:38:64:6a:90:ff:a4:0e:27:64:ad:58:07:7f:
         73:23:72:76:5e:a5:77:76:57:fb:55:87:f4:f5:7f:30:39:5c:
         e8:5b:40:70:42:b2:11:87:d1:fd:d2:49:00:47:e8:62:e9:6a:
         94:3e:fd:2c:eb:de:83:fb:c0:dd:51:f3:0c:8a:6d:96:19:3f:
         33:0a:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org