Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.cer
File:                     CC754C9ECCEF7E16653034A8D806C820C35D7CFB.cer (raw, json)
Hash identifier:          neD7bnJ1CLjZLvzBDDBOCrpVSn/Be/4QgdlxjSUi3D0=
Subject key identifier:   CC:75:4C:9E:CC:EF:7E:16:65:30:34:A8:D8:06:C8:20:C3:5D:7C:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E02E25849AF481CD363D1B22B683DD23213A311
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 12:19:51 +0000
Certificate not after:    Wed 10 Jul 2024 12:24:51 +0000
Subordinate resources:    AS: 267332
                          IP: 45.233.244.0/22
                          IP: 2804:4bd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:02:e2:58:49:af:48:1c:d3:63:d1:b2:2b:68:3d:d2:32:13:a3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 12:19:51 2023 GMT
            Not After : Jul 10 12:24:51 2024 GMT
        Subject: CN=CC754C9ECCEF7E16653034A8D806C820C35D7CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:e8:11:c3:fe:80:ea:95:6c:48:45:e8:a6:
                    75:52:b9:be:94:eb:1c:9a:d3:27:95:0b:12:3d:6f:
                    eb:f5:71:c3:7a:53:f3:61:00:04:af:c7:6b:b1:14:
                    22:da:33:eb:c0:85:de:80:ba:c7:13:d6:73:5f:29:
                    d1:22:fa:5d:dd:d7:37:b9:b7:65:e8:06:e8:33:f0:
                    4f:b8:2c:d7:48:98:ee:63:84:d3:7b:ed:96:46:4a:
                    25:48:b7:8b:9d:28:6e:8c:cc:f9:45:e6:94:1f:a6:
                    37:46:2f:63:56:44:98:29:31:cb:80:a3:07:fd:c7:
                    00:3c:e6:17:36:8b:84:a8:d5:7e:0a:b5:d2:df:90:
                    1f:90:d9:00:35:3c:5f:af:47:61:d4:55:7c:ee:d7:
                    49:d4:21:b6:fe:1b:db:c0:bd:be:48:5b:3b:0f:43:
                    2b:84:2a:cb:76:1d:25:ee:cf:c2:c3:fc:5b:96:62:
                    95:53:f4:fe:7b:4b:49:8d:9e:92:cd:f8:d9:73:a3:
                    d9:7b:21:33:1d:c7:ad:2e:56:a8:1c:ec:3d:50:53:
                    92:a8:b0:cd:4e:3b:57:09:b4:30:9f:91:7e:a2:da:
                    a5:86:2c:0a:d2:bd:7c:b7:3f:60:5a:29:00:57:37:
                    98:69:1c:5f:5f:16:17:b3:f7:b7:35:64:bf:51:34:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:75:4C:9E:CC:EF:7E:16:65:30:34:A8:D8:06:C8:20:C3:5D:7C:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.244.0/22
                IPv6:
                  2804:4bd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267332

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:44:9a:e0:84:9c:3b:c0:84:d0:d0:4b:48:23:82:80:56:
         ad:84:76:b9:3e:ff:a5:d2:14:a3:7b:6b:c2:86:56:9f:75:a8:
         9d:f5:eb:37:9b:69:f1:a2:af:4c:f2:f3:f9:93:65:a4:8e:e4:
         e1:31:40:cf:73:24:6b:07:84:4a:c6:6f:8d:47:10:24:72:55:
         e1:0f:4a:e3:2e:d4:be:94:9e:e6:22:69:f3:dc:20:2b:84:a8:
         14:4e:31:e7:c2:42:0c:6b:8d:bd:66:3f:d5:f6:b6:9a:a4:51:
         3e:a6:eb:13:b7:ea:66:7d:8f:4f:6e:4b:19:3d:65:55:c9:85:
         28:59:6d:c9:e1:35:50:42:5d:d7:e3:e3:b6:fe:f8:1d:eb:3e:
         e0:c9:28:a3:e3:33:70:e5:70:1a:65:ea:bd:6e:50:dc:06:4f:
         84:2c:3c:d7:29:92:f3:94:fa:1f:1e:c5:ab:bb:45:f2:8d:e6:
         fe:fd:34:a9:a7:71:2a:3a:5f:c7:6e:bc:39:06:b4:77:20:43:
         13:04:a7:fc:79:2f:49:c5:84:14:22:f3:52:73:26:20:e5:c1:
         31:e2:79:62:79:2a:4b:77:e8:4d:c6:52:3c:ef:d5:cf:3c:68:
         90:f0:0c:fa:5b:36:2a:59:4a:dc:2e:9c:9f:f7:d2:e4:71:c5:
         7e:5e:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org