Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC57300D2D0C911C7654DF9AB7305175D78A6A63.cer
File:                     CC57300D2D0C911C7654DF9AB7305175D78A6A63.cer (raw, json)
Hash identifier:          KXW+NOS0zuTrFkoZwhmkcVIVoGIhUSF5JIWB2oVuvj8=
Subject key identifier:   CC:57:30:0D:2D:0C:91:1C:76:54:DF:9A:B7:30:51:75:D7:8A:6A:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F6CDA3C634B20F0D5A85CBDC49949DB7D89778C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/CC57300D2D0C911C7654DF9AB7305175D78A6A63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jan 2024 18:05:14 +0000
Certificate not after:    Fri 17 Jan 2025 18:10:14 +0000
Subordinate resources:    AS: 268213
                          IP: 45.236.8.0/22
                          IP: 2804:4db0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6c:da:3c:63:4b:20:f0:d5:a8:5c:bd:c4:99:49:db:7d:89:77:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 18:05:14 2024 GMT
            Not After : Jan 17 18:10:14 2025 GMT
        Subject: CN=CC57300D2D0C911C7654DF9AB7305175D78A6A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:00:cb:c6:2c:99:2a:88:39:cf:a5:64:89:
                    f2:8f:b5:06:79:e9:3f:f2:b4:2b:a7:86:b4:48:00:
                    5f:21:03:00:2d:2d:db:44:c8:5b:ab:8e:ba:42:f9:
                    ce:93:f8:e1:2f:fa:79:34:54:67:67:82:19:8b:77:
                    f9:f3:97:80:e1:b9:4a:21:c1:2a:3c:59:5c:82:fe:
                    ab:51:58:eb:45:23:0a:13:5c:ac:b2:b9:34:73:d1:
                    c4:ab:dc:3f:d5:0b:b2:ae:1a:18:e2:86:af:39:8a:
                    fa:b0:91:30:0e:9b:7d:9e:34:d1:52:07:3e:6f:79:
                    e9:64:74:3f:5f:65:4f:38:41:8d:cc:94:03:a9:8f:
                    29:74:29:8b:7f:09:c8:43:11:a5:e3:36:4e:f5:9f:
                    53:74:38:24:c1:22:76:47:a3:52:99:ee:41:25:9f:
                    f9:66:74:1c:58:69:ce:cf:c8:5c:1d:44:63:f9:00:
                    3a:4f:2c:33:9c:88:d2:db:5e:1d:b0:0c:f1:56:77:
                    ba:d6:dd:a9:27:f9:8d:8f:6a:0f:4c:56:f6:0e:db:
                    09:c8:db:9e:d1:6d:94:17:54:3a:fb:63:a1:f5:ef:
                    7d:e0:1f:1d:25:2a:11:1a:3d:fb:f7:6c:1b:2e:6d:
                    5e:3d:e9:98:91:bf:5b:9e:75:78:88:cb:bf:1a:81:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:57:30:0D:2D:0C:91:1C:76:54:DF:9A:B7:30:51:75:D7:8A:6A:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/CC57300D2D0C911C7654DF9AB7305175D78A6A63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.8.0/22
                IPv6:
                  2804:4db0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268213

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:de:cb:62:df:d8:2d:44:4f:f1:40:49:88:27:46:f7:f6:
         a3:71:fb:88:44:9b:1e:89:c2:18:0f:cf:75:f2:c1:09:c9:1f:
         2a:90:ea:69:05:13:a3:02:2c:89:49:c5:eb:d7:10:4e:48:8a:
         77:b3:e5:37:06:d1:3c:cf:44:80:17:91:71:04:27:4a:b8:2d:
         00:e2:44:57:46:ca:0a:0d:2e:74:e1:73:2b:8a:f4:b7:87:6d:
         3e:59:5f:ce:dd:32:d3:f8:58:aa:3e:59:f9:f0:85:25:65:5a:
         37:06:d6:bc:aa:58:3b:91:07:04:ec:0b:fa:6a:60:ca:c8:c7:
         f4:65:24:07:dd:ff:79:1c:d1:69:49:e1:cd:79:89:68:98:a7:
         81:10:11:94:a9:ab:49:23:64:cc:89:23:73:8a:b9:da:3f:bf:
         6a:0c:39:c3:10:8a:2e:59:73:40:bb:22:1a:36:22:94:b9:29:
         a0:a3:31:96:19:68:78:66:d1:67:ab:18:ff:e7:e8:15:5f:fc:
         72:49:82:d3:0b:1d:e4:de:b1:74:a0:3a:60:29:d5:4d:e8:68:
         c4:f4:ee:af:7c:0a:7e:13:23:d3:79:a9:5f:2c:18:ec:55:2d:
         ed:74:a4:ac:b2:6b:7a:92:1d:23:cb:90:44:35:54:30:69:c2:
         c2:75:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org